thePR0M3TH3AN/TORCH
1
0 Fork 0
mirror of https://github.com/PR0M3TH3AN/TORCH.git synced 2026-11-06 04:42:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #266 from PR0M3TH3AN/agents/daily/deps-security-agent-2026-02-17-6568228938484904642

Browse Source 
Daily Scheduler: deps-security-agent
This commit is contained in:
thePR0M3TH3AN authored and GitHub committed 2026-02-17 18:40:25 -05:00
2 parents b122da6365 da4d360af1
commit f343af246f
13 files changed
+2488 -15
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

.scheduler-memory/memory-store.json
+119
View File
@@ -75,5 +75,124 @@
"merged_into": null,
"pinned": false
}
],
[
"8512327a-8ba7-4a49-9275-41860e38a2e0",
{
"schema_version": 1,
"id": "8512327a-8ba7-4a49-9275-41860e38a2e0",
"agent_id": "scheduler-memory-daily",
"session_id": "session-mlr7wt48",
"type": "batch_window",
"content": "Memory retrieval seed for daily :: scheduler memory retrieval",
"summary": "Memory retrieval seed for daily :: scheduler memory retrieval",
"tags": [
"scheduler",
"daily",
"retrieve"
],
"importance": 0.4,
"embedding_id": null,
"created_at": 1771369913961,
"last_seen": 1771369913968,
"source": "scheduler-retrieve",
"ttl_days": null,
"merged_into": null,
"pinned": false
}
],
[
"72f2cb07-62ab-4460-a994-4da196860e6c",
{
"schema_version": 1,
"id": "72f2cb07-62ab-4460-a994-4da196860e6c",
"agent_id": "agent-telemetry",
"session_id": "s-telemetry",
"type": "batch_window",
"content": "customer token ABC123 secret",
"summary": "customer token ABC123 secret",
"tags": [
"incident"
],
"importance": 0.25,
"embedding_id": null,
"created_at": 1771370050385,
"last_seen": 1771370148086,
"source": "ingest",
"ttl_days": null,
"merged_into": null,
"pinned": false
}
],
[
"ed46b70f-334d-4b41-984b-56e0415ffda2",
{
"schema_version": 1,
"id": "ed46b70f-334d-4b41-984b-56e0415ffda2",
"agent_id": "agent-telemetry",
"session_id": "s-telemetry",
"type": "batch_window",
"content": "customer token ABC123 secret",
"summary": "customer token ABC123 secret",
"tags": [
"incident"
],
"importance": 0.25,
"embedding_id": null,
"created_at": 1771370084740,
"last_seen": 1771370148086,
"source": "ingest",
"ttl_days": null,
"merged_into": null,
"pinned": false
}
],
[
"160c683e-c1b0-4b57-8b2a-58e01ecec0e2",
{
"schema_version": 1,
"id": "160c683e-c1b0-4b57-8b2a-58e01ecec0e2",
"agent_id": "agent-telemetry",
"session_id": "s-telemetry",
"type": "batch_window",
"content": "customer token ABC123 secret",
"summary": "customer token ABC123 secret",
"tags": [
"incident"
],
"importance": 0.25,
"embedding_id": null,
"created_at": 1771370148079,
"last_seen": 1771370148086,
"source": "ingest",
"ttl_days": null,
"merged_into": null,
"pinned": false
}
],
[
"38bb52c3-8262-4469-a15e-b46e11e92f9d",
{
"schema_version": 1,
"id": "38bb52c3-8262-4469-a15e-b46e11e92f9d",
