 marcopan
|
f4f38717e1
|
docs(auth): document local OIDC and Authentik operation
|
2026-08-18 03:07:33 +02:00 |
|
|
marcopan
|
6ec5b76c54
|
fix(auth): serialize restore checkpoint lifecycle
|
2026-08-18 02:43:42 +02:00 |
|
|
marcopan
|
39a0fdbd00
|
fix(auth): harden backup restore lifecycle cleanup
|
2026-08-18 02:01:42 +02:00 |
|
|
marcopan
|
dee17893b4
|
fix(auth): harden restore verification transaction
|
2026-08-18 00:58:12 +02:00 |
|
|
marcopan
|
0651f3316f
|
fix(auth): validate stopped workspace restore
|
2026-08-18 00:06:28 +02:00 |
|
|
marcopan
|
e8b9995ed0
|
feat(auth): integrate authentication with installation lifecycle
|
2026-08-17 23:33:51 +02:00 |
|
|
marcopan
|
0d0c15b4b8
|
fix(auth): complete Task 13 deployment review
|
2026-08-17 22:15:41 +02:00 |
|
|
marcopan
|
7e52df2702
|
fix(auth): address Task 13 deployment review findings
|
2026-08-17 21:31:25 +02:00 |
|
|
marcopan
|
9558eaa508
|
feat(auth): integrate authentication with installation lifecycle
|
2026-08-17 20:21:42 +02:00 |
|
|
marcopan
|
0a2c667231
|
fix(auth): close cancellation and workspace races
|
2026-08-17 19:32:03 +02:00 |
|
|
marcopan
|
d12b629420
|
fix(auth): harden diagnostic cleanup races
|
2026-08-17 18:41:40 +02:00 |
|
|
marcopan
|
af16464e68
|
fix(auth): harden interactive diagnostic lifecycle
|
2026-08-17 17:57:10 +02:00 |
|
|
marcopan
|
ef244ab56d
|
fix(auth): harden unified diagnostic execution
|
2026-08-17 17:25:26 +02:00 |
|
|
marcopan
|
30ee9433dc
|
fix(auth): harden unified diagnostic execution
|
2026-08-17 16:39:54 +02:00 |
|
|
marcopan
|
3ed00ff086
|
feat(auth): include authentication in workspace and tht diagnostics
|
2026-08-17 15:51:16 +02:00 |
|
|
marcopan
|
cb0e873ed7
|
fix(auth): pin native auth storage operations
|
2026-08-17 14:52:21 +02:00 |
|
|
marcopan
|
6d438f4c7e
|
fix(auth): close diagnostic filesystem races
|
2026-08-17 13:04:15 +02:00 |
|
|
marcopan
|
be1724890a
|
fix(auth): make diagnostics bounded and portable
|
2026-08-17 12:19:19 +02:00 |
|
|
marcopan
|
7cfbee36fa
|
fix(auth): make diagnostics match runtime safety
|
2026-08-17 11:23:52 +02:00 |
|
|
marcopan
|
f0ae680671
|
feat(auth): validate mapped groups through Authentik
|
2026-08-17 10:44:56 +02:00 |
|
|
marcopan
|
33ae7cfdc2
|
fix(auth): bound all OIDC provider exchanges
|
2026-08-17 10:03:07 +02:00 |
|
|
marcopan
|
c86f01e886
|
fix(auth): paginate session maintenance safely
|
2026-08-17 09:05:20 +02:00 |
|
|
marcopan
|
3e7bb11313
|
fix(auth): isolate bounded OIDC cleanup
|
2026-08-17 07:46:43 +02:00 |
|
|
marcopan
|
bdabecbb63
|
fix(auth): bound OIDC initiation and transport
|
2026-08-17 07:03:19 +02:00 |
|
|
marcopan
|
8573500121
|
fix(auth): harden OIDC browser transactions
|
2026-08-17 06:18:49 +02:00 |
|
|
marcopan
|
4fe51cbeb1
|
feat(auth): add generic OIDC login with mandatory groups
|
2026-08-17 05:44:10 +02:00 |
|
|
marcopan
|
202822f3ba
|
feat(auth): add remembered local login to the frontend
|
2026-08-17 04:52:39 +02:00 |
|
|
marcopan
|
8c67cb75dc
|
fix(auth): honor HTTPS sessions in Pi management
|
2026-08-17 01:46:34 +02:00 |
|
|
marcopan
|
09e546c1ef
|
fix(auth): bind request auth snapshots
|
2026-08-17 01:11:25 +02:00 |
|
|
marcopan
|
94c2cd3709
|
fix(auth): bind current local registry and CORS
|
2026-08-17 00:34:58 +02:00 |
|
|
marcopan
|
c34e01e9b9
|
fix(auth): harden async login boundaries
|
2026-08-17 00:00:34 +02:00 |
|
|
marcopan
|
29bfb41363
|
feat(auth): add local login and CSRF-protected sessions
|
2026-08-16 23:23:55 +02:00 |
|
|
marcopan
|
8477a69a29
|
fix(auth): tighten bridge claim protocol
|
2026-08-16 22:44:44 +02:00 |
