1055 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
admin	6aa1f76657	ci: drop the pnpm-store cache on 0pt (save step dominated runtime) ... Caching the full pnpm store made the post-step tar/zstd run for >10 minutes on the shared runner, turning a ~1m quality job into a 15m+ one. The concurrency and main-only changes keep the win; install stays a plain frozen-lockfile run.	2026-11-02 19:06:54 +01:00
admin	ea40a67940	docs(deploy): runbook and workflow headers match the live pipeline ... The runbook still described Vercel and an unprovisioned Coolify app. It now documents the verified chain (ci -> release attestation -> cd -> Coolify), the proven manual dispatch, the verification endpoints and the rollback.	2026-11-02 18:57:45 +01:00
admin	c4a7b83f61	feat(auth): central Keycloak portal-trust (KEYCLOAK_ISSUER/audience/azp)	2026-11-02 18:45:40 +01:00
admin	56d3a8341b	Merge pull request 'ci(smoke): läs main-SHA från commits-listan' (#448) from fix/smoke-main-sha into main	2026-11-02 17:31:39 +00:00
admin	118fd39f87	ci(smoke): read main SHA from the commits list endpoint ... /commits/main returns 404 on this Gitea; use /commits?limit=1 and parse the first sha with python instead of a greedy sed.	2026-11-02 18:30:44 +01:00
admin	d2854553e7	Merge pull request 'ci: optimera pipelines + automatisk produktionssmoke' (#447) from chore/optimize-pipelines into main	2026-11-02 17:25:58 +00:00
admin	c01deca048	ci: optimize delivery pipelines and add a production smoke gate ... - One run per ref (concurrency) for CI, security, nightly and release; branch pushes no longer duplicate pull_request runs (push is main-only). - Deploys keep their own concurrency group so two runs never race Coolify. - pnpm store cache on every Node job. - New /api/version returns the deployed commit (no secrets). - New scheduled prod-smoke workflow: readiness, db/stripe health, running commit == main, and the document/credit routes exist (401/405, never 5xx).	2026-11-02 18:24:45 +01:00
admin	4f5deec857	Merge pull request 'fix(workbench): numerisk decimal → källans exakta sträng' (#446) from fix/decimal-number-source into main	2026-11-02 17:10:22 +00:00
admin	c7187368de	fix(workbench): accept a JSON-number decimal and deliver the source's exact string ... The local model returns 12500.00 as a JSON number, which the contract rejects as a non-string decimal. A numeric value now matches a source span numerically and the delivered value is rewritten to that span's decimal string (12500.00), so precision is preserved instead of rounded. Exact string equality is still required for string decimals, and ambiguous formats still go to review.	2026-11-02 18:07:52 +01:00
admin	a23c744588	Merge pull request 'fix(decision-ollama): native JSON-läge utan thinking' (#445) from fix/ollama-native-json into main	2026-11-02 16:52:32 +00:00
admin	8b571cf2f4	fix(decision-ollama): use Ollama's native JSON mode without thinking ... The 9B model spent its whole 4000-token budget on reasoning and came back model_incomplete. Call /api/chat with format=json, think=false and num_predict, and read prompt_eval_count/eval_count/done_reason. Structured extraction no longer needs chain-of-thought.	2026-11-02 17:51:09 +01:00
admin	ce2d8b58ea	Merge pull request 'feat(workbench): entydig decimal/datum-evidens utan AI-beroende' (#444) from feat/deterministic-date-decimal into main	2026-11-02 16:42:02 +00:00
admin	6c4f1998dc	feat(workbench): locale-aware decimal/date evidence without an AI dependency ... A source span now supports a decimal ('12 500,00' -> '12500.00') or a date ('14/10/2026' -> '2026-10-14') when the reading is unambiguous. Ambiguous formats (01/02/2026, 1,234) still go to review. Evidence derivation scans the source for typed candidates, so the local decision-server model only has to return values, not UTF-16 offsets.	2026-11-02 17:39:31 +01:00
admin	c386004f2e	Merge pull request 'fix(workbench): tolerera platt/inkapslad JSON från lokal modell' (#442) from fix/model-output-tolerance into main	2026-11-02 16:21:08 +00:00
admin	c33d88f0ea	fix(workbench): tolerate flat or fenced JSON from a small local model ... The decision-server model sometimes returns {field: value} or wraps the JSON in a markdown fence. Accept both, while still requiring every value to be an exact, unique substring of the source before it can be validated.	2026-11-02 17:18:34 +01:00
admin	f9f415f0e0	Merge pull request 'feat(workbench): decisionsserverns lokala modell som interim-AI' (#441) from feat/decision-server-ai into main	2026-11-02 16:13:08 +00:00
