Repository: https://github.com/codeonym-org/gsm-agent-kit
Project: https://github.com/orgs/codeonym-org/projects/2
The repository is public source with all rights reserved. Public visibility does not grant an open-source license. Original project code is covered by LICENSE; adapted third-party automation retains the notices listed in NOTICE.
Create a GitHub issue before starting a feature. Add it to the linked Project,
with an Area and Priority. Status progresses through Backlog, Todo, In Progress,
In Review and Done. Use <type>/<issue>-<slug> branches and conventional commits.
PR titles end with the issue number, for example feat: define capabilities (#2).
Link the issue in the PR body. Mark work Done when its acceptance criteria pass.
Main requires a PR, resolved review threads, linear history and the checks
ci-ok, branch-name, commits, and pr-title. Only squash merges are enabled;
merged branches are deleted. Administrators can bypass through a PR, matching
acli-py. Release tags matching v* are immutable.
The workflows, conventions and templates originate from codeonym-oss/acli-py.
CI is adapted to the 13-package workspace and Python 3.13+, with Linux,
macOS and Windows package/import checks. Modem hardware is not required in CI.
Build checks validate all wheels and source distributions and their metadata.
Behavior tests cover device inspection, inbox protocol decoding and durable SMS
ingestion/submission, balance session ownership and persistent AI replies with temporary SQLite databases,
fixture chat models and no paid API calls or hardware. New implementations
must add corresponding behavioral coverage.
Simulated and fixture-backed ZTE adapters also inherit the reusable cellular-device
contract suite in libs/standard-tests, covering declarations, typed lookup,
identity, read observations and cleanup without sends or carrier consultations.
The web CI job installs the pinned pnpm workspace, checks generated OpenAPI
types for drift, lints/type-checks/builds the console, and runs Playwright against
the real backend with simulated device and AI ports plus the actual tRPC
WebSocket gateway. Reconnect, authorization and SPA navigation are covered. It is required by ci-ok.
Browser traces/screenshots are uploaded only on failure using synthetic fixture
data. Dependabot's npm ecosystem entry manages pnpm-lock.yaml.
The required containers CI job builds the selected production and smoke image
targets and runs scripts/smoke_containers.py. Its isolated fixture network tests
SMS ingestion, normalized reply acceptance, recreation with durable state and
conversation history, refusal of a competing backend sharing state, dry-run
behavior and duplicate prevention. It also builds
the production console/gateway, tests SPA assets/deep links and HTTP authorization,
and verifies authenticated tRPC WebSockets through the production Caddy proxy.
It needs Docker,
not device hardware or provider secrets, and is included in ci-ok.
Dependabot groups weekly GitHub Actions and uv updates. Issue forms and PR templates keep real phone numbers, SMS contents, SIM identifiers and credentials out of public reports. Secret scanning and push protection are enabled where GitHub permits them.
Release-please is scaffolded with synchronized workspace versions, but disabled
by ENABLE_RELEASES=false until the maintainer chooses a first release.
Future independent package release policies can replace this initial policy.
Registry publishing is absent and PUBLISH_TO_PYPI=false. No publishing secrets
or trusted publishers are copied from acli-py. A future RELEASE_PLEASE_TOKEN can
enable checks on automated release PRs; the default GITHUB_TOKEN does not trigger
those checks automatically.
The Project is public and linked to this repository. Add each new issue using
gh project item-add 2 --owner codeonym-org --url <issue-url>. Automatic addition
of future issues requires a Project auto-add workflow; repository linkage alone
does not enable it.