oikos

dtoro/oikos

Fork 0

Commit Graph

Author	SHA1	Message	Date
dtoro	5b22f2367b	test: e2e client lifecycle + ADRs with sequence diagrams Some checks failed ci / build-test (push) Has been cancelled Details ci / docker-build (push) Has been cancelled Details - client_lifecycle_test.go: full end-to-end integration test planned → provisioning (enroll) → active → migrating → active → deprecated → failed. Validates age keypair generation, attrs, context/secrets endpoints, invalid transition blocking, compute entity provisioning with relationship edges and status tracking. Also tests enrollment rejection for invalid states and duplicate slug rejection for provisioning. - adr/0011-client-lifecycle-flows.md: workstation self-enrollment, compute entity provisioning, deprecation/destruction flows with Mermaid sequence diagrams. Full lifecycle state diagram. Transition check enforcement documentation. - adr/0012-hermes-oikos-interactions.md: Hermes ↔ Oikos interaction flow through OODA loop phases. Thin client bootstrap. Internal component interactions (scheduler, actuator, notifier). Complete 30-tool ownership matrix. - Fix: migration 012 FK reference (executions.id → executions.entity_id) - Fix: provision handler null attributes JSONB - Fix: provisioning steps use entity_id for execution FK All 3 integration tests pass, go vet clean.	2026-07-08 00:56:16 +02:00
dtoro	44e1e421e1	feat: client enrollment API and compute entity provisioning Phase 1 implementation from the client-lifecycle plan. - Migration 012: provisioning_steps table, context_version, context_files, enrolled_at column, slug+type index for machine entities - API endpoints (openapi.yaml + generated code): POST /clients/enroll — age key issuance, Infisical identity, state transition GET /clients/{slug}/context — agent file delta polling (replaces git pull) GET /clients/{slug}/secrets — scoped secret listing POST /entities/provision — compute entity creation with constraint validation GET /entities/{slug}/provision/status — step-by-step provisioning progress - Handlers in impl.go: enrollment with state validation and age key generation, provisioning with execution tracking and relationship creation, context endpoint with since-based delta queries - Server struct extended with secretsBackend interface for key storage - All tests pass, build clean	2026-07-08 00:24:32 +02:00

Author

SHA1

Message

Date

dtoro

5b22f2367b

test: e2e client lifecycle + ADRs with sequence diagrams

ci / build-test (push) Has been cancelled

Details

ci / docker-build (push) Has been cancelled

Details

- client_lifecycle_test.go: full end-to-end integration test
  planned → provisioning (enroll) → active → migrating → active →
  deprecated → failed. Validates age keypair generation, attrs,
  context/secrets endpoints, invalid transition blocking, compute
  entity provisioning with relationship edges and status tracking.
  Also tests enrollment rejection for invalid states and duplicate
  slug rejection for provisioning.

- adr/0011-client-lifecycle-flows.md: workstation self-enrollment,
  compute entity provisioning, deprecation/destruction flows with
  Mermaid sequence diagrams. Full lifecycle state diagram. Transition
  check enforcement documentation.

- adr/0012-hermes-oikos-interactions.md: Hermes ↔ Oikos interaction
  flow through OODA loop phases. Thin client bootstrap. Internal
  component interactions (scheduler, actuator, notifier). Complete
  30-tool ownership matrix.

- Fix: migration 012 FK reference (executions.id → executions.entity_id)
- Fix: provision handler null attributes JSONB
- Fix: provisioning steps use entity_id for execution FK

All 3 integration tests pass, go vet clean.

2026-07-08 00:56:16 +02:00

dtoro

44e1e421e1

feat: client enrollment API and compute entity provisioning

Phase 1 implementation from the client-lifecycle plan.

- Migration 012: provisioning_steps table, context_version, context_files,
  enrolled_at column, slug+type index for machine entities
- API endpoints (openapi.yaml + generated code):
  POST /clients/enroll — age key issuance, Infisical identity, state transition
  GET /clients/{slug}/context — agent file delta polling (replaces git pull)
  GET /clients/{slug}/secrets — scoped secret listing
  POST /entities/provision — compute entity creation with constraint validation
  GET /entities/{slug}/provision/status — step-by-step provisioning progress
- Handlers in impl.go: enrollment with state validation and age key generation,
  provisioning with execution tracking and relationship creation,
  context endpoint with since-based delta queries
- Server struct extended with secretsBackend interface for key storage
- All tests pass, build clean

2026-07-08 00:24:32 +02:00

2 Commits