fix: untrack .env file in wren-ai-service/tools/dev

[ashsolei]

Summary

• Remove wren-ai-service/tools/dev/.env from git tracking (was still tracked despite .gitignore)
• Prevents accidental secret exposure in future commits

Test plan

• git ls-files wren-ai-service/tools/dev/.env returns empty after merge
• Verify .gitignore patterns continue to exclude the file

Summary by CodeRabbit

• New Features

  • Added audit trail functionality for query tracking and explainability.

• Chores

  • Updated dependencies across Node.js, Python, and Go packages for improved performance and compatibility.
  • Streamlined CI/CD infrastructure and development environment setup.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 01e2b146-3693-499b-aacb-7219db026df1

📥 Commits

Reviewing files that changed from the base of the PR and between 5a54081 and 9fdcf30.

⛔ Files ignored due to path filters (3)

• wren-ai-service/poetry.lock is excluded by !**/*.lock
• wren-launcher/go.sum is excluded by !**/*.sum
• wren-ui/yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (47)

• .github/CODEOWNERS
• .github/agents/api.agent.md
• .github/agents/architect.agent.md
• .github/agents/code-quality.agent.md
• .github/agents/deploy.agent.md
• .github/agents/developer.agent.md
• .github/agents/docker.agent.md
• .github/agents/docs.agent.md
• .github/agents/git.agent.md
• .github/agents/orchestrator.agent.md
• .github/agents/performance.agent.md
• .github/agents/planner.agent.md
• .github/agents/refactorer.agent.md
• .github/agents/reviewer.agent.md
• .github/agents/security.agent.md
• .github/agents/tester.agent.md
• .github/agents/troubleshoot.agent.md
• .github/copilot-instructions.md
• .github/copilot-setup-steps.yml
• .github/dependabot.yml
• .github/workflows/ai-service-release-image.yaml
• .github/workflows/ai-service-release-nightly-image.yaml
• .github/workflows/ai-service-release-stable-image.yaml
• .github/workflows/ai-service-test.yaml
• .github/workflows/copilot-setup-steps.yml
• .github/workflows/create-rc-release-pr.yaml
• .github/workflows/create-rc-release.yaml
• .github/workflows/pr-tagger.yaml
• .github/workflows/pull-request-title-validator.yaml
• .github/workflows/release.yml
• .github/workflows/security-scan.yml
• .github/workflows/ui-lint.yaml
• .github/workflows/ui-release-image-stable.yaml
• .github/workflows/ui-release-image.yaml
• .github/workflows/ui-test.yaml
• .github/workflows/wren-launcher-ci.yaml
• .gitignore
• AGENTS.md
• CLAUDE.md
• FORK-CUSTOMIZATIONS.md
• wren-ai-service/pyproject.toml
• wren-ai-service/src/audit_trail.py
• wren-ai-service/tests/test_audit_trail.py
• wren-ai-service/tools/dev/.env
• wren-launcher/go.mod
• wren-ui/.env.test
• wren-ui/package.json

---

Walkthrough

This PR establishes AI agent governance across the repository with 15+ agent role specifications, integrates enterprise CI/CD infrastructure via delegated workflows, consolidates legacy release automation, introduces an audit trail module for query tracking, updates dependencies across Python/Node/Go, and adds fork management and Copilot setup documentation.

