Spaces:
Running
Running
File size: 14,151 Bytes
aefac4f | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 | ╔════════════════════════════════════════════════════════════════════════════╗
║ 🎯 QUICK START: THIS WEEK'S TASKS (12-Week Plan) ║
║ Use this for daily execution and progress tracking ║
╚════════════════════════════════════════════════════════════════════════════╝
PHASE 1 - WEEK 1 ([CURRENT]) - Security + State Propagation
════════════════════════════════════════════════════════════════════════════════
MONDAY-TUESDAY: OWASP Audit + API Security
┌──────────────────────────────────────────────────────────────────────────┐
│ Task 1.1: Run OWASP Security Check (Skill #18) │
│ Time: 2-3 hours │
│ Actions: │
│ □ npx skills unlock owasp-security-check │
│ □ Read ~/.agents/skills/owasp-security-check/SKILL.md │
│ □ Run security scan on /api and /src │
│ □ Document findings in docs/SECURITY_AUDIT.md │
│ □ Create GitHub issues for each finding │
│ Deliverable: SECURITY_AUDIT.md with prioritized issues │
│ Success: Report shows all vulnerabilities categorized │
└──────────────────────────────────────────────────────────────────────────┘
┌──────────────────────────────────────────────────────────────────────────┐
│ Task 1.2: Implement JWT Authentication (Skill #17) │
│ Time: 4-6 hours │
│ Actions: │
│ □ npx skills unlock api-security-hardening │
│ □ Read ~/.agents/skills/api-security-hardening/SKILL.md │
│ □ Create api/app/middleware/auth.py (JWT generation + validation) │
│ □ Add @require_auth decorator to api/app/routes/analyze.py │
│ □ Update api/main.py to include auth middleware │
│ □ Test: curl -H "Authorization: Bearer <token>" /api/v1/analyze │
│ Deliverable: JWT auth working on all endpoints │
│ Success: Unauthorized requests return 401 │
└──────────────────────────────────────────────────────────────────────────┘
WEDNESDAY-THURSDAY: Test Infrastructure + State Fixing
┌──────────────────────────────────────────────────────────────────────────┐
│ Task 1.3: Create Testing Infrastructure (Skill #22) │
│ Time: 2-3 hours │
│ Actions: │
│ □ npx skills unlock python-testing-patterns │
│ □ Create tests/conftest.py with fixtures │
│ □ Create tests/fixtures/auth.py (JWT token generator) │
│ □ Create tests/fixtures/biomarkers.py (test data) │
│ □ Create tests/test_api_auth.py with 10+ auth tests │
│ □ Run: pytest tests/test_api_auth.py -v │
│ Deliverable: Auth tests with 80%+ coverage │
│ Success: All auth tests passing │
└──────────────────────────────────────────────────────────────────────────┘
┌──────────────────────────────────────────────────────────────────────────┐
│ Task 1.4: Fix State Propagation in Workflow (Skill #2) │
│ Time: 4-6 hours │
│ Actions: │
│ □ npx skills unlock workflow-orchestration-patterns │
│ □ Read ~/.agents/skills/workflow-orchestration-patterns/SKILL.md │
│ □ Review src/state.py - identify missing fields │
│ □ Add to GuildState: biomarker_flags, safety_alerts │
│ □ Update each agent to return complete state: │
│ - BiomarkerAnalyzerAgent: add flags │
│ - DiseaseExplainerAgent: preserve incoming flags │
│ - ConfidenceAssessorAgent: preserve all state │
│ □ Test: python scripts/test_chat_demo.py │
│ □ Verify state carries through entire workflow │
│ Deliverable: State propagates end-to-end │
│ Success: All fields present in final response │
└──────────────────────────────────────────────────────────────────────────┘
FRIDAY: Schema Unification + Rate Limiting
┌──────────────────────────────────────────────────────────────────────────┐
│ Task 1.5: Unify Response Schema (Skill #16) │
│ Time: 3-5 hours │
│ Actions: │
│ □ npx skills unlock ai-wrapper-product │
