1041 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
admin	c33d88f0ea	fix(workbench): tolerate flat or fenced JSON from a small local model ... The decision-server model sometimes returns {field: value} or wraps the JSON in a markdown fence. Accept both, while still requiring every value to be an exact, unique substring of the source before it can be validated.	2026-11-02 17:18:34 +01:00
admin	f9f415f0e0	Merge pull request 'feat(workbench): decisionsserverns lokala modell som interim-AI' (#441) from feat/decision-server-ai into main	2026-11-02 16:13:08 +00:00
admin	525bf6b9a0	feat(workbench): use the decision server's local model while the AI API is on hold ... - DecisionOllamaGatewayClient calls the self-hosted Ollama on server-decision-01 (tailnet HTTP only for loopback/RFC1918/100.64-127), keeps the same local admission and reports providerKind=local. - createInf0Gateway prefers it over INF0/LiteLLM when configured. - Evidence is computed deterministically from values when a small model omits offsets; a value must occur exactly once in the source or the result goes to review. This makes a 9B local model usable without weakening verification. Tests: 4 new gateway cases + 2 evidence-derivation cases; full typecheck green.	2026-11-02 17:09:42 +01:00
admin	642abaf364	Merge pull request 'fix(credits): visa rätt pris (öre → kronor)' (#440) from fix/credits-price-display into main	2026-11-02 15:54:33 +00:00
admin	9e9de93715	fix(credits): amount_minor is öre, divide before formatSEK ... The pack list showed 9 900 kr for a 99 kr pack. formatSEK takes kronor; every other öre amount in the app is divided by 100 first.	2026-11-02 16:51:50 +01:00
admin	01e39521df	Merge pull request 'fix(admission): pilotläge utan reservation' (#439) from fix/admission-pilot-mode into main	2026-11-02 15:44:58 +00:00
admin	48dff2078e	fix(admission): zero maximumCredits means pilot mode, not a missing reservation ... The structure route ran the model with maximumCredits=1 and no reservation when credits were off, so admission returned reservation_required and the route answered 502. Admission now requires a reservation only when maximumCredits>0. Verified against the live stack: DOC0 segments -> LiteLLM/Ollama (inf0-valuation) -> evidence validation -> needs_review (no export).	2026-11-02 16:42:01 +01:00
admin	717aca6ff0	Merge pull request 'chore(workbench): logga orsaken till strukturfel' (#438) from fix/structure-error-visibility into main	2026-11-02 15:34:27 +00:00
admin	581a20acd1	chore(workbench): log the structure failure reason and source segment count ... Cloudflare replaces an origin 502 body with its own error page, so the JSON message never reached the client. Log the reason server-side (codes/messages only, never source text).	2026-11-02 16:32:55 +01:00
admin	71d742bdff	Merge pull request 'fix(doc0): anropa DOC0 som den beviljade tjänsteaktören' (#437) from fix/doc0-service-actor into main	2026-11-02 15:19:57 +00:00
admin	e93db5fc1f	fix(doc0): call DOC0 as the granted service actor ... DOC0 denies an x-actor-id that the service identity has no actor_grant for, so every upload/structure call from 0pt failed with DOC0_ACCESS_DENIED and became outcome_unknown. The journal and project authorization keep the verified end-user actor; only the DOC0 request acts as the service (DOC0_SERVICE_ACTOR_ID).	2026-11-02 16:17:29 +01:00
admin	9ed9cf0f73	Merge pull request 'fix(auth): begär resourceowner-scope så tenant-claim finns' (#435) from fix/oidc-tenant-scope into main	2026-11-02 15:08:45 +00:00
admin	7d8ed9bfba	fix(auth): request the resourceowner scope so the tenant claim is present ... Zitadel omits urn:zitadel:iam:org:id from the id_token for the default scopes. Requesting urn:zitadel:iam:user:resourceowner yields the user's org id, which deriveTenantId already understands. Also log claim keys (never values) when the tenant is still absent.	2026-11-02 16:07:22 +01:00
