mptyl/ThothII
1
0
Fork 0
Code Issues 25 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Commit Graph

  • 7e52df2702 fix(auth): address Task 13 deployment review findings marcopan 2026-08-17 21:31:25 +02:00
  • 9558eaa508 feat(auth): integrate authentication with installation lifecycle marcopan 2026-08-17 20:21:42 +02:00
  • 0a2c667231 fix(auth): close cancellation and workspace races marcopan 2026-08-17 19:32:03 +02:00
  • d12b629420 fix(auth): harden diagnostic cleanup races marcopan 2026-08-17 18:41:40 +02:00
  • af16464e68 fix(auth): harden interactive diagnostic lifecycle marcopan 2026-08-17 17:57:10 +02:00
  • ef244ab56d fix(auth): harden unified diagnostic execution marcopan 2026-08-17 17:25:26 +02:00
  • 30ee9433dc fix(auth): harden unified diagnostic execution marcopan 2026-08-17 16:39:54 +02:00
  • 3ed00ff086 feat(auth): include authentication in workspace and tht diagnostics marcopan 2026-08-17 15:51:16 +02:00
  • cb0e873ed7 fix(auth): pin native auth storage operations marcopan 2026-08-17 14:49:37 +02:00
  • 6d438f4c7e fix(auth): close diagnostic filesystem races marcopan 2026-08-17 13:04:15 +02:00
  • be1724890a fix(auth): make diagnostics bounded and portable marcopan 2026-08-17 12:19:19 +02:00
  • 7cfbee36fa fix(auth): make diagnostics match runtime safety marcopan 2026-08-17 11:23:52 +02:00
  • f0ae680671 feat(auth): validate mapped groups through Authentik marcopan 2026-08-17 10:44:56 +02:00
  • 33ae7cfdc2 fix(auth): bound all OIDC provider exchanges marcopan 2026-08-17 10:03:07 +02:00
  • c86f01e886 fix(auth): paginate session maintenance safely marcopan 2026-08-17 09:05:20 +02:00
  • 3e7bb11313 fix(auth): isolate bounded OIDC cleanup marcopan 2026-08-17 07:46:43 +02:00
  • bdabecbb63 fix(auth): bound OIDC initiation and transport marcopan 2026-08-17 07:03:19 +02:00
  • 8573500121 fix(auth): harden OIDC browser transactions marcopan 2026-08-17 06:18:49 +02:00
  • 4fe51cbeb1 feat(auth): add generic OIDC login with mandatory groups marcopan 2026-08-17 05:44:10 +02:00
  • 202822f3ba feat(auth): add remembered local login to the frontend marcopan 2026-08-17 02:24:15 +02:00
  • 8c67cb75dc fix(auth): honor HTTPS sessions in Pi management marcopan 2026-08-17 01:46:34 +02:00
  • 09e546c1ef fix(auth): bind request auth snapshots marcopan 2026-08-17 01:11:25 +02:00
  • 94c2cd3709 fix(auth): bind current local registry and CORS marcopan 2026-08-17 00:34:58 +02:00
  • c34e01e9b9 fix(auth): harden async login boundaries marcopan 2026-08-17 00:00:34 +02:00
  • 29bfb41363 feat(auth): add local login and CSRF-protected sessions marcopan 2026-08-16 23:23:55 +02:00
  • 8477a69a29 fix(auth): tighten bridge claim protocol marcopan 2026-08-16 22:44:44 +02:00
  • 7d9ca13f1d fix(auth): harden Windows storage bridge marcopan 2026-08-16 22:16:13 +02:00
  • c9b02fc57e fix(auth): add Windows session storage bridge marcopan 2026-08-16 21:43:03 +02:00
  • 6bf8218fea fix(auth): harden persistent sessions marcopan 2026-08-16 21:03:07 +02:00
  • ab61c1ad6d feat(auth): persist opaque remembered sessions marcopan 2026-08-16 20:28:32 +02:00
  • b80a2cc1e9 fix(auth): protect local registry directory marcopan 2026-08-16 20:11:30 +02:00
  • de8844a4ac fix(auth): bound local password encoding marcopan 2026-08-16 20:03:40 +02:00
  • 1ed1a34ae2 fix(auth): reject ill-formed local passwords marcopan 2026-08-16 19:56:43 +02:00
