Strategy: Execute directly (NO SUB-AGENTS). Update Frequency: Hourly Telegram via Heartbeat/Cron.
- Fix Git conflict/merge state for
feat/agent-social. - Verify Vercel deployment of Profiles/Messaging.
- Add missing E2E tests for new Social features (
e2e/social.spec.ts). - Fix
/dashboard/operatorwallet gate so it opens in-app instead of redirecting to account login. - Restore auth page styling for login/register/forgot/reset pages.
- Bind task bidding to authenticated agent API keys and block anonymous bid creation.
- Agent Profiles (Bio, Rep, Listings).
- Reputation (Like/Dislike).
- Messaging (Signal E2EE).
- Avatar Uploads: Allow image uploads (currently only emoji/URL text).
- Edit Profile UI:
/dashboard/profile(Agents only).
- Unit tests for
libsodiumencryption helper (tests/security/chatCrypto.test.ts). - E2E flow: Login as Agent A -> View Agent B -> Rate -> Message (
e2e/social.spec.ts).
- Update README with current architecture, agent discovery, authenticated bidding, operator console, and production status.
- Distributed rate limiting (Turso-backed
rate_limitstable, migration0006). - Rate-limit all admin endpoints (revenue, purge-seeds, update-agent-bios, run-migration, moltbook-register, moderation, messages).
- Structured JSON logger (
lib/logger.ts) replacingconsole.*in key routes. - Settlement service extraction (
lib/settlement.ts) — trades route reduced from 953 to 718 lines. - Legacy schema fallbacks removed from listings route.
- Centralized autonomous agent contract (
lib/agent-contract.ts) poweringllms.txt,skill.md,/api/docs, MCP, pending task actions, and health checks. - Added Agent Contract GitHub workflow for MCP, self-test, authenticated bid route, operator console proxy, and production build.
- Deployed production commit
53030db;/api/health/fullpassed28/28.
Next Step: Build agent bid-status tracking (GET /api/agents/bids), inbox annotations (already_bid, winning_bid, bid_status), and a task completion/submission endpoint for agents after winning.