marcopan
694b7dd21f
fix: harden reviewer workflow and memory handling
2026-07-23 12:34:23 +02:00
marcopan
801f847ec4
fix: use Pi user auth and handle startup failures
2026-07-21 14:01:47 +02:00
marcopan
8aa1676811
Expose PSD frontend locally
2026-07-20 20:27:37 +02:00
marcopan
ad6057f0dd
Fix PSD frontend network wiring
2026-07-20 20:26:13 +02:00
marcopan
0cf09777f2
Fix session resume and PSD container configuration
2026-07-20 20:22:47 +02:00
User
7a65fc80a2
fix(deploy): validate session migrator TLS mode
2026-07-16 19:07:53 +02:00
User
cadc4c6947
docs(deploy): document user-owned session cutover
2026-07-16 19:02:58 +02:00
User
2bd2f72356
Merge origin/codex/portable-deployment into feat/docker-local-deploy
...
Unisce gli internals di Codex (secret-bundle, provider-credentials, auth upstream,
security hardening, CI multiarch) mantenendo le fix portal-specific:
- backend: configPath da THT_CONFIG (fix sessioni) + dataRoot di Codex; authMode 'upstream'
- Docker/compose: TENUTO il mio (verificato live: omics_network+alias, env_file, pi npm-g)
perche' il compose/Dockerfile/entrypoint di Codex sono accoppiati al suo modello
secret-bundle (tht doctor inesistente, secret-policy.sh). Adottabile in futuro.
- config.test.ts: preso Codex (superset)
Verificato: tsc clean, 132/132 vitest.
2026-07-12 21:13:20 +02:00
marcopan
7628eaa579
fix(docker): run real questions through trusted Pi gate
2026-07-12 19:20:10 +02:00
User
3f816044c3
fix(sql): move ROLE PASSWORD outside DO block (psql skips :var in dollar-quoting)
2026-07-12 17:12:26 +02:00
User
67d030b24d
feat(deploy): docker images, compose, roles SQL, local workspace
...
- core.Dockerfile: python:3.12-slim + node 22 copied (same bookworm glibc), non-root, tht+pi
- frontend.Dockerfile: vite build (env-driven base/assetsDir) + nginx-unprivileged
- compose.yaml (embedded, omics_network ext, zero host ports) + docker-compose.dev.yml (standalone)
- deploy/sql: thoth_dwh_reader (ro) + thoth_vector_rw (rw) roles
- deploy/thothii.env.example + harness/workspaces/local.yaml (direct DWH+vector, 5438)
- scripts/docker-smoke.sh; .dockerignore; gitignore deploy secrets
- verified: both images build, core health {ok}, config check validates local.yaml
2026-07-12 16:49:03 +02:00
marcopan
f67d2c97d8
fix(security): reject invalid optional bundle values
2026-07-12 11:53:15 +02:00
marcopan
449a333365
fix(security): validate bundle and clean runtime secrets
2026-07-12 11:52:02 +02:00
marcopan
385646d574
docs: complete Docker context settings
2026-07-12 11:50:12 +02:00
marcopan
07967bf589
docs: document one-command Docker installation
2026-07-12 11:44:00 +02:00
marcopan
70a19f290d
feat(compose): use one secret bundle for local services
2026-07-12 11:30:43 +02:00
marcopan
32a2b71687
build(compose): make root startup the default
2026-07-12 11:14:36 +02:00
marcopan
7f8346ff58
docs: keep installation configuration inside ThothII
2026-07-12 10:21:53 +02:00
marcopan
72bc50ab2e
fix(preprocess): enforce local vector startup chain
2026-07-12 07:54:09 +02:00
marcopan
e40a9d9a56
fix(backend): inject provider credentials from file
2026-07-12 07:53:22 +02:00
marcopan
c6966f3d15
fix(preprocess): harden S3 and real Compose jobs
2026-07-12 06:01:06 +02:00
marcopan
4028ef7821
feat(preprocess): add deployment jobs and S3 source
2026-07-12 05:42:07 +02:00
marcopan
532073d550
fix(deploy): isolate local vector compose secrets
2026-07-12 02:56:00 +02:00
marcopan
6c67235caf
fix(vector): close local pgvector final review
2026-07-12 02:48:10 +02:00
marcopan
015c496bda
fix(vector): harden backup restore parity gates
2026-07-12 02:29:53 +02:00
marcopan
1145ae20bc
fix(deploy): align vector bootstrap identity policy
2026-07-12 02:04:57 +02:00
marcopan
144acf2093
fix(deploy): support bootstrap password rotation
2026-07-12 01:57:33 +02:00
marcopan
62e0ff1f12
fix(deploy): reconcile local vector credentials safely
2026-07-12 01:50:42 +02:00
marcopan
0ca9783f61
feat(deploy): add optional local pgvector profile
2026-07-12 01:42:37 +02:00
marcopan
a3a266fd81
fix(deploy): close container final review
2026-07-12 00:44:39 +02:00
marcopan
767df63a33
feat(deploy): add portable external-service stack
2026-07-11 22:12:21 +02:00
marcopan
User