"agent_id": "scheduler-memory-weekly",
"session_id": "session-mlr82pk9",
"type": "batch_window",
"content": "Store memory event A for weekly :: scheduler memory store\nStore memory event B for weekly :: scheduler memory store",
"summary": "Store memory event A for weekly :: scheduler memory store Store memory event B for weekly :: scheduler memory store",
"tags": [
"scheduler",
"weekly",
"store"
],
"importance": 0.55,
"embedding_id": null,
"created_at": 1771370189289,
"last_seen": 1771370189290,
"source": "scheduler-store",
"ttl_days": null,
"merged_into": null,
"pinned": false
}
]
]
.scheduler-memory/session-mlr7wt48/retrieve.json
+18
View File
@@ -0,0 +1,18 @@
{
"cadence": "daily",
"operation": "retrieve",
"runId": "session-mlr7wt48",
"servicePath": "src/services/memory/index.js#getRelevantMemories",
"inputs": {
"agentId": "scheduler-memory-daily",
"promptPath": "",
"promptIntent": "scheduler memory retrieval",
"query": "scheduler | daily | agent | scheduler-memory-daily | intent | scheduler memory retrieval",
"events": 1
},
"outputs": {
"ingestedCount": 1,
"retrievedCount": 1
},
"status": "ok"
}
.scheduler-memory/session-mlr7wt48/retrieve.ok
+1
View File
@@ -0,0 +1 @@
MEMORY_RETRIEVED
.scheduler-memory/session-mlr82pk9/store.json
+20
View File
@@ -0,0 +1,20 @@
{
"cadence": "weekly",
"operation": "store",
"runId": "session-mlr82pk9",
"servicePath": "src/services/memory/index.js#ingestEvents",
"inputs": {
"agentId": "scheduler-memory-weekly",
"promptPath": "",
"promptIntent": "scheduler memory store",
"events": 2,
"sourceFile": "fallback"
},
"outputs": {
"storedCount": 1,
"summaries": [
"Store memory event A for weekly :: scheduler memory store Store memory event B for weekly :: scheduler memory store"
]
},
"status": "ok"
}
.scheduler-memory/session-mlr82pk9/store.ok
+1
View File
@@ -0,0 +1 @@
MEMORY_STORED
artifacts/deps-report.md
+11 -8
View File
@@ -1,14 +1,17 @@
# Dependency Report (2026-02-14)
# Dependency Security Report
## Summary
- Vulnerabilities: 0
- Outdated Packages: 1
**Date:** 2026-02-17
## Vulnerabilities
No vulnerabilities found.
Found 4 moderate vulnerabilities in `eslint` stack.
- `eslint`, `@eslint/js`, `ajv`, `@eslint-community/eslint-utils`.
- **Note**: Current installed version is `^10.0.0`, which exceeds normal registry versions. Investigation needed.
## Outdated Packages
- **nostr-tools**: Current `2.19.4` -> Latest `2.23.1` (Wanted: `2.19.4`)
- **nostr-tools**:
- Current: 2.19.4
- Latest: 2.23.1
- **Action**: Skipped auto-upgrade (Protocol Library). Please review manually.
## Recommendations
- **nostr-tools**: This is a protocol library. Auto-upgrade is disabled. Recommend manual review for upgrade to 2.23.1.
## Actions Taken
- No automatic upgrades performed due to safety constraints.
