ci: add shellcheck to CI and pre-commit hook

examples/localcowork/.env.example

@@ -11,6 +11,7 @@
 # Text model API endpoint (OpenAI-compatible). Set by start-model.sh.
 # Default when using LFM2 via llama-server: http://localhost:8080/v1
 # Default when using Ollama:                http://localhost:11434/v1
+# Default when using LM Studio:             http://localhost:1234/v1
 # LOCALCOWORK_MODEL_ENDPOINT=http://localhost:8080/v1
 
 # Vision model endpoint (for AI-powered OCR — optional, falls back to Tesseract)

examples/localcowork/.git-hooks/pre-commit

@@ -28,6 +28,20 @@ fi
 
 WARNINGS=()
 
+# ── Check 0: Shell scripts pass shellcheck ───────────────────────────────────
+
+for file in $STAGED_FILES; do
+    case "$file" in
+        *.sh)
+            if command -v shellcheck >/dev/null 2>&1; then
+                if ! shellcheck -s bash "$file" >/dev/null 2>&1; then
+                    WARNINGS+=("shellcheck failed for $file (run: shellcheck -s bash $file)")
+                fi
+            fi
+            ;;
+    esac
+done
+
 # ── Check 1: Source files changed but PROGRESS.yaml not staged ──────────────
 
 HAS_SOURCE_CHANGES=false

examples/localcowork/.github/workflows/shellcheck.yml

@@ -0,0 +1,20 @@
+name: Shellcheck
+
+on:
+  push:
+    paths:
+      - "**.sh"
+  pull_request:
+    paths:
+      - "**.sh"
+
+jobs:
+  shellcheck:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Run shellcheck
+        uses: ludeeus/action-shellcheck@master
+        env:
+          SHELLCHECK_OPTS: "-s bash -S error"

src-tauri/Cargo.toml

@@ -0,0 +1,45 @@
+[package]
+name = "localcowork"
+version = "0.1.0"
+description = "LocalCowork — on-device AI agent desktop app"
+authors = ["LocalCowork Contributors"]
+license = "MIT"
+edition = "2021"
+rust-version = "1.77"
+
+[build-dependencies]
+tauri-build = { version = "2", features = [] }
+
+[dependencies]
+tauri = { version = "2", features = ["devtools"] }
+tauri-plugin-shell = "2"
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+serde_yaml = "0.9"
+tokio = { version = "1", features = ["full"] }
+anyhow = "1"
+thiserror = "2"
+tracing = "0.1"
+tracing-subscriber = { version = "0.3", features = ["json", "env-filter"] }
+uuid = { version = "1", features = ["v4"] }
+chrono = { version = "0.4", features = ["serde"] }
+reqwest = { version = "0.12", features = ["json", "stream"] }
+rusqlite = { version = "0.32", features = ["bundled"] }
+futures = "0.3"
+dirs = "6"
+sysinfo = "0.33"
+sha2 = "0.10"
+tauri-plugin-dialog = "2"
+
+[dev-dependencies]
+tempfile = "3"
+
+[features]
+default = ["custom-protocol"]
+custom-protocol = ["tauri/custom-protocol"]
+
+[profile.release]
+strip = true
+lto = true
+codegen-units = 1
+panic = "abort"

src-tauri/build.rs

@@ -0,0 +1,3 @@
+fn main() {
+    tauri_build::build();
+}

src-tauri/capabilities/default.json

@@ -0,0 +1,15 @@
+{
+  "identifier": "default",
+  "description": "Default capabilities for LocalCowork",
+  "windows": ["main"],
+  "permissions": [
+    "core:default",
+    "shell:allow-open",
+    "shell:allow-execute",
+    "shell:allow-spawn",
+    "shell:allow-stdin-write",
+    "dialog:default",
+    "dialog:allow-open",
+    "dialog:allow-save"
+  ]
+}

src-tauri/entitlements.plist

@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
+  "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <!-- Allow spawning child processes (Node.js/Python MCP servers) -->
+    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+    <true/>
+    <!-- Allow loading external dynamic libraries (Python packages, Node modules) -->
+    <key>com.apple.security.cs.disable-library-validation</key>
+    <true/>
+    <!-- Allow outbound network connections (localhost Ollama API) -->
+    <key>com.apple.security.network.client</key>
+    <true/>
+    <!-- Allow read/write to user-selected files (via open/save dialogs) -->
+    <key>com.apple.security.files.user-selected.read-write</key>
+    <true/>
+</dict>
+</plist>

src-tauri/mcp-servers.json

@@ -0,0 +1,3 @@
+{
+  "servers": {}
+}