2025-03-02 - 2026-03-02
Overview
4 Releases published by 1 user
Published
v0.0.21
Published
v0.20.0
MS20 — Site Stabilization
Published
v0.0.15
v0.0.15 — Dashboard Shell & Design System
Published
v0.0.2
231 Pull requests merged by 1 user
Merged
#655 fix(ci): use node:24-slim (glibc) instead of Alpine (musl)
Merged
#654 fix(ci): copy .npmrc before pnpm install in all Dockerfiles
Merged
#653 fix: matrix native binary + Dockerfile audit
Merged
#652 ci: enable Kaniko layer caching
Merged
#651 fix(ci): Kaniko for base image build
Merged
#649 feat: custom node base image
Merged
#648 ci: pnpm store cache
Merged
#647 fix(api): activity interceptor tests
Merged
#645 fix(web): kanban add-task tests
Merged
#644 feat: wire chat to backend
Merged
#643 feat: compact usage widget in header
Merged
#642 feat: compact usage widget in header
Merged
#641 fix(api): security hardening — helmet + auth rate limiting
Merged
#640 fix: attach domain to project
Merged
#638 feat: inline add-task in Kanban
Merged
#637 fix: Logs page — activity_logs, optional workspaceId, autoRefresh on
Merged
#635 fix: GET workspace members endpoint
Merged
#633 test(glm47): workspace stats endpoint
Merged
#634 fix(web): CI lint failures from PR #632
Merged
#632 fix: tag creation in File Manager
Merged
#631 fix(api): remove noisy CSRF guard debug log
Merged
#630 fix(api): value imports for DTO classes in controllers
Merged
#629 fix: add SYSTEM_ADMIN_IDS env var
Merged
#628 fix(api): use TRUSTED_ORIGINS for socket.io gateway CORS
Merged
#627 feat(web): add project detail page
Merged
#626 fix(web): correct Add Provider form to match fleet-settings DTO
Merged
#625 fix(api): MS22 Phase 1 post-coding audit
Merged
#624 fix(api): widget throttling and orchestrator endpoints
Merged
#623 fix(web): correct Add Provider form DTO field mapping
Merged
#622 fix(api): skip CSRF for Bearer-authenticated API clients
Merged
#621 fix(api): add AuthModule to FleetSettingsModule and ChatProxyModule
Merged
#620 fix(api): add ConfigModule to ContainerLifecycleModule imports
Merged
#619 fix(deploy): add MOSAIC_SECRET_KEY + docker socket to api service (MS22)
Merged
#618 chore(orchestrator): MS22 Phase 1 complete — all 11 tasks done
Merged
#617 feat(web): fleet settings UI (MS22-P1h)
Merged
#616 feat(web): onboarding wizard (MS22-P1f)
Merged
#615 feat(api): chat proxy (MS22-P1i)
Merged
#614 feat(api): idle container reaper (MS22-P1k)
Merged
#613 feat(docker): core compose + entrypoint (MS22-P1j)
Merged
#612 feat(api): onboarding API (MS22-P1e)
Merged
#611 feat(api): fleet settings API (MS22-P1g)
Merged
#610 feat(api): ContainerLifecycleService (MS22-P1d)
Merged
#609 feat(api): internal agent config endpoint (MS22-P1c)
Merged
#608 chore(orchestrator): add MS22 PRD, mark P1a+P1b done
Merged
#607 feat(api): agent fleet DB schema + migration (MS22-P1a)
Merged
#606 feat(api): CryptoService for API key encryption (MS22-P1b)
Merged
#605 chore(orchestrator): MS22 Phase 1 task breakdown
Merged
#604 docs(design): MS22 DB-centric agent fleet architecture
Merged
#602 chore(orchestrator): MS21 complete — UI-001-QA and TEST-004 done
Merged
#599 fix(web): QA fixes on users settings page (MS21-UI-001-QA)
Merged
#597 chore(orchestrator): sync TASKS.md — mark MS21 completed tasks as done
Merged
#596 chore(orchestrator): mark MS22 Phase 0 complete
Merged
#595 feat(web): add teams page and RBAC navigation/route gating (MS21-UI-005, RBAC-001, RBAC-002)
Merged
#594 test(api): integration tests for MS22 knowledge layer modules (MS22-TEST-001)
Merged
#593 feat: add OpenClaw session log ingestion script (MS22-INGEST-001)
Merged
#592 feat(web): add user edit/invite dialogs and workspace member management (MS21-UI-002, MS21-UI-004)
Merged
#591 feat(api): add assigned_agent to Task model (MS22-DB-003, MS22-API-003)
Merged
#590 chore(orchestrator): add MS22 Phase 0 tasks to TASKS.md
Merged
#589 fix: bump openbao 2.5.0→2.5.1 (CVE-2026-24051 otel/sdk PATH hijack)
Merged
#588 ci: unify pipelines — single install, ~50% faster CI
Merged
#587 feat(api): add conversation archive with vector search (MS22-DB-004, MS22-API-004)
Merged
#586 feat(api): add agent memory module (MS22-DB-002, MS22-API-002)
Merged
#585 feat(api): add findings module with vector search (MS22-DB-001, MS22-API-001)
Merged
#583 chore: update TASKS.md — phase 5 complete, VER-001 in-progress
Merged
#582 feat(api): invalidate sessions on user deactivation (MS21-AUTH-004)
Merged
#581 test(web): add API client tests for admin, workspaces, teams (MS21-TEST-004)
Merged
#580 feat(web): RBAC access guard on users settings page (MS21-RBAC-002/003/004)
Merged
#579 feat(web): gate settings nav by workspace role (MS21-RBAC-001)
Merged
#578 feat(web): add user edit dialog to admin users page (MS21-UI-002)
Merged
#577 feat(web): wire workspace member management UI (MS21-UI-004)
Merged
#576 feat(web): add teams settings page (MS21-UI-005)
Merged
#575 chore(orchestrator): mark UI-001 UI-003 done, add UI-001-QA
Merged
#573 feat(web): add admin users settings page (MS21-UI-001)
Merged
#574 feat(web): wire workspaces settings page to real API (MS21-UI-003)
Merged
#572 chore(orchestrator): Fix TASKS.md schema + correct TEST-003/MIG-004 status
Merged
#567 feat(api): add admin bulk import endpoints (MS21-MIG-004)
Merged
#566 test(scripts): add migrate-brain unit tests (MS21-TEST-003)
Merged
#565 chore: update TASKS.md — phases 1-3 complete, CI confirmed green
Merged
#564 feat(api): add team management module with CRUD endpoints
Merged
#562 fix(api): increase flaky test timeouts for CI
Merged
#527 ci: enable turborepo remote cache for all Node.js pipelines
Merged
#559 feat(api): add break-glass local authentication module
Merged
#556 feat(api): add workspace member management endpoints
Merged
#555 feat(api): add AdminModule with user and workspace management endpoints
Merged
#554 feat(scripts): add jarvis-brain data migration script
Merged
#553 feat(api): add MS21 user fields for admin, local auth, and invitations
Merged
#552 chore: bootstrap MS21 Multi-Tenant RBAC Data Migration mission
Merged
#551 fix(api,web): separate workspace context from auth session
Merged
#550 docs: close MS20 Site Stabilization mission
Merged
#549 fix(api): use getTrustedOrigins() for WebSocket CORS
Merged
#548 fix(web): update useWebSocket test for withCredentials
Merged
#547 fix(web,api): fix WebSocket authentication for chat real-time connection
Merged
#545 feat(web): implement credential management UI
Merged
#544 fix(web): convert favicon.ico to RGBA format for Turbopack
Merged
#543 chore(orchestrator): update MS20 task tracking for S3
Merged
#542 fix(web,api): fix orchestrator proxy 502 connectivity
Merged
#540 fix(web): fix personalities page dark mode theming and wire to API
Merged
#541 fix(web): add favicon.ico
Merged
#539 feat(api): add PATCH endpoint and fix preferences API paths
Merged
#538 feat(web): add dedicated /terminal page route
Merged
#537 feat(api): implement personalities CRUD API
Merged
#536 fix(web): add workspace context to domain and project creation
Merged
#535 chore(orchestrator): bootstrap MS20 Site Stabilization mission
Merged
#533 fix(api): add sort, search, visibility to knowledge entry query DTO
Merged
#532 fix(api,web): add workspace context to widgets and auto-detect workspace ID
Merged
#531 fix(api,web): resolve RLS context SQL error, workspace guard crash, and projects response unwrapping
Merged
#530 fix(web): resolve dashboard widget errors and deployment config
Merged
#529 fix(api): add debian-openssl-3.0.x to Prisma binaryTargets
Merged
#528 fix(security): bump minimatch override to >=10.2.3
Merged
#526 fix: enforce alpha versioning (0.0.x), delete erroneous 0.1.x releases
Merged
#525 fix(api): lazy-load node-pty to prevent API crash on missing native binary
Merged
#524 fix(api): add build tools for node-pty native compilation in Docker
Merged
#523 docs: close out MS19 Chat & Terminal System mission
