admin
06bbb7e7f9
merge: CL0UD probe + a11y/HAR evidence + worker scale toggle (PR #7 )
CI (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 47s
2026-09-16 23:24:13 +02:00
admin
f6ff1396d8
feat(api): CL0UD capability probe + a11y/HAR evidence + worker scale toggle
...
CI (SIAX Cloud) / contracts (pull_request) Successful in 17s
CI (SIAX Cloud) / contracts (push) Successful in 17s
CI (SIAX Cloud) / quality (pull_request) Successful in 54s
CI (SIAX Cloud) / quality (push) Successful in 56s
CI (SIAX Cloud) / security (pull_request) Successful in 1m7s
CI (SIAX Cloud) / security (push) Successful in 1m5s
- cl0ud client: contract-first probe of documented GET /capabilities/:id,
status connected/denied/unavailable/disabled surfaced in /health;
CL0UD_REQUIRED=true = fail-closed 503; full policy-decisions gated on
CL0UD B-4/ADR-0031 (deliberately not simulated)
- capture depth: accessibility tree + condensed HAR as evidence kinds
(null = explicit evidence gap)
- CAPTURE_WORKER=on/off for separate-scale deployments
- 34/34 tests
2026-09-16 23:21:54 +02:00
admin
5c62f32068
merge: docs — scan worker + AUD0 wire (PR #6 )
CI (SIAX Cloud) / security (push) Successful in 12s
CI (SIAX Cloud) / contracts (push) Successful in 22s
CI (SIAX Cloud) / quality (push) Successful in 52s
2026-09-16 23:11:53 +02:00
admin
b8d1aca740
docs(deploy): scan worker + AUD0 wire + env contract
CI (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 54s
CI (SIAX Cloud) / contracts (pull_request) Successful in 41s
CI (SIAX Cloud) / security (pull_request) Successful in 42s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m13s
2026-09-16 23:07:47 +02:00
admin
80cb845e83
merge: fix capture page.evaluate as plain string (PR #5 )
CI (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / contracts (push) Successful in 20s
CI (SIAX Cloud) / quality (push) Successful in 1m13s
2026-09-16 23:04:15 +02:00
admin
1e74c69228
fix(capture): run page.evaluate as plain string (tsx/esbuild __name helpers break in browser context)
CI (SIAX Cloud) / contracts (pull_request) Successful in 17s
CI (SIAX Cloud) / security (pull_request) Successful in 25s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / security (push) Successful in 18s
CI (SIAX Cloud) / quality (pull_request) Successful in 50s
CI (SIAX Cloud) / quality (push) Successful in 53s
2026-09-16 23:01:26 +02:00
admin
a4cdee7f64
merge: deterministic scan worker + AUD0 wire + tenant binding (PR #4 )
CI (SIAX Cloud) / security (push) Successful in 33s
CI (SIAX Cloud) / contracts (push) Successful in 37s
CI (SIAX Cloud) / quality (push) Successful in 58s
2026-09-16 22:56:25 +02:00
admin
12f6a65b80
feat(api): deterministic scan worker + AUD0 wire + tenant binding
...
CI (SIAX Cloud) / security (pull_request) Successful in 14s
CI (SIAX Cloud) / security (push) Successful in 14s
CI (SIAX Cloud) / contracts (pull_request) Successful in 15s
CI (SIAX Cloud) / contracts (push) Successful in 17s
CI (SIAX Cloud) / quality (push) Successful in 1m9s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m10s
- scan worker: atomic claim (FOR UPDATE SKIP LOCKED), Playwright-core + system
chromium capture → typed EvidenceRecords (runtime-html/dom/computed-style/
stylesheet/asset/network-request/screenshot), confidence=measured
- AUD0 emitter (fire-and-forget, advisory): c0py.registry_created/.scan_created/
.scan_completed/.scan_failed, tenant_id = Zitadel resourceowner (org)
- tenant binding: resourceowner claim from introspection (deny-by-default 403),
migration 002 tenant_id on registries+scans, all queries tenant+owner scoped
- evidence gaps stay explicit (screenshot miss → no screenshot record)
- 30/30 tests, canonical validator OK
2026-09-16 22:53:55 +02:00
admin
7fb6043e34
merge: docs — migration procedure + endpoint contract (PR #3 )
CI (SIAX Cloud) / security (push) Successful in 14s
CI (SIAX Cloud) / contracts (push) Successful in 19s
CI (SIAX Cloud) / quality (push) Successful in 52s
2026-09-16 22:41:20 +02:00
admin
3b98b9f5c8
docs(deploy): migration procedure + live endpoint contract
CI (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 52s
CI (SIAX Cloud) / security (pull_request) Successful in 11s
CI (SIAX Cloud) / contracts (pull_request) Successful in 15s
CI (SIAX Cloud) / quality (pull_request) Successful in 48s
2026-09-16 22:38:25 +02:00
admin
26df793884
merge: Postgres persistence for registries + scans (PR #2 )
CI (SIAX Cloud) / security (push) Successful in 14s
CI (SIAX Cloud) / contracts (push) Successful in 19s
CI (SIAX Cloud) / quality (push) Successful in 53s
2026-09-16 22:35:16 +02:00
admin
9482a97795
feat(api): Postgres persistence for registries + scans (owner-scoped, fail-closed)
...
