admin/c0py
3
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity
57 Commits 1 Branch 0 Tags
main
Commit Graph
3 Commits
Author SHA1 Message Date
admin 12f6a65b80 feat(api): deterministic scan worker + AUD0 wire + tenant binding
CI (SIAX Cloud) / security (pull_request) Successful in 14s
Details
CI (SIAX Cloud) / security (push) Successful in 14s
Details
CI (SIAX Cloud) / contracts (pull_request) Successful in 15s
Details
CI (SIAX Cloud) / contracts (push) Successful in 17s
Details
CI (SIAX Cloud) / quality (push) Successful in 1m9s
Details
CI (SIAX Cloud) / quality (pull_request) Successful in 1m10s
Details 
- scan worker: atomic claim (FOR UPDATE SKIP LOCKED), Playwright-core + system
  chromium capture → typed EvidenceRecords (runtime-html/dom/computed-style/
  stylesheet/asset/network-request/screenshot), confidence=measured
- AUD0 emitter (fire-and-forget, advisory): c0py.registry_created/.scan_created/
  .scan_completed/.scan_failed, tenant_id = Zitadel resourceowner (org)
- tenant binding: resourceowner claim from introspection (deny-by-default 403),
  migration 002 tenant_id on registries+scans, all queries tenant+owner scoped
- evidence gaps stay explicit (screenshot miss → no screenshot record)
- 30/30 tests, canonical validator OK
 2026-09-16 22:53:55 +02:00
admin 9482a97795 feat(api): Postgres persistence for registries + scans (owner-scoped, fail-closed)
CI (SIAX Cloud) / security (push) Successful in 13s
Details
CI (SIAX Cloud) / contracts (pull_request) Successful in 17s
Details
CI (SIAX Cloud) / security (pull_request) Successful in 13s
Details
CI (SIAX Cloud) / contracts (push) Successful in 16s
Details
CI (SIAX Cloud) / quality (push) Successful in 52s
Details
CI (SIAX Cloud) / quality (pull_request) Successful in 1m13s
Details 
- schema migration 001 (registries, scans; owner_sub = introspected subject)
- pg pool + services; scan ownership enforced in SQL (INSERT ... SELECT WHERE owner_sub)
- real handlers: 201/400/404/500, owner-scoped GET/POST, listScans registryId filter
- graceful shutdown closes pool; 7 new persistence tests (21/21)
 2026-09-16 22:32:48 +02:00
admin e04cf8fbd3 c0py: initial scaffolding for website registry tool 
Repo: sax3l/c0py (created on Gitea, code pushed)

Initial scaffolding includes:
- apps/api: Fastify API server (typecheck, build, test pass)
- apps/web: Next.js UI (build passes)
- packages/c0py-core: Crawler, registry assembler, analyzer (6 tests pass)
- packages/config: Zod-validated env loader
- packages/types: Shared TypeScript types

CI/CD: .gitea/workflows/ci.yml + deploy.yml
Dockerfile for Coolify deployment
mise.toml (toolchain contract)
lefthook.yml, renovate.json
docs/architecture/OVERVIEW.md, docs/PLATFORM.md

Platform setup required (see docs/PLATFORM.md):
1. Coolify app provision (c0py on server5/6)
2. Postgres database (dedicated, not shared)
3. Infisical secrets (DATABASE_URL, CL0UD, ZITADEL, AUD0, ST0RE, INF0, N0D)
4. DNS c0py.siax.io A-record
5. Zitadel OIDC project (Simon-decision)

Status: dev (repo live, code pushable, platform infra pending)
 2026-09-16 13:33:45 +02:00