Commit Graph

6 Commits

Author SHA1 Message Date
CIAgent f18f507cb3 docs(P00): create phase plans
PLAN.md: M1 decomposed into 5 execution phases (Waves A-E) + final review:
- Phase 1 / Wave A: Foundations (REQ-038, 039, 040) - monorepo, Postgres+RLS,
  audit hash-chain, SecretProvider, Trigger.dev bootstrap
- Phase 2 / Wave B: Identity & RBAC (REQ-001..005) - WorkOS SSO, tenant
  provisioning, RBAC at gateway, invitations, role assignment
- Phase 3 / Wave C: BYOM (REQ-006..009) - endpoint registry, validate-on-save,
  OpenAI-compatible routing shim, REQ-009 reject path
- Phase 4 / Wave D: Relay Agent (REQ-010..013, REQ-026 hook) - modular install
  script, Go binary, WebSocket registration, heartbeat, SSH whitelist hook
- Phase 5 / Wave E: Dashboard surfacing (REQ-014) - status fan-out, green/
  yellow/red, last 100 logs, RLS-scoped target views
- Phase 6 / Final: review + audit + milestone ship (v0.1.0 release)

Includes the 3 mandatory MVP/UX sections: User-Facing Surface (8 dashboard
surfaces), Happy Path (8 BDD steps = M1 demo), UX Acceptance Criteria (9).
Wave parallelism: A first, then B+C+D parallel, then E, then Final.

Tags run on v0.0.x patch line; final phase patch v0.0.7 IS the v0.1 milestone
release. Merge to main at final phase.

---ci---
phase: 0
milestone: v0.1
status: plan
---/ci---
2026-08-24 22:36:50 +00:00
CIAgent 551d4d64af docs(P00): research findings
7 research artifacts for M1 technologies:
- R-001: Trigger.dev bootstrap (runtime wired M1, tasks M3)
- R-002: WorkOS SSO + RBAC mapping + SCIM invitations
- R-003: Postgres RLS (withTenant) + per-tenant audit hash-chain
- R-004: AWS Secrets Manager (prod) + local-encrypted (dev) SecretProvider
- R-005: Go Relay Agent (modular install script, systemd, WebSocket,
         heartbeat, SSH whitelist hook format + enforcement)
- R-006: Vanta evidence collection (M3 only - architectural note)
- R-007: Cross-tenant isolation pen test pattern (M1 gate)

PERSONAS.md: 6 personas for M1 (backend, data, frontend, lead-developer,
security-engineer, go-engineer [Wave D only]). Frameworks + territories
to be re-validated at Wave A start.

---ci---
phase: 0
milestone: v0.1
status: research
---/ci---
2026-08-24 22:35:29 +00:00
CIAgent 7075eae76d docs(P00): clarify architectural decisions
Record 5 PO-approved architectural decisions (all confidence >=0.8):
- D-001: OpenAI-compatible BYOM contract for M1 (pluggable iface for M3)
- D-002: Relay Agent in Go (single static binary for curl|bash)
- D-003: AWS Secrets Manager (prod) + local-encrypted (dev) behind interface
- D-004: Postgres append-only + hash-chain audit for M1 (S3 WORM in M3)
- D-005: Next.js App Router + TypeScript single SPA

No escalations. Pipeline proceeds to RESEARCH.

---ci---
phase: 0
milestone: v0.1
status: clarify
---/ci---
2026-08-24 22:34:13 +00:00
CIAgent 6146e9bc76 docs(init): validate specification
Parse CoreCI Chat v0.1 Engineering Spec v1.1 (Sarah Chen, locked 2026-08-24).
Rewrite placeholder .ciagent/ files with spec-derived content:
- PROJECT.md: vision, M1 scope (17 REQs), constraints, key decisions
- REQUIREMENTS.md: M1 REQs 001-014+038/039/040 with verbatim acceptance
  criteria, M2/M3 deferrals, traceability matrix, out-of-scope
- ARCHITECTURE.md: components, data flow, M1 build-order waves A-E
- steer-v0.1-spec.md: authoritative spec persisted
- CHECKPOINT.json: stage=specify

---ci---
phase: 0
milestone: v0.1
status: specify
---/ci---
2026-08-24 22:33:46 +00:00
CIAgent 2cf16ed091 docs(init): initialize coreci-chat (2 phases)
---ci---
project: default
phase: 0
milestone: v0.1
status: specify
autonomy: full
decisions:
  - id: D-001
    decision: Autonomy level set to "full"
    rationale: User-selected; CI/CD automation without HITL after clarify
    confidence: 1.00
    alternatives: [supervised, guided]
  - id: D-002
    decision: Release forge = gitea (coreci/coreci-chat at https://git.cloudinit.dev)
    rationale: No git origin detected; user chose self-hosted Gitea for releases
    confidence: 1.00
    alternatives: [github, gitlab, local-only]
  - id: D-003
    decision: Milestone version = v0.1 (branch milestone/v0.1-bootstrap)
    rationale: No existing tags; computeMilestoneTag() returns v0.1.0 for a feature/nfr milestone
    confidence: 0.95
    alternatives: []
  - id: D-004
    decision: Phase 0 branch = phase/00-pre-execution (created from milestone)
    rationale: Canonical phase-0 name per branch-strategy reference
    confidence: 1.00
    alternatives: []
  - id: D-005
    decision: Specification parsing deferred to a follow-up session
    rationale: User stated the full spec will arrive separately; init only lands the scaffold
    confidence: 1.00
    alternatives: [expand the literal "Create a folder in ~/coreci-chat" argument into a synthetic spec]
  - id: D-006
    decision: Single-project mode (projects[] empty; files in .ciagent/)
    rationale: Only one project being initialized; no multi-project need indicated
    confidence: 0.90
    alternatives: [register a "coreci-chat" slug in projects[]]
  - id: D-007
    decision: GITEA_TOKEN persisted to .ciagent/.env.secrets (mode 0600); .env* git-ignored
    rationale: Credential collection gate; secrets never written to config.json or committed
    confidence: 1.00
    alternatives: []
---/ci---

Specification: Initialize a CIAgent project scaffold at ~/coreci-chat (full spec to follow in a separate session)
Requirements: [git-native branch hierarchy, .ciagent/config.json, release target, .gitignore, initial commit on phase/00]
Constraints: [branch gate before any file write, GITEA_TOKEN never committed, autonomy=full preset applied verbatim, single-project mode]
Out of scope: [implementation source code, remote git push, milestone release tag, full specification parsing]
2026-08-24 22:20:05 +00:00
CIAgent 26fb8b04d5 chore: initialize repository 2026-08-24 22:15:01 +00:00