chore(deps): Zapier SDK 0.91, Mastra off alpha, AI SDK v7, Node 24 — audit 25 → 8

.beads/config.yaml

@@ -1,58 +1,95 @@
 # Beads Configuration File
+
 # This file configures default behavior for all bd commands in this repository
+
 # All settings can also be set via environment variables (BD_* prefix)
+
 # or overridden with command-line flags
 
 # Issue prefix for this repository (used by bd init)
+
 # If not set, bd init will auto-detect from directory name
+
 # Example: issue-prefix: "myproject" creates issues like "myproject-1", "myproject-2", etc.
+
 # issue-prefix: ""
 
 # Use no-db mode: JSONL-only, no Dolt database
+
 # When true, bd will use .beads/issues.jsonl as the source of truth
+
 # no-db: false
 
 # Enable JSON output by default
+
 # json: false
 
 # Feedback title formatting for mutating commands (create/update/close/dep/edit)
+
 # 0 = hide titles, N > 0 = truncate to N characters
+
 # output:
+
 #   title-length: 255
 
 # Default actor for audit trails (overridden by BD_ACTOR or --actor)
+
 # actor: ""
 
 # Export events (audit trail) to .beads/events.jsonl on each flush/sync
+
 # When enabled, new events are appended incrementally using a high-water mark.
+
 # Use 'bd export --events' to trigger manually regardless of this setting.
+
 # events-export: false
 
 # Multi-repo configuration (experimental - bd-307)
+
 # Allows hydrating from multiple repositories and routing writes to the correct database
+
 # repos:
+
 #   primary: "."  # Primary repo (where this database lives)
+
 #   additional:   # Additional repos to hydrate from (read-only)
+
 #     - ~/beads-planning  # Personal planning repo
+
 #     - ~/work-planning   # Work planning repo
 
 # JSONL backup (periodic export for off-machine recovery)
+
 # Auto-enabled when a git remote exists. Override explicitly:
+
 # backup:
+
 #   enabled: false     # Disable auto-backup entirely
+
 #   interval: 15m      # Minimum time between auto-exports
+
 #   git-push: false    # Disable git push (export locally only)
+
 #   git-repo: ""       # Separate git repo for backups (default: project repo)
 
 # Integration settings (access with 'bd config get/set')
+
 # These are stored in the database, not in this file:
+
 # - jira.url
+
 # - jira.project
+
 # - linear.url
+
 # - linear.api-key
+
 # - github.org
+
 # - github.repo
 
 sync-branch: "beads-sync"
-
 dolt.shared-server: true
+export:
+    auto: true
+    git-add: false

.beads/export-state.json

@@ -1 +1 @@
-{"last_dolt_commit":"3p94daefk053r8a406sg6o8l98j7249f","timestamp":"2026-07-04T19:54:25.7388155-07:00","issues":418,"memories":0}
+{"last_dolt_commit":"mdgdp9ehdpmdjnhuh65j1fuj1vcj06vc","timestamp":"2026-07-27T22:34:49.6696687-07:00","issues":454,"memories":0}

.github/workflows/test.yml

@@ -20,7 +20,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           cache: npm
       - run: npm ci
       # Fail fast if aimock.json's declared MCP tools / A2A agents drift away
@@ -45,7 +45,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           cache: npm
       - run: npm ci
       # `mastra build` / vitest transpile with esbuild (no type-checking), so
@@ -61,7 +61,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           cache: npm
       - run: npm ci
       - name: Build web (also type-checks)
@@ -75,7 +75,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           cache: npm
       - run: npm ci
       - name: Biome check (lint + format)
@@ -89,7 +89,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           cache: npm
       # check-dep-uniqueness.mjs runs as part of postinstall, so npm ci alone
       # validates that there are no duplicate-resolved versions across the
@@ -104,7 +104,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
-          node-version: 22
+          node-version: 24
           cache: npm
       - uses: supabase/setup-cli@v1
         with:

.gitignore

@@ -79,3 +79,8 @@ preview-auth.json
 # Personal Claude Code local settings — machine-specific permission allowlist.
 # The shared project config is .claude/settings.json (tracked); this one is per-machine.
 .claude/settings.local.json
+
+# Beads export (disposable; kept fresh via export.auto). Source of truth = Dolt DB. cp-uif3.1
+.beads/issues.jsonl
+.beads/dolt-backup.json
+.beads/dolt-backup-state.json

Dockerfile.agents

@@ -1,4 +1,4 @@
-FROM node:22-slim AS builder
+FROM node:24-slim AS builder
 
 WORKDIR /app
 
@@ -17,7 +17,7 @@ WORKDIR /app/packages/agents
 RUN npx mastra build
 
 # --- Production stage ---
-FROM node:22-slim
+FROM node:24-slim
 
 WORKDIR /app