2 commits

Author	SHA1	Message	Date
Adam Moussa	9ee2e3c127	fix(agent-team): clear CodeQL URL-substring alert in confluence client test ... The host assertion used `url.startswith("https://seahaven.atlassian.net")`, which CodeQL flags (incomplete URL substring sanitization — a spoofed host like `...atlassian.net.evil.com` passes a prefix check). Parse the URL and compare scheme+netloc exactly instead. (PR #66 review finding.)	2026-06-25 10:56:48 -04:00
Adam Moussa	c7f9c1bac2	feat(agent-team): Confluence-writer node (draft -> approve gate -> write) ... Add a Confluence documentation lane to the Plane-2 pipeline, flag-gated behind AGENT_TEAM_CONFLUENCE_ENABLED (default off; daemon behavior unchanged when off). - confluence/client.py: OAuth 2LO + Basic REST client, dry-run-default writes - confluence/mermaid.py: vendored ADF-only Mermaid editor (macro-count + revert-diff guards, dry-run default) - nodes/confluence_writer.py(+_llm): conf_draft -> conf_gate -> conf_write, both direct (task_kind=confluence) and post-build documentation flows - task_model/graph/coordinator: new phases, state channels, route_after_intake, CONFLUENCE_APPROVAL_KIND gate delivery, task_kind forwarding - db schema v5: widen pending_questions kind CHECK (atomic rebuild) - tests for client, mermaid, writer node, ledger v5, coordinator gate, e2e	2026-06-25 10:56:48 -04:00