Commit Graph
487 Commits
Author SHA1 Message Date
google-labs-jules[bot]andPR0M3TH3AN 4e244dd847 chore(ai): doc src/ops.mjs (docs-code-investigator)
- Added JSDoc to src/ops.mjs
- Created docs/ops-overview.md
- Updated run artifacts

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-22 18:23:40 +00:00
google-labs-jules[bot]andPR0M3TH3AN b28ccfc1c8 docs: align TORCH.md with package.json scripts
- Update TORCH.md to include missing scripts (e.g., test:playwright).
- Clarify npm test and validate:scheduler descriptions.
- Execute daily scheduler flow for docs-alignment-agent.
- Create run artifacts and memory updates.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-22 17:06:38 +00:00
google-labs-jules[bot]andPR0M3TH3AN 659ca4980f Run weekly smoke-agent
Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-22 05:08:43 +00:00
thePR0M3TH3AN e4c0c714a2 Merge pull request #431 from PR0M3TH3AN/playwright-integration-testing-4582400102750741081
Add Playwright integration testing with code coverage
2026-02-21 22:51:13 -05:00
google-labs-jules[bot]andPR0M3TH3AN e8eec45ff7 feat: add Playwright integration tests with coverage and log capture
- Added `@playwright/test` and `c8` dependencies.
- Configured Playwright in `playwright.config.js` to run the dashboard server.
- Added `test/playwright/dashboard.spec.js` to verify dashboard functionality (loading, auth, config) and capture console logs.
- Modified `src/dashboard.mjs` to support graceful shutdown via `/shutdown` endpoint (guarded by `NODE_V8_COVERAGE`) for coverage collection.
- Updated `package.json` with `test:playwright` and `test:playwright:coverage` scripts.
- Updated `.gitignore` to exclude coverage and test artifacts.
- Fixed `host` default value in `src/cli-parser.mjs`.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-22 03:22:12 +00:00
google-labs-jules[bot]andPR0M3TH3AN 5cbe23bebf docs(daily): run docs-agent and update documentation
- Executed scheduler flow for `docs-agent`.
- Audited `README.md`, `CONTRIBUTING.md`, and `AGENTS.md` against codebase.
- Verified existence of documented commands (`npm test`, `npm run lint`).
- Created run artifacts in `src/context/`, `src/todo/`, `src/decisions/`, `src/test_logs/`.
- Created task completion log in `task-logs/daily/`.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-22 02:11:22 +00:00
google-labs-jules[bot]andPR0M3TH3AN 0836ebf24b chore: execute daily design-system-audit-agent
Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-22 01:14:16 +00:00
thePR0M3TH3AN 36d8a0bce9 Merge pull request #428 from PR0M3TH3AN/agents/daily/deps-security-agent-2026-02-22-2448744813545043010
chore(deps): deps-security-agent run 2026-02-22
2026-02-21 19:40:09 -05:00
google-labs-jules[bot]andPR0M3TH3AN 96c79c8bc7 chore(deps): deps-security-agent run 2026-02-22
- Upgraded eslint to 10.0.1 (patch)
- Generated security reports and run artifacts
- Documented minimatch/ajv vulnerabilities
- Created task completion log

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-22 00:25:21 +00:00
google-labs-jules[bot]andPR0M3TH3AN 03df42dadd chore(deps): Daily security audit and updates [2026-02-21]
- Upgraded `eslint` to `10.0.1` (Safe dev-dependency patch).
- Resolved high-severity `minimatch` vulnerability transitively via `eslint` upgrade.
- Generated daily security reports in `reports/security/`.
- Created run artifacts in `src/context`, `src/decisions`, `src/todo`, `src/test_logs`.
- Updated agent memory.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 23:30:34 +00:00
google-labs-jules[bot]andPR0M3TH3AN d4649f95a2 chore: scheduler run for decompose-agent
Decomposed src/lib.mjs into src/cmd-check.mjs, src/cmd-list.mjs, and src/cmd-complete.mjs to reduce file size.
Extracted logic preserves existing behavior.
Verified with lint and tests.
