This website requires JavaScript.
cf42a32800
fix(auth): eliminate competing deleteCookie on login verify and ensure proper session persistence
Tyler Gillispie
2026-08-24 15:32:26 -07:00
3c57dfbc78
fix(merge): clean up merge conflicts in auth-session.ts and main.test.ts
Tyler Gillispie
2026-08-24 15:15:15 -07:00
09ed9de178
Merge pull request #23 from mrteye/feat-tier-1-ingress-control-217564989939913720
Tyler Gillispie
2026-08-24 15:13:41 -07:00
7230a4d7ea
Merge branch 'main' into feat-tier-1-ingress-control-217564989939913720
Tyler Gillispie
2026-08-24 15:13:20 -07:00
2ac6252bff
feat(auth-api): implement Tier 1 Traefik Ingress Control & Bypass Matrix
google-labs-jules[bot]
2026-08-24 22:08:43 +00:00
544fdf0569
Merge pull request #22 from mrteye/feat-sso-launchpad-logout-2100-7262934389430052995
Tyler Gillispie
2026-08-24 14:58:52 -07:00
e52f931edb
feat(ui): implement App Launchpad and secure logout redirect
google-labs-jules[bot]
2026-08-24 21:58:36 +00:00
e9b9088fec
docs: add Use Case 12 for Hybrid Cloud Edge, Cloudflare Tunnel & Split-Horizon audit requirements
Tyler Gillispie
2026-08-24 14:46:44 -07:00
b4b05c37ff
feat(sdk): add ForwardAuth header passthrough hydration in createAuthMiddleware
Tyler Gillispie
2026-08-24 14:17:10 -07:00
cd1d866077
docs(tasks): standardize and upgrade Task 4.1 and Task 4.2 to 100% rubric compliance
Tyler Gillispie
2026-08-24 14:15:38 -07:00
443df1c2ce
chore(tasks): remove JULES_PROMPTS.md to eliminate agent prompt confusion
Tyler Gillispie
2026-08-24 14:13:35 -07:00
226d04228b
Merge pull request #21 from mrteye/feat/auth-api-traefik-ingress-control-task-6742583984777370201
Tyler Gillispie
2026-08-24 14:13:08 -07:00
9ace888b4b
Merge pull request #20 from mrteye/feat/sso-launchpad-task-file-4077230937799430847
Tyler Gillispie
2026-08-24 14:12:51 -07:00
5f31989137
feat(tasks): create Traefik Universal Edge Ingress task file
google-labs-jules[bot]
2026-08-24 21:12:30 +00:00
b0dd2d098c
docs: draft phase 4 sso launchpad and logout spec
google-labs-jules[bot]
2026-08-24 21:10:17 +00:00
4fce954c86
docs(tasks): add Prompt 4.2 for Jules with SSO launchpad, logout return-path, and additive security audit
Tyler Gillispie
2026-08-24 13:56:12 -07:00
2e30c5ad3e
docs(tasks): enrich Prompt 4.1 for Jules with comprehensive Tier 1 bypass and allowlist architecture
Tyler Gillispie
2026-08-24 13:39:56 -07:00
7420401147
fix(cookie): dynamically calculate parent wildcard domain (.atyg.org) to prevent host-scoping redirect loop
Tyler Gillispie
2026-08-24 13:11:17 -07:00
ce29459f78
fix(ui): add Cache-Control no-cache middleware and version tags to auth-client.js to prevent stale browser caching
Tyler Gillispie
2026-08-24 13:07:23 -07:00
b867a166e9
docs: add ForwardAuth Redirection & Deep-Link Protocol Specification (RFC-SPEC-2026-FA-01)
Tyler Gillispie
2026-08-24 12:53:16 -07:00
96bcf69179
feat(forwardauth): add browser 302 redirect with safe return URL and open-redirect protection
Tyler Gillispie
2026-08-24 12:52:23 -07:00
590a13e694
fix(infra): add ForwardAuth middleware labels to auth-api service in compose generator
Tyler Gillispie
2026-08-24 12:40:31 -07:00
4cf7cb2d18
docs(tasks): add Phase 4 Prompt 4.1 for Traefik Tier 1 Global Ingress Discovery
Tyler Gillispie
2026-08-24 12:27:46 -07:00
885d26e595
docs: add Use Case 11 (Guest Trial Sandboxes & In-Flight Upgrade) and quick links in README.md
