1134 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
SIAX Agent	6bbbcf75d4	test(lint): typa idempotency-store i stället för any (blockerar quality-gaten) ... tests/siax-access/idempotency.test.ts hade fyra @typescript-eslint/no-explicit-any vilket fick quality-jobbet att exita 1 (133 testfiler gröna men lint röd) och därmed blockerade alla PR:er. Använder exporterade IdempotencyStore<unknown, {x:number}>; eslint rent, 7/7 tester gröna.	2026-11-07 18:15:04 +01:00
admin	58dca92d9f	Merge pull request 'fix(sql): 023 grants för canonical-tabellerna till app-rollen' (#499) from fix/canonical-grants-20261107 into main	2026-11-07 17:12:03 +00:00
admin	b269a05538	Merge branch 'main' into fix/canonical-grants-20261107	2026-11-07 17:07:44 +00:00
SIAX Agent	4dbabd14ac	fix(sql): 023 grants for canonical tables to app-role 0pt_app ... 022 skapade tabellerna som 0pt_edge; appen kör som 0pt_app och fick 'permission denied'. Övriga 0pt-tabeller har explicita grants (inga default ACL), så kanoniska tabeller behöver samma. Idempotent och rollskyddad; RLS (FORCE) gäller fortfarande för 0pt_app.	2026-11-07 17:29:03 +01:00
admin	b2499ace79	Merge pull request #497: idempotent 022 canonical facts ... Retry-safe RLS policies (DROP POLICY IF EXISTS) + header fix.	2026-11-07 16:28:21 +00:00
SIAX Agent	0213459f33	fix(sql): 022 canonical facts blir idempotent (DROP POLICY IF EXISTS) ... CREATE POLICY saknade skydd mot omkörning, så en retry efter partiell körning skulle fastna på 'policy already exists'. Tabellerna använder redan CREATE TABLE/INDEX IF NOT EXISTS; policynivån görs nu likvärdig. Rubriken rättad från 020 till 022. Verifierat på scratch-databas: två körningar i rad OK, RLS ENABLE+FORCE, 3 policies, 11 index, cross-tenant INSERT nekad och tenant B ser 0 rader.	2026-11-07 17:24:56 +01:00
admin	c91d2aaca6	Merge pull request #494: 0pt internal-service tenant isolation ... Server-configured INTERNAL_SERVICE_TENANTS; forged verified headers stripped; bridge-run guarded; single-tenant rule until workload-identity binding exists.	2026-11-07 15:55:11 +00:00
SIAX Agent	1a581fde29	fix(auth): en (1) tenant per intern serviceprincipal — multi-tenant nekas ... Den delade X-Internal-Token identifierar EN tjänsteprocess, inte flera oberoende principaler. En allowlist med flera tenants skulle låta varje tokeninnehavare välja mellan dem — samma klientstyrda auktoritet som guarden ska ta bort. Multi-tenant-tjänsteåtkomst kräver verifierad workload-identity-binding (CL0UD-delegation); tills den finns failar en ambig konfiguration stängt (401) och ingen identitet forwardas. Tester: multi-tenant nekas utan side effect, en tenant fungerar, 75/75 i auth+ cross-tenant-sviterna, tsc ren.	2026-11-07 16:39:48 +01:00
admin	bfdc5d1326	Merge pull request 'ci: add blocking component conformance gate' (#496) from ci/design-gate-20261107 into main	2026-11-07 15:32:45 +00:00
admin	831781f19d	ci: add blocking component conformance gate	2026-11-07 15:21:31 +00:00
SIAX Agent	b97ad0b2f4	fix(auth): bind internal-service tenant authority to server config ... The first revision of this fix copied a CLIENT header (X-0pt-Internal-Tenant) or a single INTERNAL_TENANT_ID into x-0pt-verified-tenant. That is not an authorization source: any holder of the shared internal token could still name any tenant, leaving the original cross-tenant write reachable through a different header. - INTERNAL_SERVICE_TENANTS (server env) is now the only tenant authority for the X-Internal-Token principal; empty => no authority (fail closed, 403). - Middleware strips inbound x-0pt-verified-{tenant,sub} and the service scope header on every path, including the dev escape hatch. - x-0pt-verified-service-tenants carries the allowlist; the tenant guard checks membership and denies anything outside it. - POST /api/0pt/quality/bridge-run now runs the same tenant guard as canonical/facts (it auto-provisions tenant-scoped rules). - 16 new regression tests; auth + cross-tenant + canonical + bridge suites 87/87; tsc --noEmit clean.	2026-11-07 15:32:51 +01:00
