菜单
HyperCode V2.4 Phase 10 status board (10A FastAPI/starlette → 10N OTLP tracing) — what shipped, what's next, where each phase lives. Use when the user asks "what phase are we on", "phase 10X status", "what's next after 10K", "is 10F live", or wants to plan/extend a Phase 10 mission.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Deploys and manages the mint-pet-confirm Supabase Edge Function in HyperCode-V2.4. Use when deploying, updating, debugging, or verifying the pet minting confirmation flow on Base Sepolia.
HyperCode V2.4 Trivy CVE scanning — Phase 8 PR gate, Phase 9 hardening pattern (apt + pip pinning), weekly fleet scan, baseline of 13 HIGH (all Debian-unfixable). Use when the user says "trivy scan", "CVE check", "scan agents", "Phase 9 hardening", "build secure", "security pipeline", or wants to vet a new Dockerfile.
Running, rebuilding, debugging, and inspecting the HyperCode V2.4 29-container Docker stack — compose ops, network topology (frontend-net/backend-net/agents-net/data-net/obs-net), agent ports (127.0.0.1:), health checks, log tailing, and the network-migrate script. Use when the user says "containers down", "compose up", "rebuild agents", "agent X not healthy", "redis/postgres connection", "network isolation", or hits any Docker stack issue.
HyperCode V2.4 Phase 10N OTLP distributed tracing — OpenTelemetry → Tempo → Grafana. View traces, debug missing spans, the OTLP_EXPORTER_DISABLED flag. Use when the user says "tracing", "Tempo", "OTel", "OTLP", "traces missing", "view a request flow", "Grafana traces", or "Phase 10N".
HyperCode V2.4 Stripe Checkout + webhook flow — Phase 10F (API), 10G (DB writes), 10I (e2e), 10K (price IDs locked). Routes, prices, webhook events, signature verification, rate-limit exemption. Use when the user says "stripe", "checkout", "webhook failing", "subscription event", "price ID", "10F/10G/10I", or hits any payment-related issue.
Full Railway cloud deployment mastery — CLI commands, deployment patterns, database management, environment config, CI/CD pipelines, debugging, scaling, and Docker workflows. Use this skill whenever the user mentions Railway, railway.app, `railway up`, deploying to Railway, Railway services, Railway databases, Railway volumes, Railway env vars, Railway logs, Railway domains, Railway CI/CD, or any Railway error or debug scenario. Also trigger for HyperCode V2.4, BROski Bot, HyperAgent-SDK, or any Hyperfocus Zone service that needs cloud deployment on Railway. Even if the user just says "deploy my app" or "get this live" and Railway is in context — use this skill. ALWAYS trigger for Railway topics, even if the user only mentions one small aspect of it.
| name | phase-10-tracker |
| description | HyperCode V2.4 Phase 10 status board (10A FastAPI/starlette → 10N OTLP tracing) — what shipped, what's next, where each phase lives. Use when the user asks "what phase are we on", "phase 10X status", "what's next after 10K", "is 10F live", or wants to plan/extend a Phase 10 mission. |
The authoritative phase map for HyperCode V2.4. Phases 0–6 are foundational (identity bridge, token sync, agent access, graduation, observability, terminal). Phase 7+ is the security + payments + tracing era.
| Phase | What | Status | Verified |
|---|---|---|---|
| 0–6 | Identity / token sync / shop / graduate / Grafana / CLI | ✅ DONE | Live |
| 7 | Dockerfile security hardening (non-root, multi-stage, GID 999) | ✅ DONE | Apr 14 |
| 8 | CI/CD Trivy pipeline (PR gate + weekly Mon 06:00 UTC) | ✅ DONE | Apr 14 |
| 9 | CVE elimination — apt + pip pinning across 20 Dockerfiles | ✅ DONE | Apr 14 |
| 10A | FastAPI/starlette CVE — fastapi==0.135.3 + starlette==0.47.2 | ✅ DONE | Apr 14 |
| 10B | Docker network isolation — data-net + obs-net internal: true | ✅ DONE | Apr 14 |
| 10C | Docker secrets — .env removed from prod containers | ✅ DONE | Apr 14 |
| 10D | Per-agent rate limiting + auth | ✅ DONE | Apr 14 |
| 10E | CognitiveUplink WS type fix (type: "execute") | ✅ DONE | Apr 15 |
| 10F | Stripe Checkout API (3 endpoints + service layer + tests) | ✅ DONE | Apr 14 |
| 10G | DB — Stripe webhook writes (subscriptions + payments) | ✅ DONE | Apr 14 |
| 10H | Pricing page in dashboard | ✅ DONE | Apr 14 |
| 10I | Stripe CLI e2e — routes + webhook LIVE | ✅ DONE | Apr 15 |
| 10J | CognitiveUplink /ws/uplink served from hypercode-core | ✅ DONE | Apr 15 |
| 10K | Stripe Price IDs locked in .env | ✅ DONE | Apr 15 |
| 10N | OTLP tracing — Tempo via Grafana | ✅ DONE | Apr 15 |
| 10? | NEXT — see "What's Open" below | ⏳ |
| Candidate | What | Priority |
|---|---|---|
| CVE patching | 13–14 HIGH remaining (Debian-unfixable) — wait for upstream or accept | Wait |
| Frontend video URL | Module 1.1 record + add video_url to DB | Ongoing |
| Phase 11 | TBD — ask Bro for next mission |
| Phase | Key files |
|---|---|
| 7 (Dockerfile) | All 20 Dockerfiles in agents/*/Dockerfile, backend/Dockerfile, etc. |
| 8 (CI) | .github/workflows/trivy-scan.yml, trivy-weekly.yml, Makefile scan targets |
| 9 (pip pin) | Every Dockerfile's runtime stage — Part B block |
| 10A | backend/requirements.txt |
| 10B | docker-compose.yml networks block; scripts/network-migrate.sh |
| 10C | secrets/ directory + docker-compose.yml secrets: block |
| 10D | backend/app/middleware/rate_limit.py + per-agent middleware |
| 10F-10K | backend/app/api/stripe.py + frontend/.../Pricing*.tsx |
| 10N | backend/app/core/telemetry.py + OTLP_EXPORTER_DISABLED=false in .env |
docker-stack-ops — running, rebuilding, debugging the 29 containerscve-trivy-scan — Phase 8/9 scanning workflowstripe-webhook-handler — Phase 10F–10K Stripe flowotlp-tempo-tracing — Phase 10N tracing setupcve-trivy-scan skilldata-net + obs-net stay internal: true forever — never expose redis/postgres/grafana to internet/api/stripe/webhook"execute", served from hypercode-core at /ws/uplinkBefore opening Phase 11 (or extending 10):
CLAUDE_CONTEXT.md roadmap tablecross-repo-sync skillmake scan-all)