Commit graph

148 commits

Author SHA1 Message Date
bradgroux
aa4711b41c docs: add sweep history to DOC-FRESHNESS tracking
- Record 2026-03-25 documentation sweep covering version refs,
  governance docs, CHANGELOG, and examples
- Add Last Sweep table for tracking doc maintenance history
2026-03-25 21:42:34 -05:00
bradgroux
6661cd0b3e docs: update agent task workflow SOP for v4.0
- Remove version tags from section headers
- Add Governance Compliance section covering policy checks,
  decision logging, and output scoring integration
2026-03-25 21:41:47 -05:00
bradgroux
19c2c4f449 docs: add v4.0 governance examples and remove version tags
- Add examples for policy evaluation, drift monitoring, and
  decision audit trail (sections 11-13)
- Remove version tags from section headers (7-10) since features
  are now part of the stable release
- Practical curl examples with realistic payloads
2026-03-25 21:41:19 -05:00
bradgroux
b01285ae2f docs: clean up TESTING_ANALYTICS with dynamic dates
- Replace hardcoded 2026-02-04/05 dates with dynamic shell variables
- Simplify parallelism example output to be date-agnostic
- Remove hardcoded timestamps from example error responses
2026-03-25 21:40:29 -05:00
bradgroux
c1b4711162 docs: add v4.0 governance quick tips to Tips & Tricks
- Add quick reference table for all v4.0 governance features
- Cover policy engine, decision audit, output scoring,
  drift detection, feedback analytics, system health,
  dashboard widgets, and prompt registry
- Remove version number from Workflow Engine header
2026-03-25 21:39:59 -05:00
bradgroux
f906644be7 docs: add v4.0 governance best practices section
- Rename v3.3 section to 'Advanced Features'
- Add 5 new best practices for v4.0 governance features:
  policy definition, drift monitoring, decision logging,
  output scoring, and feedback loops
- Reference correct API endpoints for each practice
2026-03-25 21:39:29 -05:00
bradgroux
e3a9abc2fc docs: update stale v3.x version references to v4.0
- FEATURES.md: update version header from v3.3 to v4.0
- BEST-PRACTICES.md: update section header for v3.3+ features
- WORKFLOW-GUIDE.md: update version and prerequisites to v4.0
- WORKFLOW_ENGINE_ARCHITECTURE.md: remove version from title (living doc)
- SOP-multi-agent-orchestration.md: remove version from section header
2026-03-25 21:39:01 -05:00
Brad Groux
c89c5e5d7e
docs: add v4 governance security audit (#265)
Co-authored-by: bradgroux <brad@digitalmeld.io>
2026-03-23 20:16:41 -05:00
Brad Groux
70c8c06e56
docs: v4.0 documentation update and cleanup (closes #229) (#230)
v4.0 docs update: CHANGELOG, README, FEATURES, API-REFERENCE, 11 new SOPs, MCP docs, version bumps to 4.0.0, docs cleanup. Closes #229.
2026-03-21 12:20:16 -05:00
Brad Groux
66f498fd6d
docs: comprehensive self-hosting guide (reimplements #126) (#226)
Adds docs/guides/SELF_HOST.md covering:
- Prerequisites (Node.js, pnpm)
- Build steps
- Local hosting
- LAN access (HOST=0.0.0.0, CORS, VITE_ALLOWED_HOSTS)
- Tailscale Serve — root path and sub-path (/kanban/) routing
- Reverse proxy (nginx, Caddy) with sub-path examples
- Docker / docker-compose with sub-path build args
- Security (VERITAS_ADMIN_KEY, API keys, TRUST_PROXY, roles)
- Full environment variables reference table
- Troubleshooting (CORS, WebSocket, base path, rate limits, sessions)

Original contribution by @xechehot in PR #126 — the Vite base path
and VITE_ALLOWED_HOSTS config from that PR are already merged into main;
this adds the missing documentation guide.

