Blame · Line-by-line history
change.diff
Each line is annotated with the commit that last touched it. Click any SHA to jump to that commit and see the surrounding change.
| 4fc7860 | 1 | diff --git a/STATUS.md b/STATUS.md |
| 2 | index 29cf2aa..a6f0c0f 100644 | |
| 3 | --- a/STATUS.md | |
| 4 | +++ b/STATUS.md | |
| 5 | @@ -56,8 +56,32 @@ inline test/build evidence — not just written. | |
| 6 | logged to `console.error`. Now sends an in-app notification | |
| 7 | (`integration_dead` kind) linking back to the webhook's settings page. | |
| 8 | ||
| 9 | +## Production certification (2026-07-17) | |
| 10 | + | |
| 11 | +1. **Full authenticated `doctor.ts` sweep is ALL GREEN** — ran sections | |
| 12 | + a–e in `--full` mode against `https://gluecron.com` with a real admin | |
| 13 | + PAT. The sweep found and fixed one real bug in the read-only tool matrix: | |
| 14 | + `gluecron_pr_status_summary` was called with only `{owner,repo}`, but it | |
| 15 | + summarizes one specific PR and requires a PR number. The doctor now | |
| 16 | + resolves a live PR number through `gluecron_list_prs` first and skips | |
| 17 | + gracefully when no PR exists. | |
| 18 | +2. **Full `agent-journey.ts` write-path certification is GREEN with one | |
| 19 | + warning** — push, branch, PR, comment, merge, webhook delivery, and | |
| 20 | + cleanup all passed against production. No AI-review comment appeared on | |
| 21 | + the test PR within 90 seconds; per the script, this means AI review may | |
| 22 | + legitimately be disabled or `ANTHROPIC_API_KEY` may be unset. Human | |
| 23 | + confirmation is still required (see the top open item below). | |
| 24 | + | |
| 25 | ## Known open items (not closed this session) | |
| 26 | ||
| 27 | +- **TOP PRIORITY — confirm production AI-review configuration** — the | |
| 28 | + full write-path certification produced its sole WARN because no AI-review | |
| 29 | + comment appeared within 90 seconds. Check `/admin/env-health` or the | |
| 30 | + production box's `.env` directly to establish whether AI review is | |
| 31 | + intentionally disabled or `ANTHROPIC_API_KEY` is unset. The old, now- | |
| 32 | + archived `ROADMAP.md` called out this exact environment variable as a | |
| 33 | + blocker back in May; this remains open until a human confirms the live | |
| 34 | + configuration. | |
| 35 | - **Offsite backup not armed** — daily Neon dump + weekly restore drill | |
| 36 | run fine on the VPS, but dumps only live on the box itself | |
| 37 | (`BACKUP_SCP_TARGET` unset). Gates Cutover Runbook Phase 4. | |
| 38 | @@ -70,10 +94,6 @@ inline test/build evidence — not just written. | |
| 39 | - **Penetration test** — not started, intentionally on hold pending a | |
| 40 | signed Rules-of-Engagement / authorization document (attorney-gated, | |
| 41 | separate from the legal-pages thread above). | |
| 42 | -- **Authenticated `doctor.ts` sections (d/e) and the full PAT-gated | |
| 43 | - agent-journey matrix** — only ever run against anonymous endpoints | |
| 44 | - plus the one PAT-driven journey run this session; a systematic | |
| 45 | - authenticated sweep hasn't happened. | |
| 46 | ||
| 47 | ## Known documentation debt | |
| 48 | ||
| 49 | diff --git a/scripts/doctor.ts b/scripts/doctor.ts | |
| 50 | index d021504..b1fb49f 100644 | |
| 51 | --- a/scripts/doctor.ts | |
| 52 | +++ b/scripts/doctor.ts | |
| 53 | @@ -213,7 +213,20 @@ async function sectionMatrix(): Promise<Row[]> { | |
| 54 | if (!PAT) return [skip("read-only tool matrix", "GLUECRON_PAT not set")]; | |
| 55 | const out: Row[] = []; | |
| 56 | for (const [tool, args] of Object.entries(READ_MATRIX)) { | |
| 57 | - const [res, ms] = await timed(() => mcpCall(tool, args, PAT)); | |
| 58 | + let probeArgs = args; | |
| 59 | + if (tool === "gluecron_pr_status_summary") { | |
| 60 | + const prsRes = await mcpCall("gluecron_list_prs", { owner: "ccantynz", repo: "Gluecron.com", state: "all" }, PAT); | |
| 61 | + const textPart = (prsRes.json?.result?.content ?? []).find((p: any) => p.type === "text")?.text; | |
| 62 | + let listed: any; | |
| 63 | + try { listed = JSON.parse(textPart); } catch { listed = textPart; } | |
| 64 | + const number = listed?.prs?.[0]?.number; | |
| 65 | + if (typeof number !== "number") { | |
| 66 | + out.push(skip(`matrix ${tool}`, "no PRs to summarize")); | |
| 67 | + continue; | |
| 68 | + } | |
| 69 | + probeArgs = { owner: "ccantynz", repo: "Gluecron.com", number }; | |
| 70 | + } | |
| 71 | + const [res, ms] = await timed(() => mcpCall(tool, probeArgs, PAT)); | |
| 72 | const ok = res.status === 200 && !res.json?.error && !res.json?.result?.isError; | |
| 73 | out.push(row(`matrix ${tool}`, ok, { status: res.status, durationMs: ms, error: ok ? undefined : JSON.stringify(res.json?.error ?? res.json?.result)?.slice(0, 140) })); | |
| 74 | } |