Changes

Cohort / File(s)	Summary
AI Agent Specifications .github/agents/api.agent.md, .github/agents/architect.agent.md, .github/agents/code-quality.agent.md, .github/agents/deploy.agent.md, .github/agents/developer.agent.md, .github/agents/docker.agent.md, .github/agents/docs.agent.md, .github/agents/git.agent.md, .github/agents/orchestrator.agent.md, .github/agents/performance.agent.md, .github/agents/planner.agent.md, .github/agents/refactorer.agent.md, .github/agents/reviewer.agent.md, .github/agents/security.agent.md, .github/agents/tester.agent.md, .github/agents/troubleshoot.agent.md	Added 16 agent role specifications defining personas, workflows, checklists, and interaction protocols for specialized development tasks (API design, architecture review, code quality, deployment, security, testing, etc.).
Repository Governance & Setup .github/CODEOWNERS, AGENTS.md, CLAUDE.md, FORK-CUSTOMIZATIONS.md, .github/copilot-instructions.md	Added CODEOWNERS file assigning all repository paths to a single owner, and created documentation for agent guidelines, Claude context, fork customization strategy, and Copilot integration instructions.
CI/CD Workflow Consolidation .github/workflows/release.yml, .github/workflows/security-scan.yml, .github/workflows/copilot-setup-steps.yml	Added new workflows delegating to enterprise CI/CD platform (Ai-road-4-You/enterprise-ci-cd) for release tagging and security scanning; added manual Copilot setup workflow for environment preparation.
Legacy Workflow Removals .github/workflows/ai-service-release-image.yaml, .github/workflows/ai-service-release-nightly-image.yaml, .github/workflows/ai-service-release-stable-image.yaml, .github/workflows/ai-service-test.yaml, .github/workflows/ui-release-image.yaml, .github/workflows/ui-release-image-stable.yaml, .github/workflows/ui-test.yaml, .github/workflows/ui-lint.yaml, .github/workflows/wren-launcher-ci.yaml, .github/workflows/pr-tagger.yaml, .github/workflows/pull-request-title-validator.yaml, .github/workflows/create-rc-release.yaml, .github/workflows/create-rc-release-pr.yaml	Removed 13 GitHub Actions workflows for AI service/UI release automation, testing, linting, and release candidate management—consolidating into centralized enterprise CI/CD platform.
Audit Trail Implementation wren-ai-service/src/audit_trail.py, wren-ai-service/tests/test_audit_trail.py	Introduced append-only audit trail module with AuditEntry dataclass and thread-safe AuditTrail class for recording query explainability data (prompt, model, schema objects, validation steps, final SQL, timestamp); includes basic smoke test coverage.
Dependency Updates wren-ai-service/pyproject.toml, wren-ui/package.json, wren-launcher/go.mod	Updated package versions: Python aiohttp (3.13.3→3.13.4), streamlit (1.37.0→1.54.0), requests (2.32.4→2.33.0), nltk (3.9.3→3.9.4); Node.js axios (1.13.5→1.15.0), lodash (4.17.23→4.18.1), next (14.2.35→15.5.14); Go toolchain 1.24.9→1.25.5 with transitive dependency updates across AWS SDK, containerd, Docker, Kubernetes, and OpenTelemetry.
Configuration & Environment Changes .github/copilot-setup-steps.yml, wren-ai-service/tools/dev/.env, wren-ui/.env.test, .gitignore	Removed AI service dev environment file contents; cleared UI test environment variables; modified .gitignore unignore pattern for example files; added Copilot setup workflow with conditional Node/Python/Go environment initialization.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

Possibly related PRs

• chore(wren-ai-service): multi arch build #1189 — Modifies the same ai-service-release-*.yaml workflows that this PR removes, providing context on prior multi-arch Docker build logic being consolidated.
• chore(wren-ai-service): update nltk to version 3.9.3 and pillow to version 12.1.1 in dependencies #2140 — Updates wren-ai-service/pyproject.toml dependencies including nltk and aiohttp, overlapping with this PR's dependency version bumps.
• chore(wren-ui): add github workflow PR tagger #1402 — Modifies .github/workflows/pr-tagger.yaml, which this PR deletes as part of workflow consolidation.

Suggested labels

wren-ai-service, ai-env-changed

Suggested reviewers

• cyyeh
• onlyjackfrost

Poem

🐰 Sixteen agents hop to the beat,
Workflows consolidated, quite neat!
Audit trails record every quest,
While dependencies get their refresh—
A rabbit-blessed governance fest! ✨

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Warning

⚠️ This pull request might be slop. It has been flagged by CodeRabbit slop detection and should be reviewed carefully.