CI (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / contracts (pull_request) Successful in 17s
CI (SIAX Cloud) / security (pull_request) Successful in 13s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 52s
CI (SIAX Cloud) / quality (pull_request) Successful in 1m13s
- schema migration 001 (registries, scans; owner_sub = introspected subject)
- pg pool + services; scan ownership enforced in SQL (INSERT ... SELECT WHERE owner_sub)
- real handlers: 201/400/404/500, owner-scoped GET/POST, listScans registryId filter
- graceful shutdown closes pool; 7 new persistence tests (21/21)
2026-09-16 22:32:48 +02:00
admin
72000b79ae
merge: docs(apex) — c0py.siax.io live via DNS-only sidestep + introspection env contract (PR #1 )
CI (SIAX Cloud) / security (push) Successful in 12s
CI (SIAX Cloud) / contracts (push) Successful in 15s
CI (SIAX Cloud) / quality (push) Successful in 51s
2026-09-16 22:20:51 +02:00
admin
949e4ec816
docs(deploy): apex sidestep live (DNS-only + web domain), introspection env contract
CI (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / contracts (push) Successful in 18s
CI (SIAX Cloud) / contracts (pull_request) Successful in 19s
CI (SIAX Cloud) / security (pull_request) Successful in 43s
CI (SIAX Cloud) / quality (push) Successful in 54s
CI (SIAX Cloud) / quality (pull_request) Successful in 54s
2026-09-16 22:14:43 +02:00
admin
495050752a
feat(api): real Zitadel token introspection (fail-closed) + expected-audience enforcement
...
CI (SIAX Cloud) / security (push) Successful in 12s
CI (SIAX Cloud) / contracts (push) Successful in 30s
CI (SIAX Cloud) / quality (push) Successful in 1m33s
- preHandler: Bearer tokens are introspected against Zitadel (RFC 7662)
- any introspection failure (unreachable, non-200, bad JSON, inactive) = 401
- asserted aud must include ZITADEL_EXPECTED_AUDIENCE (project id); absent aud accepted per RFC 7662
- config: ZITADEL_INTROSPECTION_CLIENT_ID/SECRET + ZITADEL_EXPECTED_AUDIENCE (optional; Bearer-presence fallback logs warn in prod)
- 13 new tests (introspection fail-closed matrix + preHandler flow)
2026-09-16 22:06:46 +02:00
admin
dac79054de
docs: CI jobs + manual-deploy doctrine in AGENTS.md
CI (SIAX Cloud) / security (push) Successful in 31s
CI (SIAX Cloud) / contracts (push) Successful in 25s
CI (SIAX Cloud) / quality (push) Successful in 49s
2026-09-16 21:57:44 +02:00
admin
e66f101996
merge: canonical web product reconstruction engine (GitHub PR #1 )
...
CI (SIAX Cloud) / contracts (push) Successful in 14s
CI (SIAX Cloud) / security (push) Successful in 33s
CI (SIAX Cloud) / quality (push) Successful in 49s
Contracts-first architecture: typed evidence/reconstruction/fidelity
contracts, upstream provenance registry, deterministic fidelity release
gate, canonical architecture CI validator, MASTERPLAN/STANDARDS/
AUTOMATIONS/UPSTREAM-CAPABILITY-MATRIX docs. Rebased over prod cutover
state; broken Coolify auto-deploy removed (manual deploy per DEPLOY.md).