admin	525bf6b9a0	feat(workbench): use the decision server's local model while the AI API is on hold ... - DecisionOllamaGatewayClient calls the self-hosted Ollama on server-decision-01 (tailnet HTTP only for loopback/RFC1918/100.64-127), keeps the same local admission and reports providerKind=local. - createInf0Gateway prefers it over INF0/LiteLLM when configured. - Evidence is computed deterministically from values when a small model omits offsets; a value must occur exactly once in the source or the result goes to review. This makes a 9B local model usable without weakening verification. Tests: 4 new gateway cases + 2 evidence-derivation cases; full typecheck green.	2026-11-02 17:09:42 +01:00
admin	642abaf364	Merge pull request 'fix(credits): visa rätt pris (öre → kronor)' (#440) from fix/credits-price-display into main	2026-11-02 15:54:33 +00:00
admin	9e9de93715	fix(credits): amount_minor is öre, divide before formatSEK ... The pack list showed 9 900 kr for a 99 kr pack. formatSEK takes kronor; every other öre amount in the app is divided by 100 first.	2026-11-02 16:51:50 +01:00
admin	01e39521df	Merge pull request 'fix(admission): pilotläge utan reservation' (#439) from fix/admission-pilot-mode into main	2026-11-02 15:44:58 +00:00
admin	48dff2078e	fix(admission): zero maximumCredits means pilot mode, not a missing reservation ... The structure route ran the model with maximumCredits=1 and no reservation when credits were off, so admission returned reservation_required and the route answered 502. Admission now requires a reservation only when maximumCredits>0. Verified against the live stack: DOC0 segments -> LiteLLM/Ollama (inf0-valuation) -> evidence validation -> needs_review (no export).	2026-11-02 16:42:01 +01:00
admin	717aca6ff0	Merge pull request 'chore(workbench): logga orsaken till strukturfel' (#438) from fix/structure-error-visibility into main	2026-11-02 15:34:27 +00:00
admin	581a20acd1	chore(workbench): log the structure failure reason and source segment count ... Cloudflare replaces an origin 502 body with its own error page, so the JSON message never reached the client. Log the reason server-side (codes/messages only, never source text).	2026-11-02 16:32:55 +01:00
admin	71d742bdff	Merge pull request 'fix(doc0): anropa DOC0 som den beviljade tjänsteaktören' (#437) from fix/doc0-service-actor into main	2026-11-02 15:19:57 +00:00
admin	e93db5fc1f	fix(doc0): call DOC0 as the granted service actor ... DOC0 denies an x-actor-id that the service identity has no actor_grant for, so every upload/structure call from 0pt failed with DOC0_ACCESS_DENIED and became outcome_unknown. The journal and project authorization keep the verified end-user actor; only the DOC0 request acts as the service (DOC0_SERVICE_ACTOR_ID).	2026-11-02 16:17:29 +01:00
admin	9ed9cf0f73	Merge pull request 'fix(auth): begär resourceowner-scope så tenant-claim finns' (#435) from fix/oidc-tenant-scope into main	2026-11-02 15:08:45 +00:00
admin	7d8ed9bfba	fix(auth): request the resourceowner scope so the tenant claim is present ... Zitadel omits urn:zitadel:iam:org:id from the id_token for the default scopes. Requesting urn:zitadel:iam:user:resourceowner yields the user's org id, which deriveTenantId already understands. Also log claim keys (never values) when the tenant is still absent.	2026-11-02 16:07:22 +01:00
admin	b758908249	Merge pull request 'chore(auth): logga OIDC-felkod (utan tokens)' (#434) from fix/oidc-log-detail into main	2026-11-02 15:01:31 +00:00
admin	35937933b3	chore(auth): log the OIDC failure code (no tokens or claims)	2026-11-02 15:58:52 +01:00
admin	bc7868c789	Merge pull request 'feat(auth): Zitadel OIDC-inloggning för portalen' (#433) from feat/portal-oidc-login into main ... feat(auth): Zitadel OIDC-inloggning för portalen (#433)	2026-11-02 14:54:54 +00:00
admin	71391db132	fix(auth): fall back to the verified access token for the tenant claim ... Zitadel does not always copy urn:zitadel:iam:org:id into the id_token; the access token always carries it. Verify that token (issuer) before trusting its tenant.	2026-11-02 15:48:51 +01:00
admin	023406c9b6	feat(auth): Zitadel OIDC login for the portal ... The portal had no way to obtain a verified principal: /api/0pt/* requires a Bearer token, but the browser only had the dev-only HMAC cookie. - GET /api/auth/login: Authorization Code + PKCE against Zitadel. - GET /api/auth/callback: code exchange, id_token verification (issuer, audience, nonce) and a signed session cookie with sub + tenant. - middleware accepts the signed session as a verified principal; Bearer wins. - dev login POST is refused in production. - Sign-in link in the portal shell.	2026-11-02 15:48:02 +01:00
