Refactor application structure to use Agno

.gitattributes

@@ -0,0 +1 @@
+* text=auto eol=lf

.github/mergify.yml

@@ -6,10 +6,19 @@ pull_request_rules:
       - head = mergify/MH0386/config-update
     actions:
       merge:
+  - name: Merge pull request when Trunk Updated
+    conditions:
+      - author = github-actions[bot]
+      - title = Upgrade trunk
+      - head = trunk-io/update-trunk
+      - files = .trunk/trunk.yaml
+    actions:
+      merge:
   - name: Comment when a pull request is merged
     conditions:
       - merged
     actions:
+      delete_head_branch:
       comment:
         message: >
           Thank you for your contribution @{{author}}! Your pull request has been merged.
@@ -69,6 +78,6 @@ queue_rules:
           - check-success = GitGuardian Security Checks
           - check-success = SonarCloud
           - check-success = Trunk Check
-          - check-success = CodeRabbit
           - check-success = Test Image / API Test
           - check-success = CodeQL
+          # - check-success = CodeRabbit

.github/workflows/.docker.yaml

@@ -10,6 +10,10 @@ on:
         type: string
         required: true
         description: Registry
+      install_source:
+        type: string
+        required: true
+        description: Source to install from (e.g., PyPI Package or Git source)
 permissions:
   contents: read
   packages: write
@@ -25,20 +29,32 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
-      - name: Log in to the ghcr.io Registry
+      - name: Log in to ${{ inputs.registry }} Registry
         uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
         with:
-          registry: ghcr.io
+          registry: ${{ inputs.registry }}
           username: mh0386
-          password: ${{ secrets.GH_TOKEN }}
+          password: ${{ inputs.registry == 'ghcr.io' && secrets.GH_TOKEN || inputs.registry == 'docker.io' && secrets.TOKEN_KEY_DOCKER }}
       - name: Validate build configuration
         uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
         with:
           call: check
+      - name: Job Summary (Success)
+        if: ${{ success() }}
+        run: |
+          echo "# Dockerfile Check" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "No issues found :heavy_check_mark:" >> $GITHUB_STEP_SUMMARY
+      - name: Job Summary (Failure)
+        if: ${{ failure() }}
+        run: |
+          echo "# Dockerfile Check" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "Check failed :x:" >> $GITHUB_STEP_SUMMARY
   build_image:
     name: Build and push Docker image to ${{ inputs.registry }}
     needs: check_dockerfile
-    if: ${{ always() && ( inputs.is_test == true || inputs.is_test == false ) }}
+    if: ${{ always() && !cancelled() }}
     runs-on: ubuntu-latest
     outputs:
       image_tag: ${{ steps.tag.outputs.TAG }}
@@ -51,6 +67,11 @@ jobs:
         uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1
       - name: Checkout repository
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - name: Get Python version from pyproject.toml
+        id: get_python_version
+        uses: mikefarah/yq@0ecdce24e83f0fa127940334be98c86b07b0c488 # v4.48.1
+        with:
+          cmd: yq -roy '.project.requires-python' pyproject.toml
       - name: Log in to ${{ inputs.registry }} Registry
         uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
         with:
@@ -75,16 +96,18 @@ jobs:
         uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
         id: push
         with:
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
           push: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
           annotations: ${{ steps.meta.outputs.annotations }}
+          build-args: |
+            INSTALL_SOURCE=${{ inputs.install_source }}
+            PYTHON_VERSION=${{ steps.get_python_version.outputs.result }}
       - name: Generate artifact attestation
         uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3
+        if: ${{ inputs.is_test == false }}
         with:
-          subject-name: ${{ inputs.registry }}/${{ github.repository }}
+          subject-name: ${{ inputs.registry == 'docker.io' && 'index.docker.io' || inputs.registry }}/${{ github.repository }}
           subject-digest: ${{ steps.push.outputs.digest }}
           push-to-registry: true
       - name: Update Docker Hub Description
@@ -102,7 +125,7 @@ jobs:
   docker_scout:
     name: Docker Scout (${{ matrix.commands }})
     needs: build_image
-    if: ${{ always() && ( inputs.is_test == true || inputs.is_test == false ) }}
+    if: ${{ always() && !cancelled() }}
     runs-on: ubuntu-latest
     environment:
       name: docker_image
@@ -114,12 +137,12 @@ jobs:
           - cves
           - recommendations
     steps:
-      - name: Login to the Container registry
+      - name: Log in to ${{ inputs.registry }} Registry
         uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
         with:
-          registry: ghcr.io
-          username: MH0386
-          password: ${{ secrets.GH_TOKEN }}
+          registry: ${{ inputs.registry }}
+          username: mh0386
+          password: ${{ inputs.registry == 'ghcr.io' && secrets.GH_TOKEN || inputs.registry == 'docker.io' && secrets.TOKEN_KEY_DOCKER }}
       - name: Docker Scout
         uses: docker/scout-action@f8c776824083494ab0d56b8105ba2ca85c86e4de # v1
         continue-on-error: true
@@ -133,7 +156,7 @@ jobs:
     name: API Test
     needs: build_image
     runs-on: ubuntu-latest
-    if: ${{ always() && inputs.is_test }}
+    if: ${{ always() && !cancelled() && inputs.is_test }}
     environment:
       name: api_test
     services:
@@ -151,7 +174,6 @@ jobs:
           MODEL__NAME: "llama3-70b-8192"
           VECTOR_DATABASE__URL: "http://vector_database:6333"
           VECTOR_DATABASE__NAME: "test"
-          FASTEMBED_CACHE_PATH: "/home/nonroot/fastembed"
         options: >-
           --health-cmd "curl -o /dev/null -f -s -w 'Status: %{http_code}, Time: %{time_total}s' http://localhost:7860/" --health-interval 10s
           --health-timeout 10s --health-start-period 20s --health-retries 15
@@ -166,17 +188,22 @@ jobs:
           enable-cache: true
           cache-dependency-glob: "uv.lock"
           activate-environment: true
-      - name: Install the project
-        run: uv sync --frozen
+      - name: Install deps
+        run: uv sync --only-dev
       - name: Test
         env:
           CHATTR_URL: http://localhost:${{ job.services.chattr.ports['7860'] }}/
           MERGIFY_TOKEN: ${{ secrets.MERGIFY_TOKEN }}
         uses: pavelzw/pytest-action@510c5e90c360a185039bea56ce8b3e7e51a16507 # v2
+        with:
+          click-to-expand: false
+          custom-arguments: "tests/test_app.py::test_app -p no:warnings"
   clean:
     name: Cleaning GHCR
-    needs: api_test
-    if: ${{ always() && ( inputs.is_test == true || inputs.is_test == false ) && inputs.registry == 'ghcr.io' }}
+    needs:
+      - api_test
+      - docker_scout
+    if: ${{ always() && !cancelled() && inputs.registry == 'ghcr.io' }}
     runs-on: ubuntu-latest
     environment:
       name: docker_image