Tyler Gillispie
2026-08-24 11:34:44 -07:00
8ee0f305a8
docs(tasks): mark all Phase 3 stories as COMPLETE in JULES_PROMPTS.md
Tyler Gillispie
2026-08-24 08:57:01 -07:00
574c4d66aa
fix(phase3): restore deno.json workspace/tasks and fix recovery/audit typing
Tyler Gillispie
2026-08-24 08:56:47 -07:00
a0a05da03c
Merge pull request #19 from mrteye/feat-sss-recovery-matrix-4307830478024114673
Tyler Gillispie
2026-08-24 00:50:26 -07:00
f63d0c9afe
feat: implement 2-of-3 SSS recovery matrix using Wasm/Rust
google-labs-jules[bot]
2026-08-24 07:49:34 +00:00
4ed20be4a2
Merge pull request #18 from mrteye/feat-webauthn-prf-8747559092824518798
Tyler Gillispie
2026-08-24 00:46:51 -07:00
e1555f14fc
feat: implement WebAuthn PRF extension for client-side HKDF key derivation
google-labs-jules[bot]
2026-08-24 07:46:22 +00:00
1674c44a32
Merge pull request #17 from mrteye/jul-feat-audit-merkle-ledger-11366767708511265093
Tyler Gillispie
2026-08-23 23:25:53 -07:00
97336a95be
feat(server): add RFC 6962 Merkle Tree Audit Ledger
google-labs-jules[bot]
2026-08-24 06:19:23 +00:00
b34475b4fb
Merge pull request #14 from mrteye/feat-webauthn-prf-task-9777533714682100655
Tyler Gillispie
2026-08-23 22:52:43 -07:00
792ed141d2
Merge pull request #15 from mrteye/feat-recovery-sss-matrix-task-4186155517714950179
Tyler Gillispie
2026-08-23 22:52:36 -07:00
efe2523307
Merge pull request #16 from mrteye/feat-audit-merkle-ledger-task-5295491276490979898
Tyler Gillispie
2026-08-23 22:52:29 -07:00
7ae19b1033
feat(planning): add task file for RFC 6962 Merkle Tree Ledger
google-labs-jules[bot]
2026-08-24 05:52:16 +00:00
4b6001a646
Add task file for 2-of-3 SSS Wasm recovery matrix
google-labs-jules[bot]
2026-08-24 05:52:11 +00:00
dcecbd3edd
feat(docs): add task for WebAuthn PRF extension
google-labs-jules[bot]
2026-08-24 05:52:03 +00:00
4e7d6c8add
docs(tasks): mark Prompt 2.1 as complete in JULES_PROMPTS.md
Tyler Gillispie
2026-08-23 22:37:21 -07:00
95ef596407
Merge pull request #13 from mrteye/feat-http-sigs-7822098764133354425
Tyler Gillispie
2026-08-23 22:36:13 -07:00
182c789e05
feat(auth): implement RFC 9421 HTTP Message Signatures
google-labs-jules[bot]
2026-08-24 05:36:01 +00:00
de2dcc85f7
docs(tasks): mark Prompt 2.2 as complete in JULES_PROMPTS.md
Tyler Gillispie
2026-08-23 21:56:57 -07:00
0ebbcf38c7
docs: format GHOST_COCKPIT_SPEC.md
Tyler Gillispie
2026-08-23 21:56:46 -07:00
fdcf9ded05
Merge pull request #12 from mrteye/feat-ghost-cockpit-protocol-3135824224285676341
Tyler Gillispie
2026-08-23 21:54:11 -07:00
69b5edca8c
docs: author practical playbook and 10 high-ROI use cases in docs/USE_CASES_AND_EFFORT.md
Tyler Gillispie
2026-08-23 21:54:00 -07:00
b919c66cbc
feat(sdk): Implement Ghost Cockpit Protocol WebSocket guard helper
google-labs-jules[bot]
2026-08-24 04:53:51 +00:00
e15e5a8038
Merge pull request #11 from mrteye/http-sigs-rfc9421-task-8607209458702274605
Tyler Gillispie
2026-08-23 21:41:21 -07:00
66e11afdc3
docs(tasks): format JULES_PROMPTS.md markdown tables
Tyler Gillispie
2026-08-23 21:41:08 -07:00
a0989a3bed
Add task for RFC 9421 HTTP Message Signatures verification
google-labs-jules[bot]
2026-08-24 04:41:05 +00:00
e09496cf83
Merge pull request #10 from mrteye/task-ghost-cockpit-protocol-1413997499442523563
Tyler Gillispie
2026-08-23 21:40:25 -07:00
d100495ead
feat: draft ghost cockpit protocol task
