Codex
7f968359ac
test: align local compose service contract
2026-08-29 15:41:02 +02:00
Codex
58ee9cffe4
feat: add metadata catalog cleanup commands
2026-08-28 00:37:43 +02:00
Codex
79c4c925b5
feat: implement metadata catalog database management
2026-08-27 22:43:54 +02:00
Codex
38f02cfd08
feat: complete evidence restructuring worktree
2026-08-26 11:39:02 +02:00
marcopan
8b524b4314
fix(auth): expose raw projected config revision
2026-08-26 02:58:33 +02:00
marcopan
66f9fa2821
test(workspaces): make lock contention deterministic
2026-08-25 21:39:35 +02:00
marcopan
fd878b8c3e
fix(workspace): isolate maintenance authentication surface
2026-08-25 18:37:39 +02:00
marcopan
db375298d0
fix(test): hermetically exercise auth workflows
2026-08-25 18:27:41 +02:00
marcopan
8980c35198
fix(ci): align Windows Compose topology
2026-08-25 17:14:42 +02:00
marcopan
6d0cb6d997
fix(ci): provision integration fixtures
2026-08-25 17:07:51 +02:00
marcopan
610ae8c85a
fix(auth): make local verification portable
...
Keep upstream identity visible while limiting logout to local auth. Inject the restore privilege gate so the deterministic core tests do not depend on the host OS, and confine descriptor-backed projection tests to Linux. Accept the real remaining Pi timeout budget instead of an exact millisecond.
2026-08-25 10:50:30 +02:00
marcopan
0caa747914
fix(evidence): validate curated runtime corpus
2026-08-25 01:59:27 +02:00
marcopan
9f0184388d
docs(evidence): publish curated-only workspace contract
2026-08-25 01:52:27 +02:00
marcopan
29d41ac258
feat(evidence): use server-side Qdrant BM25 retrieval
2026-08-24 18:15:33 +02:00
marcopan
0e9add09a9
feat(evidence): add Qdrant BM25 vector in place
2026-08-24 18:01:46 +02:00
marcopan
fa2298653b
fix(ui): stream phase progress without gates
2026-08-24 12:10:56 +02:00
marcopan
f375515dc0
refactor(evidence): extract TypeScript lifecycle ( #32 )
2026-08-24 02:50:56 +02:00
User
abd68470da
fix(auth): expose trusted upstream mode
2026-08-22 16:29:30 +02:00
User
cc72e65f9d
fix(workspaces): align postgres connection diagnostics
2026-08-22 13:49:21 +02:00
User
3d9a9f0675
feat(server): activate projected authentication safely
2026-08-22 01:01:36 +02:00
User
1e2c4e65c5
fix(auth): close CURRENT publication race
2026-08-21 22:51:38 +02:00
User
da2f4a6681
fix(auth): harden runtime projection validation
2026-08-21 22:46:42 +02:00
User
05f8615887
feat(auth): load immutable runtime projection snapshots
2026-08-21 22:31:38 +02:00
marcopan
d43738eeae
fix(auth): require local registry ownership
2026-08-18 10:31:44 +02:00
marcopan
2b618c5a0f
test(auth): harden Task 15 OIDC smoke evidence
2026-08-18 06:33:48 +02:00
marcopan
8a3fa5031d
test(auth): gate local and OIDC authentication release
2026-08-18 06:02:25 +02:00
marcopan
dee17893b4
fix(auth): harden restore verification transaction
2026-08-18 00:58:12 +02:00
marcopan
0651f3316f
fix(auth): validate stopped workspace restore
2026-08-18 00:06:28 +02:00
marcopan
e8b9995ed0
feat(auth): integrate authentication with installation lifecycle
2026-08-17 23:33:51 +02:00
marcopan
0d0c15b4b8
fix(auth): complete Task 13 deployment review
2026-08-17 22:15:41 +02:00
marcopan
7e52df2702
fix(auth): address Task 13 deployment review findings
2026-08-17 21:31:25 +02:00
marcopan
ef244ab56d
fix(auth): harden unified diagnostic execution
2026-08-17 17:25:26 +02:00
marcopan
30ee9433dc
fix(auth): harden unified diagnostic execution
2026-08-17 16:39:54 +02:00
marcopan
3ed00ff086
feat(auth): include authentication in workspace and tht diagnostics
2026-08-17 15:51:16 +02:00
marcopan
cb0e873ed7
fix(auth): pin native auth storage operations
2026-08-17 14:52:21 +02:00
marcopan
6d438f4c7e
fix(auth): close diagnostic filesystem races
2026-08-17 13:04:15 +02:00
marcopan
be1724890a
fix(auth): make diagnostics bounded and portable
2026-08-17 12:19:19 +02:00
marcopan
7cfbee36fa
fix(auth): make diagnostics match runtime safety
2026-08-17 11:23:52 +02:00
marcopan
f0ae680671
feat(auth): validate mapped groups through Authentik
2026-08-17 10:44:56 +02:00
marcopan
33ae7cfdc2
fix(auth): bound all OIDC provider exchanges
2026-08-17 10:03:07 +02:00
marcopan
c86f01e886
fix(auth): paginate session maintenance safely
2026-08-17 09:05:20 +02:00
marcopan
3e7bb11313
fix(auth): isolate bounded OIDC cleanup
2026-08-17 07:46:43 +02:00
marcopan
bdabecbb63
fix(auth): bound OIDC initiation and transport
2026-08-17 07:03:19 +02:00
marcopan
8573500121
fix(auth): harden OIDC browser transactions
2026-08-17 06:18:49 +02:00
marcopan
4fe51cbeb1
feat(auth): add generic OIDC login with mandatory groups
2026-08-17 05:44:10 +02:00
marcopan
8c67cb75dc
fix(auth): honor HTTPS sessions in Pi management
2026-08-17 01:46:34 +02:00
marcopan
09e546c1ef
fix(auth): bind request auth snapshots
2026-08-17 01:11:25 +02:00
marcopan
94c2cd3709
fix(auth): bind current local registry and CORS
2026-08-17 00:34:58 +02:00
marcopan
c34e01e9b9
fix(auth): harden async login boundaries
2026-08-17 00:00:34 +02:00
marcopan
29bfb41363
feat(auth): add local login and CSRF-protected sessions
2026-08-16 23:23:55 +02:00
Codex
marcopan