Merge pull request #36 from anhmtk/config/bootstrap-wave-05

fix(framework): resolve syntax errors and stabilize framework

Author: anhmtk

.github/dependabot.yml

@@ -1,33 +1,23 @@
 version: 2
 updates:
-  # GitHub Actions – weekly để giảm nhiễu
-  - package-ecosystem: "github-actions"
-    directory: "/"
-    schedule:
-      interval: "weekly"
-      day: "monday"
-      time: "06:00"
-    open-pull-requests-limit: 2
-    commit-message:
-      prefix: "deps(actions)"
-      include: "scope"
-    groups:
-      gha-minors:
-        patterns: ["*"]
-        update-types: ["minor", "patch"]
-
-  # Python (nếu có pyproject/requirements)
+  # Enable version updates for Python dependencies
   - package-ecosystem: "pip"
     directory: "/"
     schedule:
       interval: "weekly"
       day: "monday"
-      time: "06:30"
-    open-pull-requests-limit: 2
+      time: "09:00"
+    open-pull-requests-limit: 10
+    reviewers:
+      - "stillme-ai/security-team"
+    assignees:
+      - "stillme-ai/maintainers"
     commit-message:
-      prefix: "deps(pip)"
+      prefix: "chore(deps)"
       include: "scope"
-    insecure-external-code-execution: "deny"
+    labels:
+      - "dependencies"
+      - "python"
     ignore:
       # Ignore major version updates for critical dependencies
       - dependency-name: "fastapi"
@@ -37,14 +27,40 @@ updates:
       - dependency-name: "pydantic"
         update-types: ["version-update:semver-major"]
 
-  # Docker dependencies
+  # Enable version updates for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "09:00"
+    open-pull-requests-limit: 5
+    reviewers:
+      - "stillme-ai/security-team"
+    assignees:
+      - "stillme-ai/maintainers"
+    commit-message:
+      prefix: "chore(ci)"
+      include: "scope"
+    labels:
+      - "dependencies"
+      - "github-actions"
+
+  # Enable version updates for Docker dependencies
   - package-ecosystem: "docker"
     directory: "/"
     schedule:
       interval: "weekly"
       day: "monday"
-      time: "07:00"
-    open-pull-requests-limit: 2
+      time: "09:00"
+    open-pull-requests-limit: 5
+    reviewers:
+      - "stillme-ai/security-team"
+    assignees:
+      - "stillme-ai/maintainers"
     commit-message:
-      prefix: "deps(docker)"
+      prefix: "chore(docker)"
       include: "scope"
+    labels:
+      - "dependencies"
+      - "docker"

.github/workflows/attic-dryrun.yml

@@ -8,15 +8,9 @@ on:
 permissions:
   contents: read
 
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
 jobs:
   attic-dryrun:
     runs-on: ubuntu-latest
-    timeout-minutes: 30
-    if: "!contains(github.event.head_commit.message, '[skip ci]')"
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/ci-smoke.yml

@@ -17,15 +17,9 @@ on:
 permissions:
   contents: read  # đủ để checkout & đọc repo
 
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
 jobs:
   cleanup-audit:
     runs-on: ubuntu-latest
-    timeout-minutes: 30
-    if: "!contains(github.event.head_commit.message, '[skip ci]')"
 
     steps:
       - name: Checkout

.github/workflows/cleanup-audit.yml

@@ -5,18 +5,9 @@ on:
     branches: [ main, master, develop ]
   pull_request:
 
-permissions:
-  contents: read
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
 jobs:
   gitleaks:
     runs-on: ubuntu-latest
-    timeout-minutes: 30
-    if: "!contains(github.event.head_commit.message, '[skip ci]')"
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/costs-report.yml

@@ -0,0 +1,42 @@
+# Development Environment Configuration
+environment: development
+debug: true
+log_level: DEBUG
+
+# Server Configuration
+server:
+  host: localhost
+  port: 8080
+  workers: 1
+
+# Database Configuration
+database:
+  type: sqlite
+  path: ./data/dev.db
+  pool_size: 5
+
+# AgentDev Configuration
+agentdev:
+  mode: SENIOR
+  thinking_enabled: true
+  learning_enabled: true
+  max_iterations: 10
+
+# Security Configuration
+security:
+  enable_auth: false
+  rate_limit: 1000
+  cors_origins: ["*"]
+
+# Monitoring
+monitoring:
+  enabled: true
+  metrics_port: 9090
+  health_check_interval: 30
+
+# Features
+features:
+  analytics: true
+  collaboration: true
+  documentation: true
+  debugging: true

.github/workflows/gitleaks.yml

@@ -0,0 +1,57 @@
+# Production Environment Configuration
+environment: production
+debug: false
+log_level: WARNING
+
+# Server Configuration
+server:
+  host: 0.0.0.0
+  port: 8080
+  workers: 4
+
+# Database Configuration
+database:
+  type: sqlite
+  path: /app/data/prod.db
+  pool_size: 20
+
+# AgentDev Configuration
+agentdev:
+  mode: SENIOR
+  thinking_enabled: true
+  learning_enabled: true
+  max_iterations: 20
+
+# Security Configuration
+security:
+  enable_auth: true
+  rate_limit: 100
+  cors_origins: ["https://stillme.ai"]
+  enable_https: true
+  security_headers: true
+
+# Monitoring
+monitoring:
+  enabled: true
+  metrics_port: 9090
+  health_check_interval: 30
+  alerting_enabled: true
+
+# Features
+features:
+  analytics: true
+  collaboration: true
+  documentation: true
+  debugging: false
+
+# SLO Configuration
+slo:
+  p95_latency_ms: 500
+  error_rate_percent: 0.5
+  availability_percent: 99.95
+
+# Performance
+performance:
+  cache_enabled: true
+  cache_ttl: 3600
+  max_memory_mb: 4096

.gitignore

@@ -0,0 +1,48 @@
+# Staging Environment Configuration
+environment: staging
+debug: true
+log_level: INFO
+
+# Server Configuration
+server:
+  host: 0.0.0.0
+  port: 8080
+  workers: 2
+
+# Database Configuration
+database:
+  type: sqlite
+  path: /app/data/staging.db
+  pool_size: 10
+
+# AgentDev Configuration
+agentdev:
+  mode: SENIOR
+  thinking_enabled: true
+  learning_enabled: true
+  max_iterations: 15
+
+# Security Configuration
+security:
+  enable_auth: true
+  rate_limit: 500
+  cors_origins: ["https://staging.stillme.ai"]
+
+# Monitoring
+monitoring:
+  enabled: true
+  metrics_port: 9090
+  health_check_interval: 30
+
+# Features
+features:
+  analytics: true
+  collaboration: true
+  documentation: true
+  debugging: true
+
+# SLO Configuration
+slo:
+  p95_latency_ms: 500
+  error_rate_percent: 1.0
+  availability_percent: 99.9