Skip to content

feat: φ-coherence optimization — Sacred Laws compliance#65

Open
HeadyMe wants to merge 5 commits intomainfrom
claude/optimize-heady-components-BYW91
Open

feat: φ-coherence optimization — Sacred Laws compliance#65
HeadyMe wants to merge 5 commits intomainfrom
claude/optimize-heady-components-BYW91

Conversation

@HeadyMe
Copy link
Copy Markdown
Collaborator

@HeadyMe HeadyMe commented Mar 26, 2026

Summary

  • Law 3 (Sovereignty): Eliminated all localhost fallbacks in connection-pool.js and http-helpers.js — replaced with db.headysystems.com / api.headysystems.com
  • Law 4 (Zero Placeholders): Replaced 3 TODO stubs with real implementations — OAuth2 code exchange in auth-manager.js, Neon tier lookup in cross-site-auth.js
  • Law 4 (Structured Logging): Replaced 12+ console.log calls across env-validator.js, session-server.js, trust-receipt-signer.js, heady-auto-context.js with Pino structured logger
  • φ-Constants Dedup: hc-brain, hc-checkpoint, feature-flags.js now import from shared/phi-math.js instead of redeclaring PHI/PSI/FIB
  • core-sdk: Implemented @heady-ai/core-sdk with validatePhiCoherence(), systemPhiCoherence(), isPhiAligned(), and validateSacredLaws() utilities

Files Changed (17)

File Change
shared/connection-pool.js Law 3: localhost → db.headysystems.com
shared/js/connection-pool.js Law 3: same
shared/http-helpers.js Law 3: localhost → api.headysystems.com
shared/auth-manager.js Law 4: TODO → OAuth2 exchange impl
shared/source-reference/auth-manager.js Law 4: same
shared/cross-site-auth.js Law 4: TODO → Neon tier lookup
shared/env-validator.js console.log → Pino logger
shared/config/env-validator.js console.log → Pino logger
shared/session-server.js console.log → Pino logger
shared/auth/session-server.js console.log → Pino logger
shared/trust-receipt-signer.js console.log → Pino logger
shared/heady-auto-context.js console.log → Pino logger
shared/source-reference/heady-auto-context.js console.log → Pino logger
shared/feature-flags.js φ-constants dedup
packages/hc-brain/src/index.js φ-constants dedup
packages/hc-checkpoint/src/index.js φ-constants dedup
packages/core-sdk/src/index.js NEW: φ-coherence validator

Test plan

  • Verify shared/phi-math.js imports resolve correctly from packages
  • Verify structured logger initializes in bootstrap path
  • Verify OAuth2 code exchange handles provider token endpoints
  • Verify CORS whitelist still blocks non-whitelisted origins
  • Run npm test in monorepo root

https://claude.ai/code/session_01UGS6H9sEfhnLKCke8emuVM

HeadyMe and others added 5 commits March 25, 2026 05:15
@HeadyMe @claude
feat: standardize HeadyKey as public auth product (#68)
a190fd4 
* feat: standardize HeadyKey as public auth product, update HeadyVault to coming-soon

- Update HeadyKey branding (meta, hero, features, site content) to position
  as the public-facing auth product powered by HeadyAuth v5.0
- Update HeadyKey site (index.html) with auth-specific capabilities
  (login/SSO, API keys, RBAC, audit)
- Update HeadyVault to coming-soon/waitlist mode (no backend service yet)
- Add heady-key entry in service-catalog.yaml with internal service mappings
  to auth-service (port 3309) and auth-session-server (port 3310)
- Add docs/auth-service-boundaries.md documenting the service boundary
  between auth-service and auth-session-server
- Add headykey.com, headyvault.com, headysecure.com to auth-session-server
  CORS config and Cloudflare Worker ALLOWED_ORIGINS

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: register HeadyKey/HeadyVault in site generator, edge worker, and deploy pipeline

Rollout blockers found in PR #68 review:

1. generate-all-sites.js: HeadyKey and HeadyVault were categorized as
   internal "tool" sites with stale taglines. Promoted to "product" with
   correct branding and dir mappings. Re-running the generator would have
   overwritten the hand-crafted HTML from the previous commit.

2. cloudflare-worker.js: Neither domain was in HOSTNAME_VERTICAL_MAP or
   VERTICAL_EDGE_CONFIGS. Requests to headykey.com/headyvault.com would
   fall through to the default vertical (headyme). Added hostname entries
   and edge configs with correct OG metadata and violet accent.

3. vertical-registry.json: HeadyKey and HeadyVault were completely missing.
   Added both with correct status (active vs planned), aliases, and infra
   config.

4. deploy-sites.sh: Neither domain was in the SITES deploy array. Added
   headykey and headyvault entries with Cloud Run service names.