|
|
marcopan
|
7d9ca13f1d
|
fix(auth): harden Windows storage bridge
|
2026-08-16 22:16:13 +02:00 |
|
|
marcopan
|
c9b02fc57e
|
fix(auth): add Windows session storage bridge
|
2026-08-16 21:43:03 +02:00 |
|
|
marcopan
|
6bf8218fea
|
fix(auth): harden persistent sessions
|
2026-08-16 21:03:07 +02:00 |
|
|
marcopan
|
ab61c1ad6d
|
feat(auth): persist opaque remembered sessions
|
2026-08-16 20:28:32 +02:00 |
|
|
marcopan
|
b80a2cc1e9
|
fix(auth): protect local registry directory
|
2026-08-16 20:11:30 +02:00 |
|
|
marcopan
|
de8844a4ac
|
fix(auth): bound local password encoding
|
2026-08-16 20:03:40 +02:00 |
|
|
marcopan
|
1ed1a34ae2
|
fix(auth): reject ill-formed local passwords
|
2026-08-16 19:56:43 +02:00 |
|
|
marcopan
|
5eed4f9449
|
feat(auth): verify local ThothII users in the backend
|
2026-08-16 19:49:02 +02:00 |
|
|
marcopan
|
856ac05edc
|
fix(auth): harden tht auth mutations
|
2026-08-16 19:37:12 +02:00 |
|
|
marcopan
|
9646ae09a0
|
feat(auth): add local and OIDC management to tht
|
2026-08-16 19:23:30 +02:00 |
|
|
marcopan
|
d17ad0e95b
|
fix(auth): atomically secure Windows lock creation
|
2026-08-16 19:01:09 +02:00 |
|
|
marcopan
|
25ee8b87d1
|
fix(auth): harden Windows auth store privacy
|
2026-08-16 18:44:38 +02:00 |
|
|
marcopan
|
f6e4dbcae2
|
feat(auth): add safe Argon2id local user registry
|
2026-08-16 18:24:20 +02:00 |
|
|
marcopan
|
f99bddcdf0
|
fix(auth): restore permission boundary safeguards
|
2026-08-16 18:03:36 +02:00 |
|
|
marcopan
|
2e0489ce22
|
feat(auth): centralize ThothII permission enforcement
|
2026-08-16 17:52:03 +02:00 |
|
|
marcopan
|
23ac75ce1d
|
fix(auth): declare local development environment
|
2026-08-16 17:36:42 +02:00 |
|
|
marcopan
|
e54ce15426
|
fix(auth): fail closed configuration compatibility
|
2026-08-16 17:35:40 +02:00 |
|
|
marcopan
|
a66ef58766
|
feat(auth): define strict installation authentication config
|
2026-08-16 17:26:31 +02:00 |
|
|
marcopan
|
d464f3a982
|
build: align authentication runtime on Node 24
|
2026-08-16 17:13:55 +02:00 |
|
|
marcopan
|
9196639cb3
|
docs(auth): add authentication design and implementation plan
|
2026-08-16 17:07:32 +02:00 |
|
|
marcopan
|
351361f72f
|
feat: finish Pi and workspace management updates
|
2026-08-16 14:19:32 +02:00 |
|
|
marcopan
|
7651b63cea
|
refactor(cli): remove obsolete workflow commands
|
2026-08-16 02:29:00 +02:00 |
|
|
marcopan
|
91650d9c67
|
feat(tht): wire restore command
|
2026-08-16 02:07:40 +02:00 |
|
|
marcopan
|
69dca0820b
|
feat(cli): add restore transaction core
|
2026-08-16 02:05:21 +02:00 |
|
|
marcopan
|
cbb18acc4d
|
fix(cli): harden restore preflight validation
|
2026-08-16 01:38:48 +02:00 |
|
|
marcopan
|
6618a9d7c2
|
feat(cli): add no-mutation restore preflight
|
2026-08-16 01:26:34 +02:00 |
|
|
marcopan
|
e4d0097639
|
fix(cli): harden backup publication and quiescing
|
2026-08-16 01:11:59 +02:00 |
|
|
marcopan
|
11fbf0a138
|
feat(cli): add transactional installation backups
|
2026-08-16 00:55:22 +02:00 |
|
|
marcopan
|
3e0c864c85
|
fix(pi): isolate resolved package builds
|
2026-08-16 00:20:30 +02:00 |
|
|
marcopan
|
5a657a67e8
|
feat(pi): update to the latest stable release by default
|
2026-08-16 00:13:51 +02:00 |
|
|
marcopan
|
0cb6a3f915
|
fix(cli): strengthen aggregate doctor diagnostics
|
2026-08-15 23:47:00 +02:00 |
|
|
marcopan
|
7ac99b4f7e
|
feat(cli): add version diagnostics and build-aware start
|
2026-08-15 23:35:55 +02:00 |
|
|
marcopan
|
9a8755e4c3
|
docs(sdd): record setup fix evidence
|
2026-08-15 23:16:05 +02:00 |
|
|
marcopan
|
ea70cc95b0
|
fix(setup): harden verification and recovery