google-labs-jules[bot]
2026-08-24 04:39:44 +00:00
731fa825f1
docs(tasks): update execution roadmap and completed statuses in JULES_PROMPTS.md
Tyler Gillispie
2026-08-23 21:28:15 -07:00
5db9108ecd
test(server): clean up valkey stubbing in server/main.test.ts
Tyler Gillispie
2026-08-23 21:24:21 -07:00
8390dcac3d
Merge pull request #9 from mrteye/feat-ingress-grant-vector-injection-17171143789522307350
Tyler Gillispie
2026-08-23 21:23:16 -07:00
8ff5090ffa
feat: Implement Ingress Grant Vector Injection for ForwardAuth
google-labs-jules[bot]
2026-08-24 04:23:04 +00:00
57570a0976
Merge pull request #8 from mrteye/feat-spire-ffi-argon2id-7776325516155569495
Tyler Gillispie
2026-08-23 21:20:43 -07:00
66317d2f03
Merge pull request #7 from mrteye/jul-feat-sdk-realtime-invalidation-bus-9783554891086298346
Tyler Gillispie
2026-08-23 21:20:33 -07:00
9da28a6416
feat(spire-ffi): implement native Argon2id derivation
google-labs-jules[bot]
2026-08-24 04:19:48 +00:00
3d66535889
feat: implement zero-dependency real-time event bus in AuthSdk
google-labs-jules[bot]
2026-08-24 04:19:40 +00:00
a938b8c305
docs(tasks): add Task Critique & Plan Review Template to tasks/META_PROMPT.md
Tyler Gillispie
2026-08-23 20:59:48 -07:00
11786de7e4
Merge pull request #6 from mrteye/feat-spire-ffi-native-argon2-task-4427490188496264791
Tyler Gillispie
2026-08-23 20:57:41 -07:00
4b72d491bf
Merge pull request #4 from mrteye/feat-sdk-realtime-invalidation-bus-task-2670591133327528715
Tyler Gillispie
2026-08-23 20:57:34 -07:00
a3e157608e
Merge pull request #5 from mrteye/feat-ingress-grant-injection-task-592912514149159076
Tyler Gillispie
2026-08-23 20:57:28 -07:00
2b3b6f9636
feat(spire-ffi): create planning task for native Argon2id FFI
google-labs-jules[bot]
2026-08-24 03:57:17 +00:00
38310f4ead
docs: draft task file for Ingress Grant Injection in forward-auth
google-labs-jules[bot]
2026-08-24 03:56:04 +00:00
1f94f27b57
docs(tasks): draft realtime invalidation bus task for SDK
google-labs-jules[bot]
2026-08-24 03:55:00 +00:00
2753b6b757
docs(tasks): draft realtime invalidation bus task for SDK
google-labs-jules[bot]
2026-08-24 03:54:55 +00:00
cf64161a8b
docs: preserve cryptographic verification dossier in docs/VERIFY.md and expand Jules prompt library
Tyler Gillispie
2026-08-23 20:41:48 -07:00
31e4bd51c4
docs: add phased implementation plan and pre-configured Jules orchestrator meta-prompts
Tyler Gillispie
2026-08-23 20:35:14 -07:00
2684e30a23
docs: add comprehensive deep research and architecture brief for cross-ecosystem investigation
Tyler Gillispie
2026-08-23 20:06:55 -07:00
e81969d5a4
feat(sdk): inject scopes into context, add requireScope guard, add timeoutMs support, and document Traefik dual-router pattern
Tyler Gillispie
2026-08-23 19:33:35 -07:00
a85223f149
docs: generalize ONBOARDING.md into a universal, technology-agnostic integration guide
Tyler Gillispie
2026-08-23 19:04:57 -07:00
f2f671a386
docs: add comprehensive client application onboarding and integration guide
Tyler Gillispie
2026-08-23 19:01:08 -07:00
f36e237c84
fix(infra): adopt stack.env naming convention and align PostgreSQL 18 volume mount path
Tyler Gillispie
2026-08-23 18:50:55 -07:00
37f86f2ba7
fix(spire): maintain bootstrap token continuously until agent enrollment completes
Tyler Gillispie
2026-08-23 11:29:15 -07:00
1151431e5f
fix(spire): fix camelCase -joinToken CLI flag in entrypoint.agent.sh