Co-authored-by: Brad Groux <bradgroux@users.noreply.github.com>
2026-03-21 11:51:49 -05:00
Brad Groux
b297bfdd95
chore: upgrade shadcn/ui components to v4 (#219)
* chore: upgrade shadcn/ui components to v4 CLI compatibility (closes #186)

- Update 16 registry components to v4 API (function components, data-slot, radix-ui unified import)
- Migrate components.json style from new-york to radix-nova with new v4 fields (rtl, menuColor, menuAccent)
- Convert CSS variables from HSL to oklch color format with @theme inline block for Tailwind v4
- Preserve VK custom purple accent (primary/ring) in dark mode: oklch(0.389 0.15 303.5)
- Add new dependencies: radix-ui, shadcn, tw-animate-css, @fontsource-variable/geist
- Add WCAG accessibility rules, reduced-motion and focus-visible in consolidated @layer base
- Update docs/SHADCN-V4.md with v4 migration details and oklch theme reference

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: revert font stack to system-ui/Roboto per review

Removes Geist Variable font and restores the original system font stack
as requested by BradGroux. Also adds missing trailing newline to globals.css.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: francois352 <francois@neurofeedback-luxembourg.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-21 09:58:24 -05:00
Brad Groux
5489fc7d13
docs: clarify Docker NODE_ENV requirements and add quick-start guide (#198)
- Add 'NODE_ENV & Docker' section explaining why NODE_ENV=development breaks
  the UI in Docker (Express is API-only in dev mode, no Vite server in container)
- Add working docker-compose.yml quick-start example with required env vars
- Add table of required/recommended Docker environment variables
- Update NODE_ENV description in env vars table with warning and cross-reference
- Add warning callout in Quick Start section
- Link to issue #197 throughout

Closes #197

Co-authored-by: Brad Groux <bradgroux@users.noreply.github.com>
2026-03-09 12:59:09 -05:00
Francois Altwies
3e5106a605
docs(deploy): add Traefik, sub-path deployment, and TRUST_PROXY guidance (#192)
- Add Reverse Proxy (Traefik) section with Docker labels example
- Add Sub-Path Deployment section covering VITE_BASE_PATH build arg,
  StripPrefix middleware, and config volume mount for persistence
- Add TRUST_PROXY to env var table (was documented inline but missing)
- Add VITE_BASE_PATH to frontend env var table
- Add troubleshooting entry for ERR_ERL_UNEXPECTED_X_FORWARDED_FOR

Based on production deployment experience behind Traefik with a
/kanban/ path prefix where we discovered:
- Config directory (.veritas-kanban/) on overlay filesystem = lost on
  every container rebuild unless mounted as a separate Docker volume
- Missing TRUST_PROXY causes rate limiter to treat all clients as one
- VITE_BASE_PATH needed for frontend to generate correct asset/API URLs