Reduced src/lib.mjs by 292 lines.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 22:32:13 +00:00
thePR0M3TH3AN 22bdf3089b Merge branch 'main' into agents/weekly/refactor-agent-7379140273113446489 2026-02-21 15:56:19 -05:00
google-labs-jules[bot]andPR0M3TH3AN 6cd20a06b7 refactor(ops): extract cmdRemove, fix lock-utils export, fix test audit
Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 20:46:18 +00:00
google-labs-jules[bot]andPR0M3TH3AN 637259a07a refactor(ops): extract cmdRemove to src/cmd-remove.mjs and fix lock-utils export
Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 20:38:30 +00:00
google-labs-jules[bot]andPR0M3TH3AN 7c8eeb939c refactor(ops): extract cmdRemove to src/cmd-remove.mjs
Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 20:32:12 +00:00
thePR0M3TH3AN 6b5022ac45 update 2026-02-21 15:29:40 -05:00
thePR0M3TH3AN 9fef4c4f46 update 2026-02-21 15:16:45 -05:00
thePR0M3TH3AN 49411889c0 Merge pull request #422 from PR0M3TH3AN/claude/plan-agent-architecture-QF47j
Add plan-agent, proposal-triage-agent, and builder-agent to close idea-to-implementation gap
2026-02-21 15:16:25 -05:00
Claude 33ea996b04 feat(agents): add plan-agent pipeline to close idea-to-implementation gap
Introduces three new weekly agents that form a triage→plan→build pipeline:

- proposal-triage-agent: evaluates proposals, dead ends, and coverage gaps;
  produces prioritized backlog in src/backlog/BACKLOG.md
- plan-agent: creates concrete implementation plans from top backlog items
  in src/plans/PLAN-*.md
- builder-agent: executes approved plans, makes code changes, verifies
  acceptance criteria

Also includes:
- Architecture proposal document in docs/proposals/
- Seeded initial backlog with 11 items from diagnosed dead ends
- Updated roster.json and weekly-scheduler.md (24 weekly agents)
- All three validators pass (prompt-contract, scheduler-roster, flow-parity)

https://claude.ai/code/session_01FLP7ibXd5QPG517g1kYCHL
2026-02-21 20:13:35 +00:00
google-labs-jules[bot]andPR0M3TH3AN 0cc086c08d fix(security): prevent command injection in governance service and fix build errors
- Mitigate command injection in `src/services/governance/index.js` by using explicit array arguments with `execFileSync` and adding a security comment.
- Add regression test `test/governance-security.test.mjs` verifying the fix against simulated exploit attempts.
- Fix CI build failures by resolving circular dependencies and duplicate declarations in `src/lock-utils.mjs`, `src/lock-ops.mjs`, `src/lock-publisher.mjs`, and `src/relay-health.mjs`.
- Resolve linting errors in tests and implementation files.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 20:03:04 +00:00
thePR0M3TH3AN 1c8c955cd1 Merge branch 'main' into fix/governance-command-injection-10151244085139343159 2026-02-21 14:56:15 -05:00
google-labs-jules[bot]andPR0M3TH3AN 61b3fd5709 fix(security): prevent command injection in governance service and fix build errors
- Mitigate command injection in `src/services/governance/index.js` by using explicit array arguments with `execFileSync` and adding a security comment.
- Add regression test `test/governance-security.test.mjs` verifying the fix against simulated exploit attempts.
- Fix CI build failures by resolving circular dependencies and duplicate declarations in `src/lock-utils.mjs`, `src/lock-ops.mjs`, `src/lock-publisher.mjs`, and `src/relay-health.mjs`.
- Resolve linting errors in tests and implementation files.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 19:55:52 +00:00
google-labs-jules[bot]andPR0M3TH3AN 4e01a33cc2 fix(lock): fix potential duplicate imports in lock-publisher
- Rewrote `src/lock-publisher.mjs` to ensure clean imports and no duplicate declarations of `withTimeout`.
- This addresses the lint error `Identifier 'withTimeout' has already been declared` seen in CI.