2026-09-16 21:54:30 +02:00
admin
29ee39311d
chore(ci): remove broken Coolify auto-deploy (git-buildpack broken for monorepo, manual deploy per DEPLOY.md)
2026-09-16 21:54:22 +02:00
admin
e26398c496
test(core): add fidelity gate coverage
2026-09-16 21:52:45 +02:00
admin
cfa9a05ad8
feat(core): export reconstruction and fidelity contracts
2026-09-16 21:52:45 +02:00
admin
52f5146940
feat(core): add deterministic fidelity release gate
2026-09-16 21:52:45 +02:00
admin
762b778ee2
feat(core): add reconstruction pipeline contracts
2026-09-16 21:52:45 +02:00
admin
ac797d3e4d
ci: enforce canonical architecture contracts
2026-09-16 21:52:45 +02:00
admin
cfac4cc913
ci: wire canonical architecture validation
2026-09-16 21:52:45 +02:00
admin
3687e87c75
ci: add canonical architecture policy validator
2026-09-16 21:52:45 +02:00
admin
35f1a3ca66
test(core): validate upstream provenance policy
2026-09-16 21:52:45 +02:00
admin
be942285b1
docs: align agent rules with canonical reconstruction architecture
2026-09-16 21:52:45 +02:00
admin
053b524fa4
docs: redefine c0py as canonical reconstruction engine
2026-09-16 21:51:03 +02:00
admin
56e4b696f4
feat(core): export provenance validation
2026-09-16 21:51:03 +02:00
admin
b885a160bd
feat(core): add upstream provenance registry validation
2026-09-16 21:51:03 +02:00
admin
1e3abaf824
feat(types): add canonical evidence and reconstruction contracts
2026-09-16 21:51:03 +02:00
admin
4a88f74627
docs: define c0py autonomous execution workflows
2026-09-16 21:51:03 +02:00
admin
982c7b19fc
docs: define c0py engineering and evidence standards
2026-09-16 21:51:03 +02:00
admin
8e44be0b69
docs: add upstream capability adoption matrix
2026-09-16 21:51:03 +02:00
admin
b7430f17cb
docs: establish canonical c0py reconstruction masterplan
2026-09-16 21:51:03 +02:00
admin
5522b3bd3b
docs: production deployment facts, DNS/TLS pattern, Coolify gotchas
CI (SIAX Cloud) / contracts (push) Successful in 15s
CI (SIAX Cloud) / security (push) Successful in 31s
CI (SIAX Cloud) / quality (push) Successful in 49s
Deploy to Coolify / deploy (push) Failing after 1s
2026-09-16 21:47:07 +02:00
admin
0840daf5a8
fix: move web Dockerfile to repo root (Coolify build context = dockerfile dir)
Deploy to Coolify / deploy (push) Failing after 1s
CI (SIAX Cloud) / security (push) Successful in 15s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 50s
2026-09-16 19:08:27 +02:00
admin
16f4a5aaea
feat: add web Dockerfile for Next.js Coolify deploy
Deploy to Coolify / deploy (push) Failing after 5s
CI (SIAX Cloud) / security (push) Successful in 14s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 52s
2026-09-16 18:49:30 +02:00
admin
bc36298b28
docs: update AGENTS.md with deployment findings
CI (SIAX Cloud) / quality (push) Successful in 1m11s
Deploy to Coolify / deploy (push) Failing after 2s
CI (SIAX Cloud) / security (push) Successful in 12s
CI (SIAX Cloud) / contracts (push) Successful in 31s
2026-09-16 15:25:16 +02:00
admin
db3509ab4f
fix: add fail-closed preHandler auth check
Deploy to Coolify / deploy (push) Failing after 2s
CI (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 49s
2026-09-16 15:13:13 +02:00
admin
64ff90517c
fix: tsx symlink after pnpm install for workspace devDeps
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 50s
Deploy to Coolify / deploy (push) Failing after 1s
CI (SIAX Cloud) / security (push) Successful in 26s
2026-09-16 14:58:55 +02:00
admin
8b04583c4f
fix: run pnpm install in runtime stage for proper workspace symlinks
Deploy to Coolify / deploy (push) Failing after 2s
CI (SIAX Cloud) / security (push) Successful in 12s
CI (SIAX Cloud) / contracts (push) Successful in 16s
CI (SIAX Cloud) / quality (push) Successful in 1m15s
2026-09-16 14:55:34 +02:00
admin
779b96391b
fix: copy api node_modules to runtime for workspace deps
