Commit Graph
262 Commits
Author SHA1 Message Date
Codex cb40c09d9a fix: scope and batch sensitive suggestions 2026-08-30 17:12:20 +02:00
Codex 0736983bc5 feat: protect sensitive catalog samples 2026-08-30 12:14:23 +02:00
Codex 376dd5a09d feat: add AI catalog description generation 2026-08-29 16:42:56 +02:00
Codex 58ee9cffe4 feat: add metadata catalog cleanup commands 2026-08-28 00:37:43 +02:00
Codex 79c4c925b5 feat: implement metadata catalog database management 2026-08-27 22:43:54 +02:00
Codex 38f02cfd08 feat: complete evidence restructuring worktree 2026-08-26 11:39:02 +02:00
marcopan 8b524b4314 fix(auth): expose raw projected config revision 2026-08-26 02:58:33 +02:00
marcopan fd878b8c3e fix(workspace): isolate maintenance authentication surface 2026-08-25 18:37:39 +02:00
marcopan db375298d0 fix(test): hermetically exercise auth workflows 2026-08-25 18:27:41 +02:00
marcopan 0caa747914 fix(evidence): validate curated runtime corpus 2026-08-25 01:59:27 +02:00
marcopan 9f0184388d docs(evidence): publish curated-only workspace contract 2026-08-25 01:52:27 +02:00
marcopan 29d41ac258 feat(evidence): use server-side Qdrant BM25 retrieval 2026-08-24 18:15:33 +02:00
marcopan 0e9add09a9 feat(evidence): add Qdrant BM25 vector in place 2026-08-24 18:01:46 +02:00
marcopan fa2298653b fix(ui): stream phase progress without gates 2026-08-24 12:10:56 +02:00
marcopan f375515dc0 refactor(evidence): extract TypeScript lifecycle (#32) 2026-08-24 02:50:56 +02:00
User 3d02c5c1ef fix(workspaces): bind maintenance secret store 2026-08-22 16:29:42 +02:00
User abd68470da fix(auth): expose trusted upstream mode 2026-08-22 16:29:30 +02:00
User cc72e65f9d fix(workspaces): align postgres connection diagnostics 2026-08-22 13:49:21 +02:00
User 3d9a9f0675 feat(server): activate projected authentication safely 2026-08-22 01:01:36 +02:00
User 1e2c4e65c5 fix(auth): close CURRENT publication race 2026-08-21 22:51:38 +02:00
User da2f4a6681 fix(auth): harden runtime projection validation 2026-08-21 22:46:42 +02:00
User 05f8615887 feat(auth): load immutable runtime projection snapshots 2026-08-21 22:31:38 +02:00
marcopan d43738eeae fix(auth): require local registry ownership 2026-08-18 10:31:44 +02:00
marcopan dee17893b4 fix(auth): harden restore verification transaction 2026-08-18 00:58:12 +02:00
marcopan 0651f3316f fix(auth): validate stopped workspace restore 2026-08-18 00:06:28 +02:00
marcopan e8b9995ed0 feat(auth): integrate authentication with installation lifecycle 2026-08-17 23:33:51 +02:00
marcopan 7e52df2702 fix(auth): address Task 13 deployment review findings 2026-08-17 21:31:25 +02:00
marcopan ef244ab56d fix(auth): harden unified diagnostic execution 2026-08-17 17:25:26 +02:00
marcopan 30ee9433dc fix(auth): harden unified diagnostic execution 2026-08-17 16:39:54 +02:00
marcopan 3ed00ff086 feat(auth): include authentication in workspace and tht diagnostics 2026-08-17 15:51:16 +02:00
marcopan cb0e873ed7 fix(auth): pin native auth storage operations 2026-08-17 14:52:21 +02:00
marcopan 6d438f4c7e fix(auth): close diagnostic filesystem races 2026-08-17 13:04:15 +02:00
marcopan be1724890a fix(auth): make diagnostics bounded and portable 2026-08-17 12:19:19 +02:00
marcopan 7cfbee36fa fix(auth): make diagnostics match runtime safety 2026-08-17 11:23:52 +02:00
marcopan f0ae680671 feat(auth): validate mapped groups through Authentik 2026-08-17 10:44:56 +02:00
marcopan 33ae7cfdc2 fix(auth): bound all OIDC provider exchanges 2026-08-17 10:03:07 +02:00
marcopan c86f01e886 fix(auth): paginate session maintenance safely 2026-08-17 09:05:20 +02:00
marcopan 3e7bb11313 fix(auth): isolate bounded OIDC cleanup 2026-08-17 07:46:43 +02:00
marcopan bdabecbb63 fix(auth): bound OIDC initiation and transport 2026-08-17 07:03:19 +02:00
marcopan 8573500121 fix(auth): harden OIDC browser transactions 2026-08-17 06:18:49 +02:00
marcopan 4fe51cbeb1 feat(auth): add generic OIDC login with mandatory groups 2026-08-17 05:44:10 +02:00
marcopan 8c67cb75dc fix(auth): honor HTTPS sessions in Pi management 2026-08-17 01:46:34 +02:00
marcopan 09e546c1ef fix(auth): bind request auth snapshots 2026-08-17 01:11:25 +02:00
marcopan 94c2cd3709 fix(auth): bind current local registry and CORS 2026-08-17 00:34:58 +02:00
marcopan c34e01e9b9 fix(auth): harden async login boundaries 2026-08-17 00:00:34 +02:00
marcopan 29bfb41363 feat(auth): add local login and CSRF-protected sessions 2026-08-16 23:23:55 +02:00
marcopan 8477a69a29 fix(auth): tighten bridge claim protocol 2026-08-16 22:44:44 +02:00
marcopan 7d9ca13f1d fix(auth): harden Windows storage bridge 2026-08-16 22:16:13 +02:00
marcopan c9b02fc57e fix(auth): add Windows session storage bridge 2026-08-16 21:43:03 +02:00
marcopan 6bf8218fea fix(auth): harden persistent sessions 2026-08-16 21:03:07 +02:00