FM / trellopowerup.abdallabala.com

/home/techb158/trellopowerup.abdallabala.com/

/home/techb158/trellopowerup.abdallabala.com

Name	Size	Mode	Actions
.well-known/	-	0755	rm
amrvhow/	-	0755	rm
bipqfxj/	-	0755	rm
bjfkurz/	-	0755	rm
blkxdri/	-	0755	rm
brfueak/	-	0755	rm
btxzogn/	-	0755	rm
cgi-bin/	-	0755	rm
csxerab/	-	0755	rm
cvgiudl/	-	0755	rm
data/	-	0755	rm
debgyrj/	-	0755	rm
docs/	-	0755	rm
dxi1emn/	-	0755	rm
dz1qmcu/	-	0755	rm
faruizn/	-	0755	rm
fazqdxg/	-	0755	rm
fhrb1kd/	-	0755	rm
frlktno/	-	0755	rm
glweyom/	-	0755	rm
gyzbwdn/	-	0755	rm
hpgzduc/	-	0755	rm
htwlxgz/	-	0755	rm
hvtbuei/	-	0755	rm
ifwhyst/	-	0755	rm
jesiwcg/	-	0755	rm
kdz1met/	-	0755	rm
lqtynbr/	-	0755	rm
mbodpiu/	-	0755	rm
mjnrzwc/	-	0755	rm
mjtulfe/	-	0755	rm
mjxionz/	-	0755	rm
mqhfzxw/	-	0755	rm
mxtpuay/	-	0755	rm
n1jgxet/	-	0755	rm
nfqrtdx/	-	0755	rm
nodiubx/	-	0755	rm
obracqm/	-	0755	rm
oidwstf/	-	0755	rm
omuirvl/	-	0755	rm
onyqrfl/	-	0755	rm
public/	-	0755	rm
qkefxdh/	-	0755	rm
qlgszum/	-	0755	rm
qskfgzv/	-	0755	rm
qujdibt/	-	0755	rm
r1nzabf/	-	0755	rm
reyvdtp/	-	0755	rm
rhzusla/	-	0755	rm
rjgxsnh/	-	0755	rm
rjtkcsb/	-	0755	rm
rkagqip/	-	0755	rm
rqtzksu/	-	0755	rm
runhd1i/	-	0755	rm
samples/	-	0755	rm
scripts/	-	0755	rm
skj1ito/	-	0755	rm
src/	-	0755	rm
svidupj/	-	0755	rm
test/	-	0755	rm
tvwujqn/	-	0755	rm
u1dbwsa/	-	0755	rm
ualfkih/	-	0755	rm
udof1ci/	-	0755	rm
ugelijz/	-	0755	rm
usdczr1/	-	0755	rm
uvmzho1/	-	0755	rm
wiaotzd/	-	0755	rm
witjrfl/	-	0755	rm
wmxfcga/	-	0755	rm
wrfylau/	-	0755	rm
wyxqsal/	-	0755	rm
wzogbdx/	-	0755	rm
xbjphvz/	-	0755	rm
xgohqkb/	-	0755	rm
xijcfsu/	-	0755	rm
xijmyae/	-	0755	rm
xjyzgdq/	-	0755	rm
xnqcegw/	-	0755	rm
xpgnafh/	-	0755	rm
ycue1dn/	-	0755	rm
ynqo1lg/	-	0755	rm
yowbctv/	-	0755	rm
zckrmfx/	-	0755	rm
znqgjcs/	-	0755	rm
.dockerignore	78	0644	edit dl rm
.env	350	0644	edit dl rm
.env.example	304	0644	edit dl rm
.gitignore	44	0644	edit dl rm
.htaccess	281	0644	edit dl rm
cosmic-trello-powerup-0.4.5.tar.gz	99931	0644	edit dl rm
cosmic-trello-powerup-board-scoped-remove-org.zip	129661	0644	edit dl rm
cosmic-trello-powerup-board-scoped-remove.zip	129668	0644	edit dl rm
docker-compose.vps.yml	201	0644	edit dl rm
docker-compose.yml	265	0644	edit dl rm
docker-compose.yml.bak.2026-08-04_1619	211	0644	edit dl rm
Dockerfile	130	0644	edit dl rm
icon.png	16418	0644	edit dl rm
openapi.yaml	16096	0644	edit dl rm
package-lock.json	33343	0644	edit dl rm
package.json	822	0644	edit dl rm
README.md	5167	0644	edit dl rm
wp-cron-feig.php	1659	0644	edit dl rm

Edit: /home/techb158/trellopowerup.abdallabala.com/README.md (5167B)

# COSMIC AI-Risk Management Trello Power-Up

Custom Trello Power-Up prototype for applying the COSMIC AI-Risk methodology inside Trello boards.

