e7f01940b3
fix(spire_ffi): silence noisy cert parse error on invalid certs and add SPIFFE cert unit test
2026-08-23 10:58:40 -07:00
3e0eb7d9d7
chore: clean up deno.json tasks and unify subcommands under setup CLI
2026-08-23 10:47:36 -07:00
434ac32336
feat(infra): integrate release pipeline natively into setup.ts with rolling restart and new install guides
2026-08-23 10:45:46 -07:00
26739f4b63
feat(infra): add release script, secrets verification, and dump subcommands to setup CLI
2026-08-23 10:41:03 -07:00
8a6cd6f72e
docs(tasks): groom backlog and move completed extraction task to complete/
2026-08-23 10:31:11 -07:00
6d0b811637
chore(infra): ignore generated compose and env files
2026-08-23 10:28:46 -07:00
c8c3f26bbe
feat(infra): track reference compose.yml and compose.spire.yml
2026-08-23 10:26:22 -07:00
29bc8e1a58
docs: clarify custom project images vs upstream open-source infrastructure in COMPOSE_CONVENTIONS.md
2026-08-23 10:23:46 -07:00
036a735ee0
Merge pull request #3 from mrteye/feat-spire-smart-image-packaging-6613301778153046391
...
feat: Implement SPIRE Smart Image Packaging & Single Volume Bootstrap
Added spire/Dockerfile.server and spire/Dockerfile.agent wrapping upstream ghcr.io/spiffe images.
Added self-seeding entrypoint scripts handling template provisioning and stale socket cleanup.
Added generic, commented HCL templates for server.conf and agent.conf.
Simplified infra/setup.ts to output a cleaner compose.spire.yml with one spire-data host bind and one spire-socket named volume, eliminating spire-init.
Updated CLI build commands to include SPIRE images.
Task marked as complete.
2026-08-23 10:20:50 -07:00
ccf3c9a101
docs: clarify registry tier classification, mirrors, and Dockerfile portability in COMPOSE_CONVENTIONS.md
2026-08-23 10:20:47 -07:00
google-labs-jules[bot]
4360d67064
feat: Package generic SPIRE images and simplify compose volume
...
This implements custom Alpine-based Smart SPIRE Server and Agent Docker
images with self-seeding configuration entrypoints. It also updates
the docker-compose configuration to utilize a single host storage volume
and a dedicated named socket volume. Setup build pipelines are expanded to
compile and push these custom SPIRE images.
Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>
2026-08-23 17:20:11 +00:00
c07f2d1135
docs: add root COMPOSE_CONVENTIONS.md documenting compose, storage, and smart image standards
2026-08-23 09:53:38 -07:00
1f03cfc85f
docs(tasks): add smart SPIRE image packaging and single-volume bootstrap task
2026-08-23 09:41:35 -07:00
3210eb2528
feat(spire): auto-provision commented server.conf and agent.conf on boot via spire-init
2026-08-23 09:12:45 -07:00
edf66037ca
fix(infra): use /data convention and separate /volume1/docker/spire project root
2026-08-23 09:07:01 -07:00
daaa4389c1
fix(infra): use SPIRE_DATA_PATH bind mounts and clean GHCR_REG without defaults
2026-08-23 09:02:55 -07:00
ccf9f3a6b9
fix(spire): replace bind mounts with named volumes and provide default server and agent configs
2026-08-22 11:21:05 -07:00
e179ecd419
feat(setup): configure GHCR_REG defaulting to ghcr.atyg.org for SPIRE compose
2026-08-22 11:10:22 -07:00
40da6ecbe0
fix(infra): update Dockerfile, setup.ts, and bootstrap admin invite for standalone repo
2026-08-22 10:18:47 -07:00
623e78a7b1
fix(tests): guard valkey.disconnect and format files
2026-08-21 17:31:36 -07:00
ace1d2596b
Merge pull request #2 from mrteye/jules-verify-3tier-auth-and-rbac-11441419966783139758
...
Verify 3Tier Auth and RBAC
2026-08-21 17:29:31 -07:00
google-labs-jules[bot]
9988df3218
audit: verify 3-tier auth, rbac, and decouple server side effects
...
- Add `app` export and wrap startup logic behind `if (import.meta.main)`
- Extract `hono` middleware into `sdk/hono.ts` for clean separation
- Refactor module imports slightly to support in-memory native mocking (`db`, `valkey`, `spire_ffi`, `ratelimit`, `audit`)
- Implement comprehensive native Deno mock tests in `server/main.test.ts`
- Fix type checking across project files
Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>
2026-08-22 00:29:19 +00:00
f3bcbddfc8
docs: preserve complete architectural analysis, audit reports, and dependency layer
2026-08-21 16:51:07 -07:00
3ae77473a9
docs(tasks): refine layered-security test harness with modular sdk and entrypoint decoupling
2026-08-21 16:47:20 -07:00
a57e95714e
docs(agents): document dual-remote mirroring for SDK distribution
2026-08-21 16:40:31 -07:00
a3abe942da
Merge pull request #1 from mrteye/audit-test-harness-plan-7600793403055236123
...
Draft comprehensive test harness architecture plan
2026-08-21 16:37:36 -07:00
google-labs-jules[bot]
80b9d3bbe6
audit(tests): Draft comprehensive test harness architecture plan
...
Creates a task file outlining the automated testing strategy for the
Auth-Yes platform. The plan covers testing strategies for Tier 1 & 2
(Traefik ForwardAuth), Tier 3 (ConnectRPC with SPIFFE/mTLS), RBAC
Default-Deny, and the @auth-yes/sdk Hono middleware using Deno native
mocking capabilities, strictly avoiding external Docker dependencies.
Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>
2026-08-21 23:37:21 +00:00
a0defe4d5a
Add passive Jules VM setup script.
2026-08-21 15:46:54 -07:00
474cc177ce
chore: adopt dual licensing and import task history & scaffolding
...
- Add LICENSE-MIT and LICENSE-APACHE for dual MIT / Apache-2.0 distribution
- Update root LICENSE pointer, README.md, Deno workspace manifests, and Cargo.toml
- Add deno.lock dependency lockfile
- Format AGENTS.md system guidelines
- Import task lifecycle scaffolding and historical story specifications (extract-auth-yes, setup-ts architecture, modular workspace)
2026-08-21 15:20:36 -07:00
9b2367e2aa
docs: add AGENTS.md guidelines and initial task kanban
2026-08-21 14:33:42 -07:00
ac89e4c8d0
feat: initial commit for auth-yes identity hub
2026-08-21 14:27:36 -07:00
deb6d9309e
Initial commit
2026-08-21 14:24:50 -07:00
