feat: add interactive network approval and domain rejection

.github/ISSUE_TEMPLATE/REQUEST-AGENT-PACKAGE.md

@@ -0,0 +1,59 @@
+name: New Agent Package Request
+description: Request a nono package for an AI agent that isn't supported yet
+labels: ["agent-package"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for helping us grow nono's agent coverage!
+        Use this template to request a nono package for an AI agent that isn't supported yet. The more detail you can give us about the agent — especially the hooks and customization points it exposes — the easier it is for us to build a solid, secure package.
+        **Please note:** opening this request is not a guarantee that we'll build the package. We prioritize based on demand, so the more popular and widely-used the agent, the more likely support will land. Either way, we'll do our best.
+
+  - type: input
+    id: agent-name
+    attributes:
+      label: Agent name
+      description: The name of the agent you'd like a nono package for.
+      placeholder: "e.g. Aider, Cline, OpenHands"
+    validations:
+      required: true
+
+  - type: input
+    id: docs-url
+    attributes:
+      label: Documentation URL
+      description: Link to the agent's official documentation.
+      placeholder: "https://docs.example.com"
+    validations:
+      required: true
+
+  - type: input
+    id: github-repo
+    attributes:
+      label: GitHub repository
+      description: Link to the agent's source repository.
+      placeholder: "https://github.com/org/agent"
+    validations:
+      required: true
+
+  - type: textarea
+    id: hooks-customization
+    attributes:
+      label: Hooks and customization
+      description: |
+        What hooks, plugins, lifecycle events, config files, or other customization points does the agent provide that a nono package could leverage? For example: pre/post-command hooks, tool-call interception, a settings/config file, SKILL files, environment variables, or an extension API. Link to the relevant docs or source where you can.
+      placeholder: "The agent supports a pre-tool-use hook defined in ~/.agent/config.yaml that runs a command before each shell action..."
+    validations:
+      required: true
+
+  - type: textarea
+    id: popularity
+    attributes:
+      label: Adoption and popularity
+      description: Help us gauge demand — GitHub stars, download counts, community size, or where the agent is being used. This directly informs prioritization.
+
+  - type: textarea
+    id: context
+    attributes:
+      label: Additional context
+      description: Anything else that would help us build the package — known security concerns, platform support (Linux/macOS), how you intend to use the agent under nono, or related requests.

.github/ISSUE_TEMPLATE/onboarding_issue.yml

@@ -18,7 +18,7 @@ body:
         - Installation (Homebrew / cargo / binary download)
         - First run (`nono run` returned an error immediately)
         - Writing or loading a profile (JSON)
-        - Using a built-in profile (e.g. `--profile claude-code`)
+        - Using a built-in profile (e.g. `--profile always-further/claude`)
         - nono ran but didn't seem to enforce anything
         - Something else (describe below)
     validations:
@@ -29,7 +29,7 @@ body:
     attributes:
       label: What happened?
       description: What did you try, and what went wrong?
-      placeholder: "I followed the quickstart and ran `nono run --profile claude-code -- claude` but got..."
+      placeholder: "I followed the quickstart and ran `nono run --profile always-further/claude -- claude` but got..."
     validations:
       required: true
 

.github/dependabot.yml

@@ -1,12 +1,18 @@
 version: 2
 
+# Delay version-update PRs so freshly published packages are not pulled into
+# releases immediately. Security updates bypass cooldown automatically.
 updates:
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
       interval: "weekly"
+    cooldown:
+      default-days: 3
 
   - package-ecosystem: "cargo"
     directory: "/"
     schedule:
       interval: "weekly"
+    cooldown:
+      default-days: 3

.github/workflows/attest-release.yml

@@ -35,7 +35,7 @@ jobs:
             --dir artifacts
 
       - name: Attest build provenance
-        uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2
+        uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26  # v4.1.0
         with:
           subject-path: |
             artifacts/*.tar.gz

