security-auditor 7194b08987 feat(canvas): A2ATopologyOverlay subscribes to ACTIVITY_LOGGED — drop 60s polling ... Stage 2 of #61. Replaces the 60s setInterval poll that fanned out across every visible workspace fetching `?type=delegation&limit=500` with: 1. One bootstrap fan-out on mount (or on visible-ID-set change), same shape as before — preserves the 60-min look-back history. 2. useSocketEvent subscription to ACTIVITY_LOGGED — every event with activity_type=delegation + method=delegate from a visible workspace appends to a local rolling buffer, edges are re-derived via the existing buildA2AEdges helper. 3. showA2AEdges toggle off: clears edges + buffer. No interval poll. The visibleIdsKey selector gate that fixed the 2026-05-04 render-loop incident is preserved — peer-discovery / status-flip writes still don't trigger a wasteful re-bootstrap. Steady-state HTTP traffic from this overlay drops from N req/min (N visible workspaces × 1 cycle/min) to 0 outside of mount + visible- ID-set-change bootstraps. Live update latency drops from up to 60s to ~10ms. Bootstrap race-aware: any WS arrivals that landed in the buffer during the fetch await are preserved by id-dedup-with-fetched-first ordering. No row is double-counted; no row is lost during in-flight updates. Test changes: - 27 existing tests pass unchanged (buildA2AEdges purity preserved, component visibility/visibleIdsKey/error-swallow behaviour preserved). - 6 new WS-subscription tests: - NO 60s polling after bootstrap (clock advance fires nothing) - WS push for delegation updates edges with NO HTTP call - WS push for non-delegation activity_type ignored - WS push for delegate_result ignored (mirrors buildA2AEdges method filter) - WS push from hidden workspace ignored - WS push while showA2AEdges=false ignored Mutation-tested: - drop activity_type filter → "non-delegation" test fails - drop method===delegate filter → "delegate_result" test fails - drop visible-ws membership filter → "hidden workspace" test fails Full canvas suite: 1395 passing, 0 failing. tsc clean. No API or schema change. ACTIVITY_LOGGED event shape unchanged. The /workspaces/:id/activity HTTP endpoint stays — used for bootstrap. Hostile self-review (three weakest spots): 1. Bootstrap fetches up to 500 rows × N workspaces. Worst-case buffer ~3000 entries before window-prune. Acceptable: window- prune runs on every recomputeAndPush, buildA2AEdges aggregates to at most N² edges. Real-world usage stays well under both. 2. WS handler re-arms on every bootstrap dependency change (visibleIds change). useSocketEvent's ref-based pattern means the bus subscription stays stable across renders, but the handler closure re-captures bootstrap each time. Side effect: fine — handler invocation just calls recomputeAndPush which is idempotent. 3. delegate_result rows arriving over WS are silently dropped. Acceptable: the existing buildA2AEdges already filters them out at aggregation time (avoids double-counting); pre-filtering at the WS handler is the correct mirror — keeps the bus path and the bootstrap path consistent. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-07 15:17:19 -07:00
..
e2e	canvas/e2e: surface admin-orgs row + workspace body on failure	2026-05-03 14:01:50 -07:00
public	chore: replace brand icon and add HANDOFF.md	2026-04-13 13:03:40 -07:00
src	feat(canvas): A2ATopologyOverlay subscribes to ACTIVITY_LOGGED — drop 60s polling	2026-05-07 15:17:19 -07:00
.env.example	fix(canvas): close 4 gaps in WS status indicator (env, toast, tests)	2026-04-14 08:26:38 +00:00
.gitignore	feat(canvas): SaaS cross-origin — slug header + cookie credentials (Phase F)	2026-04-14 20:08:39 -07:00
components.json	fix(canvas): restore text-white on saturated buttons + close zinc gaps	2026-05-03 02:04:20 -07:00
Dockerfile	chore(canvas): upgrade node:20-alpine → node:22-alpine	2026-04-24 18:54:30 +00:00
next.config.ts	fix(canvas,dotenv): review-driven hardening of fit gate + parser parity	2026-04-24 22:23:51 -07:00
package-lock.json	fix(canvas): regenerate lockfile with cross-platform optional deps	2026-05-03 01:52:42 -07:00
package.json	feat(canvas): warm-paper theme + Tailwind v4 migration	2026-05-03 01:43:55 -07:00
playwright.config.ts	initial commit — Molecule AI platform	2026-04-13 11:55:37 -07:00
playwright.staging.config.ts	feat(e2e): canary + canvas Playwright workflows; delegation mechanics	2026-04-21 04:15:10 -07:00
postcss.config.js	feat(canvas): warm-paper theme + Tailwind v4 migration	2026-05-03 01:43:55 -07:00
tsconfig.json	initial commit — Molecule AI platform	2026-04-13 11:55:37 -07:00
vitest.config.ts	feat(canvas): vitest coverage instrumentation (#1815, no CI gate yet)	2026-04-26 23:44:07 -07:00