645 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
tegwick	82212165f9	fix(ci): trigger image builds on every path the Dockerfile copies ... The build filtered on api/** while the Dockerfile COPYs nine more paths, so changes to mcp_server/, flows/, policies/, prompts/, scripts/, task_flow_engine/, templates/, alembic.ini and — most seriously — migrations/ merged to main without ever producing a new image. A schema migration would not have shipped. Refs CUST-WP-0067-T08 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-24 23:00:57 +02:00
tegwick	6d04544368	feat(mcp): deploy the MCP layer on central instead of tunnelling to a workstation ... No MCP server ran on central, so remote agents reached dev-hub only through a reverse tunnel back to the workstation — routing a request for a service on their own machine out to another host and back. Adds a gated mcp Deployment and ClusterIP Service running the same image with `-m mcp_server.server`, API_BASE defaulted to the in-cluster API Service, and tcpSocket probes. No Ingress: the MCP layer proxies an unauthenticated API and must not be reachable from outside the cluster. Two fixes were needed before the manifests could work: - server.py hardcoded host="127.0.0.1". A Service routes to the pod IP, so a loopback bind is unreachable. Now MCP_HOST, still defaulting to loopback so local runs do not silently expose an unauthenticated proxy. - The container runs `-m mcp_server.server`, not the file path, so /app lands on sys.path rather than /app/mcp_server. mcp.enabled stays false in the deploy values: the running image predates MCP_HOST, so enabling it before the tag is bumped would ship a pod that never becomes reachable. Refs CUST-WP-0067-T08 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-24 22:54:24 +02:00
tegwick	4e68176492	fix(cli): correct task status keys in statehub status ... cmd_status read tasks['in_progress'] and tasks['blocked']; the task vocabulary is wait|todo|progress|done|cancel and the totals block never carried those two keys, so the command always raised KeyError. Also accept either the workplans or legacy workstreams totals key, and print the resolved API base so the operator can see which hub instance answered. Refs CUST-WP-0067-T01 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006	2026-08-24 22:10:15 +02:00
repo-manager	9bbe9e38ae	chore(registrar): assign State Hub identifiers ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118	2026-08-23 14:49:49 +02:00
tegwick	a05a64bf0e	fix(workplans): qualify State Hub daily identifier ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118	2026-08-23 14:48:16 +02:00
tegwick	284e28112d	fix(project-rules): qualify ad-hoc record identifiers ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118	2026-08-23 14:45:26 +02:00
tegwick	fae2816199	fix(consistency): preserve repository domain in briefs ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118	2026-08-23 13:57:22 +02:00
custodian-sync	b91b8705d1	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-23: - update .custodian-brief.md for state-hub Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118	2026-08-23 13:56:53 +02:00
tegwick	57c3e08103	fix(classification): harden registration updates ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118	2026-08-23 11:30:36 +02:00
custodian-sync	fb79d0d68d	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-23: - update .custodian-brief.md for state-hub Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b22-9638-76d2-bbff-b7ea1770b118	2026-08-23 11:29:52 +02:00
tegwick	b0e1af24f9	fix(retirement): close projection and launch contract gaps ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b7c-1c49-76a0-955a-49e7b3ddfc0d	2026-08-23 00:52:18 +02:00
custodian-sync	c43266f626	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-23: - update .custodian-brief.md for state-hub Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02b7c-1c49-76a0-955a-49e7b3ddfc0d	2026-08-23 00:47:18 +02:00
tegwick	2d114be84d	docs(review): record final full-suite pass ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 21:08:20 +02:00
tegwick	c62e511de8	chore(index): refresh work record status ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 20:59:51 +02:00
custodian-sync	0007ca232b	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-22: - update .custodian-brief.md for state-hub Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 20:59:33 +02:00
tegwick	598f6418e7	feat(review): add multi-owner contracts and receipts ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 20:57:51 +02:00
tegwick	52aefe39e4	ops: record promoted State Hub image ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834	2026-08-22 20:14:32 +02:00
tegwick	76e6eda086	feat: project Nexus SBOM state into summaries ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834	2026-08-22 20:12:16 +02:00
tegwick	e1e259cf87	ops: switch State Hub SBOM writes to Nexus ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834	2026-08-22 19:57:08 +02:00
tegwick	b75234a533	feat: route SBOM writes to Nexus behind flag ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834	2026-08-22 19:55:08 +02:00
tegwick	d01ae3971d	ops: switch State Hub SBOM reads to Nexus ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834	2026-08-22 19:21:39 +02:00
