fix(misc): residual fabrication sweep across detail pages and providers#166
Merged
operatoruplift merged 1 commit intomasterfrom Apr 27, 2026
Merged
fix(misc): residual fabrication sweep across detail pages and providers#166operatoruplift merged 1 commit intomasterfrom
operatoruplift merged 1 commit intomasterfrom
Conversation
Five more surfaces still carried fake telemetry or sci-fi cosplay branding after #164/#165. This is the cleanup PR that closes the sweep. ## Changes ### app/(dashboard)/agents/[id]/page.tsx (helper detail) Was: 3 demo helpers with hardcoded - `sessions: 142` / `2847` / `89` - `memoryUsage: '2.4GB'` / '512MB' / '1.8GB' - `status: 'running'` plus a 5-event ACTIVITY_LOG with timestamps ("2m ago", "15m ago", etc.) claiming each helper had "Refactor auth middleware completed", "Memory indexed: 847 new embeddings", "Deployed from Agent Builder" done on the user's account. Now: same 3 helpers as starter detail pages but - `sessions: 0`, `memoryUsage: ','`, `status: 'idle'` - ACTIVITY_LOG empty by default; the panel renders an honest "No activity yet. Run this helper to see results here." placeholder - "CodePilot Pro" -> "Code Pilot", "Blackwall Guard" -> "Security Guard" (last Blackwall reference in user-facing surfaces) ### src/components/ui/CommandBar.tsx (cmd-K palette) Renamed entries to match the consumer/dashboard rewrites in #154/#163: - "Go to Agent Store" -> "Go to Helpers" - "Go to Agent Builder" -> "Go to Builder" - "Marketing homepage" -> "Public homepage" - "New Chat" -> "New chat" - "Build Agent" -> "Build a helper" - Security entry description "Blackwall security dashboard" -> "Encryption, receipts, and activity log" ### app/(dashboard)/integrations/page.tsx DD.xyz integration `howItWorks` description rewrite. Was: "Powers Blackwall threat assessment and compliance checks." Now: "used by security and compliance helpers." (drops the Blackwall brand). ### src/components/providers/AgentProvider.tsx `MOCK_AGENTS` was 4 agents named "Founder Ops" / "Growth Lead" / "DevRel" / "Support Bot" with status "online" / "busy" / "offline" and descriptions like "Orchestrating company operations" that implied real ongoing operations on the user's account. Now: 4 helpers named after what they actually do, - "Inbox helper", "Calendar helper", "Research helper", "Reminders" all with status "online" since they're available to run, not pretending to be running tasks behind the scenes. Default activeAgent flipped from "founder-ops" to "inbox" so the consumer use case is front and center. ### app/(dashboard)/onboarding/page.tsx Starter helper renames: "CodePilot" -> "Code Pilot", "Research Bot" -> "Researcher", "Security Guard" desc rewrite to match agents/[id]/page.tsx. ## Trust impact Final pass on the fabrication class started in PR #147. After this merges, a grep for "Blackwall|CodePilot|Founder Ops|Warp Network| Uplift Core|Gold Agent" returns zero hits in user-facing surfaces. ## Verified - pnpm exec tsc --noEmit: clean - pnpm check: 3 passed, 0 failed - Final fabrication sweep clean (only hit is the comment on notifications/page.tsx documenting what #165 removed) ## Rollback Single git revert. Five files.
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
operatoruplift
added a commit
that referenced
this pull request
Apr 27, 2026
…167) Two improvements in one PR. ## (1) Trust-gate coverage 11/44 -> 16/44 Five small routes adopted the @/lib/apiHelpers withRequestMeta pattern that the larger /api/tools/* routes already use (PR #123) and the observability sweep extended to the receipts/memory/agents/ notifications/audit families (PR #130). Now every response from these routes carries `X-Request-Id`, supporting the request-id propagation contract trust-gate enforces. Routes: - app/api/providers/route.ts (6 lines) - app/api/capabilities/route.ts (25 lines) - app/api/receipts/public-key/route.ts (26 lines) - app/api/health/llm/route.ts (27 lines) - app/api/dashboard/stats/route.ts (31 lines) ## (2) Fix the residual fabrication in /api/dashboard/stats While adding apiHelpers I found one more fabrication leftover: when the route's auth check fails, it was returning a hardcoded fallback payload: { activeAgents: 14, chatSessions: 8, memoryNodes: 12400, securityBlocks: 47, } These are the **exact same fake values** PR #164 removed from the rendered dashboard. The dashboard now reads from localStorage directly so it doesn't call this route, but anything else that hits /api/dashboard/stats unauthenticated still got the lie. Now: returns zeros on the unauthenticated path. No fake demo data. ## Trust impact Closes the dashboard fabrication arc started in #164/#165/#166. Adds the request-id contract to 5 more routes. ## Verified - pnpm exec tsc --noEmit: clean - pnpm check: 3 passed, 0 failed - trust-gate: 16/44 route files (was 11/44) ## Rollback Single git revert. 5 files.
operatoruplift
added a commit
that referenced
this pull request
Apr 27, 2026
#168) Trust-gate coverage 16/44 -> 21/44, plus one more sci-fi cosplay residual fixed. ## Routes adopting apiHelpers | Route | Lines | |---|---| | app/api/gold/route.ts | 17 | | app/api/risk/route.ts | 19 | | app/api/auth/login/route.ts | 30 | | app/api/auth/signup/route.ts | 36 | | app/api/sns/resolve/route.ts | 35 | Each adopts `withRequestMeta` for the X-Request-Id header. The two auth routes plus risk also pick up `validationError()` for clean 400 responses with `{ missing: [...] }` details. Gold + risk pick up `errorResponse()` for the 500 path. ## Drop "Commander" default name `app/api/auth/signup/route.ts` was setting data: { display_name: name || 'Commander' } PR #163 already removed "Commander" from the dashboard h1 ("Good {greeting}, Commander."), and #166 cleaned up the rest of the sci-fi cosplay vocabulary. Signup was the last surface where a fresh user got "Commander" as their default display name. Now: derives a default from the email's local part (jane.doe@x.com -> "jane.doe"), falling back to "Friend" if email is missing. ## Verified - pnpm exec tsc --noEmit: clean - pnpm check: 3 passed, 0 failed - trust-gate: 21/44 route files (was 16/44) ## Rollback Single git revert. 5 files.
This was referenced Apr 27, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closing the fabrication sweep
#147 → #155 → #156 → #157 → #162 → #164 → #165 covered the headline surfaces. This PR closes the loop on the last five files that carried fake telemetry or sci-fi cosplay branding.
Changes
app/(dashboard)/agents/[id]/page.tsx(helper detail)sessions: 142 / 2847 / 89andmemoryUsage: '2.4GB' / '512MB' / '1.8GB', allstatus: 'running'sessions: 0,memoryUsage: ',',status: 'idle'src/components/ui/CommandBar.tsx(cmd-K palette)app/(dashboard)/integrations/page.tsxDD.xyz integration
howItWorks:src/components/providers/AgentProvider.tsxMOCK_AGENTSwas 4 agents named "Founder Ops" / "Growth Lead" / "DevRel" / "Support Bot" with descriptions like "Orchestrating company operations" implying real ongoing background tasks. Now 4 helpers named for what they actually do: "Inbox helper", "Calendar helper", "Research helper", "Reminders". Default flipped from "founder-ops" → "inbox".app/(dashboard)/onboarding/page.tsxStarter helper renames: "CodePilot" → "Code Pilot", "Research Bot" → "Researcher", "Security Guard" desc rewritten to match agents/[id].
Trust impact
After this merges, a
grep -rnE "Blackwall|CodePilot|Founder Ops|Warp Network|Uplift Core|Gold Agent"acrosssrc/andapp/returns zero hits in user-facing surfaces. The only remaining match is the comment on notifications/page.tsx documenting what #165 removed.Verified
Net diff
Rollback
Single
git revert.