- Verified lint passes locally.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 19:54:06 +00:00
thePR0M3TH3AN f47fe02a94 Merge branch 'main' into fix/lock-utils-imports-13445229136005844691 2026-02-21 14:49:37 -05:00
thePR0M3TH3AN e5e490449e Merge branch 'main' into fix/governance-command-injection-10151244085139343159 2026-02-21 14:49:18 -05:00
google-labs-jules[bot]andPR0M3TH3AN ef22045a61 fix(scheduler): Resolve CI module export error in lock-utils
- Fix `SyntaxError: The requested module './lock-utils.mjs' does not provide an export named 'withTimeout'` by refactoring exports in `src/lock-utils.mjs`.
- Explicitly import `relayListLabel` and `mergeRelayList` from `src/utils.mjs` before exporting them to avoid ambiguous export behavior in some environments.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 19:46:26 +00:00
google-labs-jules[bot]andPR0M3TH3AN cb089fa061 fix(security): prevent command injection in governance service and fix build errors
- Mitigate command injection in `src/services/governance/index.js` by using explicit array arguments with `execFileSync` and adding a security comment.
- Add regression test `test/governance-security.test.mjs` verifying the fix against simulated exploit attempts.
- Fix CI build failures by resolving circular dependencies and duplicate declarations in `src/lock-utils.mjs`, `src/lock-ops.mjs`, `src/lock-publisher.mjs`, and `src/relay-health.mjs`.
- Resolve linting errors in tests and implementation files.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 19:45:51 +00:00
google-labs-jules[bot]andPR0M3TH3AN 9c801da049 fix(lock): remove unused randomInt import
- Removed `randomInt` from `src/lock-publisher.mjs` imports as it is no longer used (replaced by `secureRandom` from `src/lock-utils.mjs`).
- Verified lint passes locally.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 19:44:50 +00:00
thePR0M3TH3AN cb8ded018a Merge branch 'main' into agents/daily/style-agent-7331917025368212480 2026-02-21 14:40:02 -05:00
thePR0M3TH3AN 30e7215fa7 Merge branch 'main' into fix/lock-utils-imports-13445229136005844691 2026-02-21 14:39:43 -05:00
thePR0M3TH3AN a0c66686c5 Merge branch 'main' into fix/governance-command-injection-10151244085139343159 2026-02-21 14:39:11 -05:00
google-labs-jules[bot]andPR0M3TH3AN e84f16905a chore(scheduler): Execute daily style-agent and fix lock-utils export
- Fix missing `mergeRelayList` export in `src/lock-utils.mjs`.
- Execute `style-agent` workflow.
- Update `KNOWN_ISSUES.md` with missing `format` script issue.
- Add incident report `docs/agent-handoffs/incidents/2026-02-21-missing-format-script.md`.
- Add run artifacts (Context, Todo, Decisions, Test Logs, Task Log).
- Add memory update.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 19:39:10 +00:00
google-labs-jules[bot]andPR0M3TH3AN c1b4c9b50b fix(lock): fix secureRandom undefined error in lock-publisher
- Imported `secureRandom` from `src/lock-utils.mjs` in `src/lock-publisher.mjs`.
- Removed duplicate local definition of `secureRandom` in `src/lock-publisher.mjs`.
- Verified lint passes locally.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 19:35:56 +00:00
google-labs-jules[bot]andPR0M3TH3AN bdd3ed8c8f fix(security): prevent command injection in governance service and fix build errors
- Mitigate command injection in `src/services/governance/index.js` by using explicit array arguments with `execFileSync` and adding a security comment.
- Add regression test `test/governance-security.test.mjs` verifying the fix against simulated exploit attempts.
- Fix CI build failures by resolving circular dependencies and duplicate declarations in `src/lock-utils.mjs`, `src/lock-ops.mjs`, `src/lock-publisher.mjs`, and `src/relay-health.mjs`.
- Resolve linting errors in tests and implementation files.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 19:35:31 +00:00
google-labs-jules[bot]andPR0M3TH3AN eefab43fdf fix(lock-utils): consolidate function declarations and fix CI failures
- Imported `randomInt` from `node:crypto` in `src/lock-publisher.mjs` to fix CI failure.
- Centralized `withTimeout` and `mergeRelayList` in `src/utils.mjs`.
- Updated `src/lock-utils.mjs` to re-export them.
- Removed local redefinitions in `src/lock-ops.mjs` and `src/lock-publisher.mjs`.