│ □ Create api/app/models/response.py (unified schema) │
│ □ Define BaseAnalysisResponse with all fields: │
│ - biomarkers: dict │
│ - disease: str │
│ - confidence: float │
│ - biomarker_flags: list │
│ - safety_alerts: list (NEW) │
│ □ Update api/app/services/ragbot.py to use unified schema │
│ □ Test all endpoints return correct schema │
│ □ Run: pytest tests/test_response_schema.py -v │
│ Deliverable: Unified schema in place │
│ Success: Pydantic validation passes │
└──────────────────────────────────────────────────────────────────────────┘
┌──────────────────────────────────────────────────────────────────────────┐
│ Task 1.6: Add Rate Limiting (Skill #20) │
│ Time: 2-3 hours │
│ Actions: │
│ □ npx skills unlock api-rate-limiting │
│ □ Create api/app/middleware/rate_limiter.py │
│ □ Add rate limiting to api/main.py: │
│ - 10 requests/minute (free tier) │
│ - 100 requests/minute (pro tier) │
│ □ Return 429 Too Many Requests with retry-after header │
│ □ Test rate limiting behavior │
│ Deliverable: Rate limiting active │
│ Success: 11th request returns 429 │
└──────────────────────────────────────────────────────────────────────────┘
FRIDAY (EVENING): Code Review + Commit
┌──────────────────────────────────────────────────────────────────────────┐
│ Task 1.7: Code Review & Commit Week 1 Work │
│ Actions: │
│ □ Review all changes for: │
│ - No hardcoded secrets │
│ - Proper error handling │
│ - Consistent code style │
│ - Docstrings added │
│ □ Run full test suite: pytest tests/ -v --cov src │
│ □ Ensure coverage >75% │
│ □ Create PR titled: "Phase 1 Week 1: Security + State Propagation" │
│ □ Update IMPLEMENTATION_ROADMAP.md with actual times │
│ Success: PR ready for review │
└──────────────────────────────────────────────────────────────────────────┘
WEEK 1 SUMMARY
════════════════════════════════════════════════════════════════════════════════
✓ Security audit completed
✓ JWT authentication implemented
✓ Testing infrastructure created
✓ State propagation fixed
✓ Response schema unified
✓ Rate limiting added
✓ Tests written & passing
Metrics to Track:
- Lines of code added: ____
- Tests added: ____
- Coverage improvement: __% → __%
- Issues found (OWASP): ____
- Issues resolved: ____
════════════════════════════════════════════════════════════════════════════════
AFTER WEEK 1: Next Steps
Move to Phase 1 Week 2:
Task 2.1: Multi-Agent Orchestration fixes
Task 2.2: LLM Security (prompt injection)
Task 2.3: Error handling framework
Then Phase 2 begins immediately with testing expansion.
════════════════════════════════════════════════════════════════════════════════
USEFUL COMMANDS FOR THIS WEEK:
# Check skill is installed:
Test-Path "$env:USERPROFILE\.agents\skills\owasp-security-check\SKILL.md"
# Run tests with coverage:
python -m pytest tests/ -v --cov src --cov-report=html
# Check code style:
pip install black pylint; black src/ --check
# Run security scan locally:
pip install bandit; bandit -r api/app src/
# Start API for manual testing:
cd api && python -m uvicorn app.main:app --reload
# View auto-generated API docs:
Open browser to http://localhost:8000/docs
════════════════════════════════════════════════════════════════════════════════
DAILY STANDUP TEMPLATE (Use this each day):
Date: _______________
Standup Lead: _______
What did you complete yesterday?
[ ] _____________________________________
What are you doing today?
[ ] _____________________________________
What blockers do you have?
[ ] _____________________________________
Metrics:
Coverage: __%
Tests passing: __
Errors: __
Status: 🟢 On Track / 🟡 At Risk / 🔴 Blocked
════════════════════════════════════════════════════════════════════════════════
|