809 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Jason Woltje	064b06fff4	fix(web): resolve flaky CI test failures in LinkAutocomplete and FilterBar ... - LinkAutocomplete: use refs for event handler state to prevent stale closures when effect re-attachment is delayed in slower CI environments - FilterBar: increase debounce test timeout from 100ms to 500ms to prevent premature timer firing during userEvent.type in CI Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-21 15:08:47 -06:00
Jason Woltje	bc4c1f9c70	Merge develop into main ... Consolidate all feature and fix branches into main: - feat: orchestrator observability + mosaic rails integration (#422) - fix: post-422 CI and compose env follow-up (#423) - fix: orchestrator startup provider-key requirements (#425) - fix: BetterAuth OAuth2 flow and compose wiring (#426) - fix: BetterAuth UUID ID generation (#427) - test: web vitest localStorage/file warnings (#428) - fix: auth frontend remediation + review hardening (#421) - Plus numerous Docker, deploy, and auth fixes from develop Lockfile conflict resolved by regenerating from merged package.json. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-21 14:52:43 -06:00
Jason Woltje	d66451cf48	fix(ci): suppress Next.js bundled tar/minimatch CVEs in trivy (#431) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-21 20:40:17 +00:00
Jason Woltje	c23ebca648	fix(ci): resolve pipeline #516 audit and test failures (#429) ... Co-authored-by: Jason Woltje <jason@diversecanvas.com> Co-committed-by: Jason Woltje <jason@diversecanvas.com>	2026-02-21 20:11:58 +00:00
Jason Woltje	eae55bc4a3	chore: mosaic upgrade — centralize AGENTS.md, update CLAUDE.md pointer ... CLAUDE.md replaced with thin pointer to ~/.config/mosaic/AGENTS.md. SOUL.md and AGENTS.md now managed globally by the Mosaic framework. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-19 14:08:25 -06:00
Jason Woltje	b5ac2630c1	docs(auth): record digest-based deploy fix verification	2026-02-18 23:39:06 -06:00
Jason Woltje	8424a28faa	fix(auth): use set_config for transaction-scoped RLS context	2026-02-18 23:23:15 -06:00
Jason Woltje	d2cec04cba	fix(auth): preserve raw BetterAuth cookie token for session lookup	2026-02-18 23:06:37 -06:00
Jason Woltje	9ac971e857	chore(deploy): align swarm auth env with deployed stack	2026-02-18 22:40:22 -06:00
Jason Woltje	0c2a6b14cf	fix(auth): verify BetterAuth sessions via cookie headers	2026-02-18 22:39:54 -06:00
Jason Woltje	af299abdaf	debug(auth): log session cookie source	2026-02-18 21:36:01 -06:00
Jason Woltje	fa9f173f8e	chore(web): use prod-only deps in runtime image	2026-02-18 21:13:12 -06:00
Jason Woltje	7935d86015	chore(web): avoid pnpm in runtime image to reduce CVE noise	2026-02-18 20:24:22 -06:00
Jason Woltje	f43631671f	chore(deps): override tar to 7.5.8 for trivy	2026-02-18 20:01:10 -06:00
jason.woltje	8328f9509b	Merge pull request 'test(web): silence localStorage-file warnings in vitest' (#428) from fix/web-test-warnings-2 into develop ... Reviewed-on: #428	2026-02-19 01:45:06 +00:00
Jason Woltje	f72e8c2da9	chore(deps): override minimatch to 10.2.1 for audit fix	2026-02-18 19:41:38 -06:00
Jason Woltje	1a668627a3	test(web): silence localStorage-file warnings in vitest setup	2026-02-18 19:38:23 -06:00
jason.woltje	bd3625ae1b	Merge pull request 'fix(auth): generate UUID ids for BetterAuth Prisma writes' (#427) from fix/authentik-betterauth-interop into develop ... Reviewed-on: #427	2026-02-19 01:07:32 +00:00
Jason Woltje	aeac188d40	chore(deps): override minimatch to 10.2.1 for audit fix	2026-02-18 18:53:25 -06:00
Jason Woltje	f219dd71a0	fix(auth): use UUID id generation for BetterAuth DB models	2026-02-18 18:49:16 -06:00
jason.woltje	2c3c1f67ac	Merge pull request 'fix(auth): restore BetterAuth OAuth2 flow and compose wiring' (#426) from fix/authentik-betterauth-interop into develop ... Reviewed-on: #426	2026-02-18 05:44:19 +00:00
Jason Woltje	dedc1af080	fix(auth): restore BetterAuth OIDC flow across api/web/compose	2026-02-17 23:37:49 -06:00
jason.woltje	3b16b2c743	Merge pull request 'Fix orchestrator startup provider-key requirements for Issue 424' (#425) from fix/post-422-runtime into develop ... Reviewed-on: #425	2026-02-17 23:17:39 +00:00
Jason Woltje	6fd8e85266	fix(orchestrator): make provider-aware Claude key startup requirements	2026-02-17 17:15:42 -06:00
Jason Woltje	d3474cdd74	chore(orchestrator): bootstrap issue 424	2026-02-17 17:05:09 -06:00
jason.woltje	157b702331	Merge pull request 'fix(runtime): post-422 CI and compose env follow-up' (#423) from fix/post-422-runtime into develop ... Reviewed-on: #423	2026-02-17 22:47:50 +00:00