Merged
#522 feat(web): add agent output terminal tabs for orchestrator sessions
Merged
#521 feat(web): add orchestrator command system in chat interface
Merged
#520 feat(web): implement multi-session terminal tab management
Merged
#519 feat(web): polish master chat with model selector, params config, and empty state
Merged
#518 feat(web): integrate xterm.js with WebSocket terminal backend
Merged
#517 feat(api): add terminal session persistence with Prisma model and CRUD
Merged
#516 feat(web): implement SSE chat streaming with real-time token rendering
Merged
#515 feat(api): add terminal WebSocket gateway with PTY session management
Merged
#514 fix(api): resolve CSRF guard ordering with global AuthGuard
Merged
#513 docs: initialize MS19 Chat & Terminal mission planning
Merged
#507 fix(api): add global /api prefix to resolve frontend route mismatch
Merged
#506 fix(auth): prevent login page freeze on OAuth sign-in failure
Merged
#505 docs: close out MS18 Theme & Widget System mission
Merged
#504 docs: update mission artifacts for MS18 completion
Merged
#503 test(web): add unit tests for MS18 components
Merged
#502 feat(web): add kanban board filtering with URL param persistence
Merged
#501 feat(web): add markdown round-trip and replace textarea with Tiptap
Merged
#500 feat(web): add Tiptap WYSIWYG KnowledgeEditor component
Merged
#499 feat(web): add widget config dialog and layout management controls
Merged
#498 feat(web): add widget picker drawer for dashboard customization
Merged
#497 feat(web): migrate dashboard to WidgetGrid with layout persistence
Merged
#496 feat(api): seed 7 widget definitions for dashboard system
Merged
#495 feat(web): add theme selection UI in Settings > Appearance
Merged
#494 feat(web): upgrade ThemeProvider for multi-theme registry
Merged
#493 feat(web): add theme definition system with 5 built-in themes
Merged
#492 docs: initialize MS18 Theme & Widget System mission
Merged
#486 docs: close out MS16+MS17 mission
Merged
#485 docs: mark MS16+MS17 milestone complete
Merged
#484 docs: update PRD statuses and mission artifacts for MS16+MS17
Merged
#483 fix(web): update calendar and knowledge tests for real API integration
Merged
#482 feat(web): add profile page with user info and preferences
Merged
#481 feat(web): add file manager page with list/grid views
Merged
#480 feat(web): add logs and telemetry page with filtering and auto-refresh
Merged
#479 feat(web): add project workspace page with tasks and agent sessions
Merged
#478 feat(web): add kanban board page with drag-and-drop
Merged
#477 feat(web): add projects page with CRUD operations
Merged
#476 feat(web): wire knowledge pages to real API data
Merged
#475 test(web): update tasks page tests for real API integration
Merged
#474 feat(web): wire calendar page to real API data
Merged
#473 feat(web): wire tasks page to real API data
Merged
#472 feat(web): add custom 404 pages for global and authenticated routes
Merged
#471 feat(web): add settings root index page with category cards
Merged
#470 chore(orchestrator): bootstrap MS16+MS17 planning
Merged
#465 docs: mark mission complete (MS-P4-003)
Merged
#464 Phase 4: Deploy + Smoke Test (#463)
Merged
#462 Phase 3: Agent Cycle Visibility (#461)
Merged
#460 Phase 2: Task Ingestion Pipeline (#459)
Merged
#458 Phase 1: Dashboard Polish + Theming (#457)
Merged
#456 fix: add mission detection to session hooks
Merged
#455 docs: initialize go-live MVP mission with coordinator protocol
Merged
#454 docs: design system reference and task completion (MS15-DOC-001)
Merged
#453 feat(web): Phase 3 — Dashboard Page (#450)
Merged
#452 feat(ui,web): Phase 2 — Shared Components & Terminal Panel (#449)
Merged
#451 feat(web): MS15 Phase 1 — Design System & App Shell
Merged
#447 style(ui): use padding for AuthDivider vertical spacing (#446)
Merged
#445 docs(coolify): update deployment docs with operations guide
Merged
#444 docs: add Coolify deployment guide and compose file
Merged
#439 style(ui): refine login card shape and divider spacing
Merged
#438 fix(ui): use arbitrary opacity for AuthCard dark background
Merged
#437 fix(web): force dynamic rendering for runtime env injection
Merged
#436 fix(web): add Tailwind CSS setup for design system rendering
Merged
#435 fix(web): restore login page design and add runtime config injection
Merged
#434 chore: switch from develop/dev to main/latest image tags
Merged
#433 fix(web): resolve flaky CI test failures
Merged
#432 Merge develop into main — branch consolidation
Merged
#431 fix(ci): suppress Next.js bundled tar/minimatch CVEs in trivy
Merged
#429 fix(ci): resolve pipeline #516 audit and test failures
Merged
#428 test(web): silence localStorage-file warnings in vitest
Merged
#427 fix(auth): generate UUID ids for BetterAuth Prisma writes
Merged
#426 fix(auth): restore BetterAuth OAuth2 flow and compose wiring
Merged
#425 Fix orchestrator startup provider-key requirements for Issue 424
Merged
#423 fix(runtime): post-422 CI and compose env follow-up
Merged
#422 feat: finalize orchestrator observability and mosaic rails integration
Merged
#421 fix(#411): complete auth/frontend remediation and review hardening
Merged
#420 bootstrap mosaic-stack to Mosaic standards layer
Merged
#419 chore: upgrade Node.js runtime to v24 across codebase
Merged
#418 fix(#411): auth & frontend remediation — all 6 phases complete
Merged
#409 feat: M13-SpeechServices — TTS & STT integration
Merged
#408 feat: M12-MatrixBridge — Matrix/Element chat bridge integration
Merged
#407 feat: M10-Telemetry — Mosaic Telemetry integration
Merged
#368 fix(ci): Node.js 20 → 24 LTS + pipeline fixes (#366, #367)
Merged
#366 fix(ci): fix pipeline #366 — web @mosaic/ui build, Dockerfile find bug, event handler types
Merged
#362 Merge feature/m4-llm-integration into develop
Merged
#349 Integrate M4-LLM error handling into develop
Merged
#348 Security Remediation: All Phases Complete (84 fixes)
Merged
#345 fix(tests): Correct pipeline 239 test failures
Merged
#343 Security and Code Quality Remediation (M6-Fixes)
Merged
#336 feat(#329): Add usage budget management and cost governance
Merged
#335 feat(#101): Add Task Progress widget for orchestrator monitoring
Merged
#334 test(#229): Add performance test suite for orchestrator
Merged
#333 docs(#230): Comprehensive orchestrator documentation
Merged
#332 test(#226,#227,#228): Add E2E integration tests for agent orchestration
Merged
#331 [ORCH-134] Update root documentation
Merged
#330 [ORCH-132] Connect agent dashboard to real API
Merged
#321 M7.1 Remediation: P2 Reliability Improvements (#291-#293, #295)
Merged
#320 Security Sprint M7.1: Complete P1 Security Fixes (#284-#287)
Merged
#319 Security Sprint M7.1: Fix P1 Security Issues (#283, #288, #289, #290)
Merged
#318 Fix QA validation issues and add M7.1 security fixes
Merged
#317 feat(ci): Add PostgreSQL service for integration tests
Merged
#316 fix(#306): Fix 25 failing API tests
Merged
#307 feat(#42): Implement persistent Jarvis chat overlay
Merged
#305 feat(#273): Add capability-based authorization for federation
Merged
#270 Migrate from Harbor to Gitea Packages registry
Merged
#302 Release: Merge develop to main (111 commits)
Merged
#301 feat(#52): Implement Active Projects & Agent Chains widget
Merged
#300 fix(#272): Add rate limiting to federation endpoints (DoS protection)
Merged
#299 fix(#271): Implement OIDC token validation (authentication bypass)
Merged
#178 fix(ci): Update Harbor registry URL to reg.mosaicstack.dev
Merged
#177 Release: CI/CD Pipeline & Architecture Updates
Merged
#120 feat: Add wiki-link autocomplete in editor (closes #63)
Merged
#119 feat: Add semantic search with pgvector (closes #68, #69, #70)
Merged
#118 docs: Add comprehensive knowledge module documentation (closes #80)
Merged
#108 feat(#22): Implement brain query API endpoint
Merged
#107 feat(#82): Implement personality module
Merged
#106 feat(#16): Implement WebSocket real-time updates
