 marcopan
|
c863244a86
|
fix(safeio): use self-relative create descriptors
|
2026-08-18 13:16:28 +02:00 |
|
|
marcopan
|
81077e59d3
|
fix(safeio): normalize NT relative access masks
|
2026-08-18 13:11:40 +02:00 |
|
|
marcopan
|
36592634bb
|
test(safeio): diagnose relative Windows opens
|
2026-08-18 13:07:58 +02:00 |
|
|
marcopan
|
4f07b26f5e
|
fix(safeio): pass valid NT file attributes
|
2026-08-18 13:03:20 +02:00 |
|
|
marcopan
|
747b4200d9
|
test(safeio): expose native Windows DACL shape
|
2026-08-18 13:00:23 +02:00 |
|
|
marcopan
|
a0e05ad392
|
fix(safeio): accept Windows effective full-control ACL
|
2026-08-18 12:52:37 +02:00 |
|
|
marcopan
|
cd5f505c8a
|
fix(auth): close Windows remediation review findings
|
2026-08-18 12:46:54 +02:00 |
|
|
marcopan
|
fa499a9bdd
|
docs(auth): record Task 4 certification evidence
|
2026-08-18 11:58:38 +02:00 |
|
|
marcopan
|
b31b27e584
|
fix(auth): allow Windows claim verification to share delete
|
2026-08-18 11:18:57 +02:00 |
|
|
marcopan
|
0d8e707533
|
fix(auth): remove Windows claims by retained handle
|
2026-08-18 11:04:21 +02:00 |
|
|
marcopan
|
5f9a3ae066
|
fix(backup): retain staging cleanup capability
|
2026-08-18 10:50:56 +02:00 |
|
|
marcopan
|
d43738eeae
|
fix(auth): require local registry ownership
|
2026-08-18 10:31:44 +02:00 |
|
|
marcopan
|
3c6ddfaef1
|
docs(auth): plan important finding remediation
|
2026-08-18 10:10:37 +02:00 |
|
|
marcopan
|
178113a7e8
|
docs(auth): record final branch review
|
2026-08-18 09:41:09 +02:00 |
|
|
marcopan
|
39b5453287
|
docs(auth): record unresolved Task 15 review
|
2026-08-18 09:27:11 +02:00 |
|
|
marcopan
|
d7cd8fdf94
|
docs(task15): record retained-handle fix evidence
|
2026-08-18 09:15:14 +02:00 |
|
|
marcopan
|
74b062f1a7
|
fix(safeio): retain writable Windows parent handles
|
2026-08-18 09:05:42 +02:00 |
|
|
marcopan
|
e7a7f4f066
|
fix(safeio): retain private file parent handles
|
2026-08-18 08:51:59 +02:00 |
|
|
marcopan
|
0b77d1e850
|
docs(auth): retain Task 15 round four evidence
|
2026-08-18 08:24:08 +02:00 |
|
|
marcopan
|
54698e7340
|
fix(backup): privately stage restore archive
|
2026-08-18 08:13:13 +02:00 |
|
|
marcopan
|
df00f6bfa8
|
docs(state): correct Task 15 source provenance
|
2026-08-18 07:51:27 +02:00 |
|
|
marcopan
|
cb1bd101f0
|
docs(state): retain Task 15 final gate evidence
|
2026-08-18 07:49:40 +02:00 |
|
|
marcopan
|
e20bf33e2a
|
fix(backup): use platform private staging controls
|
2026-08-18 07:39:51 +02:00 |
|
|
marcopan
|
4d230b87af
|
fix(deploy): render maintenance smoke profile
|
2026-08-18 07:24:18 +02:00 |
|
|
marcopan
|
fe190e7046
|
fix(auth): close Task 15 review round two
|
2026-08-18 07:21:24 +02:00 |
|
|
marcopan
|
225ffc8e20
|
docs(state): record Task 15 round-one evidence
|
2026-08-18 06:43:10 +02:00 |
|
|
marcopan
|
b2772f10a5
|
test(deploy): retain failed smoke image evidence
|
2026-08-18 06:37:35 +02:00 |
|
|
marcopan
|
2b618c5a0f
|
test(auth): harden Task 15 OIDC smoke evidence
|
2026-08-18 06:33:48 +02:00 |
|
|
marcopan
|
8a3fa5031d
|
test(auth): gate local and OIDC authentication release
|
2026-08-18 06:02:25 +02:00 |
|
|
marcopan
|
7cf7d9db6b
|
docs(auth): correct Task 14 release status
|
2026-08-18 03:46:52 +02:00 |
|
|
marcopan
|
91925d64bf
|
docs(auth): address authentication guide review
|
2026-08-18 03:33:00 +02:00 |
|
|
marcopan
|
f4f38717e1
|
docs(auth): document local OIDC and Authentik operation
|
2026-08-18 03:07:33 +02:00 |
|
|
marcopan
|
6ec5b76c54
|
fix(auth): serialize restore checkpoint lifecycle
|
2026-08-18 02:43:42 +02:00 |
|
|
marcopan
|
39a0fdbd00
|
