2 Commits

Include renames

Author	SHA1	Message	Date
4 people	0048481764	feat+docs: D60 — Phase 4 charter (ADR 0010) + default OLP_PORT 3456 → 4567 (#40) ... * feat+docs: D60 — Phase 4 charter (ADR 0010) + default OLP_PORT 3456 → 4567 Opens Phase 4 (Operator + Client UX) end-to-end. Per release_kit.phase_rolling_mode, the version bump fires at Phase 4 close (v0.4.0), not at this D-day; D60 only ships governance + the port default change. ## ADR 0010 — Phase 4 Charter Phase 4 scope = 5 D-day groups (~13 D-days total): - D60 (this commit): charter + default port - D61-D63: SSE heartbeat + recentErrors[20] ring + /status combined endpoint - D64-D67: olp Node-based CLI scaffold + olp doctor next_action framework - D68-D70: olp-connect zero-config IDE setup + /health.anonymousKey + ADR 0011 - D71-D73: olp-plugin/ OpenClaw gateway plugin + docs/integrations/*.md bundle Charter records the EXPLICIT DECISION to DEFER /v1/messages (Anthropic-shape entry surface) on the rationale: under ADR 0009 P0 failure it provides no billing benefit AND degrades worse on fallback than OpenAI-shape clients (because OpenAI tool schema is the cross-provider lingua franca; Anthropic- specific features cache_control / computer_use / text_editor / thinking blocks have no clean fallback mapping). Re-open trigger: (a) ADR 0009 P0 success AND (b) maintainer-named family CC user. README posture updated: Claude Code listed as NOT SUPPORTED as an OLP client; recommended alternative is "Cline + OLP" (same fallback chain available, better cross-provider compatibility). ## Default port 3456 → 4567 server.mjs:74 default value moves so OLP and OCP (which stays on 3456) can co-host on the same machine without OLP_PORT env override. Existing deployments wanting the pre-D60 default can set OLP_PORT=3456 in launchd plist / shell env. Verified port-change invariants: - All test-features.mjs suites use port: 0 (ephemeral) — 0 test-surface impact - Cache / fallback / provider plugins port-agnostic - Dashboard 30s poll + management endpoints use relative paths - 623/623 tests pass on D60 branch HEAD ## ADR amendments - ADR 0001 § "Decision" port-conflict paragraph: struck + amended (co-host is now possible via 3456 → 4567 + launchd labels dev.olp.proxy vs dev.ocp.proxy) - ADR 0008 § 6.6 default-port reference updated - docs/adr/README.md index gains ADR 0010 row ## Authority - ADR 0010 (this commit) - ADR 0009 (interactive-mode placeholder — /v1/messages defer rationale) - 2026-05-26 brainstorm: OCP comprehensive feature audit (subagent output) + multi-provider proxy / IDE integration prior-art survey (subagent output, both this session) - docs/v1x-roadmap.md (Phase 4 was the named destination) - CLAUDE.md release_kit.phase_rolling_mode (current_phase already Phase 4; this charter formalizes contents) Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * fix: D60 reviewer P2-1 — soften ADR 0001 launchd-label assertion to forward-tense Reviewer flagged the ADR 0001 amendment's launchd-label collision claim ("avoided via dev.olp.proxy vs dev.ocp.proxy") as present-tense fact when the OLP plist generator hasn't shipped yet (lands D64-D70 per ADR 0010). Soften to forward-tense with explicit cross-reference. The factual claim ("co-host is possible") still stands because plist label is controlled by the OLP project anyway; this is precision, not correction. P2-2 (README "since v0.4.0" forward-dated branding) explicitly accepted as prior-art-consistent with D44+ Phase 2 mid-window doc conventions — no change. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> --------- Co-authored-by: dtzp555 <dtzp555@gmail.com> Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-26 07:59:11 +10:00
4 people	c0b696984f	docs: D48 — ADR 0008 Phase 3 design draft (Dashboard + audit query layer) (#25) ... * docs: D48 — ADR 0008 Phase 3 design draft (Dashboard + audit query layer, design-only) First Phase 3 D-day. Design-only. Ratifies the storage / query model / rotation / dashboard / refresh / scope decisions ahead of D49+ implementation D-days. Opens ADR 0007 § 12 deferral for Dashboard + audit query layer + rotation. NEW docs/adr/0008-dashboard-and-audit-query.md (~368 lines): 13 sections + Consequences + Authority citations. Per maintainer-pinned lanes A/A/B/A/B from Phase 3 kickoff brief 2026-05-25: Lane 1 (tech stack): A — static HTML + vanilla JS + fetch; no build step; matches OLP "no bundler" ethos. Lane 2 (query model): A — in-memory scan of audit ndjson per request; O(N) per call; family-scale acceptable; defers SQLite hybrid to Option 3 trigger per ADR 0007 § 13 (requires engines bump as separate prior PR). Lane 3 (rotation): B — daily rotation, audit-YYYY-MM-DD.ndjson on first append after UTC midnight + optional bin/olp-audit-rotate.mjs external cron. Lane 4 (refresh): A — 30s page poll (no SSE infra at v0.3.0; pause when