 marcopan
|
9f0184388d
|
docs(evidence): publish curated-only workspace contract
|
2026-08-25 01:52:27 +02:00 |
|
|
marcopan
|
29d41ac258
|
feat(evidence): use server-side Qdrant BM25 retrieval
|
2026-08-24 18:15:33 +02:00 |
|
|
marcopan
|
0e9add09a9
|
feat(evidence): add Qdrant BM25 vector in place
|
2026-08-24 18:01:46 +02:00 |
|
|
marcopan
|
fa2298653b
|
fix(ui): stream phase progress without gates
|
2026-08-24 12:10:56 +02:00 |
|
|
marcopan
|
f375515dc0
|
refactor(evidence): extract TypeScript lifecycle (#32)
|
2026-08-24 02:50:56 +02:00 |
|
 User
|
3d02c5c1ef
|
fix(workspaces): bind maintenance secret store
|
2026-08-22 16:29:42 +02:00 |
|
|
User
|
abd68470da
|
fix(auth): expose trusted upstream mode
|
2026-08-22 16:29:30 +02:00 |
|
|
User
|
cc72e65f9d
|
fix(workspaces): align postgres connection diagnostics
|
2026-08-22 13:49:21 +02:00 |
|
|
User
|
3d9a9f0675
|
feat(server): activate projected authentication safely
|
2026-08-22 01:01:36 +02:00 |
|
|
User
|
1e2c4e65c5
|
fix(auth): close CURRENT publication race
|
2026-08-21 22:51:38 +02:00 |
|
|
User
|
da2f4a6681
|
fix(auth): harden runtime projection validation
|
2026-08-21 22:46:42 +02:00 |
|
|
User
|
05f8615887
|
feat(auth): load immutable runtime projection snapshots
|
2026-08-21 22:31:38 +02:00 |
|
|
marcopan
|
d43738eeae
|
fix(auth): require local registry ownership
|
2026-08-18 10:31:44 +02:00 |
|
|
marcopan
|
2b618c5a0f
|
test(auth): harden Task 15 OIDC smoke evidence
|
2026-08-18 06:33:48 +02:00 |
|
|
marcopan
|
8a3fa5031d
|
test(auth): gate local and OIDC authentication release
|
2026-08-18 06:02:25 +02:00 |
|
|
marcopan
|
dee17893b4
|
fix(auth): harden restore verification transaction
|
2026-08-18 00:58:12 +02:00 |
|
|
marcopan
|
0651f3316f
|
fix(auth): validate stopped workspace restore
|
2026-08-18 00:06:28 +02:00 |
|
|
marcopan
|
e8b9995ed0
|
feat(auth): integrate authentication with installation lifecycle
|
2026-08-17 23:33:51 +02:00 |
|
|
marcopan
|
0d0c15b4b8
|
fix(auth): complete Task 13 deployment review
|
2026-08-17 22:15:41 +02:00 |
|
|
marcopan
|
7e52df2702
|
fix(auth): address Task 13 deployment review findings
|
2026-08-17 21:31:25 +02:00 |
|
|
marcopan
|
ef244ab56d
|
fix(auth): harden unified diagnostic execution
|
2026-08-17 17:25:26 +02:00 |
|
|
marcopan
|
30ee9433dc
|
fix(auth): harden unified diagnostic execution
|
2026-08-17 16:39:54 +02:00 |
|
|
marcopan
|
3ed00ff086
|
feat(auth): include authentication in workspace and tht diagnostics
|
2026-08-17 15:51:16 +02:00 |
|
|
marcopan
|
cb0e873ed7
|
fix(auth): pin native auth storage operations
|
2026-08-17 14:52:21 +02:00 |
|
|
marcopan
|
6d438f4c7e
|
fix(auth): close diagnostic filesystem races
|
2026-08-17 13:04:15 +02:00 |
|
|
marcopan
|
be1724890a
|
fix(auth): make diagnostics bounded and portable
|
2026-08-17 12:19:19 +02:00 |
|
|
marcopan
|
7cfbee36fa
|
fix(auth): make diagnostics match runtime safety
|
2026-08-17 11:23:52 +02:00 |
|
|
marcopan
|
f0ae680671
|
feat(auth): validate mapped groups through Authentik
|
2026-08-17 10:44:56 +02:00 |
|
|
marcopan
|
33ae7cfdc2
|
fix(auth): bound all OIDC provider exchanges
|
2026-08-17 10:03:07 +02:00 |
|
|
marcopan
|
c86f01e886
|
fix(auth): paginate session maintenance safely
|
2026-08-17 09:05:20 +02:00 |
|
|
marcopan
|
3e7bb11313
|
fix(auth): isolate bounded OIDC cleanup
|
2026-08-17 07:46:43 +02:00 |
|
|
marcopan
|
bdabecbb63
|
fix(auth): bound OIDC initiation and transport
|
2026-08-17 07:03:19 +02:00 |
|
|
marcopan
|
8573500121
|
fix(auth): harden OIDC browser transactions
|
2026-08-17 06:18:49 +02:00 |
|
|
marcopan
|
4fe51cbeb1
|
feat(auth): add generic OIDC login with mandatory groups
|
2026-08-17 05:44:10 +02:00 |
|
|
marcopan
|
8c67cb75dc
|
fix(auth): honor HTTPS sessions in Pi management
|
2026-08-17 01:46:34 +02:00 |
|
|
marcopan
|
09e546c1ef
|
fix(auth): bind request auth snapshots
|
2026-08-17 01:11:25 +02:00 |
|
|
marcopan
|
94c2cd3709
|
fix(auth): bind current local registry and CORS
|
2026-08-17 00:34:58 +02:00 |
|
|
marcopan
|
c34e01e9b9
|
fix(auth): harden async login boundaries
|
2026-08-17 00:00:34 +02:00 |
|
|
marcopan
|
29bfb41363
|
feat(auth): add local login and CSRF-protected sessions
|
2026-08-16 23:23:55 +02:00 |
|
|
marcopan
|
8477a69a29
|
fix(auth): tighten bridge claim protocol
|
2026-08-16 22:44:44 +02:00 |
|
|
marcopan
|
7d9ca13f1d
|
fix(auth): harden Windows storage bridge
|
2026-08-16 22:16:13 +02:00 |
|
|
marcopan
|
c9b02fc57e
|
fix(auth): add Windows session storage bridge
|
2026-08-16 21:43:03 +02:00 |
|
|
marcopan
|
6bf8218fea
|
fix(auth): harden persistent sessions
|
2026-08-16 21:03:07 +02:00 |
|
|
marcopan
|
ab61c1ad6d
|
feat(auth): persist opaque remembered sessions
|
2026-08-16 20:28:32 +02:00 |
|
|
marcopan
|
b80a2cc1e9
|
fix(auth): protect local registry directory
|
2026-08-16 20:11:30 +02:00 |
|
|
marcopan
|
de8844a4ac
|
fix(auth): bound local password encoding
|
2026-08-16 20:03:40 +02:00 |
|
|
marcopan
|
1ed1a34ae2
|
fix(auth): reject ill-formed local passwords
|
2026-08-16 19:56:43 +02:00 |
|
|
marcopan
|
5eed4f9449
|
feat(auth): verify local ThothII users in the backend
|
2026-08-16 19:49:02 +02:00 |
|
|
marcopan
|
f6e4dbcae2
|
feat(auth): add safe Argon2id local user registry
|
2026-08-16 18:24:20 +02:00 |
|
|
marcopan
|
f99bddcdf0
|
fix(auth): restore permission boundary safeguards
|
2026-08-16 18:03:36 +02:00 |
|