Merged
#105 feat(knowledge): Add link resolution service
Merged
#104 feat(#21): Implement Ollama integration
Merged
#103 feat(#15): Implement Gantt chart component
390 Issues closed from 1 user
Closed
#534 MS20: Site Stabilization — Runtime bugs and feature gaps
Closed
#512 MS19: Verification, documentation & deployment
Closed
#511 MS19: Orchestrator chat & agent terminal integration
Closed
#510 MS19: Chat streaming & master chat polish
Closed
#509 MS19: Terminal frontend — xterm.js integration & tab management
Closed
#508 MS19: Terminal backend — WebSocket gateway & PTY service
Closed
#491 MS18: Verification, documentation, deploy
Closed
#489 MS18: WYSIWYG knowledge editor with Tiptap
Closed
#488 MS18: Customizable widget dashboard with layout management
Closed
#487 MS18: Theme package system with built-in themes
Closed
#490 MS18: Enhanced Kanban with project/user filtering
Closed
#469 Phase 4: Verification, Documentation, Deploy
Closed
#468 Phase 3: New Pages — Projects, Workspace, Kanban, File Manager, Logs, Profile
Closed
#467 Phase 2: Mock Data Elimination — Tasks, Calendar, Knowledge
Closed
#466 Phase 1: Foundation — 404 + Settings Root
Closed
#463 Phase 4: Deploy + Smoke Test
Closed
#461 Phase 3: Agent Cycle Visibility
Closed
#459 Phase 2: Task Ingestion Pipeline
Closed
#457 Phase 1: Dashboard Polish + Theming
Closed
#450 Phase 3: Dashboard Page Implementation
Closed
#449 Phase 2: Shared Component Library Update
Closed
#448 Phase 1: Design System & App Shell Foundation
Closed
#446 style(ui): add padding above and below OR CONTINUE WITH divider on login page
Closed
#443 Coolify: Verify full stack connectivity and functionality
Closed
#442 Coolify: Fix managed service start (CoolifyTask failing)
Closed
#441 Coolify: Suppress coordinator OTLP exporter errors
Closed
#440 Coolify: Fix mosaic.woltje.com DNS record
Closed
#430 fix(ci): web pipeline Docker/Trivy step failure on main (pipeline #518)
Closed
#424 Decouple orchestrator startup from CLAUDE_API_KEY
Closed
#411 [EPIC] Auth & Frontend Remediation
Closed
#417 Phase 6: Error Recovery & Polish
Closed
#416 Phase 5: Login Page Integration
Closed
#415 Phase 4: Frontend Foundation Components
Closed
#414 Phase 3: Backend Hardening
Closed
#413 Phase 2: Auth Config Discovery Endpoint
Closed
#412 Phase 1: Critical Backend Fixes
Closed
#410 fix: BetterAuth 500 - request.headers.get is not a function (Express/Web API incompatibility)
Closed
#388 EPIC: M13-SpeechServices — TTS & STT Integration
Closed
#406 Documentation: Speech services architecture, API, and deployment
Closed
#405 E2E integration tests for speech services
Closed
#404 Frontend speech settings page (provider selection, voice config)
Closed
#403 Frontend audio playback component for TTS output
Closed
#401 Speech services environment variables and ConfigModule integration
Closed
#402 Frontend voice input component (microphone capture + transcription)
Closed
#400 Docker Compose swarm/prod deployment for speech services
Closed
#399 Docker Compose dev overlay for speech services
Closed
#398 Audio format validation and preprocessing middleware
Closed
#397 Implement WebSocket streaming transcription endpoint
Closed
#396 Create /api/speech/synthesize REST endpoint
Closed
#395 Implement Piper TTS provider via OpenedAI Speech (fallback tier)
Closed
#394 Implement Chatterbox TTS provider (premium tier, voice cloning)
Closed
#393 Implement Kokoro-FastAPI TTS provider (default tier)
Closed
#392 Create /api/speech/transcribe REST endpoint
Closed
#391 Implement tiered TTS provider architecture
Closed
#390 Implement STT provider with Speaches/faster-whisper integration
Closed
#389 Create SpeechModule with provider abstraction layer
Closed
#387 Sample Matrix swarm deployment compose file
Closed
#377 EPIC: Matrix/Element Bridge Integration
Closed
#386 Documentation: Matrix bridge setup and architecture
Closed
#385 Matrix bridge E2E integration tests
Closed
#383 Streaming AI responses via Matrix message edits
Closed
#382 Herald Service: Add Matrix output adapter for status broadcasts
Closed
#381 Matrix command handling — receive and dispatch @mosaic commands
Closed
#380 Workspace-to-Matrix-Room mapping and provisioning
Closed
#379 Register MatrixService in BridgeModule with conditional loading
Closed
#384 Add Synapse + Element Web to docker-compose for dev environment
Closed
#378 Install matrix-bot-sdk and create MatrixService skeleton
Closed
#376 Documentation: Telemetry integration guide
Closed
#375 Frontend: Token usage and cost dashboard
Closed
#374 Add telemetry config to docker-compose and .env
Closed
#373 Prediction integration for cost estimation
Closed
#372 Track orchestrator agent task completions
Closed
#371 Track LLM task completions via Mosaic Telemetry
Closed
#370 Install mosaicstack-telemetry in Coordinator
Closed
#369 Install @mosaicstack/telemetry-client in API
Closed
#367 Node.js 20 → 24 LTS migration (EOL preparation)
Closed
#365 Phase 3: Coordinator Code Quality (Ruff, Mypy, Pip)
Closed
#364 Phase 2: Fix CI Pipeline Lint Step Ordering
Closed
#363 Phase 1: Critical Docker Image Security Fixes
Closed
#346 Security: Vault-based credential storage for agents and CI
Closed
#361 Credential audit log viewer (stretch)
Closed
#360 Federation credential isolation
Closed
#358 Build frontend credential management pages
Closed
#359 Encrypt LLM provider API keys in database
Closed
#356 Build credential CRUD API endpoints
Closed
#355 Create UserCredential Prisma model with RLS policies
Closed
#354 Write OpenBao documentation and production hardening guide
Closed
#353 Create VaultService NestJS module for OpenBao Transit
Closed
#357 Add OpenBao to Docker Compose (turnkey setup)
Closed
#352 Encrypt existing plaintext Account tokens
Closed
#350 Add RLS policies to auth tables with FORCE enforcement
Closed
#351 Create RLS context interceptor (fix SEC-API-4)
Closed
#344 Orchestrator: Add Woodpecker CI integration for pipeline monitoring
Closed
#340 Phase 4: Low Priority - Cleanup + Performance
Closed
#347 Phase 4: Remaining Medium Findings
Closed
#339 Phase 3: Medium Priority - Code Quality + Infrastructure
Closed
#338 Phase 2: High Priority Security + Infrastructure
Closed
#337 Phase 1: Critical Security Fixes
Closed
#342 TEST: Script milestone fix
Closed
#341 TEST: Milestone by name
Closed
#95 [EPIC] Agent Orchestration - Persistent task management
Closed
#329 [ORCH-135] Usage Budget Management & Cost Governance
Closed
#101 [ORCH-006] Task Progress UI
Closed
#229 [ORCH-128] Performance testing
Closed
#230 [ORCH-129] Documentation
Closed
#227 [ORCH-126] E2E test: Killswitch
Closed
#228 [ORCH-127] E2E test: Concurrent agents
Closed
#226 [ORCH-125] E2E test: Full agent lifecycle
Closed
#102 [ORCH-007] Gateway Integration
Closed
#99 [ORCH-004] Task Dispatcher Service
Closed
#100 [ORCH-005] ClawdBot Failure Handling
Closed
#114 [ORCH-008] Kill Authority Implementation
Closed
#217 [ORCH-116] 50% rule enforcement
Closed
#235 [ORCH-134] Update root documentation
Closed
#233 [ORCH-132] apps/web: Add agent dashboard
Closed
#202 [ORCH-101] Set up apps/orchestrator structure
Closed
#203 [ORCH-102] Create NestJS server with health checks
Closed
#232 [ORCH-131] apps/coordinator: Add orchestrator dispatcher
Closed
#231 [ORCH-130] apps/api: Add orchestrator client
Closed
#204 [ORCH-103] Docker Compose integration for orchestrator
Closed
#234 [ORCH-133] docker-compose: Add orchestrator service
Closed
#121 Backend Migration from Jarvis r1 [EPIC]
Closed
#315 [Migration #121.8] Implement workspace-scoped LLM configuration
Closed
#314 [Migration #121.7] Implement MCP (Model Context Protocol) infrastructure
Closed
#313 [Migration #121.6] Implement FastAPI and agent tracing instrumentation
Closed
#311 [Migration #121.4] Migrate personality system backend
Closed
#309 [Migration #121.2] Implement LLM usage tracking and analytics
Closed
