Release v0.3.1-alpha: Comprehensive Graph Interaction & Performance Improvements

README.md

@@ -8,6 +8,8 @@
 ![Version](https://img.shields.io/badge/version-0.2.2--alpha-orange.svg)
 ![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg)
 
+> 🚨 **PRODUCTION SECURITY WARNING**: This project is currently configured for development only with HTTP and hardcoded passwords. See [TLS Implementation Plan](./docs/security/tls-implementation-plan.md) for required security changes before production deployment.
+
 ## What is GraphDone?
 
 GraphDone reimagines project management as a collaborative graph where work flows through natural dependencies rather than artificial hierarchies. It's designed for high-quality individual contributors who thrive on autonomy, teams that include AI agents, and organizations ready to embrace democratic coordination.
@@ -257,6 +259,7 @@ Anyone can propose ideas and assign personal priority. The community validates t
 - 🎯 **[Project Philosophy](./docs/philosophy.md)** - Core beliefs and design principles  
 - 🚀 **[Getting Started Guide](./docs/guides/getting-started.md)** - Step-by-step setup and first steps
 - 🏗️ **[Architecture Overview](./docs/guides/architecture-overview.md)** - System design and technical decisions
+- 🤖 **[AI Agents Integration](./docs/guides/ai-agents-integration.md)** - Multi-agent AI system with tamagotchi-style companions
 - 👥 **[User Flows](./docs/guides/user-flows.md)** - How teams actually use GraphDone
 - 🔌 **[API Documentation](./docs/api/graphql.md)** - GraphQL schema and integration guide
 - 🚀 **[Deployment Guide](./docs/deployment/README.md)** - Self-hosted and cloud deployment options

deployment/docker-compose.dev.yml

@@ -1,74 +1,167 @@
-version: '3.8'
+name: graphdone-dev
+
+networks:
+  graphdone-internal:
+    driver: bridge
 
 services:
-  postgres:
-    image: postgres:15-alpine
+  graphdone-neo4j:
+    container_name: graphdone-neo4j
+    image: neo4j:5.26.12
     environment:
-      POSTGRES_DB: graphdone_dev
-      POSTGRES_USER: graphdone
-      POSTGRES_PASSWORD: graphdone_password
-    ports:
-      - "5432:5432"
+      NEO4J_AUTH: neo4j/graphdone_password
+      NEO4J_PLUGINS: '["graph-data-science", "apoc"]'
+      NEO4J_dbms_security_procedures_unrestricted: "gds.*,apoc.*"
+      NEO4J_dbms_security_procedures_allowlist: "gds.*,apoc.*"
+    # No external ports - internal network only
+    expose:
+      - "7474"
+      - "7687"
     volumes:
-      - postgres_dev_data:/var/lib/postgresql/data
-      - ./scripts/init-db.sql:/docker-entrypoint-initdb.d/init-db.sql
+      - neo4j_data:/data
+      - logs:/logs
+    networks:
+      - graphdone-internal
+    # Security configurations
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - DAC_OVERRIDE
+      - FOWNER
+      - SETGID
+      - SETUID
+    restart: unless-stopped
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U graphdone"]
+      test: ["CMD", "cypher-shell", "-u", "neo4j", "-p", "graphdone_password", "RETURN 1"]
       interval: 10s
       timeout: 5s
       retries: 5
+      start_period: 30s
 
-  redis:
-    image: redis:7-alpine
-    ports:
-      - "6379:6379"
+  graphdone-redis:
+    container_name: graphdone-redis
+    image: redis:8-alpine
+    # No external ports - internal network only
+    expose:
+      - "6379"
     volumes:
-      - redis_dev_data:/data
+      - redis_data:/data
+    networks:
+      - graphdone-internal
+    # Security configurations
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - SETGID
+      - SETUID
+    restart: unless-stopped
+    user: "999:999"  # Redis user
+    read_only: true
+    tmpfs:
+      - /tmp:noexec,nosuid,size=100m
     healthcheck:
       test: ["CMD", "redis-cli", "ping"]
       interval: 10s
       timeout: 5s
       retries: 5
+      start_period: 10s
 