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-09 07:42:33 -05:00
Brad Groux
af838c83e7 docs: document force delete behavior for sprint/managed list tools 2026-03-08 03:05:21 -05:00
Brad Groux
3914ee1a86 docs: evaluate Base UI vs Radix — recommend staying with Radix 2026-03-08 01:58:56 -06:00
Brad Groux
f73de5ac88 chore: upgrade to shadcn/ui CLI v4.0
- Verified shadcn CLI at v4.0.0 with Tailwind v4 support
- Audited all 16 components with --diff (no upstream changes)
- Documented VK design preset (neutral base, purple primary accent)
- Verified dark mode compatibility (class-based, all CSS vars defined)
- Added docs/SHADCN-V4.md with new CLI commands and theme reference
2026-03-08 01:54:58 -06:00
Brad Groux
d32f418c24 docs: comprehensive API-REFERENCE.md — add 15+ missing endpoint groups
- Add Task Verification, Task Comments, Task Subtasks, Task Deliverables,
  Task Archive, Attachments, Agent Permissions, Agent Routing, Shared Resources,
  Doc Freshness, Cost Prediction, Error Learning, Tool Policies, Traces,
  Audit endpoint documentation
- Full request/response examples for each endpoint group
- Endpoint tables with Method/Path/Description for quick scanning
- Auth requirements noted (Audit = admin only)
- Update Table of Contents from 20 to 35 entries
- Version bump to 3.4.0, updated date to 2026-03-08
- Now covers all route files in server/src/routes/
2026-03-08 01:51:12 -06:00
Brad Groux
47e33545e8 docs: comprehensive FEATURES.md update — add missing v3.3 features, reorganize ToC, remove version tags from headers
- Add Task-Agent State Sync, Orchestrator Delegation Enforcement, SSRF protection, WebSocket batching
- Add Enforcement Gate Toast Notifications, Dashboard Enforcement Indicator
- Add Sprint Management CLI commands and MCP tools sections
- Reorganize Table of Contents into logical categories (Core, Development, AI Agents, Workflow Engine, etc.)
- Remove version tags from section headers (keep version context in body text)
- Update intro to position as definitive feature reference with v3.3 version
- Add Acceptance Criteria subsection to Workflow Engine
- Add Telemetry & Metrics standalone section
- Expand API endpoints table with v3.x additions (checkpoint, dependencies, observations, etc.)
- Update last-updated date to 2026-03-07
2026-03-07 21:26:37 -06:00
Brad Groux
c40c5828fb docs: README overhaul — remove history warning, update roadmap with v3.3 shipped + v4.0 planned, polish feature highlights, clean up stale docs
- Remove repo history rewrite warning (long enough since backlog purge)
- Add Shipped in v3.3.x section with 10 features
- Add Planned v4.0 Security & Governance section with 9 features
- Remove stale (NEW — v2.0) tags from feature highlights
- Reorder AI Agents features logically (core → comms → mgmt → workflow → infra)
- Add sprint management to Organization section
- Archive stale root-level one-off reports to docs/archive/
  (REVIEW_108_109.md, TEST_FAILURES_REPORT.md, SQUAD_CHAT_IMPLEMENTATION.md, SECURITY-AUDIT.md)
2026-03-07 21:10:00 -06:00
BradGroux
34b8a8022a docs: add MCP restart, discovery verification, and diagnostics steps 2026-03-04 11:55:18 -06:00
BradGroux
c8eb56b0de docs: add MCP restart, discovery verification, and diagnostics steps 2026-03-04 11:53:28 -06:00
BradGroux
fc418ca56e docs: add MCP restart, discovery verification, and diagnostics steps 2026-03-04 11:52:14 -06:00
BradGroux
0ed0064d85 docs: add canonical API Reference (docs/API-REFERENCE.md)
- Comprehensive endpoint catalog: tasks, time tracking, observations,
  analytics, config, settings, hooks, chat/squad, agent status, auth,
  telemetry, health, WebSocket
- Auth methods (Bearer, X-API-Key, WS query param), roles, permissions
- Error model and status codes
- Common workflows: agent task lifecycle, polling, blockers, webhooks
- Versioning/deprecation guidance and rate limits
- Linked from README docs map and GETTING-STARTED What's Next section
2026-03-02 01:25:25 -06:00
BradGroux
478a37f975 docs: add comprehensive MCP server documentation
- Create docs/mcp/README.md with architecture, quickstart, full 26-tool
  catalog with examples, security model, troubleshooting, and FAQ
- Update root README: condense MCP section, add link to dedicated docs
- Add MCP docs to Documentation Map in root README
- Add changelog entry under [Unreleased]
2026-03-02 01:13:43 -06:00
BradGroux
91bf24a45e docs: audit and update documentation for v3.3.3 accuracy
- README: fix tech stack versions (Express 5.2, Tailwind 4.2, Vite 7.3)
- SECURITY-AUDIT: update audit date, fix override versions, add minimatch/qs
- DOC-FRESHNESS: update freshness header from v2.0.0 to v3.3.3
- ANALYTICS: remove 3 broken links to deleted internal docs
- index.html: fix Vite version reference
- Add docs audit summary (DOCS-AUDIT-2026-03-02.md)
2026-03-02 01:00:07 -06:00
Brad Groux
7347e8632c Remove n8n docs with internal ops URLs 2026-02-21 18:57:31 -06:00
Brad Groux
c2200d2aa7 Remove internal lessons/incident docs from public repo 2026-02-21 18:55:24 -06:00
Brad Groux
8599249ce7 Remove internal docs directory from public repo 2026-02-21 18:55:12 -06:00
Brad Groux
7a397705a6 Remove internal bugfix docs from public repo 2026-02-21 18:54:57 -06:00
Brad Groux
8c94cb8caf Remove internal Coolify docs from public repo 2026-02-21 18:54:21 -06:00
V.K. Watson
50dfff84ef revert: restore port 3001 across codebase, keep Express 5 path fix
Reverts port change from 1b7a9fe. OpenClaw gateway will move off 3001 instead.
2026-02-20 21:12:49 -06:00
V.K. Watson
1b7a9feb03 fix: update default API port from 3001 to 3002 across codebase
Avoids conflict with OpenClaw gateway on port 3001.
Updated: server config, docs, README, WebSocket hook.
2026-02-20 21:11:40 -06:00
Brad Groux
0c48d64324 docs: add review gates section to cross-model code review SOP 2026-02-20 14:39:32 -06:00
V.K. Watson
9657e731b6
fix: guard updatedTask null check in task routes
also clean up observations section build warning
2026-02-20 01:51:45 -06:00
TylonHH
76ba0ef8fa
fix: improve LAN dev access for CORS and Vite hosts (#129) 2026-02-19 18:05:21 -06:00
Brad Groux
97181e678d feat: v3.3.0 — Task Dependencies, Crash Recovery, Observational Memory, Agent Filter
## New Features (4x10 cross-model verified)