|
2026-08-15 23:15:50 +02:00 |
|
|
marcopan
|
47e0b2a385
|
feat(setup): build start and verify ThothII
|
2026-08-15 23:09:10 +02:00 |
|
|
marcopan
|
2856964654
|
fix(setup): validate endpoints and secret files
|
2026-08-15 22:53:04 +02:00 |
|
|
marcopan
|
6dc9e80564
|
feat(setup): generate local installation configuration
|
2026-08-15 22:45:22 +02:00 |
|
|
marcopan
|
2c800cc521
|
fix(cli): honor local installation discovery precedence
|
2026-08-15 22:29:55 +02:00 |
|
|
marcopan
|
66614fe8cf
|
feat(cli): discover ThothII projects and installations
|
2026-08-15 22:24:15 +02:00 |
|
|
marcopan
|
4fc03574e1
|
fix(cli): clean failed tht installer staging
|
2026-08-15 22:13:24 +02:00 |
|
|
marcopan
|
a2d5a244de
|
fix(cli): harden tht installer replacement
|
2026-08-15 22:10:59 +02:00 |
|
|
marcopan
|
5e13396669
|
feat(cli): install tht as a system command
|
2026-08-15 22:05:42 +02:00 |
|
|
marcopan
|
aa8a2e9278
|
refactor(cli): rename operator command to tht
|
2026-08-15 21:56:40 +02:00 |
|
|
marcopan
|
460caa550c
|
docs: clarify workspace authoring guidance
|
2026-08-15 21:25:48 +02:00 |
|
|
marcopan
|
a02ac52836
|
fix: return workspace manager to level one
|
2026-08-14 22:18:12 +02:00 |
|
|
marcopan
|
c9c30563f2
|
fix: improve workspace manager navigation and sizing
|
2026-08-14 21:20:41 +02:00 |
|
|
marcopan
|
900faad983
|
fix: close Pi management final review findings
|
2026-08-14 20:15:21 +02:00 |
|
|
marcopan
|
225d13cd75
|
fix(frontend): preserve Pi auth asset guidance
|
2026-08-14 19:14:53 +02:00 |
|
|
marcopan
|
99012f04c2
|
fix(frontend): make Pi operator tabs keyboard accessible
|
2026-08-14 19:01:20 +02:00 |
|
|
marcopan
|
1df881d98d
|
feat(frontend): simplify Pi operator workflow
|
2026-08-14 18:52:11 +02:00 |
|
|
marcopan
|
dc83a55555
|
docs: correct Pi operator recovery guidance
|
2026-08-14 18:41:34 +02:00 |
|
|
marcopan
|
a8623a2b18
|
docs: clarify Pi reload and update workflows
|
2026-08-14 18:34:04 +02:00 |
|
|
marcopan
|
59a04123ea
|
fix: make thothctl doctor portable
|
2026-08-14 18:31:52 +02:00 |
|
|
marcopan
|
a35f52790d
|
feat(thothctl): expose Pi restart command
|
2026-08-14 18:25:23 +02:00 |
|
|
marcopan
|
3a1f2ede4a
|
fix(thothctl): harden Pi restart recovery
|
2026-08-14 18:15:00 +02:00 |
|
|
marcopan
|
9414a4b4dd
|
fix: initialize workspace secret volume for runtime
|
2026-08-14 18:13:52 +02:00 |
|
|
marcopan
|
bd42aa5934
|
test: verify read-only workspace secret flow
|
2026-08-14 18:05:28 +02:00 |
|
|
marcopan
|
ab33e0ed0a
|
docs: describe read-only workspace runtime configuration
|
2026-08-14 18:01:02 +02:00 |
|
|
marcopan
|
422f1d47b4
|
feat(thothctl): add safe Pi core restart
|
2026-08-14 17:52:35 +02:00 |
|
|
marcopan
|
a94df262f4
|
fix: preserve deterministic runtime secret leases
|
2026-08-14 17:47:17 +02:00 |
|
|
marcopan
|
fd3b62ce6f
|
refactor: stop persisting workspace state in the browser
|
2026-08-14 17:43:10 +02:00 |
|
|
marcopan
|
3978008aed
|
feat: add read-only workspace and secret management UI
|
2026-08-14 17:38:24 +02:00 |
|
|
marcopan
|
e902f758b1
|
refactor(thothctl): share Pi lifecycle lock
|
2026-08-14 17:36:33 +02:00 |
|
|
marcopan
|
ae1215dc98
|
test: isolate workspace secret vaults under vitest
|
2026-08-14 17:32:22 +02:00 |
|
|
marcopan
|
a227cbe755
|
docs: plan Pi restart operator workflow
|
2026-08-14 17:32:07 +02:00 |
|
|
marcopan
|
87cefd120c
|
feat: configure workspace runtime secrets through API
|
2026-08-14 17:30:35 +02:00 |
|
|
marcopan
|
2114c94704
|
feat: derive workspace runtime secret requirements
|
2026-08-14 17:26:39 +02:00 |
|