dtoro fa79c1ea25 0.28.0 — operational hardening (plan D1–D5): CI deploy gate, versioned images, rate limiting, resource limits, health probes ...

D1: deploy.sh CI gate — read-only SHA via git ls-remote, Gitea commit-status
    poll, portable mkdir deploy lock (macOS, no flock), TOCTOU guard, token
    passed via curl --config - (not argv), graceful misconfig tolerance.
D2: version-tagged images — OIKOS_VERSION=v$VERSION, keep-last-3 prune derived
    from 'docker compose config --images'; VERSION read after pull.
D3: per-IP rate limiting — new internal/httpapi/ratelimit.go (x/time/rate),
    rightmost-XFF, /healthz exempt, ctx-driven sweep; disabled by default.
D4: mem_limit/cpus on all 10 compose services.
D5: staleness-aware health probes — new internal/health package wired into
    scheduler (:8093) and notifier (:8094); nomos already had :8092.

Two /review passes hardened the deploy lock, TOCTOU guard, token hygiene,
and XFF handling.

2026-08-08 21:31:16 +02:00

..

gen

feat: wire Infisical secret store into API server and MCP tools

2026-08-05 23:03:27 +02:00

activity.go

feat: global activity feed + session digest

2026-07-10 20:09:09 +02:00

actuator.go

feat(observability): restore monitoring coverage, make gaps visible, stream executions

2026-07-28 13:51:14 +02:00

agent_activity.go

refactor: split phase3.go + extract MCP tool registry (R4)

2026-07-17 22:41:40 +02:00

api_test.go

fix(httpapi): GetGraph 500s when rel_type is omitted

2026-07-17 23:25:41 +02:00

approval_rules.go

0.22.0 — full MCP agent surface: 19 new tools, async run, session reliability

2026-08-04 23:51:55 +02:00

approvals.go

0.22.0 — full MCP agent surface: 19 new tools, async run, session reliability

2026-08-04 23:51:55 +02:00

audit.go

feat(audit): read-only knowledge-graph drift report + skill

2026-07-29 13:37:16 +02:00

autonomy.go

0.22.0 — full MCP agent surface: 19 new tools, async run, session reliability

2026-08-04 23:51:55 +02:00

checks.go

0.22.0 — full MCP agent surface: 19 new tools, async run, session reliability

2026-08-04 23:51:55 +02:00

classifications.go

refactor: split phase3.go + extract MCP tool registry (R4)

2026-07-17 22:41:40 +02:00

client_lifecycle_test.go

test: e2e client lifecycle + ADRs with sequence diagrams

2026-07-08 00:56:16 +02:00

dashboard.go

fix: scheduler wrote health/metrics/events to probe entities, not targets

2026-07-09 00:26:04 +02:00

default_checks.go

v0.18.0: MCP entity-graph CRUD, lifecycle validation, curl -o /dev/null fix

2026-08-04 08:52:08 +02:00

entity_types.go

0.22.0 — full MCP agent surface: 19 new tools, async run, session reliability

2026-08-04 23:51:55 +02:00

execution_logs.go

feat(observability): restore monitoring coverage, make gaps visible, stream executions

2026-07-28 13:51:14 +02:00

executions_cursor_test.go

feat(observability): restore monitoring coverage, make gaps visible, stream executions

2026-07-28 13:51:14 +02:00

executions.go

0.22.0 — full MCP agent surface: 19 new tools, async run, session reliability

2026-08-04 23:51:55 +02:00

helpers.go

refactor: split phase3.go + extract MCP tool registry (R4)

2026-07-17 22:41:40 +02:00

impl.go

feat: wire Infisical secret store into API server and MCP tools

2026-08-05 23:03:27 +02:00

knowledge_drift.go

feat(api): add knowledge base write path, revision history, and drift tooling

2026-07-27 22:50:29 +02:00

knowledge_write.go

feat(api): add knowledge base write path, revision history, and drift tooling

2026-07-27 22:50:29 +02:00

knowledge.go

feat(api): add knowledge base write path, revision history, and drift tooling

2026-07-27 22:50:29 +02:00

learning_view.go

feat: Learning page — capability timeline + trend, built on real data

2026-07-10 21:28:19 +02:00

metrics.go

feat(web): make the entity window a triage surface, not a data dump

2026-07-29 09:24:28 +02:00

mutations_test.go

feat(web): split SPA from oikos binary, require auth on every route

2026-07-12 15:49:42 +02:00

patterns.go

0.22.0 — full MCP agent surface: 19 new tools, async run, session reliability

2026-08-04 23:51:55 +02:00

pct_create_test.go

feat: decompose pct_create into atomic create + agent-driven install; add scoped destructive window

2026-07-10 14:45:09 +02:00

phase3_test.go

feat(web): split SPA from oikos binary, require auth on every route

2026-07-12 15:49:42 +02:00

problem.go

phase 2 (part 4): SSE stream via io.Pipe, OIDC JWT auth middleware

2026-07-07 09:40:11 +02:00

ratelimit_test.go

0.28.0 — operational hardening (plan D1–D5): CI deploy gate, versioned images, rate limiting, resource limits, health probes

2026-08-08 21:31:16 +02:00

ratelimit.go

0.28.0 — operational hardening (plan D1–D5): CI deploy gate, versioned images, rate limiting, resource limits, health probes

2026-08-08 21:31:16 +02:00

relationships.go

0.22.0 — full MCP agent surface: 19 new tools, async run, session reliability

2026-08-04 23:51:55 +02:00

risk_classes.go

refactor: split phase3.go + extract MCP tool registry (R4)

2026-07-17 22:41:40 +02:00

server.go

0.28.0 — operational hardening (plan D1–D5): CI deploy gate, versioned images, rate limiting, resource limits, health probes

2026-08-08 21:31:16 +02:00

skills.go

0.22.0 — full MCP agent surface: 19 new tools, async run, session reliability

2026-08-04 23:51:55 +02:00

sse_test.go

feat(web): split SPA from oikos binary, require auth on every route

2026-07-12 15:49:42 +02:00

sse.go

fix(agent): panic recovery on every background goroutine (B1+B2)

2026-07-11 20:05:19 +02:00