.github/workflows/aur-publish.yml

@@ -0,0 +1,177 @@
+name: AUR Publish
+
+on:
+  workflow_run:
+    workflows: ["Release"]
+    types:
+      - completed
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: 'Release tag to publish to the AUR (e.g., v0.61.1)'
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+# Serialize publishes so two close releases cannot race the AUR repository.
+concurrency:
+  group: aur-publish
+  cancel-in-progress: false
+
+jobs:
+  resolve:
+    name: Resolve publish parameters
+    runs-on: ubuntu-latest
+    if: >-
+      github.repository == 'always-further/nono' &&
+      ((github.event_name == 'workflow_dispatch') ||
+      (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success'))
+    outputs:
+      tag: ${{ steps.params.outputs.tag }}
+      publish: ${{ steps.params.outputs.publish }}
+    steps:
+      - name: Compute parameters
+        id: params
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          WR_HEAD_BRANCH: ${{ github.event.workflow_run.head_branch }}
+          WD_TAG: ${{ inputs.tag }}
+        run: |
+          set -euo pipefail
+          if [ "$EVENT_NAME" = "workflow_run" ]; then
+            TAG="$WR_HEAD_BRANCH"
+          else
+            TAG="$WD_TAG"
+          fi
+
+          # Only stable vX.Y.Z release tags are published to the AUR. This
+          # rejects prereleases (alpha/beta/rc) and workflow_run events for
+          # Release runs started from a branch, where head_branch is the
+          # branch name instead of a tag.
+          if [[ ! "$TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+            echo "Not a stable release tag: '$TAG' — skipping AUR publish."
+            echo "tag=$TAG" >> "$GITHUB_OUTPUT"
+            echo "publish=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          echo "tag=$TAG" >> "$GITHUB_OUTPUT"
+          echo "publish=true" >> "$GITHUB_OUTPUT"
+
+  publish:
+    name: Publish to AUR
+    needs: resolve
+    if: ${{ needs.resolve.outputs.publish == 'true' }}
+    runs-on: ubuntu-latest
+    container:
+      image: archlinux:latest
+    steps:
+      # git must be installed before actions/checkout so it produces a real
+      # git checkout; base-devel provides makepkg and sudo, pacman-contrib
+      # provides updpkgsums.
+      - name: Install dependencies
+        run: pacman -Syu --noconfirm --needed base-devel git pacman-contrib openssh
+
+      # The PKGBUILD template and update.sh are always taken from the branch
+      # the workflow runs on (the default branch), not from the release tag:
+      # packaging fixes must flow into the next publish, and tags that predate
+      # this workflow have no packaging/aur directory at all.
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+
+      - name: Create build user
+        # makepkg and updpkgsums refuse to run as root. The workspace is
+        # handed to an unprivileged user; safe.directory keeps the
+        # actions/checkout post-job cleanup (running as root) working on it.
+        run: |
+          set -euo pipefail
+          useradd -m builder
+          git config --global --add safe.directory '*'
+          chown -R builder:builder .
+
+      - name: Verify AUR host keys and configure SSH
+        env:
+          AUR_SSH_PRIVATE_KEY: ${{ secrets.AUR_SSH_PRIVATE_KEY }}
+        run: |
+          set -euo pipefail
+          # Official AUR SSH host key fingerprints, published on
+          # https://aur.archlinux.org/ ("The following SSH fingerprints are
+          # used for the AUR"). Every key returned by ssh-keyscan must match
+          # one of these pinned fingerprints or the job fails (no trust on
+          # first use). If Arch Linux rotates its keys, update these values
+          # from that page (see packaging/aur/README.md).
+          expected='SHA256:RFzBCUItH9LZS0cKB5UE6ceAYhBD5C8GeOBip8Z11+4 SHA256:uTa/0PndEgPZTf76e1DFqXKJEXKsn7m9ivhLQtzGOCI SHA256:5s5cIyReIfNNVGRFdDbe3hdYiI5OelHGpw2rOUud3Q8'
+
+          install -d -m 700 -o builder -g builder /home/builder/.ssh
+
+          ssh-keyscan -t ed25519,ecdsa,rsa aur.archlinux.org > /home/builder/.ssh/scanned
+          if [ ! -s /home/builder/.ssh/scanned ]; then
+            echo "::error::ssh-keyscan returned no host keys for aur.archlinux.org"
+            exit 1
+          fi
+
+          # ssh-keyscan (OpenSSH 10+) writes an informational "# host SSH-2.0-..."
+          # banner line to stdout for each scanned key. Feeding the whole file to
+          # ssh-keygen -lf (rather than each line to stdin) lets ssh-keygen skip
+          # those comments natively and emit one fingerprint per host key.
+          fingerprints="$(ssh-keygen -lf /home/builder/.ssh/scanned | awk '{print $2}')"
+          if [ -z "$fingerprints" ]; then
+            echo "::error::ssh-keygen produced no fingerprints for aur.archlinux.org"
+            exit 1
+          fi
+
+          while IFS= read -r fp; do
+            if [[ " $expected " != *" $fp "* ]]; then
+              echo "::error::Unexpected SSH host key fingerprint for aur.archlinux.org: $fp"
+              exit 1
+            fi
+            echo "Verified host key: $fp"
+          done <<< "$fingerprints"
+
+          mv /home/builder/.ssh/scanned /home/builder/.ssh/known_hosts
+
+          # Private key comes from the repository secret; it is written
+          # straight to disk and never echoed to the log.
+          printf '%s\n' "$AUR_SSH_PRIVATE_KEY" > /home/builder/.ssh/aur
+
+          cat > /home/builder/.ssh/config <<'EOF'
+          Host aur.archlinux.org
+            User aur
+            IdentityFile ~/.ssh/aur
+            IdentitiesOnly yes
+            StrictHostKeyChecking yes
+          EOF
+
+          chmod 600 /home/builder/.ssh/aur /home/builder/.ssh/config /home/builder/.ssh/known_hosts
+          chown -R builder:builder /home/builder/.ssh
+
+      - name: Clone AUR repository
+        run: sudo -u builder git clone ssh://aur@aur.archlinux.org/nono-ai-bin.git /home/builder/aur
+
+      - name: Generate PKGBUILD and .SRCINFO
+        env:
+          RELEASE_TAG: ${{ needs.resolve.outputs.tag }}
+        run: sudo -u builder ./packaging/aur/update.sh "$RELEASE_TAG"
+
+      - name: Push to AUR if changed
+        run: |
+          set -euo pipefail
+          install -m 644 -o builder -g builder \
+            packaging/aur/PKGBUILD packaging/aur/.SRCINFO /home/builder/aur/
+          # The version comes from the freshly generated PKGBUILD rather than
+          # from an environment variable: sudo's default policy resets the
+          # environment, and the PKGBUILD value is what actually gets published.
+          sudo -u builder bash -euo pipefail <<'EOS'
+          cd /home/builder/aur
+          ver="$(awk -F= '/^pkgver=/{print $2; exit}' PKGBUILD)"
+          if [ -z "$(git status --porcelain)" ]; then
+            echo "AUR is already up to date with v${ver}; nothing to push."
+            exit 0
+          fi
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add PKGBUILD .SRCINFO
+          git commit -m "Update to ${ver}"
+          git push origin master
+          EOS

