Commit Graph
6 Commits
Author SHA1 Message Date
google-labs-jules[bot]andPR0M3TH3AN fb58408b84 perf: debounce dashboard render on websocket events
Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-24 01:18:28 +00:00
google-labs-jules[bot]andPR0M3TH3AN 6106fd3dea Enable OpenCode agent and add agent website links
- Activated OpenCode agent card in landing page.
- Added OpenCode to dashboard platform colors (using teal).
- Added 'Learn more' links to all agent cards in landing page.
- Updated OpenCode installation prompt in landing page script.
- Added teal color utilities to dashboard/styles.css.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-20 04:18:42 +00:00
google-labs-jules[bot]andPR0M3TH3AN a61079b505 Add Qwen Coder to landing page and platform detection
- Added Qwen Coder CLI to `landing/index.html` agent selector.
- Updated `src/utils.mjs` to detect `QWEN_API_KEY` or `QWEN_SESSION_ID` as 'qwen' platform.
- Updated `dashboard/app.js` to render Qwen tasks with appropriate badge styling.
- Added tests for Qwen platform detection in `test/utils.test.mjs`.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-20 02:42:08 +00:00
google-labs-jules[bot]andPR0M3TH3AN abb4cc4361 feat(dashboard): add support for Goose, Gemini, and Antigravity platforms
- Update `src/utils.mjs` to detect `gemini` and `antigravity` platforms via environment variables.
- Update `dashboard/styles.css` with new color utilities for purple and pink themes.
- Update `dashboard/app.js` to map Goose, Gemini, and Antigravity platforms to distinct badge colors.
- Update `test/utils.test.mjs` to include unit tests for the new platform detection logic.

This ensures all active agent platforms are correctly identified and labeled in the TORCH dashboard.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-19 21:39:32 +00:00
Claude 639ad6877d chore: code quality, CI/CD, and DX improvements
Phase 3 — Code Quality:
- Deduplicate nowUnix() in lock-ops.mjs (import from utils.mjs)
- Promote ESLint no-unused-vars to error, fix all 46 violations
- Remove dead code: unused imports, variables, and catch bindings
- Add /* global marked */ for CDN-loaded library in dashboard

Phase 4 — CI/CD:
- Add Node.js version matrix (22, 23) to CI workflow
- Add npm audit security scan step to CI
- Add innerHTML usage check to CI pipeline
- Enable Dependabot for npm and GitHub Actions dependencies
- Create PR template

Phase 5 — Developer Experience:
- Create .env.example documenting all environment variables
- Expand CONTRIBUTING.md with commit conventions, agent/prompt
  creation guide, architecture overview, and test integrity
- Add system architecture diagram with Mermaid (docs/architecture/)

https://claude.ai/code/session_01GfwUNbgeMgXreFDbsNQMsS
2026-02-19 21:03:30 +00:00
Claude e7ecd2617e fix(security): harden dashboard auth timing, XSS, and CSP
- Fix timingSafeCompare to pad buffers to equal length before comparing,
  closing the content timing side-channel on length mismatch
- Replace innerHTML with textContent for error messages to prevent XSS
- Extract inline script from dashboard/index.html into dashboard/app.js
- Remove 'unsafe-inline' from script-src CSP directive
- Update security test to match new CSP policy

https://claude.ai/code/session_01GfwUNbgeMgXreFDbsNQMsS
2026-02-19 20:53:15 +00:00