Merge remote-tracking branch 'origin/main' into jhugo/bump-workspace-deps

* origin/main: (34 commits)
  fix: reduce server log verbosity — skip session in instrument, defaul… (#7729)
  fix: provider test infrastructure (#7738)
  fix: sanitize streamable HTTP extension names derived from URLs (#7740)
  refactor: derive GooseMode string conversions with strum (#7706)
  docs: Add Spraay Batch Payments MCP Extension Tutorial (#7525)
  fix: flake.nix (#7224)
  delete goose web (#7696)
  Add @angiejones as CODEOWNER for documentation (#7711)
  Add MLflow integration guide (#7563)
  docs: LM Studio availability (#7698)
  feat: add Avian as an LLM provider (#7561)
  Adds `linux-mcp-server` to the goose registry (#6979)
  fix: add #[serde(default)] to description field on 4 ExtensionConfig variants (#7708)
  feat: combine TUI UX from alexhancock/tui-goodness with publishing config from jackamadeo/package-tui (#7683)
  chore: cleanup old sandbox (#7700)
  Correct windows artifact (#7699)
  gh fall back (#7695)
  fix: restore smart-approve mode (#7690)
  fix: make TLS configurable in goosed agent via GOOSE_TLS env var (#7686)
  Update to rmcp 1.1.0 (#7619)
  ...

# Conflicts:
#	Cargo.lock

Author: jh-block

.github/CODEOWNERS

@@ -2,5 +2,5 @@
 # See: https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
 
 # Documentation owned by DevRel
-/documentation/ @blackgirlbytes
+/documentation/ @blackgirlbytes @angiejones
 

.github/workflows/bundle-desktop-linux.yml

@@ -134,7 +134,7 @@ jobs:
         run: |
           source ./bin/activate-hermit
           cd ui/desktop
-          npm install
+          npm ci
           # Verify installation
           ls -la node_modules/.bin/ | head -5
 

.github/workflows/bundle-desktop-windows.yml

@@ -137,7 +137,7 @@ jobs:
         run: |
           cd ui/desktop
 
-          npm install
+          npm ci
           node scripts/build-main.js
           node scripts/prepare-platform-binaries.js
           npm run make -- --platform=win32 --arch=x64

.github/workflows/ci.yml

@@ -151,6 +151,10 @@ jobs:
       #     restore-keys: |
       #       ci-npm-cache-v1-${{ runner.os }}-
 
+      - name: Check lockfile has cross-platform entries
+        run: ./scripts/check-lockfile-platforms.sh
+        working-directory: ui/desktop
+
       - name: Install Dependencies
         run: source ../../bin/activate-hermit && npm ci
         working-directory: ui/desktop

Cargo.lock

@@ -4,7 +4,7 @@ resolver = "2"
 
 [workspace.package]
 edition = "2021"
-version = "1.26.0"
+version = "1.27.0"
 authors = ["Block <ai-oss-tools@block.xyz>"]
 license = "Apache-2.0"
 repository = "https://github.com/block/goose"
@@ -15,7 +15,7 @@ uninlined_format_args = "allow"
 string_slice = "warn"
 
 [workspace.dependencies]
-rmcp = { version = "0.16", features = ["schemars", "auth"] }
+rmcp = { version = "1.1.0", features = ["schemars", "auth"] }
 anyhow = "1.0"
 async-stream = "0.3"
 async-trait = "0.1"
@@ -44,6 +44,7 @@ serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 serde_yaml = "0.9"
 shellexpand = "3.1"
+strum = { version = "0.27", features = ["derive"] }
 tempfile = "3"
 thiserror = "2.0"
 tokio = { version = "1.49", features = ["full"] }

Cargo.toml

@@ -125,7 +125,7 @@ copy-binary-windows:
 run-ui:
     @just release-binary
     @echo "Running UI..."
-    cd ui/desktop && npm install && npm run start-gui
+    cd ui/desktop && npm ci && npm run start-gui
 
 run-ui-playwright:
     #!/usr/bin/env sh
@@ -138,14 +138,14 @@ run-ui-playwright:
 
 run-ui-only:
     @echo "Running UI..."
-    cd ui/desktop && npm install && npm run start-gui
+    cd ui/desktop && npm ci && npm run start-gui
 
 debug-ui *alpha:
     @echo "🚀 Starting goose frontend in external backend mode{{ if alpha == "alpha" { " with alpha features enabled" } else { "" } }}"
     cd ui/desktop && \
     export GOOSE_EXTERNAL_BACKEND=true && \
     {{ if alpha == "alpha" { "export ALPHA=true &&" } else { "" } }} \
-    npm install && \
+    npm ci && \
     npm run {{ if alpha == "alpha" { "start-alpha-gui" } else { "start-gui" } }}
 
 # Run UI with main process debugging enabled
@@ -159,15 +159,15 @@ debug-ui-main-process:
 	@echo "🔍 Starting goose UI with main process debugging enabled"
 	@just release-binary
 	cd ui/desktop && \
-	npm install && \
+	npm ci && \
 	npm run start-gui-debug
 
 # Package the desktop app locally for testing (macOS)
 # Applies ad-hoc code signing with entitlements (needed for mic access, etc.)
 package-ui:
     @just release-binary
     @echo "Packaging desktop app..."
-    cd ui/desktop && npm install && npm run package
+    cd ui/desktop && npm ci && npm run package
     @echo "Signing with entitlements..."
     codesign --force --deep --sign - --entitlements ui/desktop/entitlements.plist ui/desktop/out/Goose-darwin-arm64/Goose.app
     @echo "Done! Launch with: open ui/desktop/out/Goose-darwin-arm64/Goose.app"
@@ -176,14 +176,14 @@ package-ui:
 run-ui-alpha:
     @just release-binary
     @echo "Running UI with alpha features..."
-    cd ui/desktop && npm install && ALPHA=true npm run start-alpha-gui
+    cd ui/desktop && npm ci && ALPHA=true npm run start-alpha-gui
 
 # Run UI with latest (Windows version)
 run-ui-windows:
     @just release-windows
     @powershell.exe -Command "Write-Host 'Copying Windows binary...'"
     @just copy-binary-windows
-    @powershell.exe -Command "Write-Host 'Running UI...'; Set-Location ui/desktop; npm install; npm run start-gui"
+    @powershell.exe -Command "Write-Host 'Running UI...'; Set-Location ui/desktop; npm ci; npm run start-gui"
 
 # Run Docusaurus server for documentation
 run-docs:
@@ -386,7 +386,7 @@ win-bld-rls-all:
 
 ### Install npm stuff
 win-app-deps:
-  cd ui{{s}}desktop ; npm install
+  cd ui{{s}}desktop ; npm ci
 
 ### Windows copy {release|debug} files to ui\desktop\src\bin
 ### s = os dependent file separator