Commit649bc9d
chore: stop tracking .agent/ scratch output, gitignore it
chore: stop tracking .agent/ scratch output, gitignore it change.diff, codex.err, and signoff.txt are working artifacts from an agent-harness run (codex.err alone had grown to 2.5MB), not source -- they landed in history with no .gitignore entry to stop it. Removes them from the tree and ignores the directory going forward. Does not rewrite history; the blobs stay in past commits until a deliberate, separately-authorized history rewrite.
4 files changed+6−71649bc9d789cad66a4c56d0980960ea953b545bf6
4 changed files+6−74
Deleted.agent/change.diff+0−74View fileUnifiedSplit
@@ -1,74 +0,0 @@
1diff --git a/STATUS.md b/STATUS.md
2index 29cf2aa..a6f0c0f 100644
3--- a/STATUS.md
4+++ b/STATUS.md
5 inline test/build evidence — not just written.
6 logged to `console.error`. Now sends an in-app notification
7 (`integration_dead` kind) linking back to the webhook's settings page.
8
9+## Production certification (2026-07-17)
10+
11+1. **Full authenticated `doctor.ts` sweep is ALL GREEN** — ran sections
12+ a–e in `--full` mode against `https://gluecron.com` with a real admin
13+ PAT. The sweep found and fixed one real bug in the read-only tool matrix:
14+ `gluecron_pr_status_summary` was called with only `{owner,repo}`, but it
15+ summarizes one specific PR and requires a PR number. The doctor now
16+ resolves a live PR number through `gluecron_list_prs` first and skips
17+ gracefully when no PR exists.
18+2. **Full `agent-journey.ts` write-path certification is GREEN with one
19+ warning** — push, branch, PR, comment, merge, webhook delivery, and
20+ cleanup all passed against production. No AI-review comment appeared on
21+ the test PR within 90 seconds; per the script, this means AI review may
22+ legitimately be disabled or `ANTHROPIC_API_KEY` may be unset. Human
23+ confirmation is still required (see the top open item below).
24+
25 ## Known open items (not closed this session)
26
27+- **TOP PRIORITY — confirm production AI-review configuration** — the
28+ full write-path certification produced its sole WARN because no AI-review
29+ comment appeared within 90 seconds. Check `/admin/env-health` or the
30+ production box's `.env` directly to establish whether AI review is
31+ intentionally disabled or `ANTHROPIC_API_KEY` is unset. The old, now-
32+ archived `ROADMAP.md` called out this exact environment variable as a
33+ blocker back in May; this remains open until a human confirms the live
34+ configuration.
35 - **Offsite backup not armed** — daily Neon dump + weekly restore drill
36 run fine on the VPS, but dumps only live on the box itself
37 (`BACKUP_SCP_TARGET` unset). Gates Cutover Runbook Phase 4.
38 inline test/build evidence — not just written.
39 - **Penetration test** — not started, intentionally on hold pending a
40 signed Rules-of-Engagement / authorization document (attorney-gated,
41 separate from the legal-pages thread above).
42- agent-journey matrix** — only ever run against anonymous endpoints
43- plus the one PAT-driven journey run this session; a systematic
44- authenticated sweep hasn't happened.
45
46 ## Known documentation debt
47
48diff --git a/scripts/doctor.ts b/scripts/doctor.ts
49index d021504..b1fb49f 100644
50--- a/scripts/doctor.ts
51+++ b/scripts/doctor.ts
52 async function sectionMatrix(): Promise<Row[]> {
53 if (!PAT) return [skip("read-only tool matrix", "GLUECRON_PAT not set")];
54 const out: Row[] = [];
55 for (const [tool, args] of Object.entries(READ_MATRIX)) {
56- const [res, ms] = await timed(() => mcpCall(tool, args, PAT));
57+ let probeArgs = args;
58+ if (tool === "gluecron_pr_status_summary") {
59+ const prsRes = await mcpCall("gluecron_list_prs", { owner: "ccantynz", repo: "Gluecron.com", state: "all" }, PAT);
60+ const textPart = (prsRes.json?.result?.content ?? []).find((p: any) => p.type === "text")?.text;
61+ let listed: any;
62+ try { listed = JSON.parse(textPart); } catch { listed = textPart; }
63+ const number = listed?.prs?.[0]?.number;
64+ if (typeof number !== "number") {
65+ out.push(skip(`matrix ${tool}`, "no PRs to summarize"));
66+ continue;
67+ }
68+ probeArgs = { owner: "ccantynz", repo: "Gluecron.com", number };
69+ }
70+ const [res, ms] = await timed(() => mcpCall(tool, probeArgs, PAT));
71 const ok = res.status === 200 && !res.json?.error && !res.json?.result?.isError;
72 out.push(row(`matrix ${tool}`, ok, { status: res.status, durationMs: ms, error: ok ? undefined : JSON.stringify(res.json?.error ?? res.json?.result)?.slice(0, 140) }));
73 }
\ No newline at end of file
Modified.gitignore+6−0View fileUnifiedSplit
@@ -29,3 +29,9 @@ jetbrains-plugin/.gradle/
2929jetbrains-plugin/.idea/
3030jetbrains-plugin/*.iml
3131jetbrains-plugin/*.class
32
33# Agent-harness scratch output (diffs, error logs, signoff files from
34# autonomous agent runs). Working state, not source -- one such log
35# grew to 2.5MB and was committed straight into history before this
36# entry existed.
37.agent/
3238