mirror of
https://github.com/J3vb/OwnCord.git
synced 2026-09-03 03:50:00 +03:00
J3vbandClaude Opus 5
6a1561fa7d
* chore(security): stop tracking the private security-finding reports
docs/security-findings/ holds detailed reports for defects that are not yet
fixed. The directory was untracked but not ignored, so any 'git add .' would
have published seven unfixed vulnerability traces to a public repository.
Findings are coordinated through private GitHub Security Advisories
(docs/security.md); only opaque identifiers and safe status belong in tracked
plans.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(client): repair the two red P0 unit contracts (G-01, G-02)
G-02: noise-suppression-restart stubbed MediaStream with
vi.fn().mockImplementation(arrow), which is not constructible. Vitest 4 threw
'is not a constructor' at the new MediaStream([inputTrack]) call in
noise-suppression.ts before reaching any assertion. Replaced with a real
class; the OC-0277 assertions are unchanged.
G-01: message-list's OC-0217 guard was inverted, not merely stale. It spied on
AbortSignal.prototype.addEventListener and asserted zero abort registrations,
but the leak it names registered row listeners via
element.addEventListener(..., { signal }) — a path that never calls that
prototype method. Measured: the leak produces 0 registrations (test passes),
while the OC-0286 fix rotates a per-window AbortSignal.any and produces 5
across 5 distinct signals (test fails). The guard passed on the bug and failed
on the fix.
It now captures the signal each window's row listeners register against and
asserts the invariant its name always claimed: one signal per rendered window,
a fresh signal per jump, and every superseded window already aborted with
exactly one live. Verified both directions — green on the fix, and
'expected 1 to be 5' with beginRowRender() reverted to rowSignal = ac.signal.
Client suite: 5257 passed, 0 failed (was 5255 passed, 2 failed).
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* fix(client): make the Playwright suite terminate
The runner finished every test and then never exited, printing no summary — so
the failure read as 'tests never finish' when it was 'process never exits'.
getActiveResourcesInfo() at hang time showed a live ProcessWrap plus several
PipeWrap: the Vite dev server was still running. Playwright's webServer
teardown does not kill it here.
Measured, full suite each time:
npm run dev hangs, tests pass
node node_modules/vite/bin/vite.js hangs, tests pass
reuseExistingServer: false hangs, tests pass
gracefulShutdown SIGTERM/3s hangs, tests pass
npx vite exits, 290 of 293 FAIL
no webServer (pre-started) exits, 293 pass in 33s
npx only appears to fix it: npx exits once Vite is up, Playwright reads that as
the server dying and tears the group down mid-run, so later tests get
ERR_CONNECTION_REFUSED.
globalTeardown now kills the process listening on the dev port, releasing the
runner's handle. The webServer command spawns Vite's entry point directly so
the listening process is Playwright's own child — via 'npm run dev' the npm
process would still hold the handle open. It also reaps servers orphaned by an
interrupted run, which reuseExistingServer would otherwise silently adopt.
An earlier revision used netstat, which is not on PATH in every shell here; the
swallowed ENOENT made the fix look applied while the hang persisted. It now
uses PowerShell on Windows and lsof elsewhere, and warns on failure rather than
failing silently.
npm run test:e2e: exit 0, 293 passed, 37s, reproducible, no orphan listener.
playwright.config.prod.ts carried the same npm-wrapper shape.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* chore(client): align .nvmrc with the Node version CI uses
Three versions were in play, not two: .nvmrc said 20, CI pins 24, and the
machine the audit was measured on runs 26. A baseline measured against .nvmrc
is not the baseline CI produces, which defeats the point of B0.
Scoped to .nvmrc only. The full single-source-of-truth work — package engines,
contributor docs, release — stays in B1 (RL-17 / C-01).
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* docs(plans): add the beta audit set and the B0 baseline
The 2026-08-23 audit set has been sitting untracked: repository-health and
repository-layout audits, beta product requirements, requirement traceability,
the issue register, and the B0-B10 roadmap. They are the plan of record for
beta and belong in the repository.
