5 Commits

Author SHA1 Message Date
4f45ae78cf feat: security as gate-keeper - pipeline with approval loops
- Security agent is now GATE-KEEPER: gives FREIGABE or ABGELEHNT
- No code reaches git-push or deploy without security approval
- Pipeline: code-gen → test-runner → security → [GATE] → deploy
- On rejection: code-gen fixes → test-runner → security re-check → loop
- All workflows updated with approval loops and feedback arrows
- Three quality gates: tests passed, security approved, deploy verified

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 00:22:48 +01:00
24219530fa fix: remove SSH hardening from LXC setup - blocks deployment
SSH hardening (no root, no password) prevents pct exec and deploy
access on dev/staging servers. Moved to security skill as
production-only optional step. Kept: fail2ban, auto-updates, sysctl.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 00:18:13 +01:00
4fea7e781f feat: security hardening for LXC + server security checks
- proxmox-lxc: auto-harden on setup (SSH no-root/no-password,
  fail2ban, unattended-upgrades, sysctl kernel hardening)
- security: now covers BOTH code AND infrastructure
  - SSH config validation
  - Firewall/open ports check
  - Fail2Ban status
  - Auto-updates verification
  - File permissions audit
  - Auto-fix for all server issues found
- workflow provision: security check after LXC setup AND after deploy

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 00:16:23 +01:00
6cf17810cd feat: add doc-gen skill and feedback loops for all agents
- New /doc-gen skill: generates INSTALL.md, DEPLOY.md, CHANGELOG.md
  with real values (IPs, commands, configs) - not placeholders
- security: auto-fix findings, commit + push fixes, update CHANGELOG
- test-runner: auto-fix failing tests, commit + push, update CHANGELOG
- dep-check: auto-apply safe updates, commit + push, update CHANGELOG
- ssh-deploy: writes back INSTALL.md + DEPLOY.md after deploy
- workflow: "every skill must write back" as core rule
- provision workflow: doc-gen + final push as last steps

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-21 00:12:58 +01:00
dbe08b4814 chore: initial setup KI-Agenten Toolkit
10 wiederverwendbare Claude Code Skills für React + Node.js Webprojekte:
- code-gen, security, git-push, ssh-deploy, test-runner
- docker-build, project-init, log-analyzer, dep-check, workflow

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-19 22:07:32 +01:00