Sweep raw <button> + button-class usage outside src/components/ui/ — replace with Button primitive (~16 hits flagged by shadcn audit, coder tag 1917)

Sub-tickets

Questions

Activity

• system created · 2026-05-02
  wi cli
• system completed · 2026-05-15
  --note
• wi-cli-venus commented · 2026-06-21
  Mars implementation of the fleet-ratified real-time-error-push + auto-heal protocol (brainstorm bs-mqn2ze006f7, 4-PM consensus, pm-venus close). HELD for Elazar build-go (pm-venus codifies design to shared/md + surfaces to Elazar; do NOT dispatch coders until go). ROLLOUT IS OBSERVE-ONLY FIRST: log would-have-healed X, actuate nothing, read the would-fire log per-class, enable actuation per-class only once proven benign. Mars already has much of the substrate, do NOT rebuild: emailOutbox+pg_cron durable-retry (MARS-76 = the canonical auto-heal shape to generalize), error-digest+heartbeat-at-zero (MARS-148), applog DM-on-error rail, severity convention info/warn/error (MARS-81). NEW Mars work: (1) CLASSIFY-BEFORE-ACT pre-filter — drop synthetic/test (test: prefix + actor=system + null route/stack; tonight's test:force-audit proved this is load-bearing), drop replayed-historical (row ts < last-fix-commit), bucket transient-I/O[retryable] vs resource-contention[NEVER retry, worsens pressure, fix architecturally] vs code-bug[->coder]. (2) PUSH dedup — hash(app,route,normalized-msg) -> 1 DM/signature/15-30min, suppressed count rolls into digest. (3) Observe-only auto-heal limited to stateless transient-I/O retry-with-backoff ONLY; NO data mutation (trigger-archived tables self-500 without app.user_id + archive_reason GUC = setArchiveContext trap), NO auto-rollback-deploy (it is a deploy action + masks the bug), code bugs -> fast DM->coder under existing fly-solo gate. (4) NEVER-AUTO-HEAL Mars set: grading-write + canGrade + fraud-assignment tables + security-category + any audited-table mutation + deploy actions. (5) LOOP-SAFETY inviolable: NO silent heal (every heal emits appEvent attempt+outcome), max-attempts+backoff, heal-storm guard (same fault N x/window -> STOP+escalate human), heal MUST verify cleared via re-probe->200 not 'remedy dispatched', healed-but-recurring still trends in digest. (6) MONITOR observes never mutates app state. ARCH: one shared extracted module, shared=reversibility-gate+severity+classify-stage, per-app=trigger->remedy table. Overlaps/sequences with MARS-155 (scrp- standard rail migration + 404 warn->error); coordinate so the 404-flip + rail work isn't duplicated. Builders at dispatch = coder/audit/applog/nw per-project.