Adds b0-baseline-2026-08-25.md, which supersedes the roadmap's 'current
evidence snapshot'. Every row is marked measured or carried, so nothing is
inherited silently. It also records three audit claims that did not survive
verification:
- G-01 was an inverted guard, not a stale assertion — it passed on the bug
and failed on the fix.
- The Playwright hang matched none of the three hypotheses; the runner could
not kill its own dev server.
- The golangci-lint toolchain failure is refuted: 19 linters run, 0 issues,
verified with -v to rule out the known zero-linters false-green.
Adds b0-dev-branch-protection.sh, which records the applied dev branch
protection and the reasoning behind each setting.
Security detail stays private: the register carries only opaque SEC-* families
and safe closure criteria, per the roadmap's public/private handling policy.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* chore(graphify): refresh the knowledge graph
Own commit, per CLAUDE.md — the graph payload does not belong in the diff of
the changes that triggered it.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* docs(plans): add the active-plan index and fix a stale status header (G-04)
Planning documents had no recorded state, so a reader could not tell current
guidance from shipped history. docs/plans/README.md now indexes every plan as
active, partially implemented, design-only, or shipped, and names the source of
truth for each concern so a defect count is never read out of a plan.
Status is recorded in the index rather than by moving or rewriting the
historical plans, so links from audits and commit messages keep resolving.
One real stale claim found and fixed: audit-2026-08-19-remediation.md still
read 'in progress 2026-08-19' while its own phase table showed phases 1-6 done
2026-08-20 (merged 03fcb7d5, PR #1396) with only phase 7 pending. The header
had drifted because the table was updated in place and the header was not.
No plan was found claiming '0 open findings'.
Also records the Step 8 staleness pass in the B0 baseline: all 38 open OC
records still resolve to a live file:line at this commit, so none is superseded
by later work. Adjudicating them individually is bughunt-fix work, not B0.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* Update graph output files and manifest with new metadata
- Updated graph.html and graph.json with new binary data.
- Modified manifest.json to reflect changes in file modification times and AST hashes for several documents.
- Added new entry for README.md in the manifest with its corresponding metadata.
* docs(plans): close the Docker and coverage leftovers in the B0 baseline
Docker smoke: measured and passing. Image builds at 50.1 MB and boots on :8443
with TLS; docker-smoke.sh exits 0.
Server coverage: re-measured at 74.6% aggregate, confirming the figure carried
from the audit rather than continuing to inherit it.
Two findings from doing it:
ENV-03 — docker-smoke.sh cannot be run from Git Bash on Windows. MSYS path
conversion rewrites the container-internal /chatserver into
'C:/Program Files/Git/chatserver', so docker exec fails 127 and the script
reports 'container never reported healthy within 30s' — indistinguishable from
a real boot regression. MSYS_NO_PATHCONV=1 makes the same script pass. CI is
Linux and unaffected, but Windows is an official contributor platform (RL-20).
The CI Docker job is gated on main, so it is skipped for any PR targeting dev
— a dev-targeted change cannot get Docker evidence from CI at all.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