#308 [Migration #121.1] Implement multi-provider LLM abstraction layer
Closed
#310 [Migration #121.3] Implement OpenTelemetry tracing for LLM operations
Closed
#312 [Migration #121.5] Implement core OpenTelemetry infrastructure
Closed
#323 🟡 [P2] Address medium/low priority error handling issues (PR #307)
Closed
#322 🟠 [P1] Fix high-priority error handling in chat overlay (PR #307)
Closed
#328 🟡 [P2] Address medium/low priority error handling issues (PR #307)
Closed
#327 🔵 [P2] Improve type safety in chat overlay (PR #307)
Closed
#326 🟠 [P1] Fix high-priority error handling in chat overlay (PR #307)
Closed
#325 🔴 [P0] Fix critical error handling in chat overlay (PR #307)
Closed
#201 Enhance WikiLink XSS protection with comprehensive validation
Closed
#200 Enhance Mermaid XSS protection with DOMPurify and input sanitization
Closed
#298 ⚠️ [Feature] Fix async response handling in dashboard (Issue #92)
Closed
#297 ⚠️ [Feature] Implement actual query processing (Issue #88)
Closed
#195 Implement RLS context helpers consistently across all services
Closed
#194 Fix workspace ID transmission mismatch between API and client
Closed
#193 Align authentication mechanism between API and web client
Closed
#296 🟢 [P2] Implement health checks for remote instances
Closed
#294 🟢 [P2] Add circuit breaker for failing instances
Closed
#295 🟢 [P2] Validate FederationCapabilities structure
Closed
#293 🟢 [P2] Implement retry logic with exponential backoff
Closed
#292 🟢 [P2] Add protocol version checking
Closed
#291 🟢 [P2] Add connection limit per workspace
Closed
#287 🟡 [P1] Prevent sensitive data in logs
Closed
#286 🟡 [P1] Add workspace access validation guard
Closed
#285 🟡 [P1] Add input sanitization on user-controlled fields
Closed
#284 🟡 [P1] Reduce timestamp validation window (replay attack)
Closed
#290 🟡 [P1] Secure identity verification endpoint
Closed
#289 🟡 [P1] Prevent private key decryption error data leaks
Closed
#288 🟡 [P1] Upgrade RSA key size to 4096 bits
Closed
#283 🟡 [P1] Enforce connection status validation in queries
Closed
#282 🔴 [P0] Add HTTP request timeouts (DoS risk)
Closed
#281 🔴 [P0] Fix broad exception catching hiding system errors
Closed
#280 🔴 [P0] Prevent encryption key exposure via logging
Closed
#279 🔴 [P0] Validate orchestrator URL configuration (SSRF risk)
Closed
#306 🔴 [P0] Fix 25 failing tests blocking CI pipeline
Closed
#278 🔴 [P0] Implement CSRF protection on state-changing endpoints
Closed
#42 Jarvis Chat Overlay (persistent, always available)
Closed
#277 🔴 [P0] Add comprehensive audit logging for security events
Closed
#276 🔴 [P0] Add workspace authorization on incoming connections
Closed
#275 🔴 [P0] Fix silent connection initiation failures
Closed
#274 🔴 [P0] Sanitize agent spawn command payloads (command injection risk)
Closed
#52 HUD: Active Projects & Agent Chains Widget
Closed
#273 🔴 [P0] Implement capability enforcement for federation commands
Closed
#271 🔴 [P0] Implement OIDC token validation (authentication bypass)
Closed
#272 🔴 [P0] Add rate limiting to all federation endpoints (DoS vulnerability)
Closed
#81 [EPIC] Knowledge Module - Wiki-style knowledge management
Closed
#83 [EPIC] Federation Architecture - Multi-instance collaboration
Closed
#94 [FED-011] Spoke Configuration UI
Closed
#93 [FED-010] Agent Spawn via Federation
Closed
#92 [FED-009] Aggregated Dashboard View
Closed
#91 [FED-008] Connection Manager UI
Closed
#90 [FED-007] EVENT Subscriptions
Closed
#89 [FED-006] COMMAND Message Type
Closed
#88 [FED-005] QUERY Message Type
Closed
#87 [FED-004] Cross-Instance Identity Linking
Closed
#86 [FED-003] Authentik OIDC Integration
Closed
#265 [HIGH] Fix Prettier formatting violations (277 errors)
Closed
#85 [FED-002] CONNECT/DISCONNECT Protocol
Closed
#267 [HIGH] Fix secret scanner false negatives on file read errors
Closed
#266 [HIGH] Improve error context in Docker operations
Closed
#268 [HIGH] Fix worktree cleanup error swallowing
Closed
#269 [MEDIUM] Update outdated TODO comments
Closed
#263 [CRITICAL] Fix silent Valkey event parsing failures
Closed
#260 [CRITICAL] Fix TypeScript compilation errors in orchestrator tests
Closed
#262 [CRITICAL] Fix silent cleanup failures - return structured results
Closed
#264 [CRITICAL] Add queue integration tests (15% → 85% coverage)
Closed
#261 [CRITICAL] Replace explicit 'any' types with proper mocks in tests
Closed
#84 [FED-001] Instance Identity Model
Closed
#224 [ORCH-123] YOLO mode (gate bypass)
Closed
#225 [ORCH-124] Gate configuration per-task
Closed
#223 [ORCH-122] AI agent confirmation
Closed
#221 [ORCH-120] Secret scanning
Closed
#220 [ORCH-119] Docker security hardening
Closed
#219 [ORCH-118] Resource cleanup
Closed
#218 [ORCH-117] Killswitch implementation
Closed
#216 [ORCH-115] Task dispatch from coordinator
Closed
#215 [ORCH-114] Quality gate callbacks
Closed
#214 [ORCH-113] Coordinator API client
Closed
#213 [ORCH-112] Conflict detection
Closed
#212 [ORCH-111] Git worktree management
Closed
#211 [ORCH-110] Git operations (clone, commit, push)
Closed
#210 [ORCH-109] Agent lifecycle management
Closed
#209 [ORCH-108] BullMQ task queue
Closed
#207 [ORCH-106] Docker sandbox isolation
Closed
#208 [ORCH-107] Valkey client and state management
Closed
#206 [ORCH-105] Implement agent spawner (Claude SDK)
Closed
#205 [ORCH-104] Monorepo build pipeline for orchestrator
Closed
#259 [ORCH-124] Gate configuration per-task
Closed
#258 [ORCH-123] YOLO mode (gate bypass)
Closed
#257 [ORCH-122] AI agent confirmation
Closed
#222 [ORCH-121] Mechanical quality gates
Closed
#256 [ORCH-121] Mechanical quality gates
Closed
#255 [ORCH-120] Secret scanning
Closed
#254 [ORCH-119] Docker security hardening
Closed
#253 [ORCH-118] Resource cleanup
Closed
#252 ORCH-117: Killswitch implementation
Closed
#251 ORCH-116: 50% rule enforcement
Closed
#250 [ORCH-115] Task dispatch from coordinator
Closed
#249 [ORCH-114] Quality gate callbacks
Closed
#71 [KNOW-019] Graph Data API
Closed
#72 [KNOW-020] Graph Visualization Component
Closed
#248 [ORCH-113] Coordinator API client
Closed
#247 [ORCH-112] Conflict detection
Closed
#246 [ORCH-111] Git worktree management
Closed
#70 [KNOW-018] Semantic Search API
Closed
#245 ORCH-110: Git operations (clone, commit, push)
Closed
#244 [ORCH-109] Agent lifecycle management
Closed
#69 [KNOW-017] Embedding Generation Pipeline
Closed
#243 ORCH-108: BullMQ task queue
Closed
#242 [ORCH-107] Valkey client and state management
Closed
#67 [KNOW-015] Search UI
Closed
#241 [ORCH-106] Docker sandbox isolation
Closed
#66 [KNOW-014] Search API Endpoint
Closed
#65 [KNOW-013] Full-Text Search Setup
Closed
#240 [ORCH-105] Implement agent spawner (Claude SDK)
Closed
#239 [ORCH-104] Monorepo build pipeline for orchestrator
Closed
#237 [ORCH-102] Create server with health checks
Closed
#238 [ORCH-103] Docker Compose integration for orchestrator
Closed
#236 [ORCH-101] Set up apps/orchestrator structure
Closed
#140 Document Non-AI Coordinator Pattern Architecture
Closed
#199 Implement rate limiting on webhook endpoints
Closed
#198 Strengthen WebSocket authentication
Closed
#197 Add explicit return types to service methods
Closed
#196 Fix race condition in job status updates
Closed
#187 Implement error recovery in SSE streaming
Closed
#189 Add composite database index for job_events table
Closed
#188 Sanitize Discord error logs to prevent secret exposure
Closed
#186 Add comprehensive input validation to webhook and job DTOs
Closed
#192 [CRITICAL] Fix CORS configuration for cookie-based authentication
Closed
#191 [CRITICAL] Fix XSS vulnerability in WikiLinkRenderer
Closed
#190 [CRITICAL] Fix XSS vulnerability in Mermaid rendering
Closed
#184 [BLOCKER] Add authentication to coordinator integration endpoints
Closed
#185 [BLOCKER] Fix silent error swallowing in Herald broadcasting
Closed
#182 [BLOCKER] Fix failing Prisma enum import tests in job-steps.service.spec.ts
Closed
#183 [BLOCKER] Remove hardcoded workspace ID in Discord service
