 marcopan
|
f0ae680671
|
feat(auth): validate mapped groups through Authentik
|
2026-08-17 10:44:56 +02:00 |
|
|
marcopan
|
33ae7cfdc2
|
fix(auth): bound all OIDC provider exchanges
|
2026-08-17 10:03:07 +02:00 |
|
|
marcopan
|
c86f01e886
|
fix(auth): paginate session maintenance safely
|
2026-08-17 09:05:20 +02:00 |
|
|
marcopan
|
3e7bb11313
|
fix(auth): isolate bounded OIDC cleanup
|
2026-08-17 07:46:43 +02:00 |
|
|
marcopan
|
bdabecbb63
|
fix(auth): bound OIDC initiation and transport
|
2026-08-17 07:03:19 +02:00 |
|
|
marcopan
|
8573500121
|
fix(auth): harden OIDC browser transactions
|
2026-08-17 06:18:49 +02:00 |
|
|
marcopan
|
4fe51cbeb1
|
feat(auth): add generic OIDC login with mandatory groups
|
2026-08-17 05:44:10 +02:00 |
|
|
marcopan
|
8c67cb75dc
|
fix(auth): honor HTTPS sessions in Pi management
|
2026-08-17 01:46:34 +02:00 |
|
|
marcopan
|
09e546c1ef
|
fix(auth): bind request auth snapshots
|
2026-08-17 01:11:25 +02:00 |
|
|
marcopan
|
94c2cd3709
|
fix(auth): bind current local registry and CORS
|
2026-08-17 00:34:58 +02:00 |
|
|
marcopan
|
c34e01e9b9
|
fix(auth): harden async login boundaries
|
2026-08-17 00:00:34 +02:00 |
|
|
marcopan
|
29bfb41363
|
feat(auth): add local login and CSRF-protected sessions
|
2026-08-16 23:23:55 +02:00 |
|
|
marcopan
|
8477a69a29
|
fix(auth): tighten bridge claim protocol
|
2026-08-16 22:44:44 +02:00 |
|
|
marcopan
|
7d9ca13f1d
|
fix(auth): harden Windows storage bridge
|
2026-08-16 22:16:13 +02:00 |
|
|
marcopan
|
c9b02fc57e
|
fix(auth): add Windows session storage bridge
|
2026-08-16 21:43:03 +02:00 |
|
|
marcopan
|
6bf8218fea
|
fix(auth): harden persistent sessions
|
2026-08-16 21:03:07 +02:00 |
|
|
marcopan
|
ab61c1ad6d
|
feat(auth): persist opaque remembered sessions
|
2026-08-16 20:28:32 +02:00 |
|
|
marcopan
|
b80a2cc1e9
|
fix(auth): protect local registry directory
|
2026-08-16 20:11:30 +02:00 |
|
|
marcopan
|
de8844a4ac
|
fix(auth): bound local password encoding
|
2026-08-16 20:03:40 +02:00 |
|
|
marcopan
|
1ed1a34ae2
|
fix(auth): reject ill-formed local passwords
|
2026-08-16 19:56:43 +02:00 |
|
|
marcopan
|
5eed4f9449
|
feat(auth): verify local ThothII users in the backend
|
2026-08-16 19:49:02 +02:00 |
|
|
marcopan
|
f6e4dbcae2
|
feat(auth): add safe Argon2id local user registry
|
2026-08-16 18:24:20 +02:00 |
|
|
marcopan
|
f99bddcdf0
|
fix(auth): restore permission boundary safeguards
|
2026-08-16 18:03:36 +02:00 |
|
|
marcopan
|
2e0489ce22
|
feat(auth): centralize ThothII permission enforcement
|
2026-08-16 17:52:03 +02:00 |
|
|
marcopan
|
23ac75ce1d
|
fix(auth): declare local development environment
|
2026-08-16 17:36:42 +02:00 |
|
|
marcopan
|
e54ce15426
|
fix(auth): fail closed configuration compatibility
|
2026-08-16 17:35:40 +02:00 |
|
|
marcopan
|
a66ef58766
|
feat(auth): define strict installation authentication config
|
2026-08-16 17:26:31 +02:00 |
|
|
marcopan
|
d464f3a982
|
build: align authentication runtime on Node 24
|
2026-08-16 17:13:55 +02:00 |
|
|
marcopan
|
bd42aa5934
|
test: verify read-only workspace secret flow
|
2026-08-14 18:05:28 +02:00 |
|
|
marcopan
|
a94df262f4
|
fix: preserve deterministic runtime secret leases
|
2026-08-14 17:47:17 +02:00 |
|
|
marcopan
|
87cefd120c
