86bb9d6be0
Phase A of the quality-gate rollout — local + pre-push gates that stop
slop before it leaves the laptop. Preventative controls, per the
architect playbook.
- .husky/pre-commit — adds scripts/secret-scan.sh as the first check
before the existing Biome format/lint. Blocks the commit when a
likely secret is found in staged additions. Existing Biome behaviour
is preserved.
- .husky/pre-push (new) — runs `pnpm check` (lint + typecheck + test)
before the branch leaves the laptop. Mirrors the `check` job in
.github/workflows/ci.yml so PR-blocking issues surface locally first.
Bypassable for genuine emergencies with `git push --no-verify`.
- scripts/secret-scan.sh (new) — regex scan over staged additions for
the common accidents: AWS keys, Anthropic/OpenAI/GitHub/Slack/Google/
Stripe tokens, JWTs, PEM private key blocks, hardcoded password
literals. Validated against synthetic leaks of each type. No external
tool dependency — pure bash + grep, runs in <100ms typical.
- scripts/pr-evidence.sh (new) — drafts a PR_BODY.md from the diff vs
origin/main: file lists (added/modified/deleted), commit summaries,
and the QA checklist. Flags screenshots as REQUIRED when the diff
touches packages/web/src/{components,routes} or packages/desktop.
Wired as `pnpm pr:evidence` so it runs from anywhere in the
workspace.
- .gitignore — adds PR_BODY.md so drafts don't get committed by
accident.
Pre-commit stays fast (<2s typical). Heavy checks (typecheck, full
test run) live in pre-push.
Browse memories, peers, sessions, and conclusions — or chat with full memory context — directly against your own Honcho instance. All connection details stay in your browser; nothing leaves except requests to the URL you configure.
Features
| Dashboard | Workspace count and queue status, auto-refreshes every 10 s |
| Workspaces | Paginated list with per-workspace navigation |
| Peers | Browse peers, view representations, context, and peer cards |
| Sessions | Paginated message history with summaries and context |
| Conclusions | Semantic search across conclusions with observer/subject display |
| Webhooks | Manage and trigger webhooks per workspace |
| Chat | Conversational interface through Honcho's chat endpoint with memory context |
| Schedule Dream | Trigger Honcho's dream/consolidation pass on demand |
| Dark / light mode | Persisted per device, instant toggle |
| Optional auth | Token field is optional; connection health check auto-detects auth requirement |
Download
Pre-built binaries are attached to every GitHub Release:
| Platform | File |
|---|---|
| macOS (Apple Silicon) | OpenConcho_*_aarch64.dmg |
| macOS (Intel) | OpenConcho_*_x64.dmg |
| Linux | openconcho_*_amd64.deb / openconcho_*_amd64.AppImage |
| Windows | OpenConcho_*_x64-setup.exe / OpenConcho_*_x64_en-US.msi |
Quick Start
Prerequisites
Web app
git clone https://github.com/offendingcommit/openconcho.git
cd openconcho
pnpm install
pnpm dev
Open http://localhost:5173 and enter your Honcho URL when prompted.
Desktop app (Tauri)
Additional prerequisites: Rust stable + Tauri system dependencies for your OS.
git clone https://github.com/offendingcommit/openconcho.git
cd openconcho
pnpm install
pnpm --filter @openconcho/desktop dev
Connecting to your instance
- Enter the base URL of your Honcho instance (e.g.
http://localhost:8000) - Optionally enter an API token if your instance requires auth
- Click Test connection — the UI reports whether auth is needed
- Click Save — you're in
Production build
pnpm build # web only → packages/web/dist/
pnpm --filter @openconcho/desktop build # desktop → packages/desktop/src-tauri/target/release/bundle/
Stack
| Layer | Library |
|---|---|
| Desktop shell | Tauri v2 |
| Framework | React 19 + Vite 8 |
| Routing | TanStack Router v1 (file-based) |
| Data fetching | TanStack Query v5 |
| API client | openapi-fetch (typed from openapi.json) |
| Styling | Tailwind CSS v4 + CSS custom properties |
| Animation | framer-motion |
| Icons | lucide-react |
| Lint / format | Biome 2 |
| Tests | Vitest 4 + Testing Library |
| Releases | semantic-release (conventional commits) |
Development
pnpm dev # Vite dev server (web, http://localhost:5173)
pnpm test # Vitest test suite
pnpm lint:fix # Biome lint + format
pnpm typecheck # TypeScript strict check
pnpm generate:api # Regenerate src/api/schema.d.ts from openapi.json
Regenerating API types
When your Honcho instance is updated, pull a fresh schema and regenerate:
curl http://your-honcho-url/openapi.json -o packages/web/openapi.json
pnpm --filter @openconcho/web generate:api
Privacy
- Base URL and token stored in
localStorageunderopenconcho:config - Theme preference stored in
localStorageunderopenconcho:theme - No telemetry, no analytics, no external requests beyond your configured Honcho instance
Contributing
Open an issue first for significant changes. PRs welcome.
License
MIT