tegwick	98518091ae	fix: preserve legacy SBOM source values ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834	2026-08-22 19:08:10 +02:00
tegwick	1e5222d458	ops: preserve State Hub rolling headroom ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834	2026-08-22 19:04:38 +02:00
tegwick	5fc4c56215	feat: add reversible SBOM Nexus read facade ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834	2026-08-22 18:39:21 +02:00
repo-manager	9e7e91300f	chore(registrar): assign State Hub identifiers ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 18:16:06 +02:00
custodian-sync	ccff2385b8	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-22: - update .custodian-brief.md for state-hub Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 18:16:05 +02:00
tegwick	ceab9ce279	docs(review): add multi-owner contract workplan ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 18:02:36 +02:00
tegwick	70a708ff11	fix(consistency): preserve checker call compatibility ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 12:41:46 +02:00
tegwick	e2544b218d	docs(retirement): record empty projection rebuild proof ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 12:31:41 +02:00
tegwick	059de9358e	feat(consistency): rebuild authoritative intake IDs ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 12:23:43 +02:00
tegwick	03c7924b7f	feat(consistency): bootstrap empty repo projections ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 12:07:08 +02:00
tegwick	52a7d6bb73	docs(pilot): record registrar projection cutover ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 09:57:59 +02:00
custodian-sync	6b439ddd06	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-22: - update .custodian-brief.md for state-hub Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 09:44:54 +02:00
tegwick	697dd49390	feat(consistency): rebuild deterministic projection IDs ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 09:43:55 +02:00
tegwick	cb1b028fd1	feat(identifiers): add reversible projection migration ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-22 00:27:48 +02:00
tegwick	ce52e9d1e2	docs(retirement): own identifier projection migration ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-21 23:59:43 +02:00
custodian-sync	7e82dd4594	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-21: - update .custodian-brief.md for state-hub Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-21 23:59:29 +02:00
tegwick	81861d816b	feat(retirement): route SBOM scans through repo-manager ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-21 23:15:34 +02:00
tegwick	b9d9ffed5f	feat(consistency): consume repo-manager conformance ... Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a023c0-a0a3-7c03-b395-5a0d2757214d	2026-08-21 22:34:24 +02:00
repo-manager	ec780c05a2	chore(registrar): assign State Hub identifiers	2026-08-21 21:53:39 +02:00
tegwick	31fe49fa84	chore(consistency): refresh work record index	2026-08-21 21:52:31 +02:00
custodian-sync	853a2259bb	chore(consistency): sync task status from DB [auto] ... Updated by fix-consistency on 2026-08-21: - update .custodian-brief.md for state-hub	2026-08-21 21:52:09 +02:00
tegwick	3f1f03076f	chore(deps): refresh hub-core lock metadata	2026-08-21 21:50:44 +02:00
tegwick	a311ac3d06	docs(evidence): refresh weekly legacy meter review	2026-08-21 21:50:44 +02:00
tegwick	433e104909	fix: route registrar skips through repo-manager	2026-08-21 21:41:15 +02:00
tegwick	30b17adde1	docs: route registrar skips through repo-manager	2026-08-21 21:38:29 +02:00
tegwick	de58a0cf90	feat(STATE-WP-0079): add repo-manager receiving adapters	2026-08-21 17:15:28 +02:00
tegwick	87f1296714	docs: STATE-WP-0081 cluster self-sufficiency and registrar fix ... The registrar is broken by workstation coupling rather than beside it. Inside the pod /home/tegwick mounts read-only despite the chart setting no readOnly and securityContext being empty, so the sweep dies before it can mint. That is why 12 sync requests queued and the newest custodian-sync commits are July. Eight tasks: restore the write path, give the pod its own clone volume and service identity, run non-root, correct 72 repo records still pointing at /home/worsch with gitea remote_urls, serve the dashboard from the cluster, write the boundary rule down, and close out the registrar. End state: workstation coding agents push to forgejo, cluster infrastructure reads from forgejo, neither reads the other's disk. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-21 16:13:38 +02:00
tegwick	2841bf371c	ops: disable stale-lineage production sweep	2026-08-21 13:14:11 +02:00
tegwick	9dc1affa21	docs(dashboard): use canonical work-record ids in the ralph-workplan example ... The example taught 'id: WP-0001' / 'id: T-01'. The ralph-workplan spec accepts that shape for standalone plans, but this doc ships in the State Hub dashboard, where the hub-integrated PREFIX-WP-NNNN-TNN form applies -- the spec's own state-hub example uses it. Switching the example to EXAMPLE-WP-0001 / -T01 / -T02 teaches the right shape for this audience and clears the two C-31 warnings, which fired because the ids matched no kind in the canon work-record type registry. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-21 08:26:36 +02:00