Skip to content

docs: update memory-bank with v0.2.1 session progress and CI fixes #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
msitarzewski wants to merge 1 commit into from
Closed

docs: update memory-bank with v0.2.1 session progress and CI fixes #3

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 5 additions & 4 deletions memory-bank/activeContext.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,14 +1,15 @@
# Active Context: OpenStudio

**Last Updated**: 2026-03-13 (Release 0.2.1 Security Hardening — In Progress)
**Last Updated**: 2026-03-13 (Release 0.2.1 Security Hardening — PR Open)

## Current Phase

**Release**: 0.2.1 (Security Hardening)
**Branch**: `release/0.2.1-security-hardening`
**Status**: Implementation in progress (changes staged, not yet committed)
**Focus**: Server-side security hardening, JWT auth, rate limiting, CORS, input validation
**Next**: Commit, test, merge to main
**Status**: PR #1 open, CI green (Node 18/20/22), awaiting merge
**PR**: https://github.com/msitarzewski/openstudio/pull/1
**Focus**: Merge PR, deploy to production
**Next**: Merge PR to main, pull on umacbookpro, restart service

## Recent Decisions

Expand Down
22 changes: 15 additions & 7 deletions memory-bank/progress.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -71,7 +71,7 @@
✅ Auto-config: `station-manifest.json` created from sample on first run
✅ `npm start` serves full studio at `localhost:6736`

### v0.2.1 Security Hardening (In Progress)
### v0.2.1 Security Hardening (PR #1 Open — CI Green)

**Server-Side**:
✅ `server/lib/auth.js` — JWT room tokens (24h) + invite tokens (4h)
Expand Down Expand Up @@ -99,14 +99,22 @@
✅ `station-manifest.sample.json` — TURN creds marked CHANGE_ME
✅ `deploy/station-manifest.production.json` — TURN creds marked CHANGE_ME

**CI Fixes** (resolved during PR):
✅ Removed `cache: npm` from CI — lock files are gitignored
✅ Switched `npm ci` → `npm install` in CI
✅ Updated all 7 Playwright test URLs from port 8086 → 6736
✅ Fixed `test-program-bus.mjs` headed → headless for CI
✅ Increased return-feed test timeouts (WebRTC renegotiation flaky in CI)
✅ Added retry for return-feed test, `fail-fast: false` on matrix

## What's Next

### Immediate

1. **Commit & test v0.2.1** — Finalize security hardening branch, run full test suite
2. **Deploy to openstudio.zerologic.com** — Run `deploy/setup.sh` on production server with `JWT_SECRET` and `ALLOWED_ORIGINS` set
3. **End-to-end recording test** — Manual test: record, stop, download, verify tracks
4. **Playwright tests update** — Update test URLs from port 8086 to 6736
1. **Merge PR #1** — https://github.com/msitarzewski/openstudio/pull/1 (CI green)
2. **Deploy to umacbookpro** — `git pull` + `systemctl --user restart openstudio` on umacbookpro
3. **Deploy to openstudio.zerologic.com** — Run `deploy/setup.sh` on production server with `JWT_SECRET` and `ALLOWED_ORIGINS` set
4. **End-to-end recording test** — Manual test: record, stop, download, verify tracks

### Short Term (Next Sprint)

Expand Down Expand Up @@ -143,8 +151,8 @@
- Deployment config for openstudio.zerologic.com
- DX: Codespaces, CI matrix, GitHub templates

### Release 0.2.1 — Security Hardening 🔒 (In Progress 2026-03-13)
**Status**: Implementation in progress (branch: `release/0.2.1-security-hardening`)
### Release 0.2.1 — Security Hardening 🔒 (PR Open 2026-03-13)
**Status**: PR #1 open, CI green (Node 18/20/22), awaiting merge
- JWT room tokens + invite tokens (`server/lib/auth.js`)
- WebSocket rate limiting (100 signaling/10s, 500 stream/10s) + per-IP connection limit (10)
- HTTP security headers (X-Content-Type-Options, X-Frame-Options, Referrer-Policy)
Expand Down
Loading