document.visibilityState is hidden). Lane 5 (dashboard scope): B — full per spec § 4.6: 4 panels (per- provider quota / 24h request+cache+fallback / 30d spend trend / top-N fallback chains). ADR sections: §1 Context (what Phase 3 closes; what stays out) §2 Decision (5 lanes pinned) §3 Storage layout (~/.olp/logs/ with rotated date files) §4 lib/audit-query.mjs API (readAuditWindow, aggregateRequests, topFallbackChains, spendTrendDaily, cacheHitRateWindow) §5 Audit rotation (first-append-after-UTC-midnight trigger + cron alternative + concurrent-safety per-process lock) §6 Dashboard panels (4 panels per spec § 4.6, refresh + localhost- bound notes) §7 Server endpoints (/dashboard, /v0/management/dashboard-data, /v0/ management/quota, /cache/stats — owner-only gated) §8 Auth gating (reuses ADR 0007 § 7 owner_only_endpoints config) §9 Failure modes + degradation (per-panel error states) §10 Acceptance criteria (15 testable items for D49-D54) §11 Forward path (Phase 4+ — SQLite migration, SSE push, key-mgmt UI) §12 Out of scope (explicitly NOT in Phase 3) §13 Phase 3 sprint shape (D48-D55) CHANGED: - docs/adr/README.md: added ADR 0008 row with one-paragraph summary. - CHANGELOG.md Unreleased: D48 entry per release_kit overlay phase_rolling_mode discipline. Includes Phase 3 sprint shape table. NOT IN D48 scope: - lib/audit-query.mjs (D49) - server.mjs endpoints (D50) - dashboard.html (D51) - lib/audit.mjs rotation extension + bin/olp-audit-rotate.mjs (D52) - tried_providers schema fix (D53; D45 P2 deferral) - Phase 3 close (D55; v0.3.0; maintainer-triggered) Test count: 544 / 544 pass (design-only, no test change). Verified locally via npm test before commit. AUTHORITY: - ADR 0007 § 12 (opens Phase 3 Dashboard + audit query deferral). - ADR 0007 § 13 (rejects SQLite at Phase 3 per Node baseline + documents forward-path trigger). - OLP v0.1 spec § 4.6 + § 4.7 (Dashboard + observability endpoints planning authority). - OCP dashboard.html (prior-art reference for multi-panel HTML structure). - ADR 0002 (Provider.quotaStatus contract — Panel 1 data source). - ADR 0005 § Cache stats (/cache/stats endpoint pre-existing design). - CC 开发铁律 v1.6 § 10 — fresh-context opus reviewer required for design ADR. - Phase 3 kickoff via maintainer "go" 2026-05-25 + standing-autopilot grant (~/.cc-rules/memory/auto/standing_autopilot_phase_2.md in cc-rules bf0ed9a — Phase 3+ requires new authorization; the "go" supplied that). ALIGNMENT.md scope check: this PR introduces a new ADR with full authority citations per Rule 1 (Cite First). No provider plugin / entry surface / IR change in this commit. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> * docs: D48 fold-in — opus reviewer findings (1 P2 + 2 P3, all ADR-text polish) Fresh-context opus reviewer (PR #25) returned APPROVE_WITH_MINOR with 3 findings, all ADR-text polish. No design semantic change beyond the clarifications. P2 — § 8 + § 10 #9 gating-mode wording Original § 8 implied a new "block non-owner identities" behaviour without naming it; § 10 #9 tested only the universal allow_anonymous: false 401 case. Fix: - § 8 now formalizes two gating modes — owner_only_trim (Phase 2 /health pattern) vs owner_only_block (new Phase 3 management- endpoints pattern) — and explains the management endpoints are owner_only_block because the entire payload is sensitive. - § 10 #9 now covers both 401 paths: (a) allow_anonymous: true + no header → anonymous identity → STILL 401 because management endpoints are owner_only_block; (b) allow_anonymous: false + no header → 401 at the authenticate middleware itself. P3 #1 — /cache/stats citation accuracy Original § 7.4 + Authority block cited "ADR 0005 § Cache stats" which is not a real section. Corrected: planning authority is OLP v0.1 spec § 4.6; ADR 0005 references the endpoint in Consequences/Mitigations (~line 279) for the per-(provider, model) cache-hit-rate breakdown surface. P3 #2 — cacheStore.stats() shape gap § 7.4 now explicitly acknowledges the current shape ({ hits, misses, size, inflightCount } global aggregate) lacks the per-(provider, model) breakdown spec § 4.6 implies; Phase 3 Panel 2 sources per-provider counts from aggregateRequests (audit-side) instead. If a future panel needs the breakdown, D50 amends the store shape + an ADR 0005 amendment fires at that time. Phase 3 acceptance criteria do not require the breakdown. CHANGELOG.md Unreleased D48 entry: fold-in bullet added enumerating the 3 fixes. Test count: 544 / 544 pass (design-only, no test change). Verified locally via npm test. Authority: PR #25 fresh-context opus reviewer findings; CLAUDE.md release_kit overlay phase_rolling_mode — under Unreleased. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> --------- Co-authored-by: dtzp555 <dtzp555@gmail.com> Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>	2026-05-25 15:41:26 +10:00