Commit Graph
100 Commits
Author SHA1 Message Date
marcopan 8c67cb75dc fix(auth): honor HTTPS sessions in Pi management 2026-08-17 01:46:34 +02:00
marcopan 09e546c1ef fix(auth): bind request auth snapshots 2026-08-17 01:11:25 +02:00
marcopan 94c2cd3709 fix(auth): bind current local registry and CORS 2026-08-17 00:34:58 +02:00
marcopan c34e01e9b9 fix(auth): harden async login boundaries 2026-08-17 00:00:34 +02:00
marcopan 29bfb41363 feat(auth): add local login and CSRF-protected sessions 2026-08-16 23:23:55 +02:00
marcopan 8477a69a29 fix(auth): tighten bridge claim protocol 2026-08-16 22:44:44 +02:00
marcopan 7d9ca13f1d fix(auth): harden Windows storage bridge 2026-08-16 22:16:13 +02:00
marcopan c9b02fc57e fix(auth): add Windows session storage bridge 2026-08-16 21:43:03 +02:00
marcopan 6bf8218fea fix(auth): harden persistent sessions 2026-08-16 21:03:07 +02:00
marcopan ab61c1ad6d feat(auth): persist opaque remembered sessions 2026-08-16 20:28:32 +02:00
marcopan b80a2cc1e9 fix(auth): protect local registry directory 2026-08-16 20:11:30 +02:00
marcopan de8844a4ac fix(auth): bound local password encoding 2026-08-16 20:03:40 +02:00
marcopan 1ed1a34ae2 fix(auth): reject ill-formed local passwords 2026-08-16 19:56:43 +02:00
marcopan 5eed4f9449 feat(auth): verify local ThothII users in the backend 2026-08-16 19:49:02 +02:00
marcopan 856ac05edc fix(auth): harden tht auth mutations 2026-08-16 19:37:12 +02:00
marcopan 9646ae09a0 feat(auth): add local and OIDC management to tht 2026-08-16 19:23:30 +02:00
marcopan d17ad0e95b fix(auth): atomically secure Windows lock creation 2026-08-16 19:01:09 +02:00
marcopan 25ee8b87d1 fix(auth): harden Windows auth store privacy 2026-08-16 18:44:38 +02:00
marcopan f6e4dbcae2 feat(auth): add safe Argon2id local user registry 2026-08-16 18:24:20 +02:00
marcopan f99bddcdf0 fix(auth): restore permission boundary safeguards 2026-08-16 18:03:36 +02:00
marcopan 2e0489ce22 feat(auth): centralize ThothII permission enforcement 2026-08-16 17:52:03 +02:00
marcopan 23ac75ce1d fix(auth): declare local development environment 2026-08-16 17:36:42 +02:00
marcopan e54ce15426 fix(auth): fail closed configuration compatibility 2026-08-16 17:35:40 +02:00
marcopan a66ef58766 feat(auth): define strict installation authentication config 2026-08-16 17:26:31 +02:00
marcopan d464f3a982 build: align authentication runtime on Node 24 2026-08-16 17:13:55 +02:00
marcopan 9196639cb3 docs(auth): add authentication design and implementation plan 2026-08-16 17:07:32 +02:00
marcopan 351361f72f feat: finish Pi and workspace management updates 2026-08-16 14:19:32 +02:00
marcopan 7651b63cea refactor(cli): remove obsolete workflow commands 2026-08-16 02:29:00 +02:00
marcopan 91650d9c67 feat(tht): wire restore command 2026-08-16 02:07:40 +02:00
marcopan 69dca0820b feat(cli): add restore transaction core 2026-08-16 02:05:21 +02:00
marcopan cbb18acc4d fix(cli): harden restore preflight validation 2026-08-16 01:38:48 +02:00
marcopan 6618a9d7c2 feat(cli): add no-mutation restore preflight 2026-08-16 01:26:34 +02:00
marcopan e4d0097639 fix(cli): harden backup publication and quiescing 2026-08-16 01:11:59 +02:00
marcopan 11fbf0a138 feat(cli): add transactional installation backups 2026-08-16 00:55:22 +02:00