admin	019cc23fa2	feat(capability): descriptor-completion wave 1 (0pt) — verified openapi operationIds	2026-11-07 15:23:41 +01:00
admin	849e7ae802	fix(auth): internal-token requests får verifierad tenant (P0 tenant-isolering) ... Bevisat: POST /api/0pt/canonical/facts med X-Internal-Token och tenant_id 999999999999999999 returnerade 201 och skrev data i annan tenant. Orsak: internal-token-grenen returnerade next() utan x-0pt-verified-tenant, så assertTenantMatchesVerified blev no-op. Fix: INTERNAL_TENANT_ID (eller X-0pt-Internal-Tenant) sätts som verifierad tenant, vilket gör guard-enforcement identisk med verifierad Bearer. Varnar om variabeln saknas.	2026-11-07 14:55:59 +01:00
admin	04aeaa754b	Merge pull request 'ci(sonar): hosten är sonar.siax.dev, inte .io' (#492) from fix/sonar-host-url into main	2026-11-06 11:33:13 +00:00
admin	98039d3d68	ci(sonar): self-hosted SonarQube lives at sonar.siax.dev, not .io ... 2 of 3 recent main runs failed the sonar gate with 'Failed to query server version: Call to URL https://sonar.siax.io/... failed: null' -- DNS for sonar.siax.io does not resolve (000) while sonar.siax.dev answers 200 UP (SonarQube 26.10). Internal tool + admin console = siax.dev per the 2026-11-03 domain policy; the .io hostname was never registered.	2026-11-06 12:17:53 +01:00
admin	8c91b90ae0	Merge pull request 'fix(portal): återanvänd kanonisk @siax/ui FileDropzone' (#490) from feat/ui-reuse-canonical-dropzone into main	2026-11-06 10:19:28 +00:00
admin	4f92cdd102	fix(portal): reuse canonic @siax/ui FileDropzone instead of a local ad-hoc one ... 0pt rendered its own dashed drop surface (role=button + hidden input). @siax/ui already ships FileDropzone — the native labelled input with drag-over/drop forwarding, aria wiring and no upload logic — so replace the local variant (REUSE, CLASSIFICATION per UI standard). Removes the local inputRef.	2026-11-06 11:04:03 +01:00
admin	9ca16b7f6c	Merge pull request 'feat(@siax/access): universell idempotenskontrakt' (#489) from feat/universal-idempotency-tuple into main	2026-11-06 10:01:59 +00:00
admin	a424cf1581	fix(@siax/access): restore relationships.ts that disappeared when the package split into two files ... b323948 shipped the OpenFGA relationship client inside src/index.ts; when src/idempotency.ts was added, index.ts was rewritten as the diff of both, losing every relationship export and breaking the existing tests. Move the original module to src/relationships.ts and let index.ts re-export both. Restores 7 pre-existing relationship tests (both suites 14 passed).	2026-11-06 10:49:11 +01:00
admin	f77a4fec96	feat(@siax/access): universal idempotency contract ... operationIdentity binds tenant/project/actor + every result-affecting input into a stable fingerprint; a changed payload under the same key is a CONFLICT, never a replay of someone else's receipt. runIdempotentOperation encodes the 0pt-proven order (durable claim -> downstream dispatch -> save receipt -> replay) and the commit boundaries. Structural IdempotencyStore lets each product ship its own Postgres adapter while sharing the contract. Derived from 0pt's durable upload attempts; DOC0/N0D can adopt the same shape instead of re-implementing it.	2026-11-06 10:47:59 +01:00
admin	58f81a10b7	Merge pull request 'feat(idempotens): operationsscope på uppladdningsidentitet' (#488) from feat/idempotency-operation-scope into main	2026-11-06 09:44:37 +00:00
admin	6ca6e8e0a6	feat(idempotency): operation-scope binding for upload identity ... Per the reap-use mandate: 'identical file + different instruction' is a DIFFERENT operation. bindOperationToUploadIdentity() folds instruction, field contract, model, data class and export format into the DOC0-compatible upload filename so the durable fingerprint covers every result-affecting input. The bytes' SHA-256 stays stable; DOC0 still receives the caller's x-idempotency-key (its own idempotency, its own contract). Classification: STANDARDIZE/0pt-owned (upstream DOC0 untouched).	2026-11-06 10:29:59 +01:00
admin	cb0b951c42	Merge pull request 'chore(ui): document domain/legacy UI exceptions' (#486) from feat/component-allowlist-20261105 into main	2026-11-05 23:36:47 +00:00
admin	415396f25d	chore(ui): document domain/legacy UI exceptions	2026-11-06 00:36:16 +01:00
admin	c46ebbf810	feat(0pt): canonical-fact machine route + renumber migration to 022 (#484)	2026-11-05 19:16:13 +00:00
admin	03cdb7815e	feat(0pt): canonical structured observations — entities, facts, relations (#480)	2026-11-05 17:53:34 +00:00
SIAX Agent	116304849b	evidence(prod): bind source-bundle artifactId to real deployed image digest	2026-11-04 12:31:55 +01:00
SIAX Agent	c7966eb586	evidence(prod): bind source-bundle artifactId to real deployed image digest	2026-11-04 12:14:30 +01:00
SIAX Agent	d5aea59482	evidence(prod): bind source-bundle artifactId to real deployed image digest	2026-11-04 12:08:18 +01:00
SIAX Agent	ce6be94e50	evidence(prod): bind source-bundle artifactId to real deployed image digest	2026-11-04 12:04:41 +01:00
SIAX Agent	4c20e5457f	evidence(prod): real artifact-digest, running-digest and deploy-log for 13e156ec7e	2026-11-04 11:53:31 +01:00
siax-estate-bot	b29e4848b6	chore(runtime-evidence): sbom — estate-kampanj issue #76 (app 0pt)	2026-11-04 10:32:04 +01:00
admin	f53bcf8f50	Merge pull request #477 ... Merged via automated design-conformance rollout after required checks and approval.	2026-11-04 01:45:28 +00:00
SIAX Agent	76e3c0dc2d	chore(design): add design-conformance manifest	2026-11-04 02:45:24 +01:00
SIAX Provenance	bcdfc536b7	chore(provenance): record the 0pt deployment source bundle ... Coolify application 0pt finished deployment of commit 13e156ec7e at 2026-11-04T01:26:48Z. This is the source-to-production evidence PROV-SOURCE-BUNDLE requires.	2026-11-04 02:34:08 +01:00
admin	77ddc0654d	Merge pull request 'feat(auth): adopt @siax/auth-zitadel canonical claim normalizer' (#475) from feat/auth-zitadel-20261104 into main	2026-11-04 01:23:52 +00:00
admin	063206d8b0	feat(auth): adopt @siax/auth-zitadel canonical claim normalizer	2026-11-04 02:23:21 +01:00
admin	024f4fa8c3	Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#473) from fix/prod-restore-2026-09-29 into main	2026-11-03 19:31:38 +00:00
admin	19df2b6a20	Merge branch 'main' into fix/prod-restore-2026-09-29	2026-11-03 19:31:27 +00:00
admin	13e156ec7e	Merge pull request 'feat(ui): upgrade to DES1GN @siax/ui 0.16.13' (#472) from feat/des1gn-ui-upgrade into main	2026-11-03 19:08:07 +00:00
admin	57616d84b7	feat(ui): upgrade to DES1GN @siax/ui 0.16.13	2026-11-03 19:57:16 +01:00
admin	b547046963	feat(acquisition): X-800 consumer contract (#470)	2026-11-03 16:46:24 +00:00
admin	ef84832cdb	Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#469) from fix/prod-restore-2026-09-29 into main	2026-11-03 15:28:31 +00:00
admin	10b989351a	Merge branch 'main' into fix/prod-restore-2026-09-29	2026-11-03 15:28:19 +00:00
admin	6265734a34	Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (8b5e23aa9b)' (#467) from fix/prod-evidence-2026-09-29 into main	2026-11-03 15:28:16 +00:00
admin	f135ab2ac0	Merge branch 'main' into fix/prod-evidence-2026-09-29	2026-11-03 15:28:03 +00:00
admin	cc72e5d434	Merge pull request 'feat(analytics): add 0pt analytics HTTP surface + AUD0 ingestion' (#468) from feat/analytics-api into main	2026-11-03 13:12:52 +00:00
admin	766db9e9bb	fix(analytics): bump PyJWT to 2.14.0 (CVE-2026-102268)	2026-11-03 14:02:39 +01:00
admin	5f5d31f86d	feat(analytics): add 0pt analytics HTTP surface + AUD0 ingestion	2026-11-03 14:00:34 +01:00
siax-bot	4d88157cc1	fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-8b5e23aa9b	2026-11-03 13:30:22 +01:00