.github/workflows/.lint.yaml

@@ -34,6 +34,7 @@ jobs:
         if: success() || failure()
         with:
           commit_message: "[Trunk] Apply linters fixes"
+          commit_options: '--no-verify'
   check:
     name: Check
     runs-on: ubuntu-latest

.github/workflows/build.yaml

@@ -14,14 +14,23 @@ jobs:
     name: Setup and Build
     environment:
       name: uv
-      url: https://github.com/${{github.repository}}/commits/${{github.ref_name}}
+      url: ${{github.event.repository.html_url}}/commits/${{github.ref_name}}
     env:
       UV_COMPILE_BYTECODE: "1"
       UV_LINK_MODE: "copy"
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+        with:
+          token: ${{ secrets.GH_TOKEN }}
+      - name: Get Package version from pyproject.toml
+        id: get_package_version
+        uses: mikefarah/yq@0ecdce24e83f0fa127940334be98c86b07b0c488 # v4.48.1
+        with:
+          cmd: yq -roy '.project.version' pyproject.toml
       - name: Install uv
         uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6
         with:
@@ -31,6 +40,7 @@ jobs:
       - name: Install the project
         run: uv sync --no-dev --frozen --no-editable
       - name: Update Project Version
+        if: ${{ github.ref_name != steps.get_package_version.outputs.result }}
         run: uv version ${{ github.ref_name }}
       - name: Build source and wheel distribution
         run: uv build
@@ -39,13 +49,25 @@ jobs:
         with:
           name: dist
           path: dist/
+      - name: Update the main branch to the updated version
+        if: ${{ github.ref_name != steps.get_package_version.outputs.result }}
+        uses: stefanzweifel/git-auto-commit-action@778341af668090896ca464160c2def5d1d1a3eb0 # v6
+        with:
+          commit_message: "Version: ${{ github.ref_name }}"
+          branch: main
+          commit_options: --no-verify
+      - name: Update the tag to the updated version
+        if: ${{ github.ref_name != steps.get_package_version.outputs.result }}
+        run: |
+          git tag --force ${{ github.ref_name }}
+          git push origin --force HEAD:refs/tags/${{ github.ref_name }}
   github_release:
     name: Create GitHub Release
     needs: setup_and_build
     runs-on: ubuntu-latest
     environment:
       name: github
-      url: https://github.com/${{github.repository}}/releases/tag/${{github.ref_name}}
+      url: ${{github.event.repository.html_url}}/releases/tag/${{github.ref_name}}
     steps:
       - name: Checkout Code
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5