Closed
#162 [EPIC] Mosaic Component Architecture
Closed
#176 [INFRA-014] Integration with M4.1 coordinator
Closed
#175 [INFRA-013] End-to-end test harness
Closed
#172 [INFRA-010] Herald status updates
Closed
#174 [INFRA-012] SSE endpoint for CLI consumers
Closed
#171 [INFRA-009] Chat command parsing
Closed
#170 [INFRA-008] mosaic-bridge module for Discord
Closed
#173 [INFRA-011] WebSocket gateway for job events
Closed
#169 [INFRA-007] Job events and audit logging
Closed
#168 [INFRA-006] Job steps tracking
Closed
#167 [INFRA-005] Runner jobs CRUD and queue submission
Closed
#166 [INFRA-004] Stitcher module structure
Closed
#164 [INFRA-002] Database schema for job tracking
Closed
#165 [INFRA-003] BullMQ module setup
Closed
#163 [INFRA-001] Add BullMQ dependencies
Closed
#181 fix(security): Update Go stdlib in postgres image (Trivy scanner component)
Closed
#179 fix(security): Update vulnerable Node.js dependencies (cross-spawn, glob, tar)
Closed
#180 fix(security): Update pnpm to 10.27.0 in Dockerfiles
Closed
#142 [EPIC] Implement Non-AI Coordinator Pattern (PoC)
Closed
#153 [COORD-013] End-to-end test
Closed
#152 [COORD-012] Implement session rotation
Closed
#151 [COORD-011] Implement compaction
Closed
#150 [COORD-010] Build orchestration loop
Closed
#149 [COORD-009] Test rejection loop
Closed
#148 [COORD-008] Build Quality Orchestrator service
Closed
#147 [COORD-007] Implement core gates
Closed
#146 [COORD-006] Test assignment scenarios
Closed
#145 [COORD-005] Build assignment algorithm
Closed
#161 [COORD-005] End-to-end integration test
Closed
#144 [COORD-004] Implement agent profiles
Closed
#160 [COORD-004] Implement basic orchestration loop
Closed
#143 [COORD-003] Validate 50% rule
Closed
#159 [COORD-003] Implement queue manager
Closed
#155 [COORD-002] Build basic context monitor
Closed
#158 [COORD-002] Implement issue parser agent
Closed
#154 [COORD-001] Implement context estimator
Closed
#157 [COORD-001] Set up webhook receiver endpoint
Closed
#156 [COORD-000] Create coordinator bot user in Gitea
Closed
#27 Intent classification service
Closed
#138 Implement Token Budget Tracker
Closed
#129 Create LLM Provider Admin API Endpoints
Closed
#125 Add Claude (Anthropic) LLM Provider
Closed
#124 Add OpenAI LLM Provider
Closed
#141 Integration Testing: Non-AI Coordinator E2E Validation
Closed
#139 Build Gate Rejection Response Handler
Closed
#137 Create Forced Continuation Prompt System
Closed
#136 Build Completion Verification Engine
Closed
#135 Implement Quality Gate Configuration System
Closed
#134 Design Non-AI Quality Orchestrator Service
Closed
#133 Add Workspace-Scoped LLM Configuration
Closed
#132 Port MCP (Model Context Protocol) Infrastructure
Closed
#131 Add OpenTelemetry Tracing Infrastructure
Closed
#130 Add Personality Prisma Schema and Backend
Closed
#127 Refactor LlmService to Use Provider Pattern
Closed
#126 Create LLM Manager Service
Closed
#123 Port Ollama LLM Provider
Closed
#128 Add LlmProviderInstance Prisma Schema
Closed
#122 Create LLM Provider Interface
Closed
#63 [KNOW-011] Link Autocomplete in Editor
Closed
#68 [KNOW-016] pgvector Setup
Closed
#80 [KNOW-028] Documentation
Closed
#79 [KNOW-027] Caching Layer
Closed
#78 [KNOW-026] Export Functionality
Closed
#64 [KNOW-012] Render Links in View Mode
Closed
#77 [KNOW-025] Markdown Import
Closed
#62 [KNOW-010] Backlinks Display UI
Closed
#98 [ORCH-003] Valkey Integration
Closed
#97 [ORCH-002] Task CRUD API
Closed
#76 [KNOW-024] Version History UI
Closed
#96 [ORCH-001] Agent Task Database Schema
Closed
#74 [KNOW-022] Graph Statistics Dashboard
Closed
#73 [KNOW-021] Entry-Centered Graph View
Closed
#75 [KNOW-023] Version History API
Closed
#29 Cron job configuration
Closed
#115 Cron scheduler worker
Closed
#116 Cron WebSocket notifications
Closed
#26 mosaic-plugin-gantt skill
Closed
#23 mosaic-plugin-brain skill
Closed
#25 mosaic-plugin-tasks skill
Closed
#24 mosaic-plugin-calendar skill
Closed
#22 Brain query API endpoint (/brain/query)
Closed
#18 Advanced filtering and search
Closed
#82 Personality Module - Configurable communication styles
Closed
#61 [KNOW-009] Link Storage and Sync
Closed
#17 Kanban board view
Closed
#41 Widget / HUD System (configurable dashboard layout)
Closed
#60 [KNOW-008] Link Resolution Service
Closed
#37 Domains model (work, marriage, homelab, finances, etc.)
Closed
#16 Real-time updates (WebSocket)
Closed
#21 Ollama integration (local/remote)
Closed
#15 Gantt chart component
Closed
#59 [KNOW-007] Wiki-Link Parser
Closed
#14 User preferences storage
Closed
#12 Workspace management UI
Closed
#13 Team management UI
Closed
#11 Sharing rules and permissions
Closed
#9 Workspace and team models
Closed
#10 Row-Level Security (RLS) policies
Closed
#58 [KNOW-006] Entry Detail/Editor Page UI
Closed
#56 [KNOW-004] Basic Markdown Rendering
Closed
#57 [KNOW-005] Entry List Page UI
Closed
#53 [KNOW-001] Database Schema for Knowledge Module
Closed
#55 [KNOW-003] Tag Management API
Closed
#54 [KNOW-002] Entry CRUD API Endpoints
Closed
#20 PDA-friendly UI optimizations
Closed
#28 PDA-friendly response formatting
Closed
#39 Generic Relationships (blocks, depends_on, related_to)
Closed
#38 Ideas / Brain Dumps (quick capture with semantic search)
Closed
#19 Semantic memory (pgvector)
Closed
#40 Agent Tracking (ClawdBot agents, metrics, firing)
Closed
#51 [MINOR] JSON type casting issues
Closed
#50 [MINOR] Nullable foreign key types in DTOs
Closed
#49 [MINOR] Layout DTO lacks structural validation
Closed
#48 [MINOR] Missing Param import in widgets.controller.ts
Closed
#47 [MAJOR] Missing sortOrder default in domains.service.ts
Closed
#46 [MAJOR] Race condition in default layout setting
Closed
#45 [MAJOR] Route ordering bug in layouts.controller.ts
Closed
#44 [CRITICAL] Layouts schema mismatch
Closed
#43 [CRITICAL] ActivityService missing methods
Closed
#5 Basic CRUD APIs (tasks, events, projects)
Closed
#36 Traefik integration for Docker Compose (bundled or upstream)
Closed
#7 Activity logging infrastructure
Closed
#6 Basic web UI (login, task list, calendar)
Closed
#8 Docker Compose setup (turnkey)
Closed
#4 Authentik OIDC integration
Closed
#3 Prisma ORM setup and migrations
Closed
#2 PostgreSQL 17 + pgvector schema
Closed
#1 Project scaffold (monorepo, NestJS, Next.js 16)
400 Issues created by 1 user
Opened
#1 Project scaffold (monorepo, NestJS, Next.js 16)
Opened
#2 PostgreSQL 17 + pgvector schema
Opened
#3 Prisma ORM setup and migrations
Opened
#4 Authentik OIDC integration
Opened
#5 Basic CRUD APIs (tasks, events, projects)
Opened
#6 Basic web UI (login, task list, calendar)
Opened
#7 Activity logging infrastructure
Opened
#8 Docker Compose setup (turnkey)
Opened
#9 Workspace and team models
Opened
#10 Row-Level Security (RLS) policies
Opened
#11 Sharing rules and permissions
Opened
#12 Workspace management UI
Opened
#13 Team management UI
Opened
#14 User preferences storage
Opened
#15 Gantt chart component
Opened
#16 Real-time updates (WebSocket)
Opened
#17 Kanban board view
Opened
#18 Advanced filtering and search
Opened
#19 Semantic memory (pgvector)
Opened
#20 PDA-friendly UI optimizations
Opened
#21 Ollama integration (local/remote)
Opened
#22 Brain query API endpoint (/brain/query)
Opened
#23 mosaic-plugin-brain skill
Opened
#24 mosaic-plugin-calendar skill
Opened
#25 mosaic-plugin-tasks skill
Opened
#26 mosaic-plugin-gantt skill
Opened
#27 Intent classification service
Opened
#28 PDA-friendly response formatting
Opened
#29 Cron job configuration
Opened
#30 Migration scripts from jarvis-brain
Opened
#31 Data validation and integrity checks
Opened
#32 Parallel operation testing
Opened
#33 Performance optimization
Opened
#34 Documentation (SETUP.md, CONFIGURATION.md)
Opened
#35 Docker Compose customization guide
Opened
#36 Traefik integration for Docker Compose (bundled or upstream)
Opened
#37 Domains model (work, marriage, homelab, finances, etc.)