Tyler Gillispie
2026-08-23 11:26:40 -07:00
d1f728f834
feat(spire): add insecure_bootstrap and automatic join token generation for zero-friction agent enrollment
Tyler Gillispie
2026-08-23 11:12:50 -07:00
f967ba3480
feat(infra): separate Auth-Yes and SPIRE environment configurations
Tyler Gillispie
2026-08-23 11:05:53 -07:00
e7f01940b3
fix(spire_ffi): silence noisy cert parse error on invalid certs and add SPIFFE cert unit test
Tyler Gillispie
2026-08-23 10:58:40 -07:00
3e0eb7d9d7
chore: clean up deno.json tasks and unify subcommands under setup CLI
Tyler Gillispie
2026-08-23 10:47:36 -07:00
434ac32336
feat(infra): integrate release pipeline natively into setup.ts with rolling restart and new install guides
Tyler Gillispie
2026-08-23 10:45:46 -07:00
26739f4b63
feat(infra): add release script, secrets verification, and dump subcommands to setup CLI
Tyler Gillispie
2026-08-23 10:41:03 -07:00
8a6cd6f72e
docs(tasks): groom backlog and move completed extraction task to complete/
Tyler Gillispie
2026-08-23 10:31:11 -07:00
6d0b811637
chore(infra): ignore generated compose and env files
Tyler Gillispie
2026-08-23 10:28:46 -07:00
c8c3f26bbe
feat(infra): track reference compose.yml and compose.spire.yml
Tyler Gillispie
2026-08-23 10:26:22 -07:00
29bc8e1a58
docs: clarify custom project images vs upstream open-source infrastructure in COMPOSE_CONVENTIONS.md
Tyler Gillispie
2026-08-23 10:23:37 -07:00
036a735ee0
Merge pull request #3 from mrteye/feat-spire-smart-image-packaging-6613301778153046391
Tyler Gillispie
2026-08-23 10:20:50 -07:00
ccf3c9a101
docs: clarify registry tier classification, mirrors, and Dockerfile portability in COMPOSE_CONVENTIONS.md
Tyler Gillispie
2026-08-23 10:20:47 -07:00
4360d67064
feat: Package generic SPIRE images and simplify compose volume
google-labs-jules[bot]
2026-08-23 17:20:11 +00:00
c07f2d1135
docs: add root COMPOSE_CONVENTIONS.md documenting compose, storage, and smart image standards
Tyler Gillispie
2026-08-23 09:53:38 -07:00
1f03cfc85f
docs(tasks): add smart SPIRE image packaging and single-volume bootstrap task
Tyler Gillispie
2026-08-23 09:41:35 -07:00
3210eb2528
feat(spire): auto-provision commented server.conf and agent.conf on boot via spire-init
Tyler Gillispie
2026-08-23 09:12:45 -07:00
edf66037ca
fix(infra): use /data convention and separate /volume1/docker/spire project root
Tyler Gillispie
2026-08-23 09:07:01 -07:00
daaa4389c1
fix(infra): use SPIRE_DATA_PATH bind mounts and clean GHCR_REG without defaults
Tyler Gillispie
2026-08-23 09:02:55 -07:00
ccf9f3a6b9
fix(spire): replace bind mounts with named volumes and provide default server and agent configs
Tyler Gillispie
2026-08-22 11:21:05 -07:00
e179ecd419
feat(setup): configure GHCR_REG defaulting to ghcr.atyg.org for SPIRE compose
Tyler Gillispie
2026-08-22 11:10:22 -07:00
40da6ecbe0
fix(infra): update Dockerfile, setup.ts, and bootstrap admin invite for standalone repo
Tyler Gillispie
2026-08-22 10:18:47 -07:00
623e78a7b1
fix(tests): guard valkey.disconnect and format files
Tyler Gillispie
2026-08-21 17:31:36 -07:00
ace1d2596b
Merge pull request #2 from mrteye/jules-verify-3tier-auth-and-rbac-11441419966783139758
Tyler Gillispie
2026-08-21 17:29:31 -07:00
9988df3218
audit: verify 3-tier auth, rbac, and decouple server side effects
google-labs-jules[bot]
2026-08-22 00:29:19 +00:00