marcopan 3e0c864c85 fix(pi): isolate resolved package builds 2026-08-16 00:20:30 +02:00
marcopan 5a657a67e8 feat(pi): update to the latest stable release by default 2026-08-16 00:13:51 +02:00
marcopan 0cb6a3f915 fix(cli): strengthen aggregate doctor diagnostics 2026-08-15 23:47:00 +02:00
marcopan 7ac99b4f7e feat(cli): add version diagnostics and build-aware start 2026-08-15 23:35:55 +02:00
marcopan 9a8755e4c3 docs(sdd): record setup fix evidence 2026-08-15 23:16:05 +02:00
marcopan ea70cc95b0 fix(setup): harden verification and recovery 2026-08-15 23:15:50 +02:00
marcopan 47e0b2a385 feat(setup): build start and verify ThothII 2026-08-15 23:09:10 +02:00
marcopan 2856964654 fix(setup): validate endpoints and secret files 2026-08-15 22:53:04 +02:00
marcopan 6dc9e80564 feat(setup): generate local installation configuration 2026-08-15 22:45:22 +02:00
marcopan 2c800cc521 fix(cli): honor local installation discovery precedence 2026-08-15 22:29:55 +02:00
marcopan 66614fe8cf feat(cli): discover ThothII projects and installations 2026-08-15 22:24:15 +02:00
marcopan 4fc03574e1 fix(cli): clean failed tht installer staging 2026-08-15 22:13:24 +02:00
marcopan a2d5a244de fix(cli): harden tht installer replacement 2026-08-15 22:10:59 +02:00
marcopan 5e13396669 feat(cli): install tht as a system command 2026-08-15 22:05:42 +02:00
marcopan aa8a2e9278 refactor(cli): rename operator command to tht 2026-08-15 21:56:40 +02:00
marcopan 460caa550c docs: clarify workspace authoring guidance 2026-08-15 21:25:48 +02:00
marcopan a02ac52836 fix: return workspace manager to level one 2026-08-14 22:18:12 +02:00
marcopan c9c30563f2 fix: improve workspace manager navigation and sizing 2026-08-14 21:20:41 +02:00
marcopan 900faad983 fix: close Pi management final review findings 2026-08-14 20:15:21 +02:00
marcopan 225d13cd75 fix(frontend): preserve Pi auth asset guidance 2026-08-14 19:14:53 +02:00
marcopan 99012f04c2 fix(frontend): make Pi operator tabs keyboard accessible 2026-08-14 19:01:20 +02:00
marcopan 1df881d98d feat(frontend): simplify Pi operator workflow 2026-08-14 18:52:11 +02:00
marcopan dc83a55555 docs: correct Pi operator recovery guidance 2026-08-14 18:41:34 +02:00
marcopan a8623a2b18 docs: clarify Pi reload and update workflows 2026-08-14 18:34:04 +02:00
marcopan 59a04123ea fix: make thothctl doctor portable 2026-08-14 18:31:52 +02:00
marcopan a35f52790d feat(thothctl): expose Pi restart command 2026-08-14 18:25:23 +02:00
marcopan 3a1f2ede4a fix(thothctl): harden Pi restart recovery 2026-08-14 18:15:00 +02:00
marcopan 9414a4b4dd fix: initialize workspace secret volume for runtime 2026-08-14 18:13:52 +02:00
marcopan bd42aa5934 test: verify read-only workspace secret flow 2026-08-14 18:05:28 +02:00
marcopan ab33e0ed0a docs: describe read-only workspace runtime configuration 2026-08-14 18:01:02 +02:00
marcopan 422f1d47b4 feat(thothctl): add safe Pi core restart 2026-08-14 17:52:35 +02:00
marcopan a94df262f4 fix: preserve deterministic runtime secret leases 2026-08-14 17:47:17 +02:00
marcopan fd3b62ce6f refactor: stop persisting workspace state in the browser 2026-08-14 17:43:10 +02:00
marcopan 3978008aed feat: add read-only workspace and secret management UI 2026-08-14 17:38:24 +02:00
marcopan e902f758b1 refactor(thothctl): share Pi lifecycle lock 2026-08-14 17:36:33 +02:00