admin	f85b95b5b0	Merge pull request 'feat(workbench): uttryckligt pilotläge utan credit-plånbok' (#432) from feat/pilot-credits-mode into main	2026-11-02 14:34:22 +00:00
admin	d12b8fa55f	feat(workbench): explicit pilot mode without a credit wallet ... OPT_CREDITS_MODE=off skips reserve/settle and reports credits:null, so the document flow can be piloted before prices are decided. It is never a silent fallback and purchases remain disabled.	2026-11-02 15:31:52 +01:00
admin	78d81a1140	Merge pull request 'chore(portal): pensionera den döda metadata-uppladdningen' (#431) from chore/retire-dead-upload-surface into main	2026-11-02 14:16:29 +00:00
admin	f928ac1c78	chore(portal): retire the dead metadata-only upload page ... /portal/files only sent name/mime/size and always hit the 501 storage stub. Redirect it to /portal/dokument (real bytes) and remove it from both navs.	2026-11-02 15:16:10 +01:00
admin	8139470fa1	Merge pull request 'fix(portal): explicit dataklass för dokumentstrukturering' (#430) from fix/document-data-class into main ... fix(portal): explicit dataklass för dokumentstrukturering (#430)	2026-11-02 14:07:11 +00:00
admin	ed8b64e921	fix(portal): explicit, server-listed data class for document structuring ... Never assume 'low'; the UI offers only the server-approved data classes and the route refuses external models for high/restricted data.	2026-11-02 15:04:33 +01:00
admin	e4d51dbf03	Merge pull request 'feat(document-workbench): kundflöde uppladdning → struktur → export + credits' (#429) from feat/document-workbench-prod into main ... feat(document-workbench): kundflöde uppladdning → struktur → export + credits (#429)	2026-11-02 13:54:12 +00:00
admin	e3c4bc28c3	feat(workbench): live LiteLLM gateway adapter + explicit project grants ... - createInf0Gateway prefers the live OpenAI-compatible LiteLLM gateway and falls back to the native INF0 surface; admission stays local and fail-closed. - Project authorization: OpenFGA when configured, otherwise a validated server-owned OPT_PROJECT_GRANTS list (deny by default). - Tests for the gateway adapter, the factory and grants.	2026-11-02 14:50:50 +01:00
admin	b3239487b7	feat(document-workbench): wire customer upload, structuring, credits and readiness ... - POST /api/0pt/documents/upload: real multipart bytes into DOC0 through the durable attempt journal and the existing coordinator; verified tenant/actor only, project authorization fail-closed. - POST /api/0pt/documents/structure: DOC0 segments -> INF0 -> evidence-bound validation -> optional JSON/CSV export, with credit reserve/settle. - Credits: balance, server-owned price book, Stripe Checkout and idempotent webhook reconciliation via a Stripe re-read of session + payment intent. - /portal/dokument and /portal/krediter: SIAX-styled workspace. - @siax/access: universal, framework-neutral OpenFGA project relationship primitive reusable by DOC0/N0D/other products. - Readiness: real Redis PING probe instead of presence-only; queue is now a live dependency when configured. - Dockerfile: copy every workspace manifest so --frozen-lockfile works. - Format/build hygiene: .prettierignore, .worktrees ignored, valid manifest YAML.	2026-11-02 14:46:10 +01:00
admin	ac1ac73be8	Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (6bbd333a22)' (#428) from fix/prod-evidence-2026-09-29 into main	2026-11-02 12:56:58 +00:00
siax-bot	542da25571	fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-6bbd333a22	2026-11-02 13:30:19 +01:00
admin	6bbd333a22	Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (2d68ce5016)' (#426) from fix/prod-evidence-2026-09-29 into main	2026-11-02 09:45:49 +00:00
admin	2558bfd8f2	docs: date production image verification	2026-11-02 10:44:18 +01:00
siax-bot	565b6fafc2	fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-2d68ce5016	2026-11-02 09:30:18 +01:00
admin	2d68ce5016	Merge pull request 'Structure and export multiple evidence-bound document records' (#425) from codex/document-batch-evidence into main	2026-11-02 07:39:18 +00:00
admin	196c031d7a	Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#423) from fix/prod-restore-2026-09-29 into main	2026-11-02 07:37:32 +00:00
admin	be82e6e2a1	Merge branch 'main' into fix/prod-restore-2026-09-29	2026-11-02 07:37:20 +00:00
admin	0f15b562ff	Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (4f5a2ea865)' (#417) from fix/prod-evidence-2026-09-29 into main	2026-11-02 07:37:17 +00:00