Opened
#38 Ideas / Brain Dumps (quick capture with semantic search)
Opened
#39 Generic Relationships (blocks, depends_on, related_to)
Opened
#40 Agent Tracking (ClawdBot agents, metrics, firing)
Opened
#41 Widget / HUD System (configurable dashboard layout)
Opened
#42 Jarvis Chat Overlay (persistent, always available)
Opened
#43 [CRITICAL] ActivityService missing methods
Opened
#44 [CRITICAL] Layouts schema mismatch
Opened
#45 [MAJOR] Route ordering bug in layouts.controller.ts
Opened
#46 [MAJOR] Race condition in default layout setting
Opened
#47 [MAJOR] Missing sortOrder default in domains.service.ts
Opened
#48 [MINOR] Missing Param import in widgets.controller.ts
Opened
#49 [MINOR] Layout DTO lacks structural validation
Opened
#50 [MINOR] Nullable foreign key types in DTOs
Opened
#51 [MINOR] JSON type casting issues
Opened
#52 HUD: Active Projects & Agent Chains Widget
Opened
#53 [KNOW-001] Database Schema for Knowledge Module
Opened
#55 [KNOW-003] Tag Management API
Opened
#54 [KNOW-002] Entry CRUD API Endpoints
Opened
#56 [KNOW-004] Basic Markdown Rendering
Opened
#58 [KNOW-006] Entry Detail/Editor Page UI
Opened
#57 [KNOW-005] Entry List Page UI
Opened
#61 [KNOW-009] Link Storage and Sync
Opened
#59 [KNOW-007] Wiki-Link Parser
Opened
#60 [KNOW-008] Link Resolution Service
Opened
#62 [KNOW-010] Backlinks Display UI
Opened
#63 [KNOW-011] Link Autocomplete in Editor
Opened
#64 [KNOW-012] Render Links in View Mode
Opened
#65 [KNOW-013] Full-Text Search Setup
Opened
#66 [KNOW-014] Search API Endpoint
Opened
#69 [KNOW-017] Embedding Generation Pipeline
Opened
#68 [KNOW-016] pgvector Setup
Opened
#70 [KNOW-018] Semantic Search API
Opened
#67 [KNOW-015] Search UI
Opened
#72 [KNOW-020] Graph Visualization Component
Opened
#73 [KNOW-021] Entry-Centered Graph View
Opened
#71 [KNOW-019] Graph Data API
Opened
#74 [KNOW-022] Graph Statistics Dashboard
Opened
#75 [KNOW-023] Version History API
Opened
#77 [KNOW-025] Markdown Import
Opened
#76 [KNOW-024] Version History UI
Opened
#80 [KNOW-028] Documentation
Opened
#78 [KNOW-026] Export Functionality
Opened
#79 [KNOW-027] Caching Layer
Opened
#81 [EPIC] Knowledge Module - Wiki-style knowledge management
Opened
#82 Personality Module - Configurable communication styles
Opened
#83 [EPIC] Federation Architecture - Multi-instance collaboration
Opened
#84 [FED-001] Instance Identity Model
Opened
#85 [FED-002] CONNECT/DISCONNECT Protocol
Opened
#87 [FED-004] Cross-Instance Identity Linking
Opened
#86 [FED-003] Authentik OIDC Integration
Opened
#88 [FED-005] QUERY Message Type
Opened
#89 [FED-006] COMMAND Message Type
Opened
#90 [FED-007] EVENT Subscriptions
Opened
#91 [FED-008] Connection Manager UI
Opened
#92 [FED-009] Aggregated Dashboard View
Opened
#93 [FED-010] Agent Spawn via Federation
Opened
#94 [FED-011] Spoke Configuration UI
Opened
#95 [EPIC] Agent Orchestration - Persistent task management
Opened
#97 [ORCH-002] Task CRUD API
Opened
#96 [ORCH-001] Agent Task Database Schema
Opened
#98 [ORCH-003] Valkey Integration
Opened
#99 [ORCH-004] Task Dispatcher Service
Opened
#100 [ORCH-005] ClawdBot Failure Handling
Opened
#101 [ORCH-006] Task Progress UI
Opened
#102 [ORCH-007] Gateway Integration
Opened
#114 [ORCH-008] Kill Authority Implementation
Opened
#115 Cron scheduler worker
Opened
#116 Cron WebSocket notifications
Opened
#121 Backend Migration from Jarvis r1 [EPIC]
Opened
#122 Create LLM Provider Interface
Opened
#123 Port Ollama LLM Provider
Opened
#124 Add OpenAI LLM Provider
Opened
#125 Add Claude (Anthropic) LLM Provider
Opened
#126 Create LLM Manager Service
Opened
#127 Refactor LlmService to Use Provider Pattern
Opened
#128 Add LlmProviderInstance Prisma Schema
Opened
#129 Create LLM Provider Admin API Endpoints
Opened
#130 Add Personality Prisma Schema and Backend
Opened
#131 Add OpenTelemetry Tracing Infrastructure
Opened
#132 Port MCP (Model Context Protocol) Infrastructure
Opened
#133 Add Workspace-Scoped LLM Configuration
Opened
#134 Design Non-AI Quality Orchestrator Service
Opened
#135 Implement Quality Gate Configuration System
Opened
#136 Build Completion Verification Engine
Opened
#137 Create Forced Continuation Prompt System
Opened
#138 Implement Token Budget Tracker
Opened
#139 Build Gate Rejection Response Handler
Opened
#140 Document Non-AI Coordinator Pattern Architecture
Opened
#141 Integration Testing: Non-AI Coordinator E2E Validation
Opened
#142 [EPIC] Implement Non-AI Coordinator Pattern (PoC)
Opened
#143 [COORD-003] Validate 50% rule
Opened
#144 [COORD-004] Implement agent profiles
Opened
#145 [COORD-005] Build assignment algorithm
Opened
#146 [COORD-006] Test assignment scenarios
Opened
#147 [COORD-007] Implement core gates
Opened
#148 [COORD-008] Build Quality Orchestrator service
Opened
#149 [COORD-009] Test rejection loop
Opened
#150 [COORD-010] Build orchestration loop
Opened
#151 [COORD-011] Implement compaction
Opened
#152 [COORD-012] Implement session rotation
Opened
#153 [COORD-013] End-to-end test
Opened
#154 [COORD-001] Implement context estimator
Opened
#155 [COORD-002] Build basic context monitor
Opened
#156 [COORD-000] Create coordinator bot user in Gitea
Opened
#157 [COORD-001] Set up webhook receiver endpoint
Opened
#158 [COORD-002] Implement issue parser agent
Opened
#159 [COORD-003] Implement queue manager
Opened
#160 [COORD-004] Implement basic orchestration loop
Opened
#161 [COORD-005] End-to-end integration test
Opened
#162 [EPIC] Mosaic Component Architecture
Opened
#163 [INFRA-001] Add BullMQ dependencies
Opened
#164 [INFRA-002] Database schema for job tracking
Opened
#165 [INFRA-003] BullMQ module setup
Opened
#166 [INFRA-004] Stitcher module structure
Opened
#167 [INFRA-005] Runner jobs CRUD and queue submission
Opened
#168 [INFRA-006] Job steps tracking
Opened
#169 [INFRA-007] Job events and audit logging
Opened
#170 [INFRA-008] mosaic-bridge module for Discord
Opened
#171 [INFRA-009] Chat command parsing
Opened
#172 [INFRA-010] Herald status updates
Opened
#173 [INFRA-011] WebSocket gateway for job events
Opened
#174 [INFRA-012] SSE endpoint for CLI consumers
Opened
#175 [INFRA-013] End-to-end test harness
Opened
#176 [INFRA-014] Integration with M4.1 coordinator
Opened
#179 fix(security): Update vulnerable Node.js dependencies (cross-spawn, glob, tar)
Opened
#180 fix(security): Update pnpm to 10.27.0 in Dockerfiles
Opened
#181 fix(security): Update Go stdlib in postgres image (Trivy scanner component)
Opened
#182 [BLOCKER] Fix failing Prisma enum import tests in job-steps.service.spec.ts
Opened
#183 [BLOCKER] Remove hardcoded workspace ID in Discord service
Opened
#184 [BLOCKER] Add authentication to coordinator integration endpoints
Opened
#185 [BLOCKER] Fix silent error swallowing in Herald broadcasting
Opened
#186 Add comprehensive input validation to webhook and job DTOs
Opened
#187 Implement error recovery in SSE streaming
Opened
#188 Sanitize Discord error logs to prevent secret exposure
