jettypod 4.1.2 → 4.1.4

package/prototypes/2025-01-11-production-standards-example.md

@@ -1,204 +0,0 @@
-# Production Standards (Example Output)
-
-**Generated by:** `external-transition` skill
-**Date:** 2025-01-11
-**Project State:** external
-**For:** JettyPod
-
----
-
-## Overview
-
-This project has transitioned to **external** state. All features in production mode must meet these standards before deployment.
-
----
-
-## Security Standards
-
-### Authentication & Authorization
-- ✅ **Required:** All state-changing operations must log user/actor
-- ✅ **Required:** Permission validation before sensitive operations
-- ⚠️  **Recommended:** Rate limiting on public endpoints
-- Pattern: Use `lib/audit-logger.js` for authentication events
-
-### Data Protection
-- ✅ **Required:** PII must be sanitized in logs
-- ✅ **Required:** Sensitive data (tokens, keys) must be masked
-- ✅ **Required:** Data at rest encryption for user data
-- Pattern: Use `sanitizeData()` helper from `lib/data-protection.js`
-
-### Audit Trail
-- ✅ **Required:** All state transitions must be logged
-- ✅ **Required:** Logs must be tamper-proof (append-only)
-- ✅ **Required:** Include: timestamp, user, action, result
-- Pattern: Use `lib/state-transitions.js` for immutable records
-
----
-
-## Performance & Scale Standards
-
-### Performance Benchmarks
-- ✅ **Required:** Operations complete in < 5 seconds (p95)
-- ✅ **Required:** Memory usage stays under 100MB per process
-- ⚠️  **Recommended:** Support 1000+ concurrent users
-- Tool: Use `features/performance/*.bench.js` for benchmarks
-
-### Concurrency
-- ✅ **Required:** Prevent race conditions on state changes
-- ✅ **Required:** Lock mechanisms for critical sections
-- Pattern: Use `lib/lock-manager.js` for file-based locks
-
-### Storage & Cleanup
-- ✅ **Required:** Log rotation (max 10MB per file, keep 5)
-- ✅ **Required:** Automatic cleanup of old data
-- ⚠️  **Recommended:** Database connection pooling
-- Pattern: Check existing rotation in `lib/audit-logger.js`
-
----
-
-## Compliance Standards
-
-### Data Retention
-- ✅ **Required:** Audit logs retained for 90 days minimum
-- ✅ **Required:** User data deletion on request (GDPR)
-- ✅ **Required:** Export data in machine-readable format (JSON/CSV)
-
-### Monitoring & Observability
-- ✅ **Required:** Error tracking for production issues
-- ⚠️  **Recommended:** Performance monitoring (APM)
-- ⚠️  **Recommended:** Health check endpoints
-
----
-
-## Infrastructure Standards
-
-Based on Infrastructure Readiness epic (#[epic-id]):
-
-### Deployment
-- ✅ **Required:** Zero-downtime deployments
-- ✅ **Required:** Rollback capability
-- Pattern: Blue-green or canary deployments
-
-### Monitoring
-- ✅ **Required:** Application metrics (requests, errors, latency)
-- ✅ **Required:** Resource metrics (CPU, memory, disk)
-- ✅ **Required:** Alert thresholds configured
-
-### Security
-- ✅ **Required:** TLS/HTTPS for all endpoints
-- ✅ **Required:** Secrets management (not in code)
-- ✅ **Required:** Regular security scans
-
-### Compliance
-- ✅ **Required:** Data backup and recovery tested
-- ✅ **Required:** Incident response plan documented
-- ✅ **Required:** Access control and audit logging
-
----
-
-## Production Mode Checklist
-
-When implementing production chores, verify each feature has:
-
-**Security:**
-- [ ] Audit logging for all state changes
-- [ ] Data sanitization in logs
-- [ ] Authentication/authorization validation
-- [ ] Tamper-proof audit trail
-
-**Performance:**
-- [ ] Performance benchmarks (< 5s, < 100MB)
-- [ ] Concurrency controls for critical sections
-- [ ] Log rotation and cleanup
-
-**Scale:**
-- [ ] Handles expected load (1000+ items/users)