admin	b758908249	Merge pull request 'chore(auth): logga OIDC-felkod (utan tokens)' (#434) from fix/oidc-log-detail into main	2026-11-02 15:01:31 +00:00
admin	35937933b3	chore(auth): log the OIDC failure code (no tokens or claims)	2026-11-02 15:58:52 +01:00
admin	bc7868c789	Merge pull request 'feat(auth): Zitadel OIDC-inloggning för portalen' (#433) from feat/portal-oidc-login into main ... feat(auth): Zitadel OIDC-inloggning för portalen (#433)	2026-11-02 14:54:54 +00:00
admin	71391db132	fix(auth): fall back to the verified access token for the tenant claim ... Zitadel does not always copy urn:zitadel:iam:org:id into the id_token; the access token always carries it. Verify that token (issuer) before trusting its tenant.	2026-11-02 15:48:51 +01:00
admin	023406c9b6	feat(auth): Zitadel OIDC login for the portal ... The portal had no way to obtain a verified principal: /api/0pt/* requires a Bearer token, but the browser only had the dev-only HMAC cookie. - GET /api/auth/login: Authorization Code + PKCE against Zitadel. - GET /api/auth/callback: code exchange, id_token verification (issuer, audience, nonce) and a signed session cookie with sub + tenant. - middleware accepts the signed session as a verified principal; Bearer wins. - dev login POST is refused in production. - Sign-in link in the portal shell.	2026-11-02 15:48:02 +01:00
admin	f85b95b5b0	Merge pull request 'feat(workbench): uttryckligt pilotläge utan credit-plånbok' (#432) from feat/pilot-credits-mode into main	2026-11-02 14:34:22 +00:00
admin	d12b8fa55f	feat(workbench): explicit pilot mode without a credit wallet ... OPT_CREDITS_MODE=off skips reserve/settle and reports credits:null, so the document flow can be piloted before prices are decided. It is never a silent fallback and purchases remain disabled.	2026-11-02 15:31:52 +01:00
admin	78d81a1140	Merge pull request 'chore(portal): pensionera den döda metadata-uppladdningen' (#431) from chore/retire-dead-upload-surface into main	2026-11-02 14:16:29 +00:00
admin	f928ac1c78	chore(portal): retire the dead metadata-only upload page ... /portal/files only sent name/mime/size and always hit the 501 storage stub. Redirect it to /portal/dokument (real bytes) and remove it from both navs.	2026-11-02 15:16:10 +01:00
admin	8139470fa1	Merge pull request 'fix(portal): explicit dataklass för dokumentstrukturering' (#430) from fix/document-data-class into main ... fix(portal): explicit dataklass för dokumentstrukturering (#430)	2026-11-02 14:07:11 +00:00
admin	ed8b64e921	fix(portal): explicit, server-listed data class for document structuring ... Never assume 'low'; the UI offers only the server-approved data classes and the route refuses external models for high/restricted data.	2026-11-02 15:04:33 +01:00
admin	e4d51dbf03	Merge pull request 'feat(document-workbench): kundflöde uppladdning → struktur → export + credits' (#429) from feat/document-workbench-prod into main ... feat(document-workbench): kundflöde uppladdning → struktur → export + credits (#429)	2026-11-02 13:54:12 +00:00
admin	e3c4bc28c3	feat(workbench): live LiteLLM gateway adapter + explicit project grants ... - createInf0Gateway prefers the live OpenAI-compatible LiteLLM gateway and falls back to the native INF0 surface; admission stays local and fail-closed. - Project authorization: OpenFGA when configured, otherwise a validated server-owned OPT_PROJECT_GRANTS list (deny by default). - Tests for the gateway adapter, the factory and grants.	2026-11-02 14:50:50 +01:00
