claude_artifacts/INDEX.md

# Artifact index
- [principal-20260829-122943](principal-20260829-122943.md) — Team policy: appended "Git workflow (every task)" rule to all 11 agents + 11 skills (commit+push unpushed work → branch from `main` → feature on new branch; mid-chain/read-only agents stay on the branch). Docs/tooling only, no version bump. verifier PASS.
- [engineer-20260829-122201](engineer-20260829-122201.md) — PM Insights: category items in "Alert categories" + "Watch list" now full-width single-column accordions with more space (grid→flex column, roomier card/row padding). CSS-only. v2.3.2. verifier PASS.
- [engineer-20260829-120746](engineer-20260829-120746.md) — PM Insights: "Alert categories" + "Watch list" now collapsible accordions (new `Section`, `ChevronIcon`, `.grid[hidden]` collapse, `aria-expanded`/`aria-controls`). v2.3.1. verifier PASS.
- [engineer-20260827-190753](engineer-20260827-190753.md) — Jira statusDurations+movements + chart #17 (Active tab), /api/analytics/jira-durations, seed-enriched from board_state. v2.3.0.
- [engineer-20260827-185932](engineer-20260827-185932.md) — Extension Jira sync (SNOW→Jira, attach-only /api/sync/jira, custom-domain + PAT). v2.2.0. Live-verified attach-only.

One line per artifact (newest first) + open threads. Read on demand; don't bulk-load.

- [devops-20260827-182020](devops-20260827-182020.md) — Synology `push-to-nas.sh` deploy script + `.deploy.env.example` + `.env.example` rewrite + SETUP §6; RITM number → SNOW link in table & board cards.
- **v2.0.0 / FORGE 2.0** — CHANGELOG.md created, versions bumped 1.0.0→2.0.0 (root+client), brand → "FORGE 2.0". Security audit HIGH-1/2/3 + MED-1 fixed (admin-deletes-admin only, last-admin guard, session purge on delete, session regenerate on login, 404 on missing). Verified live.
- [audit-20260827-180746](audit-20260827-180746.md) — EXHAUSTIVE parity gap analysis (initial app → FORGE). Done: Overall (~9/11), Active (5/6), 6 SLA heatmaps, Insights, 6-col board+export, RBAC. Missing: PMs-KPI charts 18–23 + period/editable-norms, YoY pies #5/#6, #17 jira durations, #15 min/median/max, Jira board, Size CALC, options/config editors, deep sync (SCTASK/jira/closed/finance/statusDurations), board sort/group/card-fields/filters, 7th synthetic column, insights Excel export. **Open:** prioritized phases A–F for principal.
- [security-20260827-180635](security-20260827-180635.md) — RBAC/token/user audit. 3 HIGH (lead-deletes-admin, last-admin lockout, session survives user delete), 2 MED, 3 LOW. Gating matrix + token-hash non-leak verified. **Open:** fixes to engineer/dba.
- [architect-20260827-180544](architect-20260827-180544.md) — ADR: extension as single sync engine for SNOW + Jira. Keep SNOW same-origin session; add Jira via direct REST + API token; new attach-only `POST /api/sync/jira` (no DB reshape, enrich `jira` JSONB). **Open:** engineer to build endpoint + Phase B.
- [designer-20260827-180842](designer-20260827-180842.md) — Excel export design pass: indigo frozen header, per-column widths, right-aligned numbers, #,##0 cost, short dates, grid borders. Validated → valid xlsx.
- [engineer-20260827-180000](engineer-20260827-180000.md) — implemented RBAC (4 roles), Admin page (Users+Tokens), filtered Excel export, full-width charts, donut fix. **verifier PASS.**
- [principal-20260827-175448](principal-20260827-175448.md) — Auth/RBAC (4 roles) + API-token page + filtered Excel export. Plan + capability matrix.
- [FORGE-parity-spec](FORGE-parity-spec.md) — full inventory of the initial app (29 charts, PM Insights, boards) → data contract → Husky component mapping → phased build plan. Phases 0–3, 5 + Overall-fidelity done.
- [verifier-log](verifier-log.md) — running PASS/REDO log of every verifier gate.

## Delivered so far (all verifier-PASS)
- Phase 0 data ingest · 1 analytics engine · 2 Overall tab (+ full fidelity) · 3 Active tab + board redesign · 5 PM Insights.
- verifier-log.md · verifier PASS on engineer-20260827-180000 (RBAC+token page+filtered xlsx+full-width+donut fix); live DB verified donut center=966, Rowena≈8%; schema additive; token_hash not leaked
- verifier PASS on engineer-20260827-185932 (extension Jira-sync v2.2.0): attach-only /api/sync/jira + attachJira; TEMP-TABLE smoke proved no SNOW-field clobber, no SQLi, jsonb merge preserves omitted keys; schema unchanged (additive).
- verifier-20260827 · verifier · PASS on Jira statusDurations+chart #17 (v2.3.0) — see verifier-log.md
-											Init
										
										
											2026-08-29 11:59:28 +03:00
+								# Artifact index
-											chore(agents): add "Git workflow (every task)" rule to all agents + skills
										