marcopan ae1215dc98 test: isolate workspace secret vaults under vitest 2026-08-14 17:32:22 +02:00
marcopan a227cbe755 docs: plan Pi restart operator workflow 2026-08-14 17:32:07 +02:00
marcopan 87cefd120c feat: configure workspace runtime secrets through API 2026-08-14 17:30:35 +02:00
marcopan 2114c94704 feat: derive workspace runtime secret requirements 2026-08-14 17:26:39 +02:00
marcopan e4999c8420 feat: add encrypted workspace secret store 2026-08-14 17:23:23 +02:00
marcopan 1f6a49b985 docs: design Pi restart operator workflow 2026-08-14 17:09:58 +02:00
marcopan 747020a330 feat: declare workspace repository in installation config 2026-08-14 16:32:58 +02:00
marcopan 9db4463a83 refactor: remove workspace publishing and bundles 2026-08-14 16:28:01 +02:00
marcopan 42e02f8b1c refactor: make workspace repository strictly read only 2026-08-14 16:20:08 +02:00
marcopan 3a50c447c3 docs: plan read-only workspace secret implementation 2026-08-14 16:12:26 +02:00
marcopan 870af3422b docs: define read-only workspace secret architecture 2026-08-14 16:09:55 +02:00
marcopan f8117e8428 fix: remove reviewer response success toast 2026-08-14 12:40:50 +02:00
marcopan db1a81cfa6 fix: surface reviewer response failures 2026-08-14 12:06:25 +02:00
marcopan 25b2835e73 Fix workspace policy loading 2026-08-13 23:24:45 +02:00
marcopan 10edca5a09 fix: default the settings workspace to the active registry workspace 2026-08-13 22:02:02 +02:00
marcopan 6a61c42b88 chore: enable the DWH precheck in the local PSD operator profile 2026-08-13 21:10:19 +02:00
marcopan a72ae2549a fix: ping the active workspace runtime for /health/dwh instead of the legacy config 2026-08-13 21:06:32 +02:00
marcopan 9d7e9a05b7 fix: resolve diagnostic paths under the base path prefix and tolerate health-style ping responses 2026-08-13 20:58:10 +02:00
marcopan 3a3efc3285 feat: expose the Qdrant web dashboard on loopback in the local Compose profile 2026-08-13 20:38:55 +02:00
marcopan 9ca01c77de chore: ignore the local Qdrant dashboard override 2026-08-13 20:36:00 +02:00
marcopan 55567f17f2 docs: record P7 live preprocessing PASS on the real PSD DWH 2026-08-13 20:06:23 +02:00
marcopan 378aa6e652 fix: raise embedding timeout and lower default batch for large CPU corpora 2026-08-13 19:45:51 +02:00
marcopan f9d23d2361 fix: freeze evidence metadata lists as lists (preserve JSON shape) 2026-08-13 19:30:40 +02:00
marcopan f31b1e61ac fix: upsert in bounded chunks, recreate Qdrant indexes on rebuild, larger maintenance tmpfs 2026-08-13 19:02:52 +02:00
marcopan 84b233d937 docs: record P7 publication + live stack (pending VPN) 2026-08-13 16:41:46 +02:00
marcopan 3046ac34c6 feat: restructure PSD repo (P7) and add operator setup templates + checklist 2026-08-13 16:14:32 +02:00
marcopan aa22183ac7 docs: plan P7 PSD migration to the workspace registry 2026-08-13 16:10:43 +02:00
marcopan ecd986f208 docs: aggregate P2-P6 acceptance, full-suite results, and user guide 2026-08-13 13:00:08 +02:00
marcopan 1dcf4051b0 feat: aggregate P2-P6 acceptance runner 2026-08-13 12:54:12 +02:00
marcopan 486e144fcd docs: record P6 manual acceptance 2026-08-13 12:51:26 +02:00
marcopan be0e68e77d docs: record P6 implementation, contract, and automated acceptance PASS 2026-08-13 12:44:19 +02:00