.github/workflows/ci.yml

@@ -21,7 +21,7 @@ jobs:
       run_code_jobs: ${{ steps.classify.outputs.run_code_jobs }}
       run_docs_checks: ${{ steps.classify.outputs.run_docs_checks }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           fetch-depth: 0
 
@@ -96,7 +96,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, macos-latest]
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable
@@ -141,7 +141,7 @@ jobs:
     if: ${{ needs.changes.outputs.run_code_jobs == 'true' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable
@@ -158,7 +158,7 @@ jobs:
     if: ${{ !startsWith(github.head_ref, 'dependabot/github_actions/') && needs.changes.outputs.run_code_jobs == 'true' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable
@@ -186,7 +186,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, macos-latest]
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable
@@ -198,12 +198,16 @@ jobs:
         run: cargo clippy --workspace --all-targets --all-features -- -D warnings -D clippy::unwrap_used
 
   integration:
-    name: Integration Tests
+    name: Integration (${{ matrix.os }})
     needs: changes
     if: ${{ !startsWith(github.head_ref, 'dependabot/github_actions/') && needs.changes.outputs.run_code_jobs == 'true' }}
-    runs-on: macos-latest
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest-m, macos-latest]
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable
@@ -221,9 +225,6 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-cargo-
 
-      - name: Build release binary
-        run: cargo build --release
-
       - name: Run integration tests
         run: |
           if [[ -f ./tests/run_integration_tests.sh ]]; then
@@ -238,7 +239,7 @@ jobs:
     if: ${{ needs.changes.outputs.run_code_jobs == 'true' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@631a55b12751854ce901bb631d5902ceb48146f7 # stable
@@ -257,7 +258,7 @@ jobs:
     if: ${{ needs.changes.outputs.run_docs_checks == 'true' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
 
       - name: Verify docs routes are canonical
         run: |