bullet: integrated work for human review

EduarD3V commented

2026-10-14 16:07:29 +02:00

Owner

Rolling PR. All bullet work lands on bullet-develop via per-issue PRs (auto-merged after review + gates). Merge this single PR into main when satisfied.

Automated by bullet: implemented → reviewed (independent model) → gates green → auto-merged into bullet-develop. Trunk is human territory; this PR is the one button the human presses.

**Rolling PR.** All bullet work lands on `bullet-develop` via per-issue PRs (auto-merged after review + gates). Merge this single PR into `main` when satisfied. Automated by bullet: implemented → reviewed (independent model) → gates green → auto-merged into bullet-develop. Trunk is human territory; this PR is the one button the human presses.

EduarD3V added 4 commits

2026-10-14 16:47:03 +02:00

chore: flatten repo — move web/ to repo root, untrack decompiled trees (Refs #26 ) c2a981adce

chore: root-context container + ignore untracked reference trees, drop stale gates (Refs #26 ) 68b3922411

docs: retarget paths to the flat layout and the reference tag (Refs #26 ) 1f4d007e12

Merge pull request 'Epic: restructure repo — flatten web/ to root, drop decompiled/ from git' (#31 ) from issue/26-epic-restructure-repo-flatten- into bullet-develop ea814d58fd

EduarD3V added 6 commits

2026-10-14 17:30:58 +02:00

wip: paused by operator (issue #28 ) — partial work preserved e61b47d44b

mcp: tests, e2e check and trusted-anchor config for the stdio server (Refs #28 ) a0ad55f72c

Fills in the half of the slice the design study promises but did not yet have:
vitest coverage over the input jail, the keystore, the three tools and the
audit trail, plus an end-to-end check that signs through a real MCP client and
lets `openssl cms -verify` accept the result.

- test/: input (path escape, size cap, exactly-one-source), config, certstore
  (wrong PIN, missing configuration, id separator) and tools (sign → verify,
  tampering, unsupported formats, audit). PKCS#12 containers are generated with
  openssl at test time, so no key material is committed.
- scripts/e2e.mjs: spawns the built server over the official SDK client, signs,
  verifies with openssl, rejects a tampered document, checks the error surface
  and that no response carries key material.
- verify takes `artifact_b64`/`path` (it was `file_b64`, which the design doc
  did not match), and the chain is built against AUTOFIRME_MCP_TRUSTED_ROOTS
  when the operator sets it — agent-supplied anchors would make the chain check
  report whatever the caller wanted.
- build: drop the duplicate shebang (esbuild keeps the source's) and stop
  tracking dist/, which is build output.

docs: MCP study notes operator trust anchors and the verification evidence (Refs #28 ) 1ffc0bada6

Refs #28

docs: state the DOM evidence for the Node-compat audit exactly (Refs #28 ) 09e0bb5a0d

docs: state the risk of running the engine under Node (Refs #28 ) dd74627d24

Merge pull request 'Epic: MCP server exposing AutoFirma sign/verify to agents (study)' (#32 ) from issue/28-epic-mcp-server-exposing-autof into bullet-develop 76c58e65b1

EduarD3V added 6 commits

2026-10-14 17:47:38 +02:00

certstore: encrypted identity + signed-output store over IndexedDB (Refs #29 ) f1841517a9

wip: paused by operator (issue #29 ) — partial work preserved 069aa47e31

store: fix the batch run swallowed by an optional call, shim jsdom dialog, realm-safe byte compare (Refs #29 ) 0a585744c3

certpicker: render the certificate list from the app's chain so a store-unlocked session fills the picker (Refs #29 ) 1a388c0209

store tests: allow the PBKDF2 seal/unlock to finish under parallel files (Refs #29 ) 4676995161

Merge issue/29-epic-stored-signatures-save-re into bullet-develop (Refs #29 ) a5c609a265

Conflict: #29's new files were added under web/src/lib/ while #26 flattened
web/ to the repo root. Pure path-location conflict, no content conflicts —
took the issue branch content at src/lib/... for all six new files and the
six rename-mapped edits (develop side had not touched them since the base).

Gates: .bullet/bullet.yaml gates list is empty (#26 dropped the decompiled
gates); git diff --check clean, pnpm test 115/115, pnpm build ok,
svelte-check 0 errors.

EduarD3V referenced this pull request

2026-10-14 17:55:14 +02:00

Epic: shadcn/ui redesign — 2/3 drop zone + 1/3 actions panel (desktop) #27

EduarD3V referenced this pull request

2026-10-14 18:00:41 +02:00

Epic: shadcn/ui redesign — 2/3 drop zone + 1/3 actions panel (desktop) #27

EduarD3V added 1 commit

2026-10-14 18:06:46 +02:00

probe 34341882a4

EduarD3V force-pushed bullet-develop from 34341882a4 to a5c609a265

2026-10-14 18:08:07 +02:00

Compare

EduarD3V added 8 commits

2026-10-14 18:15:51 +02:00

web: init shadcn-svelte primitives, cn helper and dark-mode CSS vars (Refs #27 ) 6c3735661c

web: 2/3 drop zone + 1/3 sticky actions panel on shadcn primitives (Refs #27 ) b3072ec335

wip: paused by operator (issue #27 ) — partial work preserved d8ced390b0

web: document shadcn-svelte layer, dark mode and 2/3+1/3 grid in README (Refs #27 ) 5332ea3e5e

web: assert the certificate picker's inputs through the snapshot suite (Refs #27 ) c0312f4b82

review: assert the drop column renders the shadcn Card primitive (Refs #27 ) 0cd1c7143b

review: snapshot the dashed drop-zone card and its browse control (Refs #27 ) 6a12ae2f5f

Merge issue/27-epic-shadcn-ui-redesign-2-3-dr into bullet-develop (Refs #27 ) b023c83650

Brings the shadcn-svelte redesign (2/3 drop zone + 1/3 sticky actions panel,
primitives, dark mode via CSS vars) onto the restructured root layout.

Conflicts resolved:
- issue #26 moved web/ to the repo root, so the branch's new ui/ primitives and
  components.json/utils.ts landed at src/lib/components/ui/ and src/lib/utils.ts:
  kept at the new paths, untouched content.
- CertPicker.svelte: took the shadcn field markup, kept #29's `chain`/`vault`
  props (the branch still called the chain `certs`).
- BatchQueue.svelte: took the shadcn imports and badge/tooltip template, kept
  #29's `onsigned` hook and the `DocumentStatus` import.
- App.svelte: kept the redesigned shell, header, sign grid and verify panel, and
  restored #29's wiring the auto-merge dropped (`vault`, `keepSignatures`,
  `onsigned`, saveError notice, DownloadsDialog) plus #5's `chain` prop.
- primitives.test.ts: passes the merged CertPicker its `chain`/`vault` props.

EduarD3V merged commit 3bbb1a51e2 into main

2026-10-14 18:20:01 +02:00

EduarD3V referenced this pull request from a commit

2026-10-14 18:20:01 +02:00

Merge pull request 'bullet: integrated work for human review' (#30) from bullet-develop into main

Rows
Columns

bullet: integrated work for human review #30