-- [ ] Idempotent operations
-- [ ] Graceful degradation under stress
-
-**Compliance:**
-- [ ] Data retention policies implemented
-- [ ] Export functionality for user data
-- [ ] Error tracking and monitoring
-
-**Infrastructure:**
-- [ ] Deployment automation ready
-- [ ] Monitoring and alerts configured
-- [ ] Security hardening complete
-- [ ] Backup/recovery tested
-
----
-
-## How Production Mode Skill Uses This
-
-### Scenario 1: Fresh from Stable Mode (Hot Context)
-```
-✓ Production scenarios already proposed
-✓ Production chores already created
-→ Validate scenarios against these standards
-→ Implement chores following patterns listed above
-→ Reference checklist for completeness
-```
-
-### Scenario 2: Gap in Time (Cold Context)
-```
-✓ Production scenarios exist but might be outdated
-→ Re-validate scenarios against current standards
-→ Check if project_state changed (internal→external)
-→ Add missing scenarios based on new requirements
-→ Update chores to match current infrastructure
-```
-
-### Scenario 3: Post External-Transition (New Requirements)
-```
-✗ Production scenarios don't exist yet
-→ Generate scenarios from these standards
-→ Focus on infrastructure-related requirements
-→ Create chores that address external deployment needs
-→ Reference Infrastructure Readiness epic decisions
-```
-
----
-
-## Pattern References
-
-This project uses these patterns for production code:
-
-**Audit Logging:**
-```javascript
-const { logTransition } = require('./lib/audit-logger');
-await logTransition(user, 'project_external', { epicId, timestamp });
-```
-
-**Data Sanitization:**
-```javascript
-const { sanitizeData } = require('./lib/data-protection');
-const safeData = sanitizeData({ userId, projectName, apiKey });
-```
-
-**Lock Management:**
-```javascript
-const { acquireLock, releaseLock } = require('./lib/lock-manager');
-const lockAcquired = await acquireLock('external-transition');
-if (!lockAcquired) throw new Error('Operation in progress');
-try {
-  // Critical section
-} finally {
-  await releaseLock('external-transition');
-}
-```
-
-**State Transitions:**
-```javascript
-const { recordTransition } = require('./lib/state-transitions');
-await recordTransition('internal', 'external', { timestamp, user });
-```
-
----
-
-## Notes
-
-- Standards marked ✅ **Required** must be implemented for all production features
-- Standards marked ⚠️  **Recommended** are optional but encouraged
-- Update this document when infrastructure decisions change
-- Reference Infrastructure Readiness epic for deployment-specific requirements

package/prototypes/2025-11-10-backlog-filtering-tree-aware.js

@@ -1,242 +0,0 @@
-// Prototype: Backlog Filtering for Production Items - Tree-aware filtering
-// Created: 2025-11-10
-// Purpose: Smart filtering that maintains tree integrity while hiding production items in internal projects
-// Decision: [to be filled after testing]
-
-/**
- * Prototype demonstrates:
- * 1. Reads project_state from config
- * 2. Filters production mode features when project_state='internal'
- * 3. Recursively filters children of production features (chores)
- * 4. Maintains tree integrity - doesn't break parent/child relationships
- * 5. --all flag bypasses filtering
- *
- * CRITICAL: Filtering ONLY applies to the BACKLOG section.
- * "Active Work" and "Recently Completed" sections show ALL items regardless of mode.
- * This makes sense: you care about what you're working on NOW and what you JUST completed,
- * even if it's production mode. Filtering is about hiding future work that's not relevant yet.
- *
- * Architecture principle: Only features have modes. Epics are containers, chores inherit context.
- */
-
-const { getDb } = require('../lib/database');
-const config = require('../lib/config');
-const { TYPE_EMOJIS } = require('../lib/constants');
-
-/**
- * Get filtered tree of work items
- * @param {boolean} includeCompleted - Include completed items
- * @param {boolean} showAll - Show all items including production (bypasses internal/external filtering)
- * @returns {Promise<Array>} Tree of work items
- */
-function getFilteredTree(includeCompleted = false, showAll = false) {
-  return new Promise((resolve, reject) => {
-    const db = getDb();
-    const projectConfig = config.read();
-    const isInternal = projectConfig.project_state === 'internal';
-
-    // Build WHERE clause for completion filter
-    const whereClause = includeCompleted ? '' : "WHERE status NOT IN ('done', 'cancelled')";
-
-    db.all(`SELECT * FROM work_items ${whereClause} ORDER BY parent_id, id`, [], (err, rows) => {
-      if (err) {
-        return reject(new Error(`Failed to fetch work items: ${err.message}`));
-      }
-
-      if (!rows || rows.length === 0) {
-        return resolve([]);
-      }
-
-      try {
-        // Build lookup
-        const itemsById = {};
-        rows.forEach(item => {
-          itemsById[item.id] = item;
-          item.children = [];
-        });
-
-        // Build tree
-        rows.forEach(item => {
-          if (item.parent_id && itemsById[item.parent_id]) {
-            itemsById[item.parent_id].children.push(item);
-          }
-        });
-
-        // Get root items
-        let rootItems = rows.filter(item => !item.parent_id);
-
-        // Apply production filtering if internal project and not showing all
-        if (isInternal && !showAll) {
-          rootItems = filterProductionItems(rootItems, itemsById);
-        }
-
-        resolve(rootItems);
-      } catch (err) {
-        reject(new Error(`Failed to build filtered tree: ${err.message}`));
-      }
-    });
-  });
-}
-
-/**
- * Recursively filter out production mode features and their children
- * Smart filtering: only removes items if they're production mode features
- * Maintains tree integrity: removes entire branches when feature is production
- *
- * @param {Array} items - Items to filter
- * @param {Object} itemsById - Lookup map of all items
- * @returns {Array} Filtered items
- */
-function filterProductionItems(items, itemsById) {
-  return items.filter(item => {
-    // Check if this item should be hidden
-    const shouldHide = isProductionModeItem(item);
-
-    if (shouldHide) {
-      return false; // Hide this item and all its children
-    }
-
-    // Item is not production - keep it and recursively filter its children
-    if (item.children && item.children.length > 0) {
-      item.children = filterProductionItems(item.children, itemsById);
-    }
-
-    return true;
-  });
-}
-
-/**
- * Determine if an item should be hidden in internal projects
- * Rules:
- * - Features with mode='production' are hidden
- * - Chores whose parent feature has mode='production' are hidden (handled by tree filtering)
- * - Epics are never hidden (they're containers)
- *
- * @param {Object} item - Work item to check
- * @returns {boolean} True if item should be hidden
- */
-function isProductionModeItem(item) {
-  // Only features can have production mode
-  if (item.type === 'feature' && item.mode === 'production') {
-    return true;
-  }
-
-  // Epics are containers - never hide them
-  // Chores don't have modes - their visibility is determined by their parent
-  return false;
-}
-
-/**
- * Print tree with visual indicators
- */
-function printTree(items, prefix = '', isRootLevel = true) {
-  if (!Array.isArray(items)) {
-    throw new Error('Items must be an array');
-  }
-
-  items.forEach((item, index) => {
-    const isLast = index === items.length - 1;
-    const emoji = TYPE_EMOJIS[item.type] || '📋';
-    const connector = isLast ? '└─' : '├─';
-
-    // Build mode indicator
-    let modeIndicator = '';
-    if (item.type === 'feature') {
-      if (item.phase === 'discovery') {
-        modeIndicator = ' [🔍 discovery]';
-      } else if (item.mode) {
-        modeIndicator = ` [${item.mode}]`;
-      }
-    } else if (item.mode) {
-      modeIndicator = ` [${item.mode}]`;
-    }
-
-    const line = isRootLevel
-      ? `${emoji} [#${item.id}] ${item.title}${modeIndicator}`
-      : `${prefix}${connector} ${emoji} [#${item.id}] ${item.title}${modeIndicator}`;
-
-    console.log(line);
-
-    // Print children
-    if (item.children && item.children.length > 0) {
-      const childPrefix = isRootLevel
-        ? '  '
-        : prefix + (isLast ? '  ' : '│ ');
-      printTree(item.children, childPrefix, false);
-    }
-  });
-}
-
-// Demo
-async function demo() {
-  console.log('═══════════════════════════════════════════════════');
-  console.log('Prototype: Tree-aware Production Filtering');
-  console.log('═══════════════════════════════════════════════════');
-  console.log('');
-
-  const projectConfig = config.read();
-  console.log(`Current project_state: ${projectConfig.project_state}`);
-  console.log('');
-
-  // Show default backlog (filtered if internal)
-  console.log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
-  console.log('📋  DEFAULT BACKLOG (jettypod backlog)');
-  console.log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
-  if (projectConfig.project_state === 'internal') {
-    console.log('Note: Production mode features hidden (internal project)');
-  }
-  console.log('');
-
-  const defaultTree = await getFilteredTree(false, false);
-  if (defaultTree.length === 0) {
-    console.log('No items found.');
-  } else {
-    printTree(defaultTree);
-  }
-  console.log('');
-
-  // Show all items
-  console.log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
-  console.log('📋  ALL ITEMS (jettypod backlog --all)');
-  console.log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
-  console.log('Note: Shows everything including production mode');
-  console.log('');
-
-  const allTree = await getFilteredTree(false, true);
-  if (allTree.length === 0) {
-    console.log('No items found.');
-  } else {
-    printTree(allTree);
-  }
-  console.log('');
-
-  console.log('═══════════════════════════════════════════════════');
-  console.log('Key behaviors demonstrated:');
-  console.log('');
-  console.log('✅ Features with mode=production are hidden in BACKLOG section');
-  console.log('✅ Their chores are also hidden (tree branch filtering)');
-  console.log('✅ Epics always visible (they\'re containers, no mode)');
-  console.log('✅ --all flag shows everything');
-  console.log('✅ Tree integrity maintained (no orphaned items)');
-  console.log('');
-  console.log('🔍 IMPORTANT: Filtering ONLY applies to BACKLOG section');
-  console.log('   "Active Work" shows current item (even if production mode)');
-  console.log('   "Recently Completed" shows last 3 done (even if production mode)');
-  console.log('   "Backlog" section filters out production items in internal projects');
-  console.log('');
-  console.log('Architecture: Only features have modes.');
-  console.log('Epics = containers (no mode), Chores = inherit from parent (no mode)');
-  console.log('═══════════════════════════════════════════════════');
-}
-
-// Run demo if executed directly
-if (require.main === module) {
-  demo()
-    .then(() => process.exit(0))
-    .catch(err => {
-      console.error('Error:', err.message);
-      process.exit(1);
-    });
-}
-
-module.exports = { getFilteredTree, filterProductionItems, isProductionModeItem };

package/prototypes/test/index.html

@@ -1 +0,0 @@
-test

package/setup-dist-repo.sh

@@ -1,68 +0,0 @@
-#!/bin/bash
-set -e
-
-echo "=========================================="
-echo "  DevPod Distribution Repo Setup"
-echo "=========================================="
-echo ""
-
-# Get the directory where this script is located (main repo)
-MAIN_REPO="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-echo "Main repo: $MAIN_REPO"
-
-# Check if devpod-dist already exists
-if [ -d "$HOME/projects/devpod-dist" ]; then
-  echo "⚠️  devpod-dist directory already exists at $HOME/projects/devpod-dist"
-  read -p "Delete and re-clone? (y/N): " -n 1 -r
-  echo
-  if [[ $REPLY =~ ^[Yy]$ ]]; then
-    rm -rf "$HOME/projects/devpod-dist"
-  else
-    echo "Aborting."
-    exit 1
-  fi
-fi
-
-# Clone the distribution repository
-echo ""
-echo "📦 Cloning devpod-dist repository..."
-cd ~/projects
-git clone https://github.com/spangbaryn/devpod-dist.git
-cd devpod-dist
-
-# Copy files from main repository
-echo ""
-echo "📋 Copying files..."
-cp "$MAIN_REPO/install.sh" .
-cp "$MAIN_REPO/install.ps1" .
-cp "$MAIN_REPO/dist-repo/README.md" .
-
-# Show what we have
-echo ""
-echo "📁 Files in distribution repo:"
-ls -la
-
-# Commit and push
-echo ""
-echo "💾 Committing and pushing..."
-git add .
-git commit -m "Initial distribution repository setup
-
-Install scripts and documentation for DevPod public distribution.
-
-- install.sh: Unix (macOS/Linux) installer
-- install.ps1: Windows PowerShell installer
-- README.md: User-facing documentation with installation instructions
-
-Install scripts are MIT licensed. DevPod application is proprietary.
-"
-git push origin main
-
-echo ""
-echo "✅ Success! Distribution repository is set up."
-echo ""
-echo "Verify at: https://github.com/spangbaryn/devpod-dist"
-echo ""
-echo "Next: Check that these URLs work:"
-echo "  https://raw.githubusercontent.com/spangbaryn/devpod-dist/main/install.sh"
-echo "  https://raw.githubusercontent.com/spangbaryn/devpod-dist/main/install.ps1"

package/test-production-standards-engine.js

@@ -1,130 +0,0 @@
-/**
- * Quick test of production-standards-engine
- */
-
-const engine = require('./lib/production-standards-engine');
-
-console.log('Testing Production Standards Engine\n');
-console.log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n');
-
-// Test 1: Startup MVP
-console.log('Test 1: Startup MVP preset\n');
-const mvp = engine.generateStandards({
-  preset: 'startup-mvp',
-  refinement: {
-    app_description: 'Internal tool for team collaboration',
-    user_count: '1-10',
-    downtime_impact: 'users_annoyed',
-    data_loss_impact: 'annoying',
-    sensitive_data: false
-  }
-});
-
-console.log(`Preset: ${mvp.preset}`);
-console.log(`Profiles: ${mvp.profiles.join(', ') || 'none'}`);
-console.log(`Standards: ${mvp.standards.length} total`);
-console.log(`  Security: ${mvp.standards.filter(s => s.domain === 'security').length}`);
-console.log(`  Performance: ${mvp.standards.filter(s => s.domain === 'performance').length}`);
-console.log(`  Infrastructure: ${mvp.standards.filter(s => s.domain === 'infrastructure').length}`);
-console.log(`Warnings: ${mvp.warnings.length}`);
-console.log(`Cost impact: ${mvp.cost_estimate.impact}`);
-console.log(`Cost drivers: ${mvp.cost_estimate.drivers.slice(0, 3).join(', ')}${mvp.cost_estimate.drivers.length > 3 ? '...' : ''}`);
-console.log('');
-
-// Test 2: Production SaaS with GDPR
-console.log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n');
-console.log('Test 2: Production SaaS with GDPR\n');
-const saas = engine.generateStandards({
-  preset: 'production-saas',
-  refinement: {
-    app_description: 'Project management SaaS',
-    user_count: '100-1k',
-    downtime_impact: 'revenue_loss',
-    data_loss_impact: 'bad_recoverable',
-    sensitive_data: true,
-    sensitive_types: ['email', 'project_data'],
-    user_geography: 'global',
-    compliance: ['GDPR'],
-    release_cadence: 'weekly'
-  }
-});
-
-console.log(`Preset: ${saas.preset}`);
-console.log(`Profiles: ${saas.profiles.join(', ')}`);
-console.log(`Standards: ${saas.standards.length} total`);
-console.log(`  Security: ${saas.standards.filter(s => s.domain === 'security').length}`);
-console.log(`  Performance: ${saas.standards.filter(s => s.domain === 'performance').length}`);
-console.log(`  Compliance: ${saas.standards.filter(s => s.domain === 'compliance').length}`);
-console.log(`  Infrastructure: ${saas.standards.filter(s => s.domain === 'infrastructure').length}`);
-console.log(`Warnings: ${saas.warnings.length}`);
-if (saas.warnings.length > 0) {
-  saas.warnings.forEach(w => console.log(`  - ${w.message}`));
-}
-console.log(`Cost impact: ${saas.cost_estimate.impact}`);
-console.log(`Cost drivers: ${saas.cost_estimate.drivers.join(', ')}`);
-console.log('');
-
-// Test 3: Enterprise
-console.log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n');
-console.log('Test 3: Enterprise with SOC2\n');
-const enterprise = engine.generateStandards({
-  preset: 'enterprise',
-  refinement: {
-    app_description: 'Enterprise SaaS platform',
-    user_count: '10k+',
-    downtime_impact: 'contractual_violation',
-    data_loss_impact: 'major_problem',
-    sensitive_data: true,
-    sensitive_types: ['customer_data', 'financial_data'],
-    user_geography: 'global',
-    compliance: ['SOC2', 'GDPR'],
-    release_cadence: 'daily+'
-  }
-});
-
-console.log(`Preset: ${enterprise.preset}`);
-console.log(`Profiles: ${enterprise.profiles.join(', ')}`);
-console.log(`Standards: ${enterprise.standards.length} total`);
-console.log(`  Required: ${enterprise.standards.filter(s => s.required).length}`);
-console.log(`  Optional: ${enterprise.standards.filter(s => !s.required).length}`);
-console.log(`Warnings: ${enterprise.warnings.length}`);
-console.log(`Cost impact: ${enterprise.cost_estimate.impact}`);
-console.log(`Cost drivers: ${enterprise.cost_estimate.drivers.join(', ')}`);
-console.log('');
-
-// Test 4: Over-engineering warning
-console.log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n');
-console.log('Test 4: Over-engineering check (Enterprise + 1-10 users)\n');
-const overEngineered = engine.generateStandards({
-  preset: 'enterprise',
-  refinement: {
-    app_description: 'Small tool',
-    user_count: '1-10',
-    downtime_impact: 'no_big_deal',
-    data_loss_impact: 'annoying',
-    sensitive_data: false
-  }
-});
-
-console.log(`Warnings: ${overEngineered.warnings.length}`);
-if (overEngineered.warnings.length > 0) {
-  overEngineered.warnings.forEach(w => console.log(`  [${w.severity}] ${w.message}`));
-}
-console.log('');
-
-// Show sample standard detail
-console.log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\n');
-console.log('Sample Standard Detail (from Production SaaS):\n');
-const sampleStandard = saas.standards.find(s => s.id === 'waf_rate_limits');
-if (sampleStandard) {
-  console.log(`ID: ${sampleStandard.id}`);
-  console.log(`Domain: ${sampleStandard.domain}`);
-  console.log(`Required: ${sampleStandard.required}`);
-  console.log(`Reasoning: ${sampleStandard.reasoning}`);
-  console.log(`Acceptance: ${sampleStandard.acceptance}`);
-  console.log(`Pattern: ${sampleStandard.pattern}`);
-}
-console.log('');
-
-console.log('━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━');
-console.log('✅ All tests passed!');