Commit Graph
294 Commits
Author SHA1 Message Date
marcopan 7d9ca13f1d fix(auth): harden Windows storage bridge 2026-08-16 22:16:13 +02:00
marcopan c9b02fc57e fix(auth): add Windows session storage bridge 2026-08-16 21:43:03 +02:00
marcopan 6bf8218fea fix(auth): harden persistent sessions 2026-08-16 21:03:07 +02:00
marcopan ab61c1ad6d feat(auth): persist opaque remembered sessions 2026-08-16 20:28:32 +02:00
marcopan b80a2cc1e9 fix(auth): protect local registry directory 2026-08-16 20:11:30 +02:00
marcopan de8844a4ac fix(auth): bound local password encoding 2026-08-16 20:03:40 +02:00
marcopan 1ed1a34ae2 fix(auth): reject ill-formed local passwords 2026-08-16 19:56:43 +02:00
marcopan 5eed4f9449 feat(auth): verify local ThothII users in the backend 2026-08-16 19:49:02 +02:00
marcopan f6e4dbcae2 feat(auth): add safe Argon2id local user registry 2026-08-16 18:24:20 +02:00
marcopan f99bddcdf0 fix(auth): restore permission boundary safeguards 2026-08-16 18:03:36 +02:00
marcopan 2e0489ce22 feat(auth): centralize ThothII permission enforcement 2026-08-16 17:52:03 +02:00
marcopan 23ac75ce1d fix(auth): declare local development environment 2026-08-16 17:36:42 +02:00
marcopan e54ce15426 fix(auth): fail closed configuration compatibility 2026-08-16 17:35:40 +02:00
marcopan a66ef58766 feat(auth): define strict installation authentication config 2026-08-16 17:26:31 +02:00
marcopan d464f3a982 build: align authentication runtime on Node 24 2026-08-16 17:13:55 +02:00
marcopan bd42aa5934 test: verify read-only workspace secret flow 2026-08-14 18:05:28 +02:00
marcopan a94df262f4 fix: preserve deterministic runtime secret leases 2026-08-14 17:47:17 +02:00
marcopan ae1215dc98 test: isolate workspace secret vaults under vitest 2026-08-14 17:32:22 +02:00
marcopan 87cefd120c feat: configure workspace runtime secrets through API 2026-08-14 17:30:35 +02:00
marcopan 2114c94704 feat: derive workspace runtime secret requirements 2026-08-14 17:26:39 +02:00
marcopan e4999c8420 feat: add encrypted workspace secret store 2026-08-14 17:23:23 +02:00
marcopan 747020a330 feat: declare workspace repository in installation config 2026-08-14 16:32:58 +02:00
marcopan 9db4463a83 refactor: remove workspace publishing and bundles 2026-08-14 16:28:01 +02:00
marcopan 42e02f8b1c refactor: make workspace repository strictly read only 2026-08-14 16:20:08 +02:00
marcopan db1a81cfa6 fix: surface reviewer response failures 2026-08-14 12:06:25 +02:00
marcopan 10edca5a09 fix: default the settings workspace to the active registry workspace 2026-08-13 22:02:02 +02:00
marcopan a72ae2549a fix: ping the active workspace runtime for /health/dwh instead of the legacy config 2026-08-13 21:06:32 +02:00
marcopan 9d7e9a05b7 fix: resolve diagnostic paths under the base path prefix and tolerate health-style ping responses 2026-08-13 20:58:10 +02:00
marcopan f31b1e61ac fix: upsert in bounded chunks, recreate Qdrant indexes on rebuild, larger maintenance tmpfs 2026-08-13 19:02:52 +02:00
marcopan 1dcf4051b0 feat: aggregate P2-P6 acceptance runner 2026-08-13 12:54:12 +02:00
marcopan 124891bbfe feat: P6 commit-addressed Evidence materialization acceptance runner 2026-08-13 12:41:11 +02:00
marcopan f09ab2b8c6 test: expect filesystem Evidence materialization in the canonical snapshot 2026-08-13 12:38:53 +02:00
marcopan 871de800f0 feat: make filesystem Evidence operational after materialization (P6) 2026-08-13 12:35:25 +02:00
marcopan bb2eabceb6 feat: activate commit-addressed Evidence materialization with an integrity chain (P6) 2026-08-13 12:34:56 +02:00
marcopan 0c9e614100 feat: bounded Evidence materializer with manifest and atomic publication (P6) 2026-08-13 12:31:12 +02:00
marcopan 0c1033889a feat: safe Evidence tree enumeration and bounded blob streaming (P6) 2026-08-13 12:28:49 +02:00
marcopan 9db0299063 docs: fix P5 acceptance report title 2026-08-13 11:39:31 +02:00
marcopan ccc3dc772e fix: generate FK candidates through the full run before schema accept (P5) 2026-08-13 11:38:00 +02:00
marcopan 239d1c634f feat: P5 curated FK annotations acceptance runner 2026-08-13 11:34:13 +02:00
marcopan d751188db7 feat: gate FK review on the accepted revision blob (P5) 2026-08-13 05:08:19 +02:00
marcopan 0459a6cd3e feat: operator schema accept command for curated FK review (P5) 2026-08-13 05:06:23 +02:00
marcopan 5249798c03 feat: revision-qualified annotations root for pinned runtimes (P5) 2026-08-13 05:02:19 +02:00
marcopan 259d5a0374 feat: atomic revision-qualified annotations sync with ownership manifest (P5) 2026-08-13 04:58:56 +02:00
marcopan b00b7f17c9 feat: read and validate curated FK annotations at the pinned commit (P5) 2026-08-13 04:56:03 +02:00
marcopan e056c19e62 feat: P4 qdrant collection lifecycle (self-heal + guarded rebuild)
- shared TS collection manager: self-heal creates missing collection (1024/cosine)
  and missing keyword payload indexes; never mutates incompatible contracts
  (semantic_index_incompatible); async index visibility polled with bounded deadline
- session admission (qdrantEnsure) uses the manager in self-heal mode; operator path
  keeps require_existing semantics
- runtime lease exposes semanticQdrantUrl to the operator
- operator commands vector-inspect/vector-rebuild with exact confirmation guards
- thothctl workspace vector inspect|rebuild (Go) with --collection/--confirm/--destroy
- p4 acceptance runner: real Qdrant (v1.18.2) lifecycle checks, 11/11 PASS
- docs: CLI contract, manual walkthrough P4 (PENDING), PROJECT_STATE
2026-08-12 20:00:14 +02:00
marcopan 3b0726472e fix: drop the undefined evidence helper from the P3 records check 2026-08-12 18:15:22 +02:00
marcopan a1cd44b771 fix: check revision-scoped schema and evidence records in their collections 2026-08-12 18:14:14 +02:00
marcopan 1cec3da838 fix: accept the fail-closed outcome after a DWH-affecting change 2026-08-12 18:12:58 +02:00
marcopan 795a29588d fix: exercise the DWH-affecting change on the database name 2026-08-12 18:11:37 +02:00
marcopan ae2f898122 fix: create the docs directory in P3 mutation helper 2026-08-12 18:10:11 +02:00