* chore(graphify): refresh the knowledge graph
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
126 lines
3.2 KiB
Plaintext
126 lines
3.2 KiB
Plaintext
# Docker secrets
|
|
.env
|
|
Server/.env
|
|
|
|
# Claude Code — local-only by default. The exceptions are committed on purpose:
|
|
# a cloud session clones this repo and sees ONLY tracked files, so the CLAUDE.md
|
|
# files, skills and workflows have to be here or it starts with no instructions.
|
|
# Machine-local state (settings.local.json, locks) stays ignored.
|
|
.claude/*
|
|
!.claude/skills/
|
|
!.claude/workflows/
|
|
!.claude/settings.json
|
|
CLAUDE.local.md
|
|
.mcp.json
|
|
|
|
# GitHub Copilot instructions (internal)
|
|
.github/copilot-instructions.md
|
|
.github/instructions/
|
|
|
|
# Agent worktrees (Mission Control fleet isolation)
|
|
.worktrees/
|
|
|
|
# AI-specific / internal planning docs
|
|
docs/brain/
|
|
docs/CODEMAPS/
|
|
docs/designs/
|
|
docs/research/
|
|
docs/superpowers/
|
|
/skills/
|
|
|
|
# Detailed security reports for findings that are not yet fixed. This repo is
|
|
# public (docs/security.md): reproduction traces for a live defect must never
|
|
# be committed. Findings are coordinated through private GitHub Security
|
|
# Advisories; only opaque identifiers and safe status go in tracked plans.
|
|
docs/security-findings/
|
|
|
|
# Mutation-testing output (npm run test:mutate). Local-only by design: a
|
|
# surviving-mutant report maps exactly which behaviour nothing tests.
|
|
Client/tauri-client/.stryker-tmp/
|
|
Client/tauri-client/reports/
|
|
|
|
# Server runtime artifacts
|
|
Server/chatserver.exe
|
|
Server/chatserver.exe~
|
|
Server/owncord-server.exe
|
|
Server/server.exe
|
|
Server/config.yaml
|
|
Server/data/
|
|
|
|
# Test coverage artifacts
|
|
*.out
|
|
Server/cov.out
|
|
Server/cover.out
|
|
Server/coverage.out
|
|
Server/ws_cover.out
|
|
Server/ws_cov.out
|
|
|
|
# Client build artifacts
|
|
Client/publish/
|
|
Client/publish-single/
|
|
Client/publish-release/
|
|
|
|
# HTML mockups (large design reference files)
|
|
Client/login-mockup.html
|
|
Client/ui-mockup.html
|
|
|
|
# Tauri typegen (auto-generated IPC bindings)
|
|
Client/tauri-client/src/generated/
|
|
.typecache
|
|
|
|
# Node modules
|
|
node_modules/
|
|
|
|
# AI tooling
|
|
.gstack/
|
|
.claude-flow/
|
|
.rust-review-results/
|
|
|
|
# Bug-hunt ledger: shared so contributors can add findings. Only the ledger,
|
|
# its render and its validator are tracked; hunt transcripts, .bak snapshots
|
|
# and debris patches are per-session scratch and stay local.
|
|
.superpowers/*
|
|
!.superpowers/findings-ledger.json
|
|
!.superpowers/FINDINGS.md
|
|
!.superpowers/render-ledger.mjs
|
|
|
|
.claude/worktrees/
|
|
|
|
# Internal dev tools (e.g. tools/livekit-server.exe) are ignored, but the
|
|
# owncord-introspect MCP server is a committed, shared dev tool.
|
|
tools/*
|
|
!tools/mcp-introspect/
|
|
tools/mcp-introspect/node_modules/
|
|
.cache/
|
|
|
|
# Internal dev files (root-level scratch only)
|
|
/SKILL.md
|
|
TODOS.md
|
|
DESIGN.md
|
|
Client/CLIENT-REVIEW.md
|
|
|
|
# Agent tooling state
|
|
.serena/
|
|
|
|
# Client env (holds API keys - never commit)
|
|
Client/tauri-client/.env
|
|
|
|
# Rust review output
|
|
.rust-review-results/
|
|
|
|
# Claude Code worktrees (local scratch, never commit)
|
|
.claude/worktrees/
|
|
|
|
# local server run logs
|
|
server.log
|
|
|
|
# Knowledge graph (graphify). The top-level built graph is tracked so a fresh
|
|
# clone can query it without a rebuild. Every subdirectory stays local: cache/
|
|
# is a per-machine AST build cache, and graphify parks the PREVIOUS graph in a
|
|
# dated YYYY-MM-DD/ backup on each rebuild — 18 MB of stale duplicate that is a
|
|
# local rollback aid, not shared state.
|
|
graphify-out/*/
|
|
|
|
# Transient graphify rebuild-state file.
|
|
graphify-out/.pending_changes
|