Pre-launch — Gluecron is in final validation. Public signups and git hosting for non-owner users open after launch review.
ccantynz/Gluecron.com
Commit4fc7860

Initial commit

Test User committed on July 17, 2026Parent: f0d13f9
9 files changed+119−14554fc786022af03585ca051ffa8c007dfb4c9498da
9 changed files+121−1455
Added.agent/change.diff+74−0View fileUnifiedSplit
1diff --git a/STATUS.md b/STATUS.md
2index 29cf2aa..a6f0c0f 100644
3--- a/STATUS.md
4+++ b/STATUS.md
5@@ -56,8 +56,32 @@ inline test/build evidence — not just written.
6 logged to `console.error`. Now sends an in-app notification
7 (`integration_dead` kind) linking back to the webhook's settings page.
8
9+## Production certification (2026-07-17)
10+
11+1. **Full authenticated `doctor.ts` sweep is ALL GREEN** — ran sections
12+ a–e in `--full` mode against `https://gluecron.com` with a real admin
13+ PAT. The sweep found and fixed one real bug in the read-only tool matrix:
14+ `gluecron_pr_status_summary` was called with only `{owner,repo}`, but it
15+ summarizes one specific PR and requires a PR number. The doctor now
16+ resolves a live PR number through `gluecron_list_prs` first and skips
17+ gracefully when no PR exists.
18+2. **Full `agent-journey.ts` write-path certification is GREEN with one
19+ warning** — push, branch, PR, comment, merge, webhook delivery, and
20+ cleanup all passed against production. No AI-review comment appeared on
21+ the test PR within 90 seconds; per the script, this means AI review may
22+ legitimately be disabled or `ANTHROPIC_API_KEY` may be unset. Human
23+ confirmation is still required (see the top open item below).
24+
25 ## Known open items (not closed this session)
26
27+- **TOP PRIORITY — confirm production AI-review configuration** — the
28+ full write-path certification produced its sole WARN because no AI-review
29+ comment appeared within 90 seconds. Check `/admin/env-health` or the
30+ production box's `.env` directly to establish whether AI review is
31+ intentionally disabled or `ANTHROPIC_API_KEY` is unset. The old, now-
32+ archived `ROADMAP.md` called out this exact environment variable as a
33+ blocker back in May; this remains open until a human confirms the live
34+ configuration.
35 - **Offsite backup not armed** — daily Neon dump + weekly restore drill
36 run fine on the VPS, but dumps only live on the box itself
37 (`BACKUP_SCP_TARGET` unset). Gates Cutover Runbook Phase 4.
38@@ -70,10 +94,6 @@ inline test/build evidence — not just written.
39 - **Penetration test** — not started, intentionally on hold pending a
40 signed Rules-of-Engagement / authorization document (attorney-gated,
41 separate from the legal-pages thread above).
42-- **Authenticated `doctor.ts` sections (d/e) and the full PAT-gated
43- agent-journey matrix** — only ever run against anonymous endpoints
44- plus the one PAT-driven journey run this session; a systematic
45- authenticated sweep hasn't happened.