Deploy to Coolify / deploy (push) Failing after 3s
CI (SIAX Cloud) / contracts (push) Successful in 14s
CI (SIAX Cloud) / security (push) Successful in 27s
CI (SIAX Cloud) / quality (push) Successful in 50s
2026-09-16 14:52:05 +02:00
admin
d473275a15
fix: dynamically link tsx from pnpm store for node --import resolution
Deploy to Coolify / deploy (push) Failing after 2s
CI (SIAX Cloud) / security (push) Successful in 48s
CI (SIAX Cloud) / quality (push) Successful in 53s
CI (SIAX Cloud) / contracts (push) Successful in 48s
2026-09-16 14:45:25 +02:00
admin
36a665c8e1
fix: symlink tsx in runtime stage to resolve module not found
Deploy to Coolify / deploy (push) Failing after 1s
CI (SIAX Cloud) / contracts (push) Successful in 12s
CI (SIAX Cloud) / security (push) Successful in 37s
CI (SIAX Cloud) / quality (push) Successful in 1m48s
2026-09-16 14:42:11 +02:00
admin
c59fe4cfd4
fix: install tsx in runtime stage for node --import support
CI (SIAX Cloud) / security (push) Successful in 13s
CI (SIAX Cloud) / contracts (push) Successful in 15s
Deploy to Coolify / deploy (push) Failing after 2s
CI (SIAX Cloud) / quality (push) Successful in 51s
2026-09-16 14:37:13 +02:00
admin
f909ab2a8d
docs: add Digital Twin Specification for website analysis and reproduction
...
Deploy to Coolify / deploy (push) Failing after 1s
CI (SIAX Cloud) / security (push) Successful in 16s
CI (SIAX Cloud) / contracts (push) Successful in 24s
CI (SIAX Cloud) / quality (push) Successful in 52s
Adds comprehensive specification document at docs/spec/DIGITAL-TWIN-SPEC.md covering:
- Taxonomy of all website components (design, layout, UI components, pages,
functionality, data, infrastructure, i18n)
- Ontology: entity types, attributes, relationships
- Topology: DOM, CSS spatial, visual hierarchy, responsive breakpoints
- Media capture: images, video, icons, fonts, documents
- Data collection: text, structured data, URLs, metadata
- Functional specification: behavior, state machines, API contracts
- Design system discovery and analysis
- AI agent architecture (4 phases: Discovery, Analysis, Synthesis, Verification)
- Quality criteria (completeness, accuracy, machine-readability)
- Output format and file structure (c0py-output/ schema)
- Agent contracts, parallelization, error handling
Also updates AGENTS.md and README.md to reference the spec.
Covers 14 major sections with detailed subsections for each component
category found on any modern website or product.
Co-commit with c0py repo on Gitea.
2026-09-16 13:42:52 +02:00
admin
e04cf8fbd3
c0py: initial scaffolding for website registry tool
...
Repo: sax3l/c0py (created on Gitea, code pushed)
Initial scaffolding includes:
- apps/api: Fastify API server (typecheck, build, test pass)
- apps/web: Next.js UI (build passes)
- packages/c0py-core: Crawler, registry assembler, analyzer (6 tests pass)
- packages/config: Zod-validated env loader
- packages/types: Shared TypeScript types
CI/CD: .gitea/workflows/ci.yml + deploy.yml
Dockerfile for Coolify deployment
mise.toml (toolchain contract)
lefthook.yml, renovate.json
docs/architecture/OVERVIEW.md, docs/PLATFORM.md
Platform setup required (see docs/PLATFORM.md):
1. Coolify app provision (c0py on server5/6)
2. Postgres database (dedicated, not shared)
3. Infisical secrets (DATABASE_URL, CL0UD, ZITADEL, AUD0, ST0RE, INF0, N0D)
4. DNS c0py.siax.io A-record
5. Zitadel OIDC project (Simon-decision)
Status: dev (repo live, code pushable, platform infra pending)
2026-09-16 13:33:45 +02:00
admin
e6cc719f37
c0py: initial scaffolding for website registry tool
CI (SIAX Cloud) / security (push) Successful in 12s
CI (SIAX Cloud) / contracts (push) Failing after 12s
CI (SIAX Cloud) / quality (push) Failing after 8s
Deploy to Coolify / deploy (push) Failing after 2s
2026-09-16 13:15:21 +02:00
admin