AI Agents SDE Task Viewer

Summary#

Add server-side EXCLUDED_REPOS filtering across all CC API endpoints so items from excluded repos (default: AgentSDE/agent-core-e2e) never reach the frontend. Replaces the existing hardcoded exclusion in MetricsService with a configurable, centralized approach.

Files#

File	Action	Description
`src/config/config.schema.ts`	modify	Add `EXCLUDED_REPOS` env var with default
`src/config/excluded-repos.service.ts`	create	Injectable service: parses `EXCLUDED_REPOS` CSV, exposes `getList()` and `isExcluded(repo)`
`src/config/config.module.ts`	modify	Register and export `ExcludedReposService`
`src/control-api/controllers/tasks.controller.ts`	modify	Inject `ExcludedReposService`; add `NOT IN` filter to `listTasks()` and `bulkAction()` QBs; guard `getTask()` with 404
`src/control-api/controllers/events.controller.ts`	modify	Inject service; join events→tasks, add `NOT IN` filter to `listEvents()`
`src/control-api/controllers/jobs.controller.ts`	modify	Inject service; add `NOT IN` filter to `listJobs()`; guard `getJob()` with 404
`src/metrics/metrics.service.ts`	modify	Replace hardcoded `EXCLUDED_REPOS` constant with injected `ExcludedReposService`; use parameterized queries
`src/config/excluded-repos.service.spec.ts`	create	Unit tests for parsing, `isExcluded()`, empty/default cases
`src/control-api/controllers/tasks.controller.spec.ts`	create	Tests for list filtering and direct-fetch 404 on excluded repos
`src/metrics/metrics.service.spec.ts`	modify	Update tests to provide `ExcludedReposService` mock

Steps#

Add EXCLUDED_REPOS to config.schema.ts (Joi string, default AgentSDE/agent-core-e2e) and create ExcludedReposService in src/config/ that reads it from ConfigService, splits on comma, and exposes getList(): string[] + isExcluded(repo: string): boolean. Export from AppConfigModule.
Inject ExcludedReposService into TasksController, EventsController, JobsController. Apply NOT IN (:...excludedRepos) clause to all list query builders. For getTask() and getJob(), check isExcluded(entity.repo) after fetch — throw NotFoundException if excluded. Add debug-level logging on excluded access attempts. For EventsController.listEvents(), join to tasks table via taskId to filter by repo.
Inject ExcludedReposService into MetricsService. Replace the hardcoded EXCLUDED_REPOS string constant with getList() values. Convert raw SQL IN clauses to use parameterized placeholders instead of string interpolation.
Write unit tests: ExcludedReposService parsing (CSV split, trim, empty string handling), TasksController list filtering + 404 on excluded direct fetch, MetricsService with mocked exclusion service.

Verification#

npm run lint passes with zero warnings
npm run test passes — new and existing tests
Manual: GET /api/cc/tasks with agent-core-e2e tasks in DB returns none; GET /api/cc/tasks/:id for an excluded task returns 404

Risks#

Events lack a repo column — listEvents() must join to tasks via taskId, adding a JOIN that wasn't there before. Mitigated by indexing on taskId (FK, already indexed).
MetricsService raw SQL refactor — switching from string interpolation to parameterized queries changes the SQL shape. Mitigated by test coverage on all four metric methods.