Jason Woltje	63c6a129bd	fix(runtime): stabilize LinkAutocomplete nav test and wire required compose env	2026-02-17 16:42:34 -06:00
jason.woltje	4a4aee7b7c	Merge pull request 'feat: finalize orchestrator observability and mosaic rails integration' (#422) from feature/mosaic-stack-finalization into develop ... Reviewed-on: #422	2026-02-17 22:24:01 +00:00
Jason Woltje	9d9a01f5f7	feat(web): add orchestrator readiness badge and resilient events parsing	2026-02-17 16:20:03 -06:00
Jason Woltje	5bce7dbb05	feat(web): show latest orchestrator event in task progress widget	2026-02-17 16:12:40 -06:00
Jason Woltje	ab902250f8	feat(web-hud): seed default layout with orchestration widgets	2026-02-17 16:07:09 -06:00
Jason Woltje	d34f097a5c	feat(web): add orchestrator events widget with matrix signal visibility	2026-02-17 15:56:12 -06:00
Jason Woltje	f4ad7eba37	fix(web-hud): support hyphenated widget IDs with regression tests	2026-02-17 15:49:09 -06:00
Jason Woltje	4d089cd020	feat(orchestrator): add recent events API and monitor script	2026-02-17 15:44:43 -06:00
Jason Woltje	3258cd4f4d	feat(orchestrator): add SSE events, queue controls, and mosaic rails sync	2026-02-17 15:39:15 -06:00
jason.woltje	35dd623ab5	Merge pull request 'fix(#411): complete auth/frontend remediation and review hardening' (#421) from fix/auth-frontend-remediation into develop ... Reviewed-on: #421	2026-02-17 21:24:13 +00:00
Jason Woltje	758b2a839b	fix(web-tests): stabilize async auth and usage page assertions	2026-02-17 15:15:54 -06:00
jason.woltje	af113707d9	Merge branch 'develop' into fix/auth-frontend-remediation	2026-02-17 20:35:59 +00:00
Jason Woltje	57d0f5d2a3	fix(#411): resolve CI lint crash from ajv override ... Drop the global ajv override that forced ESLint onto an incompatible major, then move @mosaic/config lint tooling deps to devDependencies so production audit stays clean without impacting runtime deps.	2026-02-17 14:28:55 -06:00
Jason Woltje	ad428598a9	docs(#411): normalize AGENTS standards paths	2026-02-17 14:21:19 -06:00
Jason Woltje	cab8d690ab	fix(#411): complete 2026-02-17 remediation sweep ... Apply RLS context at task service boundaries, harden orchestrator/web integration and session startup behavior, re-enable targeted frontend tests, and lock vulnerable transitive dependencies so QA and security gates pass cleanly.	2026-02-17 14:19:15 -06:00
jason.woltje	0a780a5062	Merge pull request 'bootstrap mosaic-stack to Mosaic standards layer' (#420) from fix/auth-frontend-remediation into main ... Reviewed-on: #420	2026-02-17 18:51:54 +00:00
jason.woltje	a1515676db	Merge branch 'main' into fix/auth-frontend-remediation	2026-02-17 18:46:50 +00:00
Jason Woltje	254f85369b	add repo lifecycle hooks for mosaic-stack sessions	2026-02-17 12:45:39 -06:00
Jason Woltje	ddf6851bfd	bootstrap repo to mosaic standards layer	2026-02-17 12:43:14 -06:00
Jason Woltje	027fee1afa	fix: use UUID for Better Auth ID generation to match Prisma schema ... Better Auth generates nanoid-style IDs by default, but our Prisma schema uses @db.Uuid columns for all auth tables. This caused P2023 errors when Better Auth tried to insert non-UUID IDs into the verification table during OAuth sign-in. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 22:48:17 -06:00
Jason Woltje	abe57621cd	fix: add CORS env vars to Swarm/Portainer compose and log trusted origins ... The Swarm deployment uses docker-compose.swarm.portainer.yml, not the root docker-compose.yml. Add NEXT_PUBLIC_APP_URL, NEXT_PUBLIC_API_URL, and TRUSTED_ORIGINS to the API service environment. Also log trusted origins at startup for easier CORS debugging. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 22:31:29 -06:00
Jason Woltje	7c7ad59002	Remove extra docker-compose and .env.exmple files.	2026-02-16 22:08:02 -06:00
Jason Woltje	ca430d6fdf	fix: resolve Portainer deployment Redis and CORS failures ... Remove Docker Compose profiles from postgres and valkey services so they start by default without --profile flag. Add NEXT_PUBLIC_APP_URL, NEXT_PUBLIC_API_URL, and TRUSTED_ORIGINS to the API service environment so CORS works in production. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 22:05:58 -06:00
Jason Woltje	18e5f6312b	fix: reduce Kaniko disk usage in Node.js Dockerfiles ... - Combine production stage RUN commands into single layers (each RUN triggers a full Kaniko filesystem snapshot) - Remove BuildKit --mount=type=cache for pnpm store (Kaniko builds are ephemeral in CI, cache is never reused) - Remove syntax=docker/dockerfile:1 directive (no longer needed without BuildKit cache mounts) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-16 20:21:44 -06:00