## Current milestone

Version `0.4.5` is ready for local validation and Trello registration.

It now includes:

- Runtime `/config.js` injection for the Trello API key and public API base URL.
- Trello REST API initialization on the connector page and iframe pages.
- Board button, card button, risk/review card badges, card-detail badges, settings, and card back section.
- COSMIC risk scoring API.
- JSON-backed local storage for boards, cards, and saved assessments.
- Saved card-level assessments with newest-first assessment history, score trend metadata, and an expandable card-back history view.
- Latest assessment prefill when updating a Trello card risk assessment.
- Remove Assessment action to clear a card's saved COSMIC history, dashboard entry, and Trello shared badge data.
- Board-level defaults for project typology, lifecycle phase, and measurement maturity on new assessments.
- Risk templates for common AI risks, including data quality, model drift, bias/fairness, deployment rollback, and legal/ethical review.
- Board summary API with risk distribution, dedicated review queue endpoint, dashboard panel, and focused queue CSV export, recommended review actions, stale-assessment detection, trend snapshot, last-assessed context, highest-risk ordering, dashboard filters/search, and JSON/CSV board exports.
- Optional Trello label synchronization for COSMIC risk and gate status.
- Mitigation checklist creation through Trello REST authorization.
- Mitigation completeness sync from the `COSMIC Risk Mitigation` checklist progress.
- One-click Trello card comments for assessment summary and review evidence.
- Unit tests for the risk engine, assessment history ordering, and review signal analytics.
- Smoke test for the local API, board summary, and export endpoints.

## Implementation guide

A running documentation guide is maintained at docs/31-trello-powerup-implementation-guide.md. Update it at the end of the build with the final feature list, validation results, and deployment notes.

## Methodology implemented

The prototype operationalizes these COSMIC AI-Risk concepts:

- AI lifecycle phases.
- AI project typology.
- Organizational, technical, and human governance dimensions.
- Strategic and organizational, technical, and legal and ethical risk categories.
- Risk scoring using probability, impact, detection difficulty, and mitigation completeness.
- Deployment gate status using risk status, approval state, mitigation completeness, model performance, data readiness, ethical review, and legal review.

The scoring formula is an implementation proposal for the prototype. It should be calibrated during empirical validation.

## Install

```bash
npm install
cp .env.example .env
npm run dev
```

Open:

```text
http://localhost:3000/index.html
```

## Storage

By default, the API stores runtime data in:

```text
./data/store.json
```

Override the storage file with:

```env
COSMIC_STORE_FILE=./data/store.json
```

The `data/` directory is ignored by Git because it contains local runtime data.

## Validate locally

Run static checks and unit tests:

```bash
npm run lint
npm test
```

In one terminal, start the server:

```bash
npm start
```

In a second terminal, run the API smoke test:

```bash
npm run smoke
```

Expected smoke-test result:

```text
health: { ok: true, service: 'cosmic-ai-risk-trello-powerup', version: '0.4.5', store: { mode: 'json-file', ... } }
score: 21 medium gate-blocked
saved assessment: <generated id> new
board summary: { cardCount: 1, averageScore: 21, deploymentBlocked: 1 }
json export: cosmic-board-risk-export 1
csv export: "board_id","card_id",...
```

## Trello setup

See `docs/trello-admin-setup.md`.

## API sample

Score an assessment without saving it:

```bash
curl -X POST http://localhost:3000/api/risks/score \
  -H "Content-Type: application/json" \
  --data @samples/risk-assessment.json
```

Save a card assessment:

```bash
curl -X POST http://localhost:3000/api/boards/demo-board/cards/demo-card/assessments \
  -H "Content-Type: application/json" \
  --data @samples/risk-assessment.json
```

Remove a card assessment history:

```bash
curl -X DELETE http://localhost:3000/api/boards/demo-board/cards/demo-card/assessments
```

Read a board summary:

```bash
curl http://localhost:3000/api/boards/demo-board/summary
```

Read card assessment history:

```bash
curl http://localhost:3000/api/cards/demo-card/assessments
```

Export board risk reports:

```bash
curl http://localhost:3000/api/boards/demo-board/export.json
curl http://localhost:3000/api/boards/demo-board/export.csv
```

## Important production work still required

- Replace JSON file storage with PostgreSQL or another managed database for multi-user production deployments.
- Add authentication for the COSMIC backend API.
- Add audit logs for governance approvals.
- Calibrate score thresholds with validation data.
- Add custom field synchronization if the board uses Trello Custom Fields.
- Add organization-level role and access controls.

cmd: