AGI/ASI MVP scaffold: SSE chat, orchestrator, circuit breaker, provenance

[genspark-ai-developer]

This PR scaffolds the Next.js AGI/ASI MVP with streaming SSE chat, basic orchestrator and circuit breaker, intent endpoint, and provenance badge. Includes TS configs.

• app/api/chat/stream SSE route (mock stream)
• app/api/intent edge route (intent stub)
• Chat UI with token streaming and provenance badge
• Orchestrator + CircuitBreaker libs
• TS/ESLint configs

Follow-ups: consent ledger, RBAC, micro-plugins, educator timeline.

[code-genius-code-coverage]

The files' contents are under analysis for test generation.

[semanticdiff-com]

Review changes with  

Changed Files

File	Status
next-app/app/api/chat/stream/route.ts	0% smaller
next-app/app/api/intent/route.ts	0% smaller
next-app/app/chat/page.tsx	0% smaller
next-app/app/layout.tsx	0% smaller
next-app/app/page.tsx	0% smaller
next-app/components/ProvenanceBadge.tsx	0% smaller
next-app/lib/ai/circuitBreaker.ts	0% smaller
next-app/lib/ai/orchestrator.ts	0% smaller
next-app/lib/ai/types.ts	0% smaller
next-app/next.config.js	0% smaller
next-app/package.json	0% smaller
next-app/tsconfig.json	0% smaller

[gitnotebooks]

Review these changes at https://app.gitnotebooks.com/OneFineStarstuff/OneFineStarstuff.github.io/pull/12

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[reviewabot]

next-app/app/api/chat/stream/route.ts

1. The function fakeStream should have a more descriptive name to indicate its purpose.
2. The POST function should handle potential errors when parsing the JSON from the request.
3. The encode function should be defined before it is used in the POST function for better readability.

next-app/app/api/intent/route.ts

• No issues found.

next-app/app/chat/page.tsx

1. The send function is quite long and could be broken down into smaller functions for better readability and maintainability.
2. The useEffect hook should have a dependency array to avoid potential issues with stale closures.

next-app/app/layout.tsx

• No issues found.

next-app/app/page.tsx

• No issues found.

next-app/components/ProvenanceBadge.tsx

• No issues found.

next-app/lib/ai/circuitBreaker.ts

• No issues found.

next-app/lib/ai/orchestrator.ts

1. The respond function is quite long and could be broken down into smaller functions for better readability and maintainability.
2. The decorate function should be defined before it is used in the respond function for better readability.

next-app/lib/ai/types.ts

• No issues found.

next-app/next.config.js

• No issues found.

next-app/package.json

• No issues found.

next-app/tsconfig.json

• No issues found.

[difflens]

View changes in DiffLens

[github-actions]

Message that will be displayed on users' first pull request

[difflens]

View changes in DiffLens

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	vitest@​1.6.0
	next@​14.2.5
	eslint-config-next@​14.2.5
	@​types/​react-dom@​18.2.21
	@​types/​react@​18.2.67
	classnames@​2.5.1
	@​types/​node@​20.11.19
	react@​18.3.1
	typescript@​5.4.5
	react-dom@​18.3.1
	zustand@​4.5.2
	eslint@​8.57.0

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		next@14.2.5 has a Critical CVE. CVE: GHSA-f82v-jwr5-mffw Authorization Bypass in Next.js Middleware (CRITICAL) Affected versions: >= 13.0.0 < 13.5.9; >= 14.0.0 < 14.2.25; >= 15.0.0 < 15.2.3; >= 11.1.4 < 12.3.5 Patched version: 14.2.25 From: next-app/package.json → npm/next@14.2.5 ℹ Read more on: This package | This alert | What is a critical CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/next@14.2.5. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		vitest@1.6.0 has a Critical CVE. CVE: GHSA-9crc-q9x8-hgqq Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening (CRITICAL) Affected versions: >= 1.0.0 < 1.6.1; >= 2.0.0 < 2.1.9; >= 3.0.0 < 3.0.5; <= 0.0.125 Patched version: 1.6.1 From: next-app/package.json → npm/vitest@1.6.0 ℹ Read more on: This package | This alert | What is a critical CVE? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/vitest@1.6.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

[difflens]

View changes in DiffLens

[netlify]

❌ Deploy Preview for onefinestarstuff failed.

Name	Link
🔨 Latest commit	8e903d8
🔍 Latest deploy log	https://app.netlify.com/projects/onefinestarstuff/deploys/68c28f13562e670008ced28b

[difflens]

View changes in DiffLens