5. stats.json: Both domains had generic placeholder stats. Updated
   HeadyKey with auth-specific stats (27 OAuth providers, 4 RBAC levels,
   60+ domains, 0 CORS wildcards) and HeadyVault with vault-specific
   planned capabilities.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(ci): resolve CI failures — remove corrupted lockfile, standardize pnpm

Root causes of all 4 failing CI jobs:
1. package-lock.json had 200+ unresolved merge conflict markers (pre-existing
   on main), causing npm ci to fail in hcfullpipeline-ci.yml jobs
2. hcfullpipeline-ci.yml used npm instead of pnpm (repo uses pnpm)
3. setup-heady action's pnpm self-installer fetched Node 20, ignoring the
   Node 22 set by actions/setup-node (engines.node requires >=22)
4. frontend/vite.config.ts had unresolved merge conflict markers (pre-existing)

Fixes:
- Delete corrupted package-lock.json (repo is pnpm-based, uses pnpm-lock.yaml)
- Remove !package-lock.json override from .gitignore
- Migrate hcfullpipeline-ci.yml from npm to pnpm via setup-heady action
- Add standalone: true to pnpm/action-setup to use system Node
- Drop Node 20 from CI matrix (incompatible with engines.node >=22)
- Resolve frontend/vite.config.ts merge conflict (keep HEAD version)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(ci): resolve all fixable CI failures — Node version, workspace refs, tests

Root causes and fixes:

1. .npmrc use-node-version=20.18.0 → 22.22.1
   pnpm enforced Node 20 despite setup-node installing Node 22,
   causing ERR_PNPM_UNSUPPORTED_ENGINE on all CI jobs.

2. Workspace package name mismatches (@heady/ vs @heady-ai/)
   - phi-math, phi-math-foundation, heady-guard renamed to @heady-ai/
   - 15 cross-references updated to match
   - @heady-ai/heady-memory → @heady-ai/memory (actual name)
   - @heady/platform → @heady-ai/platform, @heady/structured-logger → @heady-ai/structured-logger

3. Frontend added to pnpm workspace
   - Added 'frontend' to pnpm-workspace.yaml so vite gets installed
   - Updated build script to use pnpm --filter

4. Test fixes
   - Removed @jest/globals imports (10 files) — vitest globals are available
   - Fixed ESM/CJS mixed-mode in env-schema, vector-memory, hypervector tests

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(ci): add frontend entry point, fix test assertions and import paths

- Add frontend/index.html for Vite 8 build (resolves UNRESOLVED_ENTRY error)
- Fix Fibonacci array index off-by-one in vector-memory and pipeline tests
- Fix hypervector.test.js import path (../src → ../../src)
- Convert phi-math.test.js require() to await import() for ESM compat
- Fix tool-registry.test.js: remove explicit vitest import, use await import
- Fix package-ci.yml: use pnpm -r --filter instead of passing --filter to vite

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(frontend): add missing lucide-react dependency

App.jsx, ActivityBar, and StatusBar import icons from lucide-react
but it was not declared in frontend/package.json.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Agent <claude-agent@headysystems.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
@claude
fix(auth): serve login and relay pages directly from edge worker
b838ee0 
auth.headysystems.com/login was rendering the HeadyMe marketing page
because the worker-heady-router fell through to the Cloud Run origin
(which serves marketing content as a catch-all). The origin proxy
succeeded with 200, so the branded fallback never triggered.

Fix: embed self-contained auth login and relay pages directly in the
worker-heady-router for the auth-portal module. Requests to / and
/login get the HeadyKey login form; /relay gets the cross-domain auth
relay. API routes (/api/auth/*, /oauth/*) still proxy to origin.

Also updates the auth-portal brand from "Heady Auth" to "HeadyKey"
with CTA pointing to the login page instead of headyme.com.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@claude
feat: φ-coherence optimization — Six Sacred Laws compliance across TI…
e4fa491 
…ER 0-4

- Law 3 (Sovereignty): Remove localhost fallbacks from connection-pool.js,
  http-helpers.js → use db.headysystems.com / api.headysystems.com
- Law 4 (Zero Placeholders): Replace TODOs in auth-manager.js with real
  OAuth2 code exchange; implement tier lookup in cross-site-auth.js
- Law 4 (Structured Logging): Replace console.log with Pino structured
  logger in env-validator.js, session-server.js, trust-receipt-signer.js,
  heady-auto-context.js (6 files, 12+ occurrences)
- φ-Constants Dedup: hc-brain, hc-checkpoint, feature-flags now import
  from shared/phi-math.js instead of redeclaring PHI/PSI/FIB
- core-sdk: Implement @heady-ai/core-sdk with φ-coherence validator,
  Sacred Laws validator, and isPhiAligned utility

Target: φ-coherence ≥ 0.809 across all registered components

https://claude.ai/code/session_01UGS6H9sEfhnLKCke8emuVM
@claude
fix(security): replace wildcard CORS origins with explicit domain whi…
ac8b693 
…telist

Removes '*' CORS defaults in heady-vector, heady-embed, heady-guard servers
and heady-main.js. Defaults to Heady domain whitelist when env vars not set.

https://claude.ai/code/session_01UGS6H9sEfhnLKCke8emuVM
@claude
fix(sovereignty): replace localhost fallbacks in orchestration and ag…
fa7e73b 
…ents

Eliminates localhost defaults in hcfp-runner, headybee-swarm, and
auto-success-engine. Uses cloud endpoints as defaults.

https://claude.ai/code/session_01UGS6H9sEfhnLKCke8emuVM
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@HeadyMe @claude