46
47 ## Known documentation debt
48
49diff --git a/scripts/doctor.ts b/scripts/doctor.ts
50index d021504..b1fb49f 100644
51--- a/scripts/doctor.ts
52+++ b/scripts/doctor.ts
53@@ -213,7 +213,20 @@ async function sectionMatrix(): Promise<Row[]> {
54 if (!PAT) return [skip("read-only tool matrix", "GLUECRON_PAT not set")];
55 const out: Row[] = [];
56 for (const [tool, args] of Object.entries(READ_MATRIX)) {
57- const [res, ms] = await timed(() => mcpCall(tool, args, PAT));
58+ let probeArgs = args;
59+ if (tool === "gluecron_pr_status_summary") {
60+ const prsRes = await mcpCall("gluecron_list_prs", { owner: "ccantynz", repo: "Gluecron.com", state: "all" }, PAT);
61+ const textPart = (prsRes.json?.result?.content ?? []).find((p: any) => p.type === "text")?.text;
62+ let listed: any;
63+ try { listed = JSON.parse(textPart); } catch { listed = textPart; }
64+ const number = listed?.prs?.[0]?.number;
65+ if (typeof number !== "number") {
66+ out.push(skip(`matrix ${tool}`, "no PRs to summarize"));
67+ continue;
68+ }
69+ probeArgs = { owner: "ccantynz", repo: "Gluecron.com", number };
70+ }
71+ const [res, ms] = await timed(() => mcpCall(tool, probeArgs, PAT));
72 const ok = res.status === 200 && !res.json?.error && !res.json?.result?.isError;
73 out.push(row(`matrix ${tool}`, ok, { status: res.status, durationMs: ms, error: ok ? undefined : JSON.stringify(res.json?.error ?? res.json?.result)?.slice(0, 140) }));
74 }
\ No newline at end of file
Added.agent/codex.err+0−0View fileUnifiedSplit
Binary file not shown.
Added.agent/signoff.txt+0−0View fileUnifiedSplit
Binary file not shown.
ModifiedSTATUS.md+24−4View fileUnifiedSplit
5656 logged to `console.error`. Now sends an in-app notification
5757 (`integration_dead` kind) linking back to the webhook's settings page.
5858
59## Production certification (2026-07-17)
60
611. **Full authenticated `doctor.ts` sweep is ALL GREEN** — ran sections
62 a–e in `--full` mode against `https://gluecron.com` with a real admin
63 PAT. The sweep found and fixed one real bug in the read-only tool matrix:
64 `gluecron_pr_status_summary` was called with only `{owner,repo}`, but it
65 summarizes one specific PR and requires a PR number. The doctor now
66 resolves a live PR number through `gluecron_list_prs` first and skips
67 gracefully when no PR exists.
682. **Full `agent-journey.ts` write-path certification is GREEN with one
69 warning** — push, branch, PR, comment, merge, webhook delivery, and
70 cleanup all passed against production. No AI-review comment appeared on
71 the test PR within 90 seconds; per the script, this means AI review may
72 legitimately be disabled or `ANTHROPIC_API_KEY` may be unset. Human
73 confirmation is still required (see the top open item below).
74
5975## Known open items (not closed this session)
6076
77- **TOP PRIORITY — confirm production AI-review configuration** — the
78 full write-path certification produced its sole WARN because no AI-review
79 comment appeared within 90 seconds. Check `/admin/env-health` or the
80 production box's `.env` directly to establish whether AI review is
81 intentionally disabled or `ANTHROPIC_API_KEY` is unset. The old, now-
82 archived `ROADMAP.md` called out this exact environment variable as a
83 blocker back in May; this remains open until a human confirms the live
84 configuration.
6185- **Offsite backup not armed** — daily Neon dump + weekly restore drill
6286 run fine on the VPS, but dumps only live on the box itself
6387 (`BACKUP_SCP_TARGET` unset). Gates Cutover Runbook Phase 4.
7094- **Penetration test** — not started, intentionally on hold pending a
7195 signed Rules-of-Engagement / authorization document (attorney-gated,
7296 separate from the legal-pages thread above).
73- **Authenticated `doctor.ts` sections (d/e) and the full PAT-gated
74 agent-journey matrix** — only ever run against anonymous endpoints
75 plus the one PAT-driven journey run this session; a systematic
76 authenticated sweep hasn't happened.
