squad(226): add missing charter sections for gandalf, legolas, pippin, ralph, sam, scribe#231
Conversation
🏗️ PR Added to Squad Triage QueueThis PR has been labeled with Next steps:
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## dev #231 +/- ##
=======================================
Coverage 78.64% 78.64%
=======================================
Files 43 43
Lines 721 721
Branches 112 112
=======================================
Hits 567 567
Misses 108 108
Partials 46 46 🚀 New features to boost your workflow:
|
There was a problem hiding this comment.
Pull request overview
This PR addresses squad maintenance by filling in missing standard charter sections (Identity/Expertise/Boundaries/Critical Rules) across several Squad agents to improve consistency and clarity in how each agent should operate on the MyBlog repo.
Changes:
- Added missing charter sections for Gandalf, Legolas, Pippin, Sam, Ralph, and Scribe.
- Expanded coordinator/meta-agent and scribe charters with Identity/Expertise/Boundaries/Critical Rules content.
- Introduced/standardized “Critical Rules” blocks for multiple agents.
Reviewed changes
Copilot reviewed 6 out of 6 changed files in this pull request and generated 4 comments.
Show a summary per file
| File | Description |
|---|---|
| .squad/agents/scribe/charter.md | Adds Identity/Expertise/Boundaries/Critical Rules to formalize Scribe’s operating model. |
| .squad/agents/sam/charter.md | Adds a Critical Rules section for backend/dev workflow guardrails. |
| .squad/agents/ralph/charter.md | Adds Identity/Expertise/Boundaries/Critical Rules for the squad meta-agent/coordinator role. |
| .squad/agents/pippin/charter.md | Adds Critical Rules to reinforce documentation governance constraints. |
| .squad/agents/legolas/charter.md | Adds Critical Rules around UI conventions, testing expectations, and theme/FOUC constraints. |
| .squad/agents/gandalf/charter.md | Adds Expertise and Critical Rules to round out the security reviewer charter. |
|
|
||
| ## Critical Rules | ||
|
|
||
| 1. **Before any push: run the FULL local test suite** — `dotnet test tests/Unit.Tests tests/Architecture.Tests -c Release`. Zero failures required. CI must never be the first place failures are discovered. |
| 1. **Component naming is enforced** — pages are `{Name}Page.razor`, components are `{Name}Component.razor`. No exceptions; architecture tests catch violations. | ||
| 2. **No backend code in Blazor files** — data access, repository calls, and business logic must go through injected services or MediatR handlers. Never access MongoDB directly from a component. | ||
| 3. **`.razor` files do NOT get copyright headers** — only `.cs` files get the block copyright comment. | ||
| 4. **Before any push: run the FULL local test suite** — `dotnet test tests/Unit.Tests tests/Architecture.Tests -c Release`. Zero failures required. CI must never be the first place failures are discovered. |
|
|
||
| - Session log authoring: summarizing work done, decisions, and open questions | ||
| - Reading git diffs and commit history to produce accurate session summaries | ||
| - Structured `.squad/history/` log format |
| - Auth0 tenant configuration: applications, APIs, rules, actions, RBAC | ||
| - OIDC/OAuth2 flows: Authorization Code + PKCE, Client Credentials | ||
| - JWT validation (issuer, audience, signature, expiry, claims) | ||
| - ASP.NET Core authentication middleware and `[Authorize]` policy enforcement | ||
| - OWASP Top 10 coverage for .NET/Blazor applications | ||
| - MongoDB NoSQL injection prevention and query safety | ||
| - XSS prevention in Blazor (Razor auto-encoding, `MarkupString` risks) | ||
| - CSRF protection via ASP.NET Core antiforgery tokens | ||
| - Secure HTTP headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options) | ||
| - Secrets management (User Secrets, Azure Key Vault — no credentials in source) | ||
| - Dependency vulnerability scanning (`dotnet list package --vulnerable`) | ||
| - Blazor Server auth state via `AuthenticationStateProvider` and SignalR circuit security | ||
| - Least-privilege principle for service accounts and roles |
…, ralph, sam, scribe Closes #226 Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
…Web.Tests.Bunit to Legolas rule 4 - Gandalf: remove redundant ## Expertise block (## Domain Expertise already covers this) - Legolas Critical Rule 4: add tests/Web.Tests.Bunit to pre-push test command Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
84a9566 to
6ed9651
Compare
Aragorn — Lead Developer Review ✅ APPROVEDPR: squad(226): add missing charter sections for gandalf, legolas, pippin, ralph, sam, scribe Rebase ResolutionBranch had one conflict in Content ReviewAll 6 charters reviewed against the standard format (aragorn, gimli, boromir as reference):
Copilot Automated ReviewRead and acknowledged. Copilot reviewed all 6 files with 4 inline comments — no blocking issues flagged. VerdictAll sections follow the established charter pattern. Content is accurate and domain-appropriate. Conflict resolution preserves all intent from both sides. Branch rebased onto current |
…te now.md ## Summary Sprint 15 squad maintenance pass performed by Ralph (Meta). Working as Ralph (Meta/Scribe) Closes #234 ## Changes - **Synced local dev** to `origin/dev` after divergence caused by js-yaml Dependabot bump conflict - **Deleted 10 stale local branches** (7 squad branches + 3 temp branches) - **Fixed MD032 violations** in `aragorn/history.md` — blank lines around lists (pre-existing from PR #231) - **Merged inbox decision** `aragorn-precommit-gate.md` into `decisions.md` - **Fixed 9 pre-existing lint violations** in `decisions.md`: - MD013 (3 lines > 400 chars): wrapped long bullet text at lines 397, 438, 1390 - MD040 (5 fenced code blocks without language): added `text` specifier - MD001 (h3 directly under h1): changed Directive headings to h2 - **Updated `identity/now.md`**: board clear, `active_issues: []`, focus updated - **Updated `ralph/history.md`** with 2026-05-06 maintenance session log ## Verification - Pre-commit markdownlint gate: ✅ 0 errors on all 4 staged files - Pre-push gate (build + test + integration): ✅ all green Co-authored-by: Boromir <boromir@squad.dev> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Summary
Working as Boromir (Senior .NET Developer & Squad Coordinator)
This PR adds missing sections to 6 agent charters that lacked the full standard structure.
Closes #226
Changes
## Expertiseand## Critical Rules## Critical Rules## Critical Rules## Identity,## Expertise,## Boundaries,## Critical Rules## Critical Rules## Identity,## Expertise,## Boundaries,## Critical Rules