User
259f021313
fix(harness): preserve session migration JSON errors
2026-07-16 17:35:54 +02:00
User
5dbb91390f
feat(harness): persist server sessions in postgres
2026-07-16 17:31:04 +02:00
User
8f0154eb9e
fix(harness): persist evidence artifact
2026-07-16 17:14:47 +02:00
User
8f364ec564
feat(harness): add local session repository
2026-07-16 17:11:22 +02:00
User
9d4e057426
fix: serialize decision ledger writes
2026-07-14 15:30:06 +02:00
User
333874a755
fix: make join approval atomic
2026-07-14 15:24:06 +02:00
User
e228c6f2fd
fix: harden phase summary open questions
2026-07-14 15:09:50 +02:00
User
27af6733c8
fix: make join review read only
2026-07-14 15:06:16 +02:00
User
1b1554b353
fix: auto-approve phase 3 rewrite
2026-07-14 13:51:39 +02:00
User
c7d586aaf7
fix: clarify memory selection semantics
2026-07-14 13:13:59 +02:00
User
6dbf93fff9
feat: harden runtime readiness and session workflow
2026-07-14 10:27:25 +02:00
User
eb83cb8fc1
docs(state)+test(l2): deploy state snapshot + configurable L2 workspace path
...
PROJECT_STATE: sezione deploy Docker live (Profile A embedded portale, ruoli DB,
secrets, merge codex, fix load-bearing). L2 test: WORKSPACE da env THT_L2_WORKSPACE
(default path Mac) -> può girare ovunque, skip pulito se assente.
2026-07-12 23:11:20 +02:00
User
2bd2f72356
Merge origin/codex/portable-deployment into feat/docker-local-deploy
...
Unisce gli internals di Codex (secret-bundle, provider-credentials, auth upstream,
security hardening, CI multiarch) mantenendo le fix portal-specific:
- backend: configPath da THT_CONFIG (fix sessioni) + dataRoot di Codex; authMode 'upstream'
- Docker/compose: TENUTO il mio (verificato live: omics_network+alias, env_file, pi npm-g)
perche' il compose/Dockerfile/entrypoint di Codex sono accoppiati al suo modello
secret-bundle (tht doctor inesistente, secret-policy.sh). Adottabile in futuro.
- config.test.ts: preso Codex (superset)
Verificato: tsc clean, 132/132 vitest.
2026-07-12 21:13:20 +02:00
User
67d030b24d
feat(deploy): docker images, compose, roles SQL, local workspace
...
- core.Dockerfile: python:3.12-slim + node 22 copied (same bookworm glibc), non-root, tht+pi
- frontend.Dockerfile: vite build (env-driven base/assetsDir) + nginx-unprivileged
- compose.yaml (embedded, omics_network ext, zero host ports) + docker-compose.dev.yml (standalone)
- deploy/sql: thoth_dwh_reader (ro) + thoth_vector_rw (rw) roles
- deploy/thothii.env.example + harness/workspaces/local.yaml (direct DWH+vector, 5438)
- scripts/docker-smoke.sh; .dockerignore; gitignore deploy secrets
- verified: both images build, core health {ok}, config check validates local.yaml
2026-07-12 16:49:03 +02:00
marcopan
08f0029793
fix: finalize session after memory promotion
2026-07-12 14:26:48 +02:00
marcopan
09d50ac9bb
fix(dwh): release snapshots before job startup
2026-07-12 07:34:56 +02:00
marcopan
4aae6c433d
fix(dwh): bind snapshots to validated bytes
2026-07-12 07:31:46 +02:00
marcopan
2f6daaaea6
fix(dwh): anchor generation operations to lease fd
2026-07-12 07:26:10 +02:00
marcopan
24e61d5713
fix(preprocess): retain DWH root fd through lease
2026-07-12 07:12:28 +02:00
marcopan
4cf0adbdd2
fix(preprocess): initialize fresh DWH writers safely
2026-07-12 07:07:31 +02:00
marcopan
22e806a41b
fix(preprocess): restrict DWH root claims to writers
2026-07-12 07:00:51 +02:00
marcopan
c4dd6c8900
fix(preprocess): claim DWH roots atomically
2026-07-12 06:51:46 +02:00
marcopan
8110793f61
fix(evidence): make result summaries safe
2026-07-12 06:50:23 +02:00
marcopan
b43075289e
fix(preprocess): bind DWH artifacts to workspace
2026-07-12 06:46:06 +02:00
marcopan
0a2421c513
fix(evidence): bound reports and fail failed jobs
2026-07-12 06:45:19 +02:00
marcopan
03ee3ffda8
fix(evidence): validate active corpus artifacts
2026-07-12 06:35:27 +02:00
marcopan
5cc023f390
fix(evidence): harden unchanged job snapshot
2026-07-12 06:29:31 +02:00
marcopan
7d41c4cefc
fix(preprocess): verify canonical generations and cleanup
2026-07-12 06:18:18 +02:00
marcopan
4a29086fe4
fix(preprocess): anchor DWH retention validation
2026-07-12 06:15:27 +02:00
marcopan
27697e5db2
fix(preprocess): ignore corrupt DWH retention entries
2026-07-12 06:11:40 +02:00
marcopan
e6d44ba082
fix(evidence): close S3 and smoke safety gaps
2026-07-12 06:09:15 +02:00
marcopan
efcb0deb31
fix(evidence): lock GC and preflight search ownership
2026-07-12 06:07:30 +02:00
marcopan
d21aac9151
fix(evidence): validate ownership before all searches
2026-07-12 06:04:00 +02:00
marcopan
c6966f3d15
fix(preprocess): harden S3 and real Compose jobs
2026-07-12 06:01:06 +02:00
marcopan
950f88f23e
fix(evidence): distinguish implicit corpus ownership
2026-07-12 05:59:13 +02:00
marcopan
6bb158233f
fix(preprocess): lease DWH generation reads
2026-07-12 05:58:12 +02:00
marcopan
db35ddb041
fix(evidence): bind corpus to workspace identity
2026-07-12 05:57:23 +02:00
marcopan
78ff360882
fix(preprocess): reconcile durable DWH generations
2026-07-12 05:51:49 +02:00
marcopan
05accc1443
fix(evidence): isolate vectors by workspace
2026-07-12 05:50:59 +02:00
marcopan
24f6a5daa6
fix(preprocess): publish DWH artifacts atomically
2026-07-12 05:43:57 +02:00
marcopan
4028ef7821
feat(preprocess): add deployment jobs and S3 source
2026-07-12 05:42:07 +02:00
marcopan
6656a69630
fix(evidence): filter active data in every search
2026-07-12 05:40:45 +02:00
marcopan
92b1d3ccc3
fix(evidence): retain referenced vector generations
2026-07-12 05:34:47 +02:00
marcopan
3a9808f126
feat(preprocess): add resumable DWH jobs
2026-07-12 05:34:38 +02:00
marcopan
2624d1d342
test: assert removed evidence stays hidden
2026-07-12 05:26:11 +02:00
marcopan
9a9acbd122
test: gate real pgvector corpus lifecycle
2026-07-12 05:22:30 +02:00
marcopan
9e21cce036
test(evidence): harden generation lifecycle boundaries
2026-07-12 05:15:30 +02:00
marcopan
459ffa0bcd
fix(evidence): reconcile generations safely
2026-07-12 05:10:19 +02:00
marcopan
f3b49f41c8
feat(evidence): add safe retention and materialized reads
2026-07-12 05:02:47 +02:00
marcopan
b6a52995ae
fix(jobs): bind completed effects to checkpoints
2026-07-12 04:54:00 +02:00
User
marcopan