Merge develop into vm_multi-pass: Resolve conflicts

- Merged .env.example: Keep both SSL/TLS config and Tailscale config
- Merged .gitignore: Keep both test reports and artifacts patterns
- Merged vite.config.ts: Keep both HTTPS support and Tailscale hosts

All features from both branches preserved.

Author: mvalancy

.env.example

@@ -2,6 +2,13 @@
 PORT=4127
 NODE_ENV=development
 
+# SSL/TLS Configuration
+SSL_ENABLED=false
+# Set to true to enable HTTPS/TLS encryption
+# SSL_KEY_PATH=./certs/dev-key.pem
+# SSL_CERT_PATH=./certs/dev-cert.pem
+# HTTPS_PORT=4128
+
 # Database Configuration
 NEO4J_URI=bolt://localhost:7687
 NEO4J_USER=neo4j
@@ -31,8 +38,12 @@ CLIENT_URL=http://localhost:3127
 VITE_API_URL=http://localhost:4127
 VITE_WS_URL=ws://localhost:4127
 
+# HTTPS Development URLs (when SSL_ENABLED=true)
+# VITE_GRAPHQL_URL=https://localhost:4128/graphql
+# VITE_GRAPHQL_WS_URL=wss://localhost:4128/graphql
+
 # Tailscale Configuration (for VM mesh networking)
 # Get your auth key from: https://login.tailscale.com/admin/settings/keys
 # IMPORTANT: Use an ephemeral key for security
 # Example: tskey-auth-xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
-TAILSCALE_AUTH_KEY=
+TAILSCALE_AUTH_KEY=

.githooks/commit-msg

@@ -0,0 +1,86 @@
+#!/bin/sh
+# Commit-msg hook to block Co-Authored-By lines
+# GraphDone does not use pair programming and maintains clean git logs
+
+# First argument is the commit message file
+COMMIT_MSG_FILE="$1"
+
+# Read the commit message
+if [ ! -f "$COMMIT_MSG_FILE" ]; then
+    exit 0
+fi
+
+COMMIT_MSG=$(cat "$COMMIT_MSG_FILE")
+
+# Function to check for co-author patterns
+check_coauthor_patterns() {
+    echo "$1" | grep -iE "(co-authored-by:|co-author:|coauthor:|pair[- ]programm)" >/dev/null 2>&1
+}
+
+# Check for Co-Authored-By and related patterns
+if check_coauthor_patterns "$COMMIT_MSG"; then
+    echo ""
+    echo "════════════════════════════════════════════════════════════════════"
+    echo "                    ❌ COMMIT BLOCKED                               "
+    echo "════════════════════════════════════════════════════════════════════"
+    echo ""
+    echo "Co-authorship attribution detected in commit message."
+    echo ""
+    echo "GraphDone policy: Individual commits only (no pair programming)"
+    echo ""
+    echo "Found in your commit message:"
+    echo "────────────────────────────────────────────────────────────────────"
+    echo "$COMMIT_MSG" | grep -iE "(co-authored-by:|co-author:|coauthor:|pair[- ]programm)" | head -5
+    echo "────────────────────────────────────────────────────────────────────"
+    echo ""
+    echo "Please remove:"
+    echo "  • Co-Authored-By: <name> <email>"
+    echo "  • Co-Author: ..."
+    echo "  • References to pair programming"
+    echo "  • Any collaborative attribution"
+    echo ""
+    echo "Each commit should have a single author for:"
+    echo "  ✓ Clear accountability"
+    echo "  ✓ Clean git history"
+    echo "  ✓ Accurate contribution tracking"
+    echo ""
+    echo "To fix: Edit your commit message and remove co-authorship lines"
+    echo "════════════════════════════════════════════════════════════════════"
+    echo ""
+    exit 1
+fi
+
+# Also check for specific AI assistant attributions that might slip through
+if echo "$COMMIT_MSG" | grep -iE "(claude.*anthropic|generated.*by.*claude|claude.*ai|noreply@anthropic)" >/dev/null 2>&1; then
+    echo ""
+    echo "════════════════════════════════════════════════════════════════════"
+    echo "                    ⚠️  AI ATTRIBUTION DETECTED                      "
+    echo "════════════════════════════════════════════════════════════════════"
+    echo ""
+    echo "Found AI assistant attribution in commit message."
+    echo ""
+    echo "While AI tools may assist with code, commits should be"
+    echo "attributed only to the human developer who reviewed and"
+    echo "submitted the code."
+    echo ""
+    echo "Please remove any lines like:"
+    echo "  • Co-Authored-By: Claude <noreply@anthropic.com>"
+    echo "  • Generated with Claude"
+    echo "  • AI-assisted attribution"
+    echo ""
+    echo "════════════════════════════════════════════════════════════════════"
+    echo ""
+    exit 1
+fi
+
+# Check for suspiciously formatted email addresses that might be bots
+if echo "$COMMIT_MSG" | grep -iE "co-authored-by:.*<.*(bot|action|automated|ci-cd|pipeline).*@.*>" >/dev/null 2>&1; then
+    echo ""
+    echo "⚠️  WARNING: Automated co-author detected"
+    echo "   Blocking bot/automation co-authorship attributions"
+    echo ""
+    exit 1
+fi
+
+# All checks passed
+exit 0