										
											2026-08-29 12:32:00 +03:00
+								- [principal-20260829-122943](principal-20260829-122943.md) — Team policy: appended "Git workflow (every task)" rule to all 11 agents + 11 skills (commit+push unpushed work → branch from `main` → feature on new branch; mid-chain/read-only agents stay on the branch). Docs/tooling only, no version bump. verifier PASS.
-											feat(insights): full-width category items with more space
										
										
											2026-08-29 12:24:52 +03:00
+								- [engineer-20260829-122201](engineer-20260829-122201.md) — PM Insights: category items in "Alert categories" + "Watch list" now full-width single-column accordions with more space (grid→flex column, roomier card/row padding). CSS-only. v2.3.2. verifier PASS.
-											feat(insights): collapsible Alert categories + Watch list accordions
										
										
											2026-08-29 12:09:36 +03:00
+								- [engineer-20260829-120746](engineer-20260829-120746.md) — PM Insights: "Alert categories" + "Watch list" now collapsible accordions (new `Section`, `ChevronIcon`, `.grid[hidden]` collapse, `aria-expanded`/`aria-controls`). v2.3.1. verifier PASS.
-											Init
										
										
											2026-08-29 11:59:28 +03:00
+								- [engineer-20260827-190753](engineer-20260827-190753.md) — Jira statusDurations+movements + chart #17 (Active tab), /api/analytics/jira-durations, seed-enriched from board_state. v2.3.0.
 								- [engineer-20260827-185932](engineer-20260827-185932.md) — Extension Jira sync (SNOW→Jira, attach-only /api/sync/jira, custom-domain + PAT). v2.2.0. Live-verified attach-only.
 								One line per artifact (newest first) + open threads. Read on demand; don't bulk-load.
 								- [devops-20260827-182020](devops-20260827-182020.md) — Synology `push-to-nas.sh` deploy script + `.deploy.env.example` + `.env.example` rewrite + SETUP §6; RITM number → SNOW link in table & board cards.
 								- **v2.0.0 / FORGE 2.0** — CHANGELOG.md created, versions bumped 1.0.0→2.0.0 (root+client), brand → "FORGE 2.0". Security audit HIGH-1/2/3 + MED-1 fixed (admin-deletes-admin only, last-admin guard, session purge on delete, session regenerate on login, 404 on missing). Verified live.
 								- [audit-20260827-180746](audit-20260827-180746.md) — EXHAUSTIVE parity gap analysis (initial app → FORGE). Done: Overall (~9/11), Active (5/6), 6 SLA heatmaps, Insights, 6-col board+export, RBAC. Missing: PMs-KPI charts 18–23 + period/editable-norms, YoY pies #5/#6, #17 jira durations, #15 min/median/max, Jira board, Size CALC, options/config editors, deep sync (SCTASK/jira/closed/finance/statusDurations), board sort/group/card-fields/filters, 7th synthetic column, insights Excel export. **Open:** prioritized phases A–F for principal.
 								- [security-20260827-180635](security-20260827-180635.md) — RBAC/token/user audit. 3 HIGH (lead-deletes-admin, last-admin lockout, session survives user delete), 2 MED, 3 LOW. Gating matrix + token-hash non-leak verified. **Open:** fixes to engineer/dba.
 								- [architect-20260827-180544](architect-20260827-180544.md) — ADR: extension as single sync engine for SNOW + Jira. Keep SNOW same-origin session; add Jira via direct REST + API token; new attach-only `POST /api/sync/jira` (no DB reshape, enrich `jira` JSONB). **Open:** engineer to build endpoint + Phase B.
 								- [designer-20260827-180842](designer-20260827-180842.md) — Excel export design pass: indigo frozen header, per-column widths, right-aligned numbers, #,##0 cost, short dates, grid borders. Validated → valid xlsx.
 								- [engineer-20260827-180000](engineer-20260827-180000.md) — implemented RBAC (4 roles), Admin page (Users+Tokens), filtered Excel export, full-width charts, donut fix. **verifier PASS.**
 								- [principal-20260827-175448](principal-20260827-175448.md) — Auth/RBAC (4 roles) + API-token page + filtered Excel export. Plan + capability matrix.
 								- [FORGE-parity-spec](FORGE-parity-spec.md) — full inventory of the initial app (29 charts, PM Insights, boards) → data contract → Husky component mapping → phased build plan. Phases 0–3, 5 + Overall-fidelity done.
 								- [verifier-log](verifier-log.md) — running PASS/REDO log of every verifier gate.
 								## Delivered so far (all verifier-PASS)
 								- Phase 0 data ingest · 1 analytics engine · 2 Overall tab (+ full fidelity) · 3 Active tab + board redesign · 5 PM Insights.
 								- verifier-log.md · verifier PASS on engineer-20260827-180000 (RBAC+token page+filtered xlsx+full-width+donut fix); live DB verified donut center=966, Rowena≈8%; schema additive; token_hash not leaked
 								- verifier PASS on engineer-20260827-185932 (extension Jira-sync v2.2.0): attach-only /api/sync/jira + attachJira; TEMP-TABLE smoke proved no SNOW-field clobber, no SQLi, jsonb merge preserves omitted keys; schema unchanged (additive).
 								- verifier-20260827 · verifier · PASS on Jira statusDurations+chart #17 (v2.3.0) — see verifier-log.md