.github/workflows/ci_tools.yaml

@@ -1,5 +1,9 @@
 name: CI Tools
 on:
+  issue_comment:
+    types:
+      - created
+      - edited
   schedule:
     - cron: 0 6 * * *
   push:
@@ -9,9 +13,6 @@ on:
       - .trunk/trunk.yaml
   workflow_dispatch:
 permissions: read-all
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref_name }}
-  cancel-in-progress: true
 jobs:
   trunk_upgrade:
     name: Upgrade Trunk
@@ -39,3 +40,28 @@ jobs:
         uses: trunk-io/trunk-action@75699af9e26881e564e9d832ef7dc3af25ec031b # v1
         with:
           check-mode: populate_cache_only
+  opencode:
+    if: |
+      github.event_name == 'issue_comment' &&
+      (
+        contains(github.event.comment.body, ' /oc') ||
+        startsWith(github.event.comment.body, '/oc') ||
+        contains(github.event.comment.body, ' /opencode') ||
+        startsWith(github.event.comment.body, '/opencode')
+      )
+    name: Opencode
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+      pull-requests: read
+      issues: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Run opencode
+        uses: sst/opencode/github@latest
+        env:
+          OPENCODE_API_KEY: ${{ secrets.OPENCODE_API_KEY }}
+        with:
+          model: opencode/grok-code

.github/workflows/release.yaml

@@ -28,43 +28,9 @@ jobs:
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
           packages-dir: dist/
-  huggingface:
-    name: Upload ${{github.event.repository.name}} to HuggingFace Space
-    runs-on: ubuntu-latest
-    env:
-      HF_HUB_ENABLE_HF_TRANSFER: "1"
-      UV_FROZEN: "1"
-      UV_LINK_MODE: "copy"
-    environment:
-      name: huggingface
-      url: https://huggingface.co/spaces/${{github.repository}}
-    steps:
-      - name: Checkout
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
-      - name: Install uv
-        uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6
-        with:
-          enable-cache: true
-          cache-dependency-glob: "uv.lock"
-          activate-environment: true
-      - name: Install cli
-        run: uv tool install huggingface-hub[cli,hf-transfer]
-      - name: Remove Unnecessary Files
-        run: |
-          echo "*" > .gitignore
-          echo "!.gitignore" >> .gitignore
-          echo "!README.md" >> .gitignore
-          echo "!Dockerfile" >> .gitignore
-      - name: Add to git credentials
-        run: git config --global credential.helper store
-      - name: Login to HuggingFace Hub
-        run: huggingface-cli login --add-to-git-credential --token ${{ secrets.HF_TOKEN }}
-      - name: Check if logged in
-        run: huggingface-cli whoami
-      - name: Upload
-        run: huggingface-cli upload ${{ github.repository }} . . --repo-type space
   image:
     name: Release Image
+    needs: pypi
     permissions:
       contents: read
       packages: write
@@ -79,4 +45,5 @@ jobs:
     with:
       is_test: false
       registry: ${{ matrix.registry }}
+      install_source: ${{ github.event.repository.name }}==${{ github.event.release.tag_name }}
     secrets: inherit

.github/workflows/test.yaml

@@ -29,6 +29,17 @@ jobs:
           activate-environment: true
       - name: Install the project
         run: uv sync --frozen --no-install-project
+      - name: Job Summary
+        run: |
+          echo '<details>' >> $GITHUB_STEP_SUMMARY
+          echo '<summary> Click me </summary>' >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "# Dependency Tree" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo '```' >> $GITHUB_STEP_SUMMARY
+          echo "$(uv tree --show-sizes)" >> $GITHUB_STEP_SUMMARY
+          echo '```' >> $GITHUB_STEP_SUMMARY
+          echo '</details>' >> $GITHUB_STEP_SUMMARY
   lint:
     name: Lint
     permissions:
@@ -50,4 +61,5 @@ jobs:
     with:
       is_test: true
       registry: ghcr.io
+      install_source: git+${{ github.event.repository.html_url }}@${{ github.sha }}
     secrets: inherit

.github/workflows/version.yaml

@@ -14,7 +14,7 @@ jobs:
   version:
     name: Versioning
     runs-on: ubuntu-latest
-    if: github.actor == 'mergify[bot]'
+    if: github.actor == 'renovate[bot]'
     permissions:
       contents: write
     environment: