Skip to content

chore: v0.5.0 release hardening#120

Merged
bradygaster merged 1 commit intodevfrom
squad/62-release-hardening
Feb 20, 2026
Merged

chore: v0.5.0 release hardening#120
bradygaster merged 1 commit intodevfrom
squad/62-release-hardening

Conversation

@bradygaster
Copy link
Copy Markdown
Owner

@bradygaster bradygaster commented Feb 20, 2026

Fixes #62 (P0 items)

Changes

  • Bump package.json version to 0.5.0
  • Add version consistency validation step to squad-preview.yml and squad-release.yml
  • Mirror validation to templates/workflows/ for consistency
  • Create docs/release-checklist.md with comprehensive release procedures
  • Add v0.5.0 CHANGELOG.md entry with all planned features

Validation

  • All 58 tests pass ✅
  • Version 0.5.0 validated in CHANGELOG.md ✅
  • Workflows updated in both source and templates ✅

Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com

@bradygaster
chore: v0.5.0 release hardening — version bump, CI validation, releas…
830ba77 
…e checklist (#62)

- Bump package.json version from 0.4.2 to 0.5.0
- Add version consistency validation to squad-preview.yml and squad-release.yml
  - Validates that package.json version has matching CHANGELOG.md entry
  - Prevents releases with missing or mismatched version documentation
- Mirror validation changes to templates/workflows/ for consumer repos
- Create docs/release-checklist.md with comprehensive release procedures
  - Patch, minor, and major release checklists
  - Pre-release and CI validation steps
  - Clear actionable guidance for release engineers
- Update CHANGELOG.md with v0.5.0 feature list

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@bradygaster bradygaster merged commit 4fd3801 into dev Feb 20, 2026
1 check passed
This was referenced Feb 20, 2026
Closed
Closed
@bradygaster bradygaster deleted the squad/62-release-hardening branch February 27, 2026 01:08
joniba pushed a commit to joniba/squad that referenced this pull request Mar 26, 2026
docs: notifications system guide (bradygaster#120)
dbe50ee 
Adds comprehensive user-facing documentation for the proactive notifications system across three implementation phases: webhook routing, failure recovery, and scheduler integration.

Guide covers:
- Setup and configuration (webhook URL, directory structure)
- Sending notifications for all three tiers (urgent, action, feature)
- Event trigger patterns and integration points
- Failure recovery with dead letter queue and retry scheduler
- Configuration reference (state watermark, dead letter structure)
- Testing and validation commands
- Troubleshooting flowcharts and health checks
- Reference section with Adaptive Card templates

Updates docs/INDEX.md and docs/TAGS.md for proper indexing per Bilbo standards.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
joniba pushed a commit to joniba/squad that referenced this pull request Mar 26, 2026
@jbenami
[dgrep-cli] Phase 2.1: Authentication integration (bradygaster#104) (b…
f28aebd 
…radygaster#129)

* feat(squad): hire Frodo — TI Domain Backend Engineer

Conservative charter for SecurityInsights RP and Sentinel-TiPipeline work.
Domain knowledge seeded from Sagi's TiExpert PR #15064785 review and
ICM 767184571 investigation (RP-side subscription blocking).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* fix: purge all lockout rules from source files (Decision bradygaster#48)

Removed Reviewer Rejection Lockout Semantics from:
- .github/agents/squad.agent.md (coordinator governance)
- .squad/templates/squad.agent.md (template copy)
- .squad/templates/charter.md (charter template)
- .squad/templates/run-output.md (review output template)
- .squad/agents/gandalf/charter.md (lead charter)
- templates/squad-starter/charter-templates/lead.md (starter template)

New rule: original authors own their fixes. Reviewers provide
specific feedback; coordinator routes it back to the author.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* docs: notifications system guide (bradygaster#120)

Adds comprehensive user-facing documentation for the proactive notifications system across three implementation phases: webhook routing, failure recovery, and scheduler integration.

Guide covers:
- Setup and configuration (webhook URL, directory structure)
- Sending notifications for all three tiers (urgent, action, feature)
- Event trigger patterns and integration points
- Failure recovery with dead letter queue and retry scheduler
- Configuration reference (state watermark, dead letter structure)
- Testing and validation commands
- Troubleshooting flowcharts and health checks
- Reference section with Adaptive Card templates

Updates docs/INDEX.md and docs/TAGS.md for proper indexing per Bilbo standards.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* feat(dgrep): authentication integration (bradygaster#104)

- IAuthProvider interface with AzCli, Certificate, ManagedIdentity providers
- AuthProviderFactory with config-driven selection (default: azcli)
- dgrep auth status/test commands
- KustoQueryExecutor wired with auth provider
- AuthMethod field in DgrepConfig + ConfigManager support
- IProcessRunner abstraction for testable az CLI invocation
- InternalsVisibleTo for test access
- 78 new xUnit tests (262 total, all passing)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Elrond <elrond@squad.local>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
joniba pushed a commit to joniba/squad that referenced this pull request Mar 26, 2026
@jbenami
[dgrep-cli] Phase 2.2: Saved queries (bradygaster#105) (bradygaster#130)
f01518a 
* feat(squad): hire Frodo — TI Domain Backend Engineer

Conservative charter for SecurityInsights RP and Sentinel-TiPipeline work.
Domain knowledge seeded from Sagi's TiExpert PR #15064785 review and
ICM 767184571 investigation (RP-side subscription blocking).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* fix: purge all lockout rules from source files (Decision bradygaster#48)

Removed Reviewer Rejection Lockout Semantics from:
- .github/agents/squad.agent.md (coordinator governance)
- .squad/templates/squad.agent.md (template copy)
- .squad/templates/charter.md (charter template)
- .squad/templates/run-output.md (review output template)
- .squad/agents/gandalf/charter.md (lead charter)
- templates/squad-starter/charter-templates/lead.md (starter template)

New rule: original authors own their fixes. Reviewers provide
specific feedback; coordinator routes it back to the author.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* docs: notifications system guide (bradygaster#120)

Adds comprehensive user-facing documentation for the proactive notifications system across three implementation phases: webhook routing, failure recovery, and scheduler integration.

Guide covers:
- Setup and configuration (webhook URL, directory structure)
- Sending notifications for all three tiers (urgent, action, feature)
- Event trigger patterns and integration points
- Failure recovery with dead letter queue and retry scheduler
- Configuration reference (state watermark, dead letter structure)
- Testing and validation commands
- Troubleshooting flowcharts and health checks
- Reference section with Adaptive Card templates

Updates docs/INDEX.md and docs/TAGS.md for proper indexing per Bilbo standards.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* feat(dgrep): saved queries with parameter substitution (bradygaster#105)

- SavedQuery model with DefaultDatabase, DefaultCluster, {{param}} placeholders
- dgrep saved list/add/remove/show/run commands
- Parameter substitution via {{param_name}} with missing-param validation
- 3 built-in ICM investigation queries (icm-errors, icm-latency, icm-throttling)
- SavedCommand wired into Program.cs via QueryExecutor + ConfigManager
- Full xUnit test coverage (42 new tests, 317 total passing)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Elrond <elrond@squad.local>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
joniba pushed a commit to joniba/squad that referenced this pull request Mar 26, 2026
@jbenami
[squad] Frodo charter v2 — proper TI domain charter (bradygaster#131)
35666e3 
* feat(squad): hire Frodo — TI Domain Backend Engineer

Conservative charter for SecurityInsights RP and Sentinel-TiPipeline work.
Domain knowledge seeded from Sagi's TiExpert PR #15064785 review and
ICM 767184571 investigation (RP-side subscription blocking).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* fix: purge all lockout rules from source files (Decision bradygaster#48)

Removed Reviewer Rejection Lockout Semantics from:
- .github/agents/squad.agent.md (coordinator governance)
- .squad/templates/squad.agent.md (template copy)
- .squad/templates/charter.md (charter template)
- .squad/templates/run-output.md (review output template)
- .squad/agents/gandalf/charter.md (lead charter)
- templates/squad-starter/charter-templates/lead.md (starter template)

New rule: original authors own their fixes. Reviewers provide
specific feedback; coordinator routes it back to the author.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* docs: notifications system guide (bradygaster#120)

Adds comprehensive user-facing documentation for the proactive notifications system across three implementation phases: webhook routing, failure recovery, and scheduler integration.

Guide covers:
- Setup and configuration (webhook URL, directory structure)
- Sending notifications for all three tiers (urgent, action, feature)
- Event trigger patterns and integration points
- Failure recovery with dead letter queue and retry scheduler
- Configuration reference (state watermark, dead letter structure)
- Testing and validation commands
- Troubleshooting flowcharts and health checks
- Reference section with Adaptive Card templates

Updates docs/INDEX.md and docs/TAGS.md for proper indexing per Bilbo standards.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* docs: notifications status assessment — honest gap analysis

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* fix(dgrep): Windows process runner for az.cmd invocation (bradygaster#110)

On Windows, az is az.cmd (batch file). Process.Start with
UseShellExecute=false can't find it. Fix: resolve .cmd extension
on Windows before spawning process.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* refactor: Frodo charter v2 — domain-grounded, no link indirection

Complete rewrite of Frodo's charter based on deep TI domain research.

Changes:
- Removed ICM-specific content (767184571, 764634026)
- Removed link indirection to PR reviews and external docs
- Added inline TI domain knowledge: 4-layer pipeline architecture
  (Ingestion, Processing, Storage, Matching), all repos covered
- Extracted concrete patterns from Galadriel's reviews (STIX inheritance,
  error handling contracts, API versioning, polling discipline)
- Expanded scope from 2 repos to entire TI domain (C:\dev\ti)
- Kept conservative philosophy, EMU auth, failure recovery unchanged

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* refactor: incorporate Elrond's TI domain research into Frodo charter

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Elrond <elrond@squad.local>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
joniba pushed a commit to joniba/squad that referenced this pull request Mar 26, 2026
Scribe: Process manifest — log 4 agent completions, 6 issues closed, …
4e3112b 
…Boromir hired

- Orchestration logs: Gimli (DGrep SDK bradygaster#105, error handling bradygaster#108, coordinator bradygaster#134), Bilbo (notifications docs bradygaster#120)
- Session log: Gimli-Bilbo batch completion (381 tests, 3 issues closed)
- History updates: Gimli (notifications coordinator pattern notes), Bilbo (runbook + overview delivery notes)
- Decision inbox: Verified empty, no merges required
- Status: Batch complete, ready for main branch merge

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
joniba pushed a commit to joniba/squad that referenced this pull request Mar 26, 2026
Log notifications MVP completion batch (2026-03-24T01:01:43Z)
f8601e4 
- Gimli: 3 tasks completed (bradygaster#135 E2E validation, bradygaster#106 tail command, bradygaster#108 error handling)
- Bilbo: 1 task completed (bradygaster#120 documentation)
- Milestone: Notifications MVP E2E validated, all 4 MVP issues closed
- Logged orchestration entries, session record, and cross-agent histories
joniba pushed a commit to joniba/squad that referenced this pull request Mar 26, 2026
@jbenami
[docs] Notifications runbook (bradygaster#143)
6680471 
* docs(guides): Notifications runbook for issue bradygaster#120

Add comprehensive Teams notification system runbook covering:
- Notification tiers (urgent, action, feature) and delivery semantics
- One-time webhook setup and security best practices
- Event types with complete JSON schemas and examples
- Integration guide for dispatcher and direct usage
- Troubleshooting guide for common failure modes
- Reference documentation for event schema and state file

Addresses squad issue bradygaster#120: comprehensive end-user documentation
for the Teams notification system.

Co-authored-by: Copilot &lt;223556219+Copilot@users.noreply.github.com&gt;

* docs: Add parameter translation table and notification-scheduler.ps1 reference

Fix PR bradygaster#143 feedback:
- Add Parameter Translation table documenting how dispatcher parameters
  (notify-squad-event.ps1) map to underlying scripts (notify-blocked.ps1,
  notify-feature-complete.ps1) for both 'blocked' and 'feature-complete' events
- Document non-obvious behavior: PR normalization (adds # prefix),
  DocLinks only forwards first URL with warning
- Add notification-scheduler.ps1 to See Also references with description
  of scheduler and batching engine role
- Update script descriptions in references to clarify function

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Jonathan Ben Ami <elrond@squad.local>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@diberry diberry mentioned this pull request Mar 30, 2026
Merged
diberry added a commit that referenced this pull request Mar 30, 2026
@diberry
feat(ci): CI hardening phase 2 — items 6-10 + security hardening
f99f9e9 
Implements 5 short-term CI hardening improvements:
- Lockfile stability check in preflight
- Composite action for npm setup (DRY)
- Cron schedule audit and cleanup (refs #120)
- GitHub API rate limit monitoring (values masked per security review)
- npm registry health check before publish

Security: Rate limit values masked in CI logs per RETRO review.

Refs: diberry#121

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
tamirdresher pushed a commit that referenced this pull request Mar 30, 2026
@diberry
feat(ci): CI hardening phase 2 — items 6-10 + security hardening (#701)
eb69444 
Implements 5 short-term CI hardening improvements:
- Lockfile stability check in preflight
- Composite action for npm setup (DRY)
- Cron schedule audit and cleanup (refs #120)
- GitHub API rate limit monitoring (values masked per security review)
- npm registry health check before publish

Security: Rate limit values masked in CI logs per RETRO review.

Refs: diberry#121

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bradygaster