mtui

An improved, idiomatic Rust successor to MTUI — the Maintenance Test Update Installer, SUSE QE's tool for validating maintenance updates: load a request by RRID, install and test it on reference hosts over SSH in parallel, then approve or reject. It drives OBS/IBS and Gitea review workflows, svn, and openQA/QEM under the hood.

This is a redesign, not a transpile: MTUI is the behavioral reference and source of domain truth, but mtui aims to be memory-safe, async-native, and distributable as a single static binary — while preserving the data-format and workflow contracts that keep it interoperable with the SUSE maintenance ecosystem.

Why a rewrite

• Safety & robustness — strong types, exhaustive error enums, no interpreter.
• Performance — async I/O (tokio), true parallel host fan-out, fast startup.
• Distribution — two static binaries (mtui, mtui-mcp), no Python runtime or virtualenv; generated shell completions and man pages.
• Maintainability — a Cargo workspace with clean crate boundaries and one composition root.

Two surfaces

• mtui — interactive REPL (line editing, tab completion, history).
• mtui-mcp — a Model Context Protocol server whose tools are synthesised from the command registry, so the CLI and the MCP surface never drift.

MCP security boundary

Interactive/REPL-only commands (shell, edit, terms, …) are permanently deny-listed: MCP synthesis and routing never expose them over stdio or HTTP, under every MCP profile, and the deny cannot be reversed with [mcp] tools_allow. Local process execution is not exposed at all — the former lrun command was removed from mtui entirely.

MCP profiles reduce the advertised tool surface; they are not authentication or authorization. HTTP session isolation is likewise not caller authentication. Keep the HTTP transport on its default loopback interface or place it behind an authenticated boundary trusted to operate the remaining maintenance tools.

Features

• Parallel SSH command execution across reference hosts (run, update, install, prepare, downgrade, …) with per-host enabled/disabled states and parallel/serial modes. Pubkey auth only.
• OBS/IBS and Gitea maintenance-request workflow (assign, approve, reject, comment, …) via the native OBS/IBS API (no osc subprocess).
• Optional Slack review-request integration (request_review, off by default): posts a review request to a channel, can watch for reviewer 👍/👎 reactions until a verdict, and — once enabled — gates approve on an acknowledged review.
• openQA / QEM Dashboard integration, incl. an openqa_overview (port of oqa-search) with --export into the testreport.
• TeReGen-backed maintenance-queue browsing (updates) and template regeneration (regenerate).
• Reference-host discovery via refhosts.yml (HTTPS- or filesystem-resolved, cached) and offline inventory search (list_refhosts).
• Cooperative reference-host locking (/var/lock/mtui.lock), interoperable with Python MTUI on a shared fleet.
• Test-report lifecycle: load_template, checkout, commit, edit, export (SVN and Gitea backends).
• File transfer (put/get) over SFTP.
• Vim syntax highlighting for testreport files, packaged separately as vim-plugin.

Build

Requires a Rust toolchain (edition 2024, MSRV 1.96). MSRV is pinned via rust-version in Cargo.toml; there is no rust-toolchain.toml (the reference dev environment uses a Homebrew rustc with no rustup). See docs/ for build-from-source, install, and packaging details.

cargo build --workspace              # build all crates
cargo run -p mtui-cli -- --help      # run the REPL binary (mtui)
cargo run -p mtui-mcp -- --help      # run the MCP server (mtui-mcp)
cargo test --workspace               # run tests
cargo fmt --all --check              # formatting gate
cargo clippy --workspace --all-targets -- -D warnings   # lint gate

Runtime dependencies

Some backends shell out to external tools (kept optional; degrade gracefully when absent):

• svn — testreport checkout/commit (SVN backend)
• a terminal emulator — for the terms/switch commands. The term.*.sh launcher scripts ship in dist/terms/; packaging installs them into the datadir ($XDG_DATA_HOME/mtui/terms), and MTUI_TERMS_DIR overrides where the terms command looks for them (e.g. a system path like /usr/share/mtui/terms).

The QAM review workflow talks to the OBS/IBS API natively (no osc subprocess); it reads credentials from the user's oscrc — located exactly like osc itself ($OSC_CONFIG, then $XDG_CONFIG_HOME/osc/oscrc, then ~/.oscrc) — and is configured via the [obs] table (api_url, request_timeout).

Documentation

• docs/ — the user guide (mdBook): installation, configuration, the generated command reference, the MCP server, and an FAQ. Build with mdbook build docs, or read the Markdown under docs/src/ directly.
• AGENTS.md — contributor/agent guide: conventions, contracts, and the definition of done.

License

GPL-3.0-or-later (MTUI is GPL-2.0-only; this is an intentional relicense). See LICENSE.