fix(auth): harden backup restore lifecycle cleanup
|
2026-08-18 02:01:42 +02:00 |
|
|
marcopan
|
dee17893b4
|
fix(auth): harden restore verification transaction
|
2026-08-18 00:58:12 +02:00 |
|
|
marcopan
|
0651f3316f
|
fix(auth): validate stopped workspace restore
|
2026-08-18 00:06:28 +02:00 |
|
|
marcopan
|
e8b9995ed0
|
feat(auth): integrate authentication with installation lifecycle
|
2026-08-17 23:33:51 +02:00 |
|
|
marcopan
|
0d0c15b4b8
|
fix(auth): complete Task 13 deployment review
|
2026-08-17 22:15:41 +02:00 |
|
|
marcopan
|
7e52df2702
|
fix(auth): address Task 13 deployment review findings
|
2026-08-17 21:31:25 +02:00 |
|
|
marcopan
|
9558eaa508
|
feat(auth): integrate authentication with installation lifecycle
|
2026-08-17 20:21:42 +02:00 |
|
|
marcopan
|
0a2c667231
|
fix(auth): close cancellation and workspace races
|
2026-08-17 19:32:03 +02:00 |
|
|
marcopan
|
d12b629420
|
fix(auth): harden diagnostic cleanup races
|
2026-08-17 18:41:40 +02:00 |
|
|
marcopan
|
af16464e68
|
fix(auth): harden interactive diagnostic lifecycle
|
2026-08-17 17:57:10 +02:00 |
|
|
marcopan
|
ef244ab56d
|
fix(auth): harden unified diagnostic execution
|
2026-08-17 17:25:26 +02:00 |
|
|
marcopan
|
30ee9433dc
|
fix(auth): harden unified diagnostic execution
|
2026-08-17 16:39:54 +02:00 |
|
|
marcopan
|
3ed00ff086
|
feat(auth): include authentication in workspace and tht diagnostics
|
2026-08-17 15:51:16 +02:00 |
|
|
marcopan
|
cb0e873ed7
|
fix(auth): pin native auth storage operations
|
2026-08-17 14:52:21 +02:00 |
|
|
marcopan
|
6d438f4c7e
|
fix(auth): close diagnostic filesystem races
|
2026-08-17 13:04:15 +02:00 |
|
|
marcopan
|
be1724890a
|
fix(auth): make diagnostics bounded and portable
|
2026-08-17 12:19:19 +02:00 |
|
|
marcopan
|
7cfbee36fa
|
fix(auth): make diagnostics match runtime safety
|
2026-08-17 11:23:52 +02:00 |
|
|
marcopan
|
f0ae680671
|
feat(auth): validate mapped groups through Authentik
|
2026-08-17 10:44:56 +02:00 |
|
|
marcopan
|
33ae7cfdc2
|
fix(auth): bound all OIDC provider exchanges
|
2026-08-17 10:03:07 +02:00 |
|
|
marcopan
|
c86f01e886
|
fix(auth): paginate session maintenance safely
|
2026-08-17 09:05:20 +02:00 |
|
|
marcopan
|
3e7bb11313
|
fix(auth): isolate bounded OIDC cleanup
|
2026-08-17 07:46:43 +02:00 |
|
|
marcopan
|
bdabecbb63
|
fix(auth): bound OIDC initiation and transport
|
2026-08-17 07:03:19 +02:00 |
|
|
marcopan
|
8573500121
|
fix(auth): harden OIDC browser transactions
|
2026-08-17 06:18:49 +02:00 |
|
|
marcopan
|
4fe51cbeb1
|
feat(auth): add generic OIDC login with mandatory groups
|
2026-08-17 05:44:10 +02:00 |
|
|
marcopan
|
202822f3ba
|
feat(auth): add remembered local login to the frontend
|
2026-08-17 04:52:39 +02:00 |
|
|
marcopan
|
8c67cb75dc
|
fix(auth): honor HTTPS sessions in Pi management
|
2026-08-17 01:46:34 +02:00 |
|
|
marcopan
|
09e546c1ef
|
fix(auth): bind request auth snapshots
|
2026-08-17 01:11:25 +02:00 |
|
|
marcopan
|
94c2cd3709
|
fix(auth): bind current local registry and CORS
|
2026-08-17 00:34:58 +02:00 |
|
|
marcopan
|
c34e01e9b9
|
fix(auth): harden async login boundaries
|
2026-08-17 00:00:34 +02:00 |
|
|
marcopan
|
29bfb41363
|
feat(auth): add local login and CSRF-protected sessions
|
2026-08-16 23:23:55 +02:00 |
|
|
marcopan
|
8477a69a29
|
fix(auth): tighten bridge claim protocol
|
2026-08-16 22:44:44 +02:00 |
|
|
marcopan
|
7d9ca13f1d
|
fix(auth): harden Windows storage bridge
|
2026-08-16 22:16:13 +02:00 |
|
|
marcopan
|
c9b02fc57e
|
fix(auth): add Windows session storage bridge
|
2026-08-16 21:43:03 +02:00 |
|
|
marcopan
|
6bf8218fea
|