artifacts/npm-audit.json
+102 -6
View File
@@ -1,22 +1,118 @@
{
"auditReportVersion": 2,
"vulnerabilities": {},
"vulnerabilities": {
"@eslint-community/eslint-utils": {
"name": "@eslint-community/eslint-utils",
"severity": "moderate",
"isDirect": false,
"via": [
"eslint"
],
"effects": [
"eslint"
],
"range": "*",
"nodes": [
"node_modules/@eslint-community/eslint-utils"
],
"fixAvailable": {
"name": "eslint",
"version": "4.1.1",
"isSemVerMajor": true
}
},
"@eslint/js": {
"name": "@eslint/js",
"severity": "moderate",
"isDirect": true,
"via": [
"eslint"
],
"effects": [],
"range": ">=10.0.1",
"nodes": [
"node_modules/@eslint/js"
],
"fixAvailable": {
"name": "@eslint/js",
"version": "9.39.2",
"isSemVerMajor": true
}
},
"ajv": {
"name": "ajv",
"severity": "moderate",
"isDirect": false,
"via": [
{
"source": 1113214,
"name": "ajv",
"dependency": "ajv",
"title": "ajv has ReDoS when using `$data` option",
"url": "https://github.com/advisories/GHSA-2g4f-4pwh-qvx6",
"severity": "moderate",
"cwe": [
"CWE-400"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<8.18.0"
}
],
"effects": [
"eslint"
],
"range": "<8.18.0",
"nodes": [
"node_modules/ajv"
],
"fixAvailable": {
"name": "eslint",
"version": "4.1.1",
"isSemVerMajor": true
}
},
"eslint": {
"name": "eslint",
"severity": "moderate",
"isDirect": true,
"via": [
"@eslint-community/eslint-utils",
"ajv"
],
"effects": [
"@eslint-community/eslint-utils",
"@eslint/js"
],
"range": ">=4.2.0",
"nodes": [
"node_modules/eslint"
],
"fixAvailable": {
"name": "eslint",
"version": "4.1.1",
"isSemVerMajor": true
}
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 0,
"moderate": 4,
"high": 0,
"critical": 0,
"total": 0
"total": 4
},
"dependencies": {
"prod": 12,
"dev": 72,
"optional": 0,
"dev": 76,
"optional": 1,
"peer": 0,
"peerOptional": 0,
"total": 83
"total": 87
}
}
}
src/cmd-check.mjs
+1 -1
View File
@@ -29,7 +29,7 @@ export async function cmdCheck(cadence, deps = {}) {
console.error(`Paused agents: ${pausedAgents.join(', ')}`);
}
const locks = await queryLocks(relays, cadence, dateStr, namespace);
const locks = await queryLocksFn(relays, cadence, dateStr, namespace);
const lockedAgents = [...new Set(locks.map((l) => l.agent).filter(Boolean))];
const roster = await getRosterFn(cadence);
src/context/CONTEXT_2026-02-17T23-13-04Z.md
+16
View File
@@ -0,0 +1,16 @@
# Deps Security Agent Context
- Agent: deps-security-agent
- Cadence: daily
- Run Start: 2026-02-17T23-13-04Z
- Prompt: src/prompts/daily/deps-security-agent.md
## Goal
Perform daily security and dependency audit.
## Scope
Reviewing dependencies for security and freshness. `nostr-tools` and `eslint`.
## Constraints
- Do not auto-upgrade protocol libraries.
- Do not auto-upgrade if versions are anomalous.
src/decisions/DECISIONS_2026-02-17T23-13-04Z.md
+11
View File
@@ -0,0 +1,11 @@
# Decisions
- Agent: deps-security-agent
- Cadence: daily
- Run Start: 2026-02-17T23-13-04Z
- Prompt: src/prompts/daily/deps-security-agent.md
1. **Decision**: Skip `nostr-tools` auto-upgrade.
**Rationale**: It is a protocol library and requires manual review per policy.
2. **Decision**: Skip `eslint` changes.
**Rationale**: The installed version (v10) and audit suggestions are conflicting. Needs human investigation.
src/test_logs/TEST_LOG_2026-02-17T23-13-04Z.md
+2170
View File
File diff suppressed because it is too large. Load diff
src/todo/TODO_2026-02-17T23-13-04Z.md
+11
View File
@@ -0,0 +1,11 @@
# Tasks
- Agent: deps-security-agent
- Cadence: daily
- Run Start: 2026-02-17T23-13-04Z
- Prompt: src/prompts/daily/deps-security-agent.md
## Completed Tasks
- [x] Document `nostr-tools` update availability in report.
- [x] Document `eslint` vulnerabilities in report.
- [x] Create `artifacts/deps-report.md`.
task-logs/daily/2026-02-17T23-13-04Z__deps-security-agent__completed.md
+7
View File
@@ -0,0 +1,7 @@
---
agent: deps-security-agent
platform: linux
---
# Completed
Scheduler successfully executed deps-security-agent.