- Fixed `test/utils.test.mjs` imports.
- Verified all tests pass.

This resolves the N/A documentation task by ensuring the codebase is in a valid state.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 19:32:26 +00:00
thePR0M3TH3AN 61d96229ce Merge branch 'main' into fix/lock-utils-imports-13445229136005844691 2026-02-21 14:29:13 -05:00
thePR0M3TH3AN 5e639f1387 Merge branch 'main' into fix/governance-command-injection-10151244085139343159 2026-02-21 14:28:17 -05:00
thePR0M3TH3AN a08e752b0e Merge branch 'main' into fix/lock-utils-duplication-4209096036628143867 2026-02-21 14:27:37 -05:00
thePR0M3TH3AN 3408e2ea76 Merge pull request #409 from PR0M3TH3AN/testing-improvement-cmd-rollback-5981959177572314725
Add tests for cmdRollback
2026-02-21 14:26:46 -05:00
thePR0M3TH3AN 047a1fd2f8 Merge branch 'main' into fix-torch-lock-commands-3759471574036935483 2026-02-21 14:25:30 -05:00
google-labs-jules[bot]andPR0M3TH3AN c0c5ac5473 fix(torch-lock): re-apply fixes for circular deps and syntax errors
- Moved `withTimeout` implementation to `src/lock-utils.mjs` and exported it correctly.
- Removed duplicate local definitions of `withTimeout`, `mergeRelayList`, and `secureRandom` in `src/lock-ops.mjs` and `src/lock-publisher.mjs`.
- Fixed imports in `src/lock-ops.mjs`, `src/lock-publisher.mjs`, and `src/relay-health.mjs` to use `src/lock-utils.mjs` consistently.
- Updated `test/utils.test.mjs` and `test/utils-async.test.mjs` to fix broken imports and test definitions.
- Verified `npm run lock:complete` and `npm run scheduler:daily` execute correctly.
- Updated `src/todo/TODO_2026-02-20T03-00-00Z.md` to mark verification task as completed.
- Verified `src/relay-health.mjs` does not use `MINUTE_MS` locally, despite mysterious CI error. Confirmed imports are correct.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-21 19:23:48 +00:00
thePR0M3TH3AN 45a666a7ed Merge branch 'main' into fix/security-remove-default-creds-12747623644908748667 2026-02-21 14:17:49 -05:00
thePR0M3TH3AN fb672d380f Merge branch 'main' into fix-torch-lock-commands-3759471574036935483 2026-02-21 14:16:25 -05:00
thePR0M3TH3AN 3f03cfd690 Merge branch 'main' into chore/audit-memory-store-17064585358903407526 2026-02-21 14:15:40 -05:00
thePR0M3TH3AN cff50e54a4 Merge pull request #407 from PR0M3TH3AN/refactor-lock-ops-modules-18356835837586404683
Refactor lock-ops to use new modules
2026-02-21 14:13:48 -05:00
thePR0M3TH3AN 67ebd6a504 Merge branch 'main' into test/upload-validation-15691315589845316357 2026-02-21 14:13:15 -05:00
thePR0M3TH3AN fd634b0319 Merge pull request #404 from PR0M3TH3AN/fix-dashboard-auth-plaintext-8015911861283425351
🔒 Fix Plaintext Password Storage in Dashboard Auth
2026-02-21 14:13:02 -05:00
thePR0M3TH3AN 74c08c721a Merge pull request #415 from PR0M3TH3AN/security/dashboard-rate-limit-6123396415409218177
feat(dashboard): implement rate limiting for basic auth
2026-02-21 14:12:56 -05:00
thePR0M3TH3AN 243291ba93 Merge pull request #405 from PR0M3TH3AN/docs/remove-hallucinated-upload-audit-workflow-10015363657697346579
Remove hallucinated upload audit workflow from perf-agent
2026-02-21 14:12:50 -05:00
thePR0M3TH3AN 54e9e35e83 Merge pull request #418 from PR0M3TH3AN/refactor/memory-coalescing-worker-7175585698335360965
Refactor memory store save logic to use CoalescingWorker
2026-02-21 14:11:54 -05:00