Fix delegation tool and SEC agent typing

.env.example

@@ -0,0 +1,17 @@
+# Convex
+CONVEX_URL=https://your-deployment.convex.cloud
+CONVEX_DEPLOY_KEY=your-deploy-key
+
+# OpenAI
+OPENAI_API_KEY=sk-your-openai-api-key
+
+# Linkup (for web search)
+LINKUP_API_KEY=your-linkup-api-key
+
+# Voice Server
+VOICE_SERVER_PORT=3001
+CLIENT_URL=http://localhost:5173
+
+# Auth (if using Convex Auth)
+AUTH_SECRET=your-auth-secret
+

.github/workflows/auto-release.yml

@@ -0,0 +1,100 @@
+name: Auto Release on Tag
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  release:
+    name: Create GitHub Release and optional Discussion
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Prepare release notes
+        id: notes
+        shell: bash
+        run: |
+          set -euo pipefail
+          TAG="${GITHUB_REF_NAME}"
+          NOTES_FILE="RELEASE_NOTES_${TAG}.md"
+          if [ -f "$NOTES_FILE" ]; then
+            echo "notes_path=$NOTES_FILE" >> "$GITHUB_OUTPUT"
+          else
+            PREV_TAG=$(git tag -l 'v[0-9]*' | sort -V | awk -v t="$TAG" '$0<t {last=$0} END{print last}')
+            if [ -n "$PREV_TAG" ]; then RANGE="$PREV_TAG..$TAG"; else RANGE="$TAG"; fi
+            TEMP="$(mktemp)"
+            {
+              echo "# Release $TAG"
+              echo
+              echo "**Generated:** $(date -u '+%Y-%m-%d %H:%M:%S UTC')"
+              echo
+              echo "## Changes"
+              git log --oneline ${RANGE}
+            } > "$TEMP"
+            echo "notes_path=$TEMP" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ github.ref_name }}
+          name: ${{ github.ref_name }}
+          body_path: ${{ steps.notes.outputs.notes_path }}
+          draft: false
+          prerelease: false
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Create GitHub Discussion (Announcements)
+        uses: actions/github-script@v7
+        continue-on-error: true
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const tag = process.env.GITHUB_REF_NAME;
+            const { owner, repo } = context.repo;
+            // Find an Announcements category
+            const categories = await github.graphql(`
+              query($owner:String!, $repo:String!){
+                repository(owner:$owner, name:$repo){
+                  id
+                  discussionCategories(first: 50){ nodes{ id name } }
+                }
+              }`, { owner, repo });
+            const repoId = categories.repository.id;
+            const cats = categories.repository.discussionCategories.nodes || [];
+            const ann = cats.find(c => /announce/i.test(c.name));
+            if (!ann) {
+              core.info('No Announcements category found; skipping discussion creation.');
+              return;
+            }
+            const fs = require('fs');
+            const notesPath = `${{ steps.notes.outputs.notes_path }}`;
+            let body = `Release ${tag} is out. See the full notes in the GitHub Release.`;
+            try {
+              const txt = fs.readFileSync(notesPath, 'utf8');
+              const first = (txt.split(/\r?\n/).find(Boolean) || '').replace(/^#\s*/, '');
+              body = `${first}\n\nSee the GitHub Release for details.`;
+            } catch {}
+            const create = await github.graphql(`
+              mutation($repoId:ID!, $catId:ID!, $title:String!, $body:String!){
+                createDiscussion(input:{repositoryId:$repoId, categoryId:$catId, title:$title, body:$body}){
+                  discussion{ number }
+                }
+              }`, { repoId, catId: ann.id, title: `Release ${tag}`, body });
+            core.info(`Created discussion #${create.createDiscussion.discussion.number}`);
+
+      - name: Pin Discussion (best effort)
+        if: ${{ !cancelled() }}
+        uses: actions/github-script@v7
+        continue-on-error: true
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            core.info('Pinning discussions may require elevated permissions; skipping by default.');
+

.github/workflows/tag-chronology.yml

@@ -0,0 +1,53 @@
+name: Validate Tag Chronology
+
+on:
+  push:
+    tags:
+      - 'v*'
+    branches:
+      - main
+  pull_request:
+    branches:
+      - main
+  workflow_dispatch:
+
+jobs:
+  validate:
+    name: Verify semantic version tags follow commit chronology
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0  # fetch full history & tags
+
+      - name: Fetch all tags
+        run: |
+          git fetch --tags --force --prune
+
+      - name: Print tags and commit dates
+        run: |
+          echo "Tags (semver-sorted) with commit dates:" 
+          git tag -l 'v[0-9]*' | sort -V | while read t; do \
+            d=$(git log -1 --format=%ct "$t"); \
+            echo "$t $(date -d @${d} -u '+%Y-%m-%d %H:%M:%S UTC')"; \
+          done
+
+      - name: Validate chronological order
+        run: |
+          set -euo pipefail
+          tags=$(git tag -l 'v[0-9]*' | sort -V)
+          prev=""
+          prev_date=0
+          for t in $tags; do
+            d=$(git log -1 --format=%ct "$t")
+            if [ -n "$prev" ] && [ "$d" -lt "$prev_date" ]; then
+              echo "Tag chronology invalid: $t ($(date -d @${d} -u '+%Y-%m-%d %H:%M:%S UTC')) < $prev ($(date -d @${prev_date} -u '+%Y-%m-%d %H:%M:%S UTC'))"
+              echo "Hint: Newer tag versions must point to commits no earlier than the previous version."
+              exit 1
+            fi
+            prev="$t"
+            prev_date="$d"
+          done
+          echo "Chronology validation passed."
+

.gitignore

@@ -24,4 +24,28 @@ dist-ssr
 *.sw?
 
 # Ignored for the template, you probably want to remove it:
-package-lock.json
+package-lock.json
+*storybook.log
+storybook-static
+
+# Temporary/refactoring summary files
+*_REFACTORING_SUMMARY.md
+*_COMPLETE.md
+*_QUICKSTART.md
+RELEASE_NOTES_*.md
+
+# Test artifacts
+coverage/
+.nyc_output/
+test-results/
+playwright-report/
+
+# Temporary files
+temp_*.txt
+temp_*.md
+
+# Implementation notes (keep only core docs)
+docs/
+!docs/FEATURES.md
+!docs/DESIGN_SYSTEM.md
+!docs/CODESTYLE.md

.storybook/main.ts

@@ -0,0 +1,20 @@
+import type { StorybookConfig } from '@storybook/react-vite';
+
+const config: StorybookConfig = {
+  "stories": [
+    "../src/**/*.mdx",
+    "../src/**/*.stories.@(js|jsx|mjs|ts|tsx)"
+  ],
+  "addons": [
+    "@chromatic-com/storybook",
+    "@storybook/addon-docs",
+    "@storybook/addon-onboarding",
+    "@storybook/addon-a11y",
+    "@storybook/addon-vitest"
+  ],
+  "framework": {
+    "name": "@storybook/react-vite",
+    "options": {}
+  }
+};
+export default config;

.storybook/preview.ts

@@ -0,0 +1,14 @@
+import type { Preview } from '@storybook/react-vite'
+
+const preview: Preview = {
+  parameters: {
+    controls: {
+      matchers: {
+       color: /(background|color)$/i,
+       date: /Date$/i,
+      },
+    },
+  },
+};
+
+export default preview;