Opened
#189 Add composite database index for job_events table
Opened
#190 [CRITICAL] Fix XSS vulnerability in Mermaid rendering
Opened
#191 [CRITICAL] Fix XSS vulnerability in WikiLinkRenderer
Opened
#192 [CRITICAL] Fix CORS configuration for cookie-based authentication
Opened
#193 Align authentication mechanism between API and web client
Opened
#194 Fix workspace ID transmission mismatch between API and client
Opened
#195 Implement RLS context helpers consistently across all services
Opened
#197 Add explicit return types to service methods
Opened
#196 Fix race condition in job status updates
Opened
#198 Strengthen WebSocket authentication
Opened
#199 Implement rate limiting on webhook endpoints
Opened
#200 Enhance Mermaid XSS protection with DOMPurify and input sanitization
Opened
#201 Enhance WikiLink XSS protection with comprehensive validation
Opened
#202 [ORCH-101] Set up apps/orchestrator structure
Opened
#204 [ORCH-103] Docker Compose integration for orchestrator
Opened
#203 [ORCH-102] Create NestJS server with health checks
Opened
#205 [ORCH-104] Monorepo build pipeline for orchestrator
Opened
#206 [ORCH-105] Implement agent spawner (Claude SDK)
Opened
#207 [ORCH-106] Docker sandbox isolation
Opened
#208 [ORCH-107] Valkey client and state management
Opened
#210 [ORCH-109] Agent lifecycle management
Opened
#209 [ORCH-108] BullMQ task queue
Opened
#211 [ORCH-110] Git operations (clone, commit, push)
Opened
#212 [ORCH-111] Git worktree management
Opened
#213 [ORCH-112] Conflict detection
Opened
#214 [ORCH-113] Coordinator API client
Opened
#215 [ORCH-114] Quality gate callbacks
Opened
#216 [ORCH-115] Task dispatch from coordinator
Opened
#217 [ORCH-116] 50% rule enforcement
Opened
#218 [ORCH-117] Killswitch implementation
Opened
#219 [ORCH-118] Resource cleanup
Opened
#220 [ORCH-119] Docker security hardening
Opened
#222 [ORCH-121] Mechanical quality gates
Opened
#221 [ORCH-120] Secret scanning
Opened
#223 [ORCH-122] AI agent confirmation
Opened
#224 [ORCH-123] YOLO mode (gate bypass)
Opened
#225 [ORCH-124] Gate configuration per-task
Opened
#226 [ORCH-125] E2E test: Full agent lifecycle
Opened
#227 [ORCH-126] E2E test: Killswitch
Opened
#228 [ORCH-127] E2E test: Concurrent agents
Opened
#229 [ORCH-128] Performance testing
Opened
#230 [ORCH-129] Documentation
Opened
#232 [ORCH-131] apps/coordinator: Add orchestrator dispatcher
Opened
#231 [ORCH-130] apps/api: Add orchestrator client
Opened
#233 [ORCH-132] apps/web: Add agent dashboard
Opened
#235 [ORCH-134] Update root documentation
Opened
#234 [ORCH-133] docker-compose: Add orchestrator service
Opened
#236 [ORCH-101] Set up apps/orchestrator structure
Opened
#237 [ORCH-102] Create server with health checks
Opened
#238 [ORCH-103] Docker Compose integration for orchestrator
Opened
#239 [ORCH-104] Monorepo build pipeline for orchestrator
Opened
#240 [ORCH-105] Implement agent spawner (Claude SDK)
Opened
#241 [ORCH-106] Docker sandbox isolation
Opened
#242 [ORCH-107] Valkey client and state management
Opened
#243 ORCH-108: BullMQ task queue
Opened
#244 [ORCH-109] Agent lifecycle management
Opened
#245 ORCH-110: Git operations (clone, commit, push)
Opened
#246 [ORCH-111] Git worktree management
Opened
#247 [ORCH-112] Conflict detection
Opened
#248 [ORCH-113] Coordinator API client
Opened
#249 [ORCH-114] Quality gate callbacks
Opened
#250 [ORCH-115] Task dispatch from coordinator
Opened
#251 ORCH-116: 50% rule enforcement
Opened
#252 ORCH-117: Killswitch implementation
Opened
#253 [ORCH-118] Resource cleanup
Opened
#254 [ORCH-119] Docker security hardening
Opened
#255 [ORCH-120] Secret scanning
Opened
#256 [ORCH-121] Mechanical quality gates
Opened
#257 [ORCH-122] AI agent confirmation
Opened
#258 [ORCH-123] YOLO mode (gate bypass)
Opened
#259 [ORCH-124] Gate configuration per-task
Opened
#260 [CRITICAL] Fix TypeScript compilation errors in orchestrator tests
Opened
#261 [CRITICAL] Replace explicit 'any' types with proper mocks in tests
Opened
#262 [CRITICAL] Fix silent cleanup failures - return structured results
Opened
#263 [CRITICAL] Fix silent Valkey event parsing failures
Opened
#264 [CRITICAL] Add queue integration tests (15% → 85% coverage)
Opened
#265 [HIGH] Fix Prettier formatting violations (277 errors)
Opened
#266 [HIGH] Improve error context in Docker operations
Opened
#267 [HIGH] Fix secret scanner false negatives on file read errors
Opened
#268 [HIGH] Fix worktree cleanup error swallowing
Opened
#269 [MEDIUM] Update outdated TODO comments
Opened
#271 🔴 [P0] Implement OIDC token validation (authentication bypass)
Opened
#272 🔴 [P0] Add rate limiting to all federation endpoints (DoS vulnerability)
Opened
#273 🔴 [P0] Implement capability enforcement for federation commands
Opened
#274 🔴 [P0] Sanitize agent spawn command payloads (command injection risk)
Opened
#275 🔴 [P0] Fix silent connection initiation failures
Opened
#276 🔴 [P0] Add workspace authorization on incoming connections
Opened
#277 🔴 [P0] Add comprehensive audit logging for security events
Opened
#278 🔴 [P0] Implement CSRF protection on state-changing endpoints
Opened
#279 🔴 [P0] Validate orchestrator URL configuration (SSRF risk)
Opened
#280 🔴 [P0] Prevent encryption key exposure via logging
Opened
#281 🔴 [P0] Fix broad exception catching hiding system errors
Opened
#282 🔴 [P0] Add HTTP request timeouts (DoS risk)
Opened
#283 🟡 [P1] Enforce connection status validation in queries
Opened
#284 🟡 [P1] Reduce timestamp validation window (replay attack)
Opened
#285 🟡 [P1] Add input sanitization on user-controlled fields
Opened
#286 🟡 [P1] Add workspace access validation guard
Opened
#287 🟡 [P1] Prevent sensitive data in logs
Opened
#288 🟡 [P1] Upgrade RSA key size to 4096 bits
Opened
#289 🟡 [P1] Prevent private key decryption error data leaks
Opened
#290 🟡 [P1] Secure identity verification endpoint
Opened
#291 🟢 [P2] Add connection limit per workspace
Opened
#293 🟢 [P2] Implement retry logic with exponential backoff
Opened
#292 🟢 [P2] Add protocol version checking
Opened
#294 🟢 [P2] Add circuit breaker for failing instances
Opened
#295 🟢 [P2] Validate FederationCapabilities structure
Opened
#296 🟢 [P2] Implement health checks for remote instances
Opened
#297 ⚠️ [Feature] Implement actual query processing (Issue #88)
Opened
#298 ⚠️ [Feature] Fix async response handling in dashboard (Issue #92)
Opened
#306 🔴 [P0] Fix 25 failing tests blocking CI pipeline
Opened
#308 [Migration #121.1] Implement multi-provider LLM abstraction layer
Opened
#309 [Migration #121.2] Implement LLM usage tracking and analytics
Opened
#310 [Migration #121.3] Implement OpenTelemetry tracing for LLM operations
Opened
#311 [Migration #121.4] Migrate personality system backend
Opened
#312 [Migration #121.5] Implement core OpenTelemetry infrastructure
Opened
#313 [Migration #121.6] Implement FastAPI and agent tracing instrumentation
Opened
#314 [Migration #121.7] Implement MCP (Model Context Protocol) infrastructure