7797
7898## Known documentation debt
7999
Modifiedscripts/doctor.ts+14−1View fileUnifiedSplit
213213 if (!PAT) return [skip("read-only tool matrix", "GLUECRON_PAT not set")];
214214 const out: Row[] = [];
215215 for (const [tool, args] of Object.entries(READ_MATRIX)) {
216 const [res, ms] = await timed(() => mcpCall(tool, args, PAT));
216 let probeArgs = args;
217 if (tool === "gluecron_pr_status_summary") {
218 const prsRes = await mcpCall("gluecron_list_prs", { owner: "ccantynz", repo: "Gluecron.com", state: "all" }, PAT);
219 const textPart = (prsRes.json?.result?.content ?? []).find((p: any) => p.type === "text")?.text;
220 let listed: any;
221 try { listed = JSON.parse(textPart); } catch { listed = textPart; }
222 const number = listed?.prs?.[0]?.number;
223 if (typeof number !== "number") {
224 out.push(skip(`matrix ${tool}`, "no PRs to summarize"));
225 continue;
226 }
227 probeArgs = { owner: "ccantynz", repo: "Gluecron.com", number };
228 }
229 const [res, ms] = await timed(() => mcpCall(tool, probeArgs, PAT));
217230 const ok = res.status === 200 && !res.json?.error && !res.json?.result?.isError;
218231 out.push(row(`matrix ${tool}`, ok, { status: res.status, durationMs: ms, error: ok ? undefined : JSON.stringify(res.json?.error ?? res.json?.result)?.slice(0, 140) }));
219232 }
Modifiedsrc/views/landing-pro.tsx+2−2View fileUnifiedSplit
4242
4343// ─── inline SVG icon helper ────────────────────────────────────────
4444
45function icon(paths: string, color = "#4353c9", size = 20) {
45function icon(paths: string, color = "#0891b2", size = 20) {
4646 return `<svg width="${size}" height="${size}" viewBox="0 0 24 24" fill="none" stroke="${color}" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">${paths}</svg>`;
4747}
4848
947947const css = `
948948/* ── tokens ── */
949949:root{
950 --lp-brand:#4353c9;--lp-brand-h:#3848b6;
950 --lp-brand:#0891b2;--lp-brand-h:#0a7288;
951951 --lp-bg:#ffffff;--lp-soft:#fafafb;
952952 --lp-ink:#0a0b0d;--lp-ink-2:#3a3d45;--lp-muted:#6b7280;
953953 --lp-border:rgba(0,0,0,.08);
Deletedsrc/views/landing-v2.tsx+0−1447View fileUnifiedSplit
Large file (1,447 lines). Load full file
Modifiedsrc/views/layout.tsx+3−0View fileUnifiedSplit
31563156 .badge-open { background: rgba(52,211,153,0.10); color: var(--green); border: 1px solid rgba(52,211,153,0.35); }
31573157 .badge-closed { background: rgba(154,168,239,0.10); color: var(--text-link); border: 1px solid rgba(154,168,239,0.35); }
31583158 .badge-merged { background: rgba(91,110,232,0.10); color: var(--accent); border: 1px solid rgba(91,110,232,0.35); }
3159 .badge-live { background: #0891b2; color: #fff; border: 1px solid #0891b2; }
3160 .badge-soon { background: transparent; color: #6b7280; border: 1px solid #d1d5db; }
3161 .badge-preview { background: transparent; color: #0891b2; border: 1px dashed rgba(8,145,178,0.45); }
31593162 .state-merged { color: var(--accent); }
31603163 .ai-review { border-color: var(--accent); box-shadow: 0 0 0 1px rgba(91,110,232,0.3); }
31613164
Modifiedsrc/views/ui.tsx+4−1View fileUnifiedSplit
232232
233233export const Badge: FC<
234234 PropsWithChildren<{
235 variant?: "default" | "open" | "closed" | "merged" | "success" | "danger" | "warning";
235 variant?: "default" | "open" | "closed" | "merged" | "success" | "danger" | "warning" | "live" | "soon" | "preview";
236236 style?: string;
237237 }>
238238> = ({ children, variant = "default", style }) => {
243243 variant === "success" ? "badge-success" :
244244 variant === "danger" ? "badge-danger" :
245245 variant === "warning" ? "badge-warning" :
246 variant === "live" ? "badge-live" :
247 variant === "soon" ? "badge-soon" :
248 variant === "preview" ? "badge-preview" :
246249 "badge";
247250 return <span class={`issue-badge ${cls}`} style={style}>{children}</span>;
248251};
249252