-  server-dev:
+  graphdone-api:
+    container_name: graphdone-api
     build:
-      context: .
+      context: ..
       dockerfile: packages/server/Dockerfile.dev
     environment:
       - NODE_ENV=development
-      - DATABASE_URL=postgresql://graphdone:graphdone_password@postgres:5432/graphdone_dev
-      - PORT=4000
-      - CORS_ORIGIN=http://localhost:3000
-    ports:
-      - "4000:4000"
+      - NEO4J_URI=bolt://graphdone-neo4j:7687
+      - NEO4J_USER=neo4j
+      - NEO4J_PASSWORD=graphdone_password
+      - PORT=4127
+      - CORS_ORIGIN=http://localhost:3127
+    # No external ports - internal network only
+    expose:
+      - "4127"
     depends_on:
-      postgres:
+      graphdone-neo4j:
         condition: service_healthy
-      redis:
+      graphdone-redis:
         condition: service_healthy
     volumes:
-      - .:/app
-      - /app/node_modules
-      - /app/packages/server/node_modules
-    command: npm run dev
+      - logs:/app/logs
+      - sqlite_auth_data:/app/data
+    networks:
+      - graphdone-internal
+    # Security configurations
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - DAC_OVERRIDE
+      - FOWNER
+      - SETGID
+      - SETUID
+    restart: unless-stopped
+    user: "1001:1001"  # Non-root user
+    tmpfs:
+      - /tmp:noexec,nosuid,size=100m
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:4127/health"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
 
-  web-dev:
+  graphdone-web:
+    container_name: graphdone-web
     build:
-      context: .
+      context: ..
       dockerfile: packages/web/Dockerfile.dev
     environment:
-      - VITE_GRAPHQL_URL=http://localhost:4000/graphql
-      - VITE_GRAPHQL_WS_URL=ws://localhost:4000/graphql
+      - PORT=3127
+      - VITE_PROXY_TARGET=http://graphdone-api:4127
+      - VITE_GRAPHQL_URL=http://localhost:3127/graphql
+      - VITE_GRAPHQL_WS_URL=ws://localhost:3127/graphql
+    # Only expose web UI to host
     ports:
-      - "3000:3000"
+      - "3127:3127"
     depends_on:
-      - server-dev
+      - graphdone-api
     volumes:
-      - .:/app
-      - /app/node_modules
-      - /app/packages/web/node_modules
-    command: npm run dev
+      - logs:/app/logs
+    networks:
+      - graphdone-internal
+    # Security configurations
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - DAC_OVERRIDE
+      - FOWNER
+      - SETGID
+      - SETUID
+    restart: unless-stopped
+    user: "1001:1001"  # Non-root user
+    tmpfs:
+      - /tmp:noexec,nosuid,size=100m
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:3127"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
 
 volumes:
-  postgres_dev_data:
-  redis_dev_data:
+  neo4j_data:
+  redis_data:
+  logs:
+  sqlite_auth_data:

deployment/docker-compose.yml

@@ -1,6 +1,9 @@
+name: graphdone
+
 services:
-  neo4j:
-    image: neo4j:5.15-community
+  graphdone-neo4j:
+    container_name: graphdone-neo4j-prod
+    image: neo4j:5.26.12
     environment:
       NEO4J_AUTH: neo4j/graphdone_password
       NEO4J_PLUGINS: '["graph-data-science", "apoc"]'
@@ -11,15 +14,16 @@ services:
       - "7687:7687"  # Bolt
     volumes:
       - neo4j_data:/data
-      - neo4j_logs:/logs
+      - logs:/logs
     healthcheck:
       test: ["CMD", "cypher-shell", "-u", "neo4j", "-p", "graphdone_password", "RETURN 1"]
       interval: 10s
       timeout: 5s
       retries: 5
 
-  redis:
-    image: redis:7-alpine
+  graphdone-redis:
+    container_name: graphdone-redis-prod
+    image: redis:8-alpine
     ports:
       - "6379:6379"
     volumes:
@@ -30,33 +34,37 @@ services:
       timeout: 5s
       retries: 5
 
