110 Commits

Author SHA1 Message Date
cf64161a8b docs: preserve cryptographic verification dossier in docs/VERIFY.md and expand Jules prompt library 2026-08-23 20:41:48 -07:00
31e4bd51c4 docs: add phased implementation plan and pre-configured Jules orchestrator meta-prompts 2026-08-23 20:35:14 -07:00
8a6cd6f72e docs(tasks): groom backlog and move completed extraction task to complete/ 2026-08-23 10:31:11 -07:00
google-labs-jules[bot]
4360d67064 feat: Package generic SPIRE images and simplify compose volume
This implements custom Alpine-based Smart SPIRE Server and Agent Docker
images with self-seeding configuration entrypoints. It also updates
the docker-compose configuration to utilize a single host storage volume
and a dedicated named socket volume. Setup build pipelines are expanded to
compile and push these custom SPIRE images.

Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>
2026-08-23 17:20:11 +00:00
1f03cfc85f docs(tasks): add smart SPIRE image packaging and single-volume bootstrap task 2026-08-23 09:41:35 -07:00
google-labs-jules[bot]
9988df3218 audit: verify 3-tier auth, rbac, and decouple server side effects
- Add `app` export and wrap startup logic behind `if (import.meta.main)`
- Extract `hono` middleware into `sdk/hono.ts` for clean separation
- Refactor module imports slightly to support in-memory native mocking (`db`, `valkey`, `spire_ffi`, `ratelimit`, `audit`)
- Implement comprehensive native Deno mock tests in `server/main.test.ts`
- Fix type checking across project files

Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>
2026-08-22 00:29:19 +00:00
3ae77473a9 docs(tasks): refine layered-security test harness with modular sdk and entrypoint decoupling 2026-08-21 16:47:20 -07:00
google-labs-jules[bot]
80b9d3bbe6 audit(tests): Draft comprehensive test harness architecture plan
Creates a task file outlining the automated testing strategy for the
Auth-Yes platform. The plan covers testing strategies for Tier 1 & 2
(Traefik ForwardAuth), Tier 3 (ConnectRPC with SPIFFE/mTLS), RBAC
Default-Deny, and the @auth-yes/sdk Hono middleware using Deno native
mocking capabilities, strictly avoiding external Docker dependencies.

Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>
2026-08-21 23:37:21 +00:00
474cc177ce chore: adopt dual licensing and import task history & scaffolding
- Add LICENSE-MIT and LICENSE-APACHE for dual MIT / Apache-2.0 distribution
- Update root LICENSE pointer, README.md, Deno workspace manifests, and Cargo.toml
- Add deno.lock dependency lockfile
- Format AGENTS.md system guidelines
- Import task lifecycle scaffolding and historical story specifications (extract-auth-yes, setup-ts architecture, modular workspace)
2026-08-21 15:20:36 -07:00
9b2367e2aa docs: add AGENTS.md guidelines and initial task kanban 2026-08-21 14:33:42 -07:00