Opened
#315 [Migration #121.8] Implement workspace-scoped LLM configuration
Opened
#322 🟠 [P1] Fix high-priority error handling in chat overlay (PR #307)
Opened
#323 🟡 [P2] Address medium/low priority error handling issues (PR #307)
Opened
#325 🔴 [P0] Fix critical error handling in chat overlay (PR #307)
Opened
#326 🟠 [P1] Fix high-priority error handling in chat overlay (PR #307)
Opened
#327 🔵 [P2] Improve type safety in chat overlay (PR #307)
Opened
#328 🟡 [P2] Address medium/low priority error handling issues (PR #307)
Opened
#329 [ORCH-135] Usage Budget Management & Cost Governance
Opened
#337 Phase 1: Critical Security Fixes
Opened
#338 Phase 2: High Priority Security + Infrastructure
Opened
#339 Phase 3: Medium Priority - Code Quality + Infrastructure
Opened
#340 Phase 4: Low Priority - Cleanup + Performance
Opened
#341 TEST: Milestone by name
Opened
#342 TEST: Script milestone fix
Opened
#344 Orchestrator: Add Woodpecker CI integration for pipeline monitoring
Opened
#346 Security: Vault-based credential storage for agents and CI
Opened
#347 Phase 4: Remaining Medium Findings
Opened
#350 Add RLS policies to auth tables with FORCE enforcement
Opened
#351 Create RLS context interceptor (fix SEC-API-4)
Opened
#352 Encrypt existing plaintext Account tokens
Opened
#353 Create VaultService NestJS module for OpenBao Transit
Opened
#354 Write OpenBao documentation and production hardening guide
Opened
#355 Create UserCredential Prisma model with RLS policies
Opened
#356 Build credential CRUD API endpoints
Opened
#357 Add OpenBao to Docker Compose (turnkey setup)
Opened
#358 Build frontend credential management pages
Opened
#359 Encrypt LLM provider API keys in database
Opened
#360 Federation credential isolation
Opened
#361 Credential audit log viewer (stretch)
Opened
#363 Phase 1: Critical Docker Image Security Fixes
Opened
#364 Phase 2: Fix CI Pipeline Lint Step Ordering
Opened
#365 Phase 3: Coordinator Code Quality (Ruff, Mypy, Pip)
Opened
#367 Node.js 20 → 24 LTS migration (EOL preparation)
Opened
#369 Install @mosaicstack/telemetry-client in API
Opened
#370 Install mosaicstack-telemetry in Coordinator
Opened
#371 Track LLM task completions via Mosaic Telemetry
Opened
#372 Track orchestrator agent task completions
Opened
#373 Prediction integration for cost estimation
Opened
#374 Add telemetry config to docker-compose and .env
Opened
#375 Frontend: Token usage and cost dashboard
Opened
#376 Documentation: Telemetry integration guide
Opened
#377 EPIC: Matrix/Element Bridge Integration
Opened
#378 Install matrix-bot-sdk and create MatrixService skeleton
Opened
#379 Register MatrixService in BridgeModule with conditional loading
Opened
#380 Workspace-to-Matrix-Room mapping and provisioning
Opened
#381 Matrix command handling — receive and dispatch @mosaic commands
Opened
#382 Herald Service: Add Matrix output adapter for status broadcasts
Opened
#383 Streaming AI responses via Matrix message edits
Opened
#384 Add Synapse + Element Web to docker-compose for dev environment
Opened
#385 Matrix bridge E2E integration tests
Opened
#386 Documentation: Matrix bridge setup and architecture
Opened
#387 Sample Matrix swarm deployment compose file
Opened
#388 EPIC: M13-SpeechServices — TTS & STT Integration
Opened
#389 Create SpeechModule with provider abstraction layer
Opened
#390 Implement STT provider with Speaches/faster-whisper integration
Opened
#391 Implement tiered TTS provider architecture
Opened
#392 Create /api/speech/transcribe REST endpoint
Opened
#393 Implement Kokoro-FastAPI TTS provider (default tier)
Opened
#394 Implement Chatterbox TTS provider (premium tier, voice cloning)
Opened
#395 Implement Piper TTS provider via OpenedAI Speech (fallback tier)
Opened
#396 Create /api/speech/synthesize REST endpoint
Opened
#397 Implement WebSocket streaming transcription endpoint
Opened
#398 Audio format validation and preprocessing middleware
Opened
#399 Docker Compose dev overlay for speech services
Opened
#400 Docker Compose swarm/prod deployment for speech services
Opened
#401 Speech services environment variables and ConfigModule integration
Opened
#402 Frontend voice input component (microphone capture + transcription)
Opened
#403 Frontend audio playback component for TTS output
Opened
#404 Frontend speech settings page (provider selection, voice config)
Opened
#405 E2E integration tests for speech services
Opened
#406 Documentation: Speech services architecture, API, and deployment
Opened
#410 fix: BetterAuth 500 - request.headers.get is not a function (Express/Web API incompatibility)
Opened
#411 [EPIC] Auth & Frontend Remediation
Opened
#412 Phase 1: Critical Backend Fixes
Opened
#413 Phase 2: Auth Config Discovery Endpoint
Opened
#414 Phase 3: Backend Hardening
Opened
#415 Phase 4: Frontend Foundation Components
Opened
#416 Phase 5: Login Page Integration
Opened
#417 Phase 6: Error Recovery & Polish
Opened
#424 Decouple orchestrator startup from CLAUDE_API_KEY
Opened
#430 fix(ci): web pipeline Docker/Trivy step failure on main (pipeline #518)
Opened
#440 Coolify: Fix mosaic.woltje.com DNS record
Opened
#441 Coolify: Suppress coordinator OTLP exporter errors
Opened
#442 Coolify: Fix managed service start (CoolifyTask failing)
Opened
#443 Coolify: Verify full stack connectivity and functionality
Opened
#446 style(ui): add padding above and below OR CONTINUE WITH divider on login page
Opened
#448 Phase 1: Design System & App Shell Foundation
Opened
#449 Phase 2: Shared Component Library Update
Opened
#450 Phase 3: Dashboard Page Implementation
Opened
#457 Phase 1: Dashboard Polish + Theming
Opened
#459 Phase 2: Task Ingestion Pipeline
Opened
#461 Phase 3: Agent Cycle Visibility
Opened
#463 Phase 4: Deploy + Smoke Test
Opened
#466 Phase 1: Foundation — 404 + Settings Root
Opened
#467 Phase 2: Mock Data Elimination — Tasks, Calendar, Knowledge
Opened
#468 Phase 3: New Pages — Projects, Workspace, Kanban, File Manager, Logs, Profile
Opened
#469 Phase 4: Verification, Documentation, Deploy
Opened
#487 MS18: Theme package system with built-in themes
Opened
#488 MS18: Customizable widget dashboard with layout management
Opened
#489 MS18: WYSIWYG knowledge editor with Tiptap
Opened
#490 MS18: Enhanced Kanban with project/user filtering
Opened
#491 MS18: Verification, documentation, deploy
Opened
#508 MS19: Terminal backend — WebSocket gateway & PTY service
Opened
#509 MS19: Terminal frontend — xterm.js integration & tab management
Opened
#510 MS19: Chat streaming & master chat polish
Opened
#511 MS19: Orchestrator chat & agent terminal integration
Opened
#512 MS19: Verification, documentation & deployment
Opened
#534 MS20: Site Stabilization — Runtime bugs and feature gaps
Opened
#568 MS21 Phase 3: Data Migration & Import API
Opened
#570 MS21 Phase 5: RBAC Enforcement
Opened
#569 MS21 Phase 4: Admin UI
Opened
#571 MS21 Phase 6: Verification & Release