.githooks/pre-commit

@@ -0,0 +1,80 @@
+#!/bin/sh
+# Pre-commit hook to block Co-Authored-By lines
+# GraphDone does not use pair programming and maintains clean git logs
+
+# Get the commit message file path
+COMMIT_MSG_FILE="$1"
+
+# Check if we're in the middle of a commit (not a merge/rebase)
+if git rev-parse --verify HEAD >/dev/null 2>&1; then
+    # Get the staged commit message from git
+    COMMIT_MSG=$(git diff --cached --diff-filter=A -z --name-only | xargs -0 cat 2>/dev/null | grep -i "co-authored-by:" || true)
+    
+    # If no staged message, check for message passed via -m flag
+    if [ -z "$COMMIT_MSG" ] && [ -n "$GIT_EDITOR" ]; then
+        COMMIT_MSG=$(echo "$GIT_EDITOR" | grep -i "co-authored-by:" || true)
+    fi
+    
+    # Check the commit message template if it exists
+    if [ -z "$COMMIT_MSG" ] && [ -f ".gitmessage" ]; then
+        COMMIT_MSG=$(grep -i "co-authored-by:" .gitmessage 2>/dev/null || true)
+    fi
+    
+    # For checking the actual commit message being prepared
+    # This catches -m flag commits and editor commits
+    if git diff --cached --quiet; then
+        # No staged changes, skip
+        exit 0
+    fi
+fi
+
+# Function to check commit message
+check_commit_message() {
+    # Check for Co-Authored-By in various formats
+    if echo "$1" | grep -iE "(co-authored-by:|co-author:|coauthor:|pair[- ]programm)" >/dev/null 2>&1; then
+        echo ""
+        echo "❌ ERROR: Commit blocked - Co-Authored-By detected"
+        echo ""
+        echo "GraphDone maintains individual attribution in git logs."
+        echo "Please remove any of the following from your commit message:"
+        echo "  • Co-Authored-By: ..."
+        echo "  • Co-Author: ..."
+        echo "  • References to pair programming"
+        echo ""
+        echo "Each commit should have a single author for clear accountability."
+        echo ""
+        return 1
+    fi
+    return 0
+}
+
+# Main pre-commit check
+# This will be called during the actual commit process
+# The commit message will be checked in the commit-msg hook
+# Here we just set up the environment
+
+# Check if there are any Co-Authored-By lines in staged files' content
+# (in case someone accidentally committed a file with Co-Authored-By in it)
+STAGED_FILES=$(git diff --cached --name-only --diff-filter=ACM)
+if [ -n "$STAGED_FILES" ]; then
+    for FILE in $STAGED_FILES; do
+        # Skip binary files and this hook file itself
+        if [ "$FILE" = ".githooks/pre-commit" ] || [ "$FILE" = ".githooks/commit-msg" ]; then
+            continue
+        fi
+        
+        # Only check text files for accidental Co-Authored-By content
+        if file --mime "$FILE" 2>/dev/null | grep -q "text/"; then
+            if git show ":$FILE" 2>/dev/null | grep -iE "^[^#]*co-authored-by:" >/dev/null 2>&1; then
+                echo ""
+                echo "⚠️  WARNING: File '$FILE' contains 'Co-Authored-By' text"
+                echo "   This may be intentional (documentation, etc.) but please verify."
+                echo ""
+                # Don't block, just warn for file content
+            fi
+        fi
+    done
+fi
+
+# Pre-commit passes, actual message check happens in commit-msg hook
+exit 0