ccf3c9a101
docs: clarify registry tier classification, mirrors, and Dockerfile portability in COMPOSE_CONVENTIONS.md
2026-08-23 10:20:47 -07:00
c07f2d1135
docs: add root COMPOSE_CONVENTIONS.md documenting compose, storage, and smart image standards
2026-08-23 09:53:38 -07:00
1f03cfc85f
docs(tasks): add smart SPIRE image packaging and single-volume bootstrap task
2026-08-23 09:41:35 -07:00
3210eb2528
feat(spire): auto-provision commented server.conf and agent.conf on boot via spire-init
2026-08-23 09:12:45 -07:00
edf66037ca
fix(infra): use /data convention and separate /volume1/docker/spire project root
2026-08-23 09:07:01 -07:00
daaa4389c1
fix(infra): use SPIRE_DATA_PATH bind mounts and clean GHCR_REG without defaults
2026-08-23 09:02:55 -07:00
ccf9f3a6b9
fix(spire): replace bind mounts with named volumes and provide default server and agent configs
2026-08-22 11:21:05 -07:00
e179ecd419
feat(setup): configure GHCR_REG defaulting to ghcr.atyg.org for SPIRE compose
2026-08-22 11:10:22 -07:00
40da6ecbe0
fix(infra): update Dockerfile, setup.ts, and bootstrap admin invite for standalone repo
2026-08-22 10:18:47 -07:00
623e78a7b1
fix(tests): guard valkey.disconnect and format files
2026-08-21 17:31:36 -07:00
ace1d2596b
Merge pull request #2 from mrteye/jules-verify-3tier-auth-and-rbac-11441419966783139758
...
Verify 3Tier Auth and RBAC
2026-08-21 17:29:31 -07:00
google-labs-jules[bot]
9988df3218
audit: verify 3-tier auth, rbac, and decouple server side effects
...
- Add `app` export and wrap startup logic behind `if (import.meta.main)`
- Extract `hono` middleware into `sdk/hono.ts` for clean separation
- Refactor module imports slightly to support in-memory native mocking (`db`, `valkey`, `spire_ffi`, `ratelimit`, `audit`)
- Implement comprehensive native Deno mock tests in `server/main.test.ts`
- Fix type checking across project files
Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>
2026-08-22 00:29:19 +00:00
f3bcbddfc8
docs: preserve complete architectural analysis, audit reports, and dependency layer
2026-08-21 16:51:07 -07:00
3ae77473a9
docs(tasks): refine layered-security test harness with modular sdk and entrypoint decoupling
2026-08-21 16:47:20 -07:00
a57e95714e
docs(agents): document dual-remote mirroring for SDK distribution
2026-08-21 16:40:31 -07:00
a3abe942da
Merge pull request #1 from mrteye/audit-test-harness-plan-7600793403055236123
...
Draft comprehensive test harness architecture plan
2026-08-21 16:37:36 -07:00
google-labs-jules[bot]
80b9d3bbe6
audit(tests): Draft comprehensive test harness architecture plan
...
Creates a task file outlining the automated testing strategy for the
Auth-Yes platform. The plan covers testing strategies for Tier 1 & 2
(Traefik ForwardAuth), Tier 3 (ConnectRPC with SPIFFE/mTLS), RBAC
Default-Deny, and the @auth-yes/sdk Hono middleware using Deno native
mocking capabilities, strictly avoiding external Docker dependencies.
Co-authored-by: mrteye <1945243+mrteye@users.noreply.github.com>
2026-08-21 23:37:21 +00:00
a0defe4d5a
Add passive Jules VM setup script.
2026-08-21 15:46:54 -07:00
474cc177ce
chore: adopt dual licensing and import task history & scaffolding
...
- Add LICENSE-MIT and LICENSE-APACHE for dual MIT / Apache-2.0 distribution
- Update root LICENSE pointer, README.md, Deno workspace manifests, and Cargo.toml
- Add deno.lock dependency lockfile
- Format AGENTS.md system guidelines
- Import task lifecycle scaffolding and historical story specifications (extract-auth-yes, setup-ts architecture, modular workspace)
2026-08-21 15:20:36 -07:00
9b2367e2aa
docs: add AGENTS.md guidelines and initial task kanban
2026-08-21 14:33:42 -07:00
ac89e4c8d0
feat: initial commit for auth-yes identity hub
2026-08-21 14:27:36 -07:00
deb6d9309e
Initial commit
2026-08-21 14:24:50 -07:00