### #122 — Task Dependencies Graph
- Bidirectional dependency model (depends_on/blocks)
- DFS cycle detection traversing both directions
- Recursive dependency graph API
- Batch-loaded traversal (eliminated N+1 queries)
- Zod validation on dependency routes
- Full keyboard + ARIA accessibility

### #123 — Crash-Recovery Checkpointing
- Save/resume/clear API for sub-agent state persistence
- Secret sanitization (20+ key patterns + regex value detection)
- 1MB size limit, 24h expiry, resume counter
- Array sanitization (nested objects + primitive strings)
- NaN timestamp handling
- ARIA-accessible checkpoint UI

### #124 — Observational Memory
- CRUD observations per task (decision/blocker/insight/context)
- Importance scoring (1-10) with paginated full-text search
- XSS prevention via sanitizeCommentText()
- ARIA-accessible range slider + decorative icon handling

### #125 — Agent Filter
- GET /api/tasks?agent=name query parameter
- Input sanitized (trim + 100 char cap)
- JSDoc/OpenAPI documented

All features scored 10/10 across security, reliability, performance,
and accessibility. Cross-model verified (Sonnet authored, Codex reviewed).
2026-02-14 23:48:49 -06:00
Brad Groux
3a7d9fac89 docs: tighten PRD summary in FEATURES.md + update CHANGELOG 2026-02-12 05:36:30 -06:00
Brad Groux
6f0183e93b docs: add bugfix report for 17K hours anomaly
Complete postmortem with root cause analysis and prevention measures
2026-02-12 05:03:14 -06:00
Brad Groux
0b9e6c7a87 docs: enhance PRD-driven development guide for dual audience
- Added explicit audience callouts (👤 humans, 🤖 AI agents)
- Human setup section: prerequisites, step-by-step template creation, testing
- AI execution workflow: complete loop with API calls, error handling, telemetry
- Agent execution examples with bash/curl commands at every step
- Configuration tips: enforcement gates, progress files, retry policies
- Troubleshooting section for common issues
- API reference summary table for quick lookup
- Expanded from 17KB to 28KB with actionable procedures for both audiences
2026-02-12 04:33:37 -06:00
Brad Groux
6c29fe1efe docs: add PRD-driven autonomous development
- Created dedicated guide at docs/features/prd-driven-development.md (17KB)
- Added concise summary in FEATURES.md with link to full guide
- Reduced FEATURES.md by 506 lines while preserving all content
- Matches existing features/ directory structure and formatting
- Includes workflow steps, OAuth2 example, configuration tips, when to use/not use
2026-02-12 04:30:42 -06:00
Brad Groux
5e2b0fb2f4 docs: verify and update documentation for v3.2.0
- Added Markdown Editor feature to FEATURES.md (rich editing toolbar, live preview, keyboard shortcuts)
- Added Shared Resources Registry feature to FEATURES.md (reusable resources, full CRUD API, Settings tab)
- Updated Documentation Freshness section in FEATURES.md with v3.2.0 details (freshness scores, alerts, Settings tab)
- Added hotfixes to CHANGELOG.md v3.2.0 entry (dark mode Lessons Learned fix, plain text card previews, jwt-rotation test fix)

All v3.2.0 features now documented. Verified:
- Version references appropriate (no outdated v2.x claims)
- SOPs (SOP-shared-resources.md, SOP-documentation-freshness.md, DOC-FRESHNESS.md) accurate
- GETTING-STARTED.md references shared resources and doc freshness correctly
- DEPLOYMENT.md Docker auth persistence fix documented (v2.1.3)
- CLI-GUIDE.md complete
- API-WORKFLOWS.md (Workflow Engine) separate from general API docs, no updates needed
2026-02-11 13:20:37 -06:00
Brad Groux
4aef2f20ff
fix: persist auth/config state to Docker volume (#116) (#117)
* style: apply prettier formatting to affected service files

* fix: persist auth/config state to Docker volume (#116)

Route runtime state to getRuntimeDir() so Docker volume paths are honored.

Add one-time migration copies for legacy .veritas-kanban files (security.json, agent registry, lifecycle hooks, error analyses, agent permissions) and document recovery steps in deployment docs.