admin	b3239487b7	feat(document-workbench): wire customer upload, structuring, credits and readiness ... - POST /api/0pt/documents/upload: real multipart bytes into DOC0 through the durable attempt journal and the existing coordinator; verified tenant/actor only, project authorization fail-closed. - POST /api/0pt/documents/structure: DOC0 segments -> INF0 -> evidence-bound validation -> optional JSON/CSV export, with credit reserve/settle. - Credits: balance, server-owned price book, Stripe Checkout and idempotent webhook reconciliation via a Stripe re-read of session + payment intent. - /portal/dokument and /portal/krediter: SIAX-styled workspace. - @siax/access: universal, framework-neutral OpenFGA project relationship primitive reusable by DOC0/N0D/other products. - Readiness: real Redis PING probe instead of presence-only; queue is now a live dependency when configured. - Dockerfile: copy every workspace manifest so --frozen-lockfile works. - Format/build hygiene: .prettierignore, .worktrees ignored, valid manifest YAML.	2026-11-02 14:46:10 +01:00
admin	ac1ac73be8	Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (6bbd333a22)' (#428) from fix/prod-evidence-2026-09-29 into main	2026-11-02 12:56:58 +00:00
siax-bot	542da25571	fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-6bbd333a22	2026-11-02 13:30:19 +01:00
admin	6bbd333a22	Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (2d68ce5016)' (#426) from fix/prod-evidence-2026-09-29 into main	2026-11-02 09:45:49 +00:00
admin	2558bfd8f2	docs: date production image verification	2026-11-02 10:44:18 +01:00
siax-bot	565b6fafc2	fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-2d68ce5016	2026-11-02 09:30:18 +01:00
admin	2d68ce5016	Merge pull request 'Structure and export multiple evidence-bound document records' (#425) from codex/document-batch-evidence into main	2026-11-02 07:39:18 +00:00
admin	196c031d7a	Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#423) from fix/prod-restore-2026-09-29 into main	2026-11-02 07:37:32 +00:00
admin	be82e6e2a1	Merge branch 'main' into fix/prod-restore-2026-09-29	2026-11-02 07:37:20 +00:00
admin	0f15b562ff	Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (4f5a2ea865)' (#417) from fix/prod-evidence-2026-09-29 into main	2026-11-02 07:37:17 +00:00
admin	d56ccbb542	feat: validate and export evidenced document batches	2026-11-02 08:37:11 +01:00
admin	90b4d95738	Merge branch 'main' into fix/prod-evidence-2026-09-29	2026-11-02 07:37:05 +00:00
admin	f11ec2384a	Merge pull request 'Bind DOC0 upload receipts to the original request' (#424) from codex/doc0-upload-snapshot into main	2026-11-02 07:26:05 +00:00
admin	c1244a298c	fix: bind DOC0 upload receipts to original request	2026-11-02 08:24:18 +01:00
admin	243c45c0f2	Merge pull request 'Enforce tenant isolation for document credit storage' (#422) from codex/credit-ledger-tenant-rls into main	2026-11-02 06:41:36 +00:00
admin	0f734297ce	fix: enforce tenant isolation on credit storage	2026-11-02 07:39:35 +01:00
admin	e4bf12de7a	Merge pull request 'Bind model results to immutable source and policy snapshots' (#421) from codex/immutable-structure-evidence into main	2026-11-02 06:35:55 +00:00
admin	da5a7f403e	fix: bind model results to immutable evidence and policy	2026-11-02 07:34:47 +01:00
admin	4f69ff24af	Merge pull request 'Coordinate durable DOC0 upload attempts' (#420) from codex/document-upload-coordinator into main	2026-11-02 06:20:38 +00:00
admin	ce41d601f7	feat: coordinate journaled document upload attempts	2026-11-02 07:17:32 +01:00
admin	347b81ceb4	Merge pull request 'Distinguish unavailable sources from empty results' (#419) from codex/source-failure-honesty into main	2026-11-02 06:09:10 +00:00
admin	5137bf87a1	fix: distinguish failed sources from empty results	2026-11-02 06:58:15 +01:00
admin	f731d8312b	Merge pull request 'Stabilize DOC0 multipart upload fingerprints' (#418) from codex/doc0-stable-upload-contract into main	2026-11-02 05:54:42 +00:00
admin	47e0264571	fix: stabilize DOC0 upload fingerprint metadata	2026-11-02 06:52:50 +01:00