fix(auth): harden persistent sessions
|
2026-08-16 21:03:07 +02:00 |
|
|
marcopan
|
ab61c1ad6d
|
feat(auth): persist opaque remembered sessions
|
2026-08-16 20:28:32 +02:00 |
|
|
marcopan
|
b80a2cc1e9
|
fix(auth): protect local registry directory
|
2026-08-16 20:11:30 +02:00 |
|
|
marcopan
|
de8844a4ac
|
fix(auth): bound local password encoding
|
2026-08-16 20:03:40 +02:00 |
|
|
marcopan
|
1ed1a34ae2
|
fix(auth): reject ill-formed local passwords
|
2026-08-16 19:56:43 +02:00 |
|
|
marcopan
|
5eed4f9449
|
feat(auth): verify local ThothII users in the backend
|
2026-08-16 19:49:02 +02:00 |
|
|
marcopan
|
856ac05edc
|
fix(auth): harden tht auth mutations
|
2026-08-16 19:37:12 +02:00 |
|
|
marcopan
|
9646ae09a0
|
feat(auth): add local and OIDC management to tht
|
2026-08-16 19:23:30 +02:00 |
|
|
marcopan
|
d17ad0e95b
|
fix(auth): atomically secure Windows lock creation
|
2026-08-16 19:01:09 +02:00 |
|
|
marcopan
|
25ee8b87d1
|
fix(auth): harden Windows auth store privacy
|
2026-08-16 18:44:38 +02:00 |
|
|
marcopan
|
f6e4dbcae2
|
feat(auth): add safe Argon2id local user registry
|
2026-08-16 18:24:20 +02:00 |
|
|
marcopan
|
f99bddcdf0
|
fix(auth): restore permission boundary safeguards
|
2026-08-16 18:03:36 +02:00 |
|
|
marcopan
|
2e0489ce22
|
feat(auth): centralize ThothII permission enforcement
|
2026-08-16 17:52:03 +02:00 |
|
|
marcopan
|
23ac75ce1d
|
fix(auth): declare local development environment
|
2026-08-16 17:36:42 +02:00 |
|
|
marcopan
|
e54ce15426
|
fix(auth): fail closed configuration compatibility
|
2026-08-16 17:35:40 +02:00 |
|
|
marcopan
|
a66ef58766
|
feat(auth): define strict installation authentication config
|
2026-08-16 17:26:31 +02:00 |
|
|
marcopan
|
d464f3a982
|
build: align authentication runtime on Node 24
|
2026-08-16 17:13:55 +02:00 |
|
|
marcopan
|
9196639cb3
|
docs(auth): add authentication design and implementation plan
|
2026-08-16 17:07:32 +02:00 |
|
|
marcopan
|
351361f72f
|
feat: finish Pi and workspace management updates
|
2026-08-16 14:19:32 +02:00 |
|
|
marcopan
|
7651b63cea
|
refactor(cli): remove obsolete workflow commands
|
2026-08-16 02:29:00 +02:00 |
|
|
marcopan
|
91650d9c67
|
feat(tht): wire restore command
|
2026-08-16 02:07:40 +02:00 |
|
|
marcopan
|
69dca0820b
|
feat(cli): add restore transaction core
|
2026-08-16 02:05:21 +02:00 |
|
|
marcopan
|
cbb18acc4d
|
fix(cli): harden restore preflight validation
|
2026-08-16 01:38:48 +02:00 |
|
|
marcopan
|
6618a9d7c2
|
feat(cli): add no-mutation restore preflight
|
2026-08-16 01:26:34 +02:00 |
|
|
marcopan
|
e4d0097639
|
fix(cli): harden backup publication and quiescing
|
2026-08-16 01:11:59 +02:00 |
|
|
marcopan
|
11fbf0a138
|
feat(cli): add transactional installation backups
|
2026-08-16 00:55:22 +02:00 |
|
|
marcopan
|
3e0c864c85
|
fix(pi): isolate resolved package builds
|
2026-08-16 00:20:30 +02:00 |
|
|
marcopan
|
5a657a67e8
|
feat(pi): update to the latest stable release by default
|
2026-08-16 00:13:51 +02:00 |
|
|
marcopan
|
0cb6a3f915
|
fix(cli): strengthen aggregate doctor diagnostics
|
2026-08-15 23:47:00 +02:00 |
|
|
marcopan
|
7ac99b4f7e
|
feat(cli): add version diagnostics and build-aware start
|
2026-08-15 23:35:55 +02:00 |
|
|
marcopan
|
9a8755e4c3
|
docs(sdd): record setup fix evidence
|
2026-08-15 23:16:05 +02:00 |
|
|
marcopan
|
ea70cc95b0
|
fix(setup): harden verification and recovery
|
2026-08-15 23:15:50 +02:00 |
|
|
marcopan
|
47e0b2a385
|
feat(setup): build start and verify ThothII
|
2026-08-15 23:09:10 +02:00 |
|
|
marcopan
|
2856964654
|
fix(setup): validate endpoints and secret files
|
2026-08-15 22:53:04 +02:00 |
|