---------

Co-authored-by: Brad Groux <bradgroux@Brads-Mac-mini.local>
2026-02-11 09:24:10 -06:00
Brad Groux
af6d72f426 docs(enforcement): comprehensive documentation for all 6 gates (#115)
- Updated docs/enforcement.md with squadChat and orchestratorDelegation gates
- Added 'For AI Agents' section with pre-flight checks, 400 error handling, and polling optimization
- Added error code reference (REVIEW_GATE_FAILED, CLOSING_COMMENT_REQUIRED, etc.)
- Added practical examples of what happens when agents violate enforcement gates
- Updated README.md with Enforcement Gates section in Feature Highlights
- Updated CHANGELOG.md with enforcement feature entry for next release
- Updated SOP-agent-task-workflow.md with enforcement gates awareness section
- All docs now reference both human operators and AI agents as primary audiences
2026-02-10 08:09:21 -06:00
Brad Groux
eead46f98e fix(enforcement): correct gate logic, add tests and docs (#115) 2026-02-10 08:01:23 -06:00
Brad Groux
bf644741b7 fix: exclude new v3.0 docs with {{ }} syntax from Jekyll build
FEATURES.md, WORKFLOW-GUIDE.md, and internal/ all contain workflow YAML
examples with Liquid-conflicting template syntax. Updated _config.yml to
exclude them from GitHub Pages build.
2026-02-09 19:50:30 -06:00
Brad Groux
7f5745195c chore: bump version to v3.0.0
Workflow engine release — 8 issues (#107-#114), 4 phases, ~19,000 lines.
Full CHANGELOG entry in CHANGELOG.md.
2026-02-09 19:48:25 -06:00
Brad Groux
5d0c065bcc docs: Add comprehensive v3.0 workflow engine documentation
- WORKFLOW-GUIDE.md: User-facing guide with quick start, YAML schema,
  step types (agent/loop/gate/parallel), tool policies, session
  management, dashboard, example workflows, and troubleshooting
- API-WORKFLOWS.md: Complete API reference with all endpoints,
  request/response examples, TypeScript interfaces, WebSocket events,
  and error responses

Both documents are production-ready and comprehensive.
2026-02-09 19:38:51 -06:00
Brad Groux
bb69f10e0a docs: v3.0 documentation — README, CHANGELOG, FEATURES updates
Updates:
- README.md: Updated version badge to 3.0.0, added Workflow Engine section, updated architecture diagram
- CHANGELOG.md: Added comprehensive v3.0.0 entry (200+ lines) covering all phases, features, endpoints
- docs/FEATURES.md: Added comprehensive Workflow Engine section (200+ lines) with step types, API table, security, performance
- Organized docs/internal/: Moved 19 implementation and review files, added README.md

Workflow Engine v3.0 deliverables:
- Phase 1: Core engine (YAML, CRUD API, sequential execution) — ~7,091 lines
- Phase 2: Run state management, progress files, tool policies, sessions — ~1,409 lines
- Phase 3: Frontend + WebSocket refactor — ~3,069 lines
- Phase 4: Loop/gate/parallel steps, enhanced acceptance criteria — ~2,255 lines
- Dashboard: Monitoring & health metrics — ~2,050 lines
- Policies & Sessions: Tool policies + session isolation — ~1,200 lines
Total: ~14,079 lines shipped
2026-02-09 19:38:13 -06:00
Brad Groux
0240c3dbe8 feat: merge tool policies + fresh sessions (#110, #111)
Delivers:
- Role-based tool policies: 5 default roles (planner, developer, reviewer, tester, deployer)
- Full CRUD API for custom role policies
- Fresh session management per workflow step (minimal/full/custom context)
- Session cleanup modes (delete/keep)
- Settings UI for tool policy management

Merge conflict resolved: kept Phase 4 enhanced validateCriterion (regex, JSON path, duration checks)

Reviews: TARS (Sonnet) 10/10/10/10 — fixed async race condition + cache bug
2026-02-09 19:29:48 -06:00
Brad Groux
c609dc3feb feat: merge workflow dashboard (#114)
Delivers:
- Workflow monitoring dashboard with summary cards, active runs, history
- Stats API endpoints (/runs/active, /runs/stats with period filtering)
- Real-time WebSocket updates with polling fallback
- Per-workflow health metrics (success rate, avg duration)

Reviews: TARS (Sonnet) 10/10/10/10 — fixed 12 issues
2026-02-09 19:29:27 -06:00