[Robert0622]

Summary

The public default branch currently ships local agent workflows. This PR adds the self-hosted LoopForge platform at the repository root and preserves the existing workflows, installers and npm package under local/, with guides under docs/local/.

The platform includes workflow execution, runners, approvals, artifacts, shared task groups, durable group-to-SOP handoff, workspace tools and archived previews. Public adapters provide password accounts, explicit administrator grants, actor-scoped model credentials and GitHub Issue/PR integration. The container installer, public starter catalog, bilingual onboarding and no-key script/approval demo support fresh installations without enterprise services.

The branch is a single commit on top of main, so the merged history only contains the audited public tree.

Publication scope

• Audited source export of upstream master 8e348fef259dd7b4860e1bd13845e9a7c0aa212a: 1,734 source blobs verified; 1,464 unchanged, 196 adapted and 74 excluded, plus 61 audited public additions. upstream.json / upstream-overrides.json record every adaptation with a reason; scripts/check-upstream.py verifies them.
• Private history, deployment configuration, employee defaults, credentials and acceptance reports are excluded. Test fixtures use reserved example hosts, fake IDs and documentation IP ranges.
• Organization-specific tracker adapters remain optional compatibility code and are not configured by default. Their Web entry points stay hidden; external sync and the assistant guidance target GitHub, and clarification prompts only mention optional tracker tools when such MCP servers are installed.
• Root MIT licensing is retained, together with original editor notices and a notice bundle for Go modules. Provider CLI packages retain their own terms and notices.
• The default container listener binds to localhost. This release targets trusted teams: authenticated reads span the instance, project writes require permission, and Docker access requires trusted operators. See deployment boundaries.
• Much of the diff comes from embedded Monaco/Code-OSS distributions and moving existing workflows.

Changes since the previous revision

• Synced upstream: requirement base branches and continuing an existing work branch, Main Bot control leases and native draft submission, interactive workspace terminal prompts and tab completion, toast styling.
• Public UI cleanup: external sync panel, import/push buttons, schedule sources, MCP auth options and delivery analytics no longer expose internal tracker names; new copy has English translations.
• scripts/check-public.py now also blocks credentials for common cloud/model providers, corporate e-mail addresses, private network ranges and known internal identifiers (stored as digests).

Correctness and CI

• Runner cancellation stops listening to the completed context; one goroutine drains output and owns cmd.Wait; early control failures reap the command.
• Git staging handles an empty eligible index on Git 2.55 without ignoring staging errors or removing exclusions.
• Non-root native services can access private Docker workspaces with default/root images; explicit non-root image users are retained.
• SOP nodes keep changes local until delivery; generic SOPs run without repository binding.
• CI uses explicit API test globs on Node 22, runs the checkout-free E2E gate and provisions the no-key acceptance account through normal signup.

Validation (this head)

• Full Go test suite and go vet pass locally.
• scripts/check-public.py, scripts/check-upstream.py (against upstream master) and Gitleaks (working tree and the branch commit) pass.
• GitHub Actions results for this head are reported on the PR checks.

Details: verification record, release review, public adaptation scope, upstream synchronization.

Earlier proposals

#46 is closed as superseded by this platform import. #47 is closed: only its language/theme mechanism is reused.

This PR submits source for review; it does not publish packages, images, tags or a GitHub Release. Please use squash merge (or rebase) to keep main history to this audited commit.