User
2bd2f72356
Merge origin/codex/portable-deployment into feat/docker-local-deploy
...
Unisce gli internals di Codex (secret-bundle, provider-credentials, auth upstream,
security hardening, CI multiarch) mantenendo le fix portal-specific:
- backend: configPath da THT_CONFIG (fix sessioni) + dataRoot di Codex; authMode 'upstream'
- Docker/compose: TENUTO il mio (verificato live: omics_network+alias, env_file, pi npm-g)
perche' il compose/Dockerfile/entrypoint di Codex sono accoppiati al suo modello
secret-bundle (tht doctor inesistente, secret-policy.sh). Adottabile in futuro.
- config.test.ts: preso Codex (superset)
Verificato: tsc clean, 132/132 vitest.
2026-07-12 21:13:20 +02:00
User
67d030b24d
feat(deploy): docker images, compose, roles SQL, local workspace
...
- core.Dockerfile: python:3.12-slim + node 22 copied (same bookworm glibc), non-root, tht+pi
- frontend.Dockerfile: vite build (env-driven base/assetsDir) + nginx-unprivileged
- compose.yaml (embedded, omics_network ext, zero host ports) + docker-compose.dev.yml (standalone)
- deploy/sql: thoth_dwh_reader (ro) + thoth_vector_rw (rw) roles
- deploy/thothii.env.example + harness/workspaces/local.yaml (direct DWH+vector, 5438)
- scripts/docker-smoke.sh; .dockerignore; gitignore deploy secrets
- verified: both images build, core health {ok}, config check validates local.yaml
2026-07-12 16:49:03 +02:00
marcopan
08f0029793
fix: finalize session after memory promotion
2026-07-12 14:26:48 +02:00
marcopan
09d50ac9bb
fix(dwh): release snapshots before job startup
2026-07-12 07:34:56 +02:00
marcopan
4aae6c433d
fix(dwh): bind snapshots to validated bytes
2026-07-12 07:31:46 +02:00
marcopan
2f6daaaea6
fix(dwh): anchor generation operations to lease fd
2026-07-12 07:26:10 +02:00
marcopan
24e61d5713
fix(preprocess): retain DWH root fd through lease
2026-07-12 07:12:28 +02:00
marcopan
4cf0adbdd2
fix(preprocess): initialize fresh DWH writers safely
2026-07-12 07:07:31 +02:00
marcopan
22e806a41b
fix(preprocess): restrict DWH root claims to writers
2026-07-12 07:00:51 +02:00
marcopan
c4dd6c8900
fix(preprocess): claim DWH roots atomically
2026-07-12 06:51:46 +02:00
marcopan
8110793f61
fix(evidence): make result summaries safe
2026-07-12 06:50:23 +02:00
marcopan
b43075289e
fix(preprocess): bind DWH artifacts to workspace
2026-07-12 06:46:06 +02:00
marcopan
0a2421c513
fix(evidence): bound reports and fail failed jobs
2026-07-12 06:45:19 +02:00
marcopan
03ee3ffda8
fix(evidence): validate active corpus artifacts
2026-07-12 06:35:27 +02:00
marcopan
5cc023f390
fix(evidence): harden unchanged job snapshot
2026-07-12 06:29:31 +02:00
marcopan
7d41c4cefc
fix(preprocess): verify canonical generations and cleanup
2026-07-12 06:18:18 +02:00
marcopan
4a29086fe4
fix(preprocess): anchor DWH retention validation
2026-07-12 06:15:27 +02:00
marcopan
27697e5db2
fix(preprocess): ignore corrupt DWH retention entries
2026-07-12 06:11:40 +02:00
marcopan
e6d44ba082
fix(evidence): close S3 and smoke safety gaps
2026-07-12 06:09:15 +02:00
marcopan
efcb0deb31
fix(evidence): lock GC and preflight search ownership
2026-07-12 06:07:30 +02:00
marcopan
d21aac9151
fix(evidence): validate ownership before all searches
2026-07-12 06:04:00 +02:00
marcopan
c6966f3d15
fix(preprocess): harden S3 and real Compose jobs
2026-07-12 06:01:06 +02:00
marcopan
950f88f23e
fix(evidence): distinguish implicit corpus ownership
2026-07-12 05:59:13 +02:00
marcopan
6bb158233f
fix(preprocess): lease DWH generation reads
2026-07-12 05:58:12 +02:00
marcopan
db35ddb041
fix(evidence): bind corpus to workspace identity
2026-07-12 05:57:23 +02:00
marcopan
78ff360882
fix(preprocess): reconcile durable DWH generations
2026-07-12 05:51:49 +02:00
marcopan
05accc1443
fix(evidence): isolate vectors by workspace
2026-07-12 05:50:59 +02:00
marcopan
24f6a5daa6
fix(preprocess): publish DWH artifacts atomically
2026-07-12 05:43:57 +02:00
marcopan
4028ef7821
feat(preprocess): add deployment jobs and S3 source
2026-07-12 05:42:07 +02:00
marcopan
6656a69630
fix(evidence): filter active data in every search
2026-07-12 05:40:45 +02:00
marcopan
92b1d3ccc3
fix(evidence): retain referenced vector generations
2026-07-12 05:34:47 +02:00
marcopan
3a9808f126
feat(preprocess): add resumable DWH jobs
2026-07-12 05:34:38 +02:00
marcopan
2624d1d342
test: assert removed evidence stays hidden
2026-07-12 05:26:11 +02:00
marcopan
9a9acbd122
test: gate real pgvector corpus lifecycle
2026-07-12 05:22:30 +02:00
marcopan
9e21cce036
test(evidence): harden generation lifecycle boundaries
2026-07-12 05:15:30 +02:00
marcopan
459ffa0bcd
fix(evidence): reconcile generations safely
2026-07-12 05:10:19 +02:00
marcopan
f3b49f41c8
feat(evidence): add safe retention and materialized reads
2026-07-12 05:02:47 +02:00
marcopan
b6a52995ae
fix(jobs): bind completed effects to checkpoints
2026-07-12 04:54:00 +02:00
marcopan
c964920f16
fix(preprocess): harden crash recovery integrity
2026-07-12 04:49:15 +02:00
marcopan
1d5f8c76a7
feat(preprocess): resume evidence jobs by run id
2026-07-12 04:39:32 +02:00
marcopan
981b149249
fix(evidence): enforce active vector generations
2026-07-12 04:33:07 +02:00
marcopan
b96d4f13b9
feat(preprocess): publish incremental Evidence corpus
2026-07-12 04:26:24 +02:00
marcopan
16a8bd9df6
fix(jobs): validate resume checkpoints before allocation
2026-07-12 04:17:34 +02:00
marcopan
9f069cdd5b
fix(jobs): harden resume locks and durability
2026-07-12 04:05:43 +02:00
marcopan
a4acee4c70
feat(jobs): add resumable preprocessing envelope
2026-07-12 03:58:37 +02:00
marcopan
11e7ee9ea6
fix(corpus): harden canonical chunk and frontmatter invariants
2026-07-12 03:50:32 +02:00
marcopan
015715d092
feat(corpus): add deterministic normalization and chunking
2026-07-12 03:44:54 +02:00
marcopan
d1fdf7d9f5
fix(evidence): bind HTTP validators to final URL
2026-07-12 03:38:11 +02:00
marcopan
81ff1810d1
fix(evidence): harden source acquisition
2026-07-12 03:32:18 +02:00
marcopan
ffd683c587
feat(evidence): add filesystem and HTTP sources
2026-07-12 03:23:42 +02:00
User
marcopan