|
feat: configure workspace runtime secrets through API
|
2026-08-14 17:30:35 +02:00 |
|
|
marcopan
|
2114c94704
|
feat: derive workspace runtime secret requirements
|
2026-08-14 17:26:39 +02:00 |
|
|
marcopan
|
e4999c8420
|
feat: add encrypted workspace secret store
|
2026-08-14 17:23:23 +02:00 |
|
|
marcopan
|
747020a330
|
feat: declare workspace repository in installation config
|
2026-08-14 16:32:58 +02:00 |
|
|
marcopan
|
9db4463a83
|
refactor: remove workspace publishing and bundles
|
2026-08-14 16:28:01 +02:00 |
|
|
marcopan
|
42e02f8b1c
|
refactor: make workspace repository strictly read only
|
2026-08-14 16:20:08 +02:00 |
|
|
marcopan
|
db1a81cfa6
|
fix: surface reviewer response failures
|
2026-08-14 12:06:25 +02:00 |
|
|
marcopan
|
9d7e9a05b7
|
fix: resolve diagnostic paths under the base path prefix and tolerate health-style ping responses
|
2026-08-13 20:58:10 +02:00 |
|
|
marcopan
|
f31b1e61ac
|
fix: upsert in bounded chunks, recreate Qdrant indexes on rebuild, larger maintenance tmpfs
|
2026-08-13 19:02:52 +02:00 |
|
|
marcopan
|
f09ab2b8c6
|
test: expect filesystem Evidence materialization in the canonical snapshot
|
2026-08-13 12:38:53 +02:00 |
|
|
marcopan
|
871de800f0
|
feat: make filesystem Evidence operational after materialization (P6)
|
2026-08-13 12:35:25 +02:00 |
|
|
marcopan
|
bb2eabceb6
|
feat: activate commit-addressed Evidence materialization with an integrity chain (P6)
|
2026-08-13 12:34:56 +02:00 |
|
|
marcopan
|
0c9e614100
|
feat: bounded Evidence materializer with manifest and atomic publication (P6)
|
2026-08-13 12:31:12 +02:00 |
|
|
marcopan
|
0c1033889a
|
feat: safe Evidence tree enumeration and bounded blob streaming (P6)
|
2026-08-13 12:28:49 +02:00 |
|
|
marcopan
|
d751188db7
|
feat: gate FK review on the accepted revision blob (P5)
|
2026-08-13 05:08:19 +02:00 |
|
|
marcopan
|
0459a6cd3e
|
feat: operator schema accept command for curated FK review (P5)
|
2026-08-13 05:06:23 +02:00 |
|
|
marcopan
|
5249798c03
|
feat: revision-qualified annotations root for pinned runtimes (P5)
|
2026-08-13 05:02:19 +02:00 |
|
|
marcopan
|
259d5a0374
|
feat: atomic revision-qualified annotations sync with ownership manifest (P5)
|
2026-08-13 04:58:56 +02:00 |
|
|
marcopan
|
b00b7f17c9
|
feat: read and validate curated FK annotations at the pinned commit (P5)
|
2026-08-13 04:56:03 +02:00 |
|
|
marcopan
|
e056c19e62
|
feat: P4 qdrant collection lifecycle (self-heal + guarded rebuild)
- shared TS collection manager: self-heal creates missing collection (1024/cosine)
and missing keyword payload indexes; never mutates incompatible contracts
(semantic_index_incompatible); async index visibility polled with bounded deadline
- session admission (qdrantEnsure) uses the manager in self-heal mode; operator path
keeps require_existing semantics
- runtime lease exposes semanticQdrantUrl to the operator
- operator commands vector-inspect/vector-rebuild with exact confirmation guards
- thothctl workspace vector inspect|rebuild (Go) with --collection/--confirm/--destroy
- p4 acceptance runner: real Qdrant (v1.18.2) lifecycle checks, 11/11 PASS
- docs: CLI contract, manual walkthrough P4 (PENDING), PROJECT_STATE
|
2026-08-12 20:00:14 +02:00 |
|