-  server:
+  graphdone-api:
+    container_name: graphdone-api-prod
     build:
       context: ..
       dockerfile: packages/server/Dockerfile
     environment:
       - NODE_ENV=production
-      - NEO4J_URI=bolt://neo4j:7687
+      - NEO4J_URI=bolt://graphdone-neo4j:7687
       - NEO4J_USER=neo4j
       - NEO4J_PASSWORD=graphdone_password
       - PORT=4127
       - CORS_ORIGIN=http://localhost:3127
     ports:
       - "4127:4127"
     depends_on:
-      neo4j:
+      graphdone-neo4j:
         condition: service_healthy
-      redis:
+      graphdone-redis:
         condition: service_healthy
     volumes:
       - ../packages/server/.env:/app/.env
+      - logs:/app/logs
+      - sqlite_auth_data:/app/data
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:4127/health"]
       interval: 30s
       timeout: 10s
       retries: 3
 
-  web:
+  graphdone-web:
+    container_name: graphdone-web-prod
     build:
       context: ..
       dockerfile: packages/web/Dockerfile
@@ -66,11 +74,13 @@ services:
     ports:
       - "3127:3127"
     depends_on:
-      - server
+      - graphdone-api
     volumes:
       - ../packages/web/.env:/app/.env
+      - logs:/app/logs
 
 volumes:
   neo4j_data:
-  neo4j_logs:
-  redis_data:
+  redis_data:
+  logs:
+  sqlite_auth_data:

docs/README.md

@@ -1,7 +1,5 @@
 # GraphDone Documentation
 
-**AI-Generated Content Warning: This documentation contains AI-generated content. Verify information before depending on it for decision making.**
-
 Welcome to the GraphDone documentation! This directory contains comprehensive guides, API references, and deployment information for working with GraphDone.
 
 ## 📚 Documentation Structure
@@ -13,16 +11,31 @@ Welcome to the GraphDone documentation! This directory contains comprehensive gu
 - Authentication and authorization
 
 ### [Developer Guides](./guides/)
-- Getting started
-- Core concepts
-- Architecture overview
-- Contributing guidelines
+- [Getting Started](./guides/getting-started.md) - Setup and first steps
+- [Architecture Overview](./guides/architecture-overview.md) - System design and technical decisions
+- [SQLite Deployment Modes](./guides/sqlite-deployment-modes.md) - Local dev vs Docker authentication storage
+- [User Flows](./guides/user-flows.md) - How teams actually use GraphDone
+
+### 🤖 AI Agents Documentation
+> **Start here**: [Simple AI Agent Reality Check](./simple-agent-reality.md) - **What we're actually building**
+
+**Implementation Guides**:
+- [Simple AI Agent Reality Check](./simple-agent-reality.md) - 🎯 **THE PLAN**: Smart chia pet with Ollama
+- [AI Agents Technical Spec](./ai-agents-tech-spec.md) - 📚 Complete technical implementation (advanced)
+- [Agent Planning Scenarios](./agent-planning-scenarios.md) - 🎪 Interactive planning examples (future)
+
+### 🔒 Security & Production
+> **CRITICAL FOR RELEASE**: [TLS Implementation Plan](./security/tls-implementation-plan.md) - **Required before production**
+
+**Security Documentation**:
+- [TLS Implementation Plan](./security/tls-implementation-plan.md) - 🚨 **MUST READ**: HTTPS, SSL certificates, secrets management
+- [Production Security Checklist](./security/tls-implementation-plan.md#deployment-security-checklist) - Pre-launch security validation
 
 ### [Deployment](./deployment/)
 - Docker setup
-- Kubernetes manifests
+- Kubernetes manifests  
 - Cloud provider guides
-- Production considerations
+- Production considerations (see Security section above for TLS)
 
 ## 🚀 Quick Start
 
@@ -51,7 +64,7 @@ Welcome to the GraphDone documentation! This directory contains comprehensive gu
 - **Graph-native collaboration** - Work flows through natural dependencies
 - **Spherical priority model** - Ideas migrate from periphery to center
 - **Democratic prioritization** - Community validation guides resource allocation
-- **Human-AI coordination** - Agents participate as first-class citizens
+- **Human-AI coordination** - Smart chia pets that help with planning (see AI docs above)
 
 ## 🔗 Quick Links