  • 5eed4f9449 feat(auth): verify local ThothII users in the backend marcopan 2026-08-16 19:49:02 +02:00
  • 856ac05edc fix(auth): harden tht auth mutations marcopan 2026-08-16 19:37:12 +02:00
  • 9646ae09a0 feat(auth): add local and OIDC management to tht marcopan 2026-08-16 19:23:30 +02:00
  • d17ad0e95b fix(auth): atomically secure Windows lock creation marcopan 2026-08-16 19:01:09 +02:00
  • 25ee8b87d1 fix(auth): harden Windows auth store privacy marcopan 2026-08-16 18:44:38 +02:00
  • f6e4dbcae2 feat(auth): add safe Argon2id local user registry marcopan 2026-08-16 18:24:20 +02:00
  • f99bddcdf0 fix(auth): restore permission boundary safeguards marcopan 2026-08-16 18:03:36 +02:00
  • 2e0489ce22 feat(auth): centralize ThothII permission enforcement marcopan 2026-08-16 17:52:03 +02:00
  • 23ac75ce1d fix(auth): declare local development environment marcopan 2026-08-16 17:36:42 +02:00
  • e54ce15426 fix(auth): fail closed configuration compatibility marcopan 2026-08-16 17:35:40 +02:00
  • a66ef58766 feat(auth): define strict installation authentication config marcopan 2026-08-16 17:26:31 +02:00
  • d464f3a982 build: align authentication runtime on Node 24 marcopan 2026-08-16 17:13:55 +02:00
  • 9196639cb3 docs(auth): add authentication design and implementation plan marcopan 2026-08-16 17:07:32 +02:00
  • 351361f72f feat: finish Pi and workspace management updates marcopan 2026-08-16 14:19:32 +02:00
  • 7651b63cea refactor(cli): remove obsolete workflow commands marcopan 2026-08-16 02:29:00 +02:00
  • 91650d9c67 feat(tht): wire restore command marcopan 2026-08-16 02:07:40 +02:00
  • 69dca0820b feat(cli): add restore transaction core marcopan 2026-08-16 02:05:21 +02:00
  • cbb18acc4d fix(cli): harden restore preflight validation marcopan 2026-08-16 01:38:48 +02:00
  • 6618a9d7c2 feat(cli): add no-mutation restore preflight marcopan 2026-08-16 01:26:34 +02:00
  • e4d0097639 fix(cli): harden backup publication and quiescing marcopan 2026-08-16 01:11:59 +02:00
  • 11fbf0a138 feat(cli): add transactional installation backups marcopan 2026-08-16 00:55:22 +02:00
  • 3e0c864c85 fix(pi): isolate resolved package builds marcopan 2026-08-16 00:20:30 +02:00
  • 5a657a67e8 feat(pi): update to the latest stable release by default marcopan 2026-08-16 00:13:51 +02:00
  • 0cb6a3f915 fix(cli): strengthen aggregate doctor diagnostics marcopan 2026-08-15 23:47:00 +02:00
  • 7ac99b4f7e feat(cli): add version diagnostics and build-aware start marcopan 2026-08-15 23:35:55 +02:00
  • 9a8755e4c3 docs(sdd): record setup fix evidence marcopan 2026-08-15 23:16:05 +02:00
  • ea70cc95b0 fix(setup): harden verification and recovery marcopan 2026-08-15 23:15:50 +02:00
  • 47e0b2a385 feat(setup): build start and verify ThothII marcopan 2026-08-15 23:08:34 +02:00
  • 2856964654 fix(setup): validate endpoints and secret files marcopan 2026-08-15 22:53:04 +02:00
  • 6dc9e80564 feat(setup): generate local installation configuration marcopan 2026-08-15 22:45:22 +02:00
  • 2c800cc521 fix(cli): honor local installation discovery precedence marcopan 2026-08-15 22:29:55 +02:00
  • 66614fe8cf feat(cli): discover ThothII projects and installations marcopan 2026-08-15 22:24:15 +02:00
  • 4fc03574e1 fix(cli): clean failed tht installer staging marcopan 2026-08-15 22:13:24 +02:00
  • a2d5a244de fix(cli): harden tht installer replacement marcopan 2026-08-15 22:10:59 +02:00
  • 5e13396669 feat(cli): install tht as a system command marcopan 2026-08-15 22:05:42 +02:00
  • aa8a2e9278 refactor(cli): rename operator command to tht marcopan 2026-08-15 21:56:40 +02:00
  • 460caa550c docs: clarify workspace authoring guidance marcopan 2026-08-15 21:25:48 +02:00
  • a02ac52836 fix: return workspace manager to level one marcopan 2026-08-14 22:18:12 +02:00
  • c9c30563f2 fix: improve workspace manager navigation and sizing marcopan 2026-08-14 21:20:41 +02:00
  • 900faad983 fix: close Pi management final review findings marcopan 2026-08-14 20:15:21 +02:00
  • 225d13cd75 fix(frontend): preserve Pi auth asset guidance marcopan 2026-08-14 19:14:53 +02:00
  • 99012f04c2 fix(frontend): make Pi operator tabs keyboard accessible marcopan 2026-08-14 19:01:20 +02:00
  • 1df881d98d feat(frontend): simplify Pi operator workflow marcopan 2026-08-14 18:52:11 +02:00
  • dc83a55555 docs: correct Pi operator recovery guidance marcopan 2026-08-14 18:41:34 +02:00
  • a8623a2b18 docs: clarify Pi reload and update workflows marcopan 2026-08-14 18:34:04 +02:00
  • 59a04123ea fix: make thothctl doctor portable marcopan 2026-08-14 18:31:52 +02:00
  • a35f52790d feat(thothctl): expose Pi restart command marcopan 2026-08-14 18:25:23 +02:00
  • 3a1f2ede4a fix(thothctl): harden Pi restart recovery marcopan 2026-08-14 18:15:00 +02:00
  • 9414a4b4dd fix: initialize workspace secret volume for runtime marcopan 2026-08-14 18:13:52 +02:00
  • bd42aa5934 test: verify read-only workspace secret flow marcopan 2026-08-14 18:05:28 +02:00
  • ab33e0ed0a docs: describe read-only workspace runtime configuration marcopan 2026-08-14 18:01:02 +02:00
  • 422f1d47b4 feat(thothctl): add safe Pi core restart marcopan 2026-08-14 17:52:35 +02:00
  • a94df262f4 fix: preserve deterministic runtime secret leases marcopan 2026-08-14 17:47:17 +02:00
  • fd3b62ce6f refactor: stop persisting workspace state in the browser marcopan 2026-08-14 17:43:10 +02:00
  • 3978008aed feat: add read-only workspace and secret management UI marcopan 2026-08-14 17:38:24 +02:00
  • e902f758b1 refactor(thothctl): share Pi lifecycle lock marcopan 2026-08-14 17:36:33 +02:00
  • ae1215dc98 test: isolate workspace secret vaults under vitest marcopan 2026-08-14 17:32:22 +02:00
  • a227cbe755 docs: plan Pi restart operator workflow marcopan 2026-08-14 17:32:07 +02:00
  • 87cefd120c feat: configure workspace runtime secrets through API marcopan 2026-08-14 17:30:35 +02:00
  • 2114c94704 feat: derive workspace runtime secret requirements marcopan 2026-08-14 17:26:39 +02:00
  • e4999c8420 feat: add encrypted workspace secret store marcopan 2026-08-14 17:23:23 +02:00
  • 1f6a49b985 docs: design Pi restart operator workflow marcopan 2026-08-14 17:09:58 +02:00
  • 747020a330 feat: declare workspace repository in installation config marcopan 2026-08-14 16:32:58 +02:00
  • 9db4463a83 refactor: remove workspace publishing and bundles marcopan 2026-08-14 16:28:01 +02:00
  • 42e02f8b1c refactor: make workspace repository strictly read only marcopan 2026-08-14 16:20:08 +02:00
  • 3a50c447c3 docs: plan read-only workspace secret implementation marcopan 2026-08-14 16:12:26 +02:00
  • 870af3422b docs: define read-only workspace secret architecture marcopan 2026-08-14 16:09:55 +02:00