skillguard/.agents/memory/MEMORY.md at 54323706b52669a1802eab4bad889a22ade9e9be

amertensreplit 54323706b5 Add skill version timeline (fingerprint lineage)

Task #14: show a full version timeline for each skill family, not just the
single most-similar prior scan.

What changed:
- OpenAPI spec (lib/api-spec/openapi.yaml): new GET /scans/{id}/lineage
  (operationId getScanLineage) returning an array of ScanLineageEntry
  (id, name, verdict, riskScore, relation, similarity, comparedScanId,
  fingerprint, createdAt). Regenerated api-zod + api-client-react via codegen.
- API (artifacts/api-server/src/routes/scans.ts): new lineage endpoint.
  Builds an undirected graph over all scans linked by the comparedScanId chain
  AND identical (non-empty) fingerprints, then BFS-walks the connected
  component containing the requested scan and returns it newest-first. Works
  purely from existing data, no re-scanning. 404 for unknown ids.
- UI (artifacts/skillguard/src/pages/scan-report.tsx): new VersionTimeline
  card rendering the family as a vertical timeline; each entry shows verdict,
  relation badge, similarity, risk score and date. The viewed scan is marked
  "Aktuell angezeigt"; every other entry links to the existing comparison view
  /vergleich/{viewedId}/{entryId}. Card hidden when the family has <=1 member.

Notes:
- Lineage = connected component, so any member returns the full family.
- Verified end-to-end locally (created new/modified/identical chain, checked
  lineage ordering + 404, confirmed timeline + compare links in the UI),
  then deleted the test scans.

Replit-Task-Id: c7f87ce6-59d8-4396-b16b-f20846f42f0b

2026-06-10 19:47:39 +00:00

1,009 B

Raw Blame History

lucide-react icon name collisions — Badge/Activity from lucide collide with shadcn/ui Badge and React 19 Activity; import Badge from ui, Activity from lucide.
OpenAI gpt-5 temperature — gpt-5* reject temperature != 1; omit temperature in OpenAI-compatible clients or AI analysis silently fails.
NDJSON streaming on Replit — use res.on("close")+writableFinished (NOT req.on("close")); persist on disconnect; proxy doesn't buffer; gate fallback to avoid dup rows.
Skill fingerprint & relation matching — don't put display name in fingerprint path; match modified by file-path Jaccard (hash-Jaccard misses single-file edits), report content-aware similarity.
Testing api-server from shell — external $REPLIT_DEV_DOMAIN/api curl returns HTTP 000; curl http://localhost:<PORT>/api instead (port from workflow log).

1,009 B Raw Blame History

1,009 B

Raw Blame History