1161 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
siax-bot	a0eba858ab	fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-5010a6853b	2026-11-08 13:30:18 +01:00
admin	5010a6853b	Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#509) from fix/prod-restore-2026-09-29 into main	2026-11-08 11:57:40 +00:00
admin	b25c164837	Merge branch 'main' into fix/prod-restore-2026-09-29	2026-11-08 11:57:29 +00:00
admin	be0acfd12c	Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (f5600a25b9)' (#508) from fix/prod-evidence-2026-09-29 into main	2026-11-08 11:57:26 +00:00
siax-bot	5a56cc9a6e	fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-f5600a25b9	2026-11-08 05:30:28 +01:00
admin	f5600a25b9	Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#507) from fix/prod-restore-2026-09-29 into main	2026-11-08 03:58:42 +00:00
admin	d85f5ae559	Merge branch 'main' into fix/prod-restore-2026-09-29	2026-11-08 03:58:30 +00:00
admin	246589bde8	Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (9aef3cd97f)' (#506) from fix/prod-evidence-2026-09-29 into main	2026-11-08 03:58:27 +00:00
siax-bot	fdba72bd35	fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-9aef3cd97f	2026-11-08 01:30:28 +01:00
admin	9aef3cd97f	Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#505) from fix/prod-restore-2026-09-29 into main	2026-11-07 23:21:36 +00:00
admin	34ef39e5f5	Merge branch 'main' into fix/prod-restore-2026-09-29	2026-11-07 23:21:24 +00:00
admin	43ec05ade2	Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (a0e701efc8)' (#504) from fix/prod-evidence-2026-09-29 into main	2026-11-07 23:21:21 +00:00
siax-bot	be6b92fb82	fix(signing): cosign-pubkey + SBOM + deployment/env-poster för prod-imagen prod-a0e701efc8	2026-11-07 21:30:19 +01:00
admin	a0e701efc8	Merge pull request 'fix(manifest): provenRestore=true (restore-drill 2026-09-29)' (#493) from fix/prod-restore-2026-09-29 into main	2026-11-07 19:10:33 +00:00
admin	48fbe6b184	Merge branch 'main' into fix/prod-restore-2026-09-29	2026-11-07 19:10:22 +00:00
admin	b90cded2d6	Merge pull request 'fix(signing): cosign-pubkey + SBOM + deployment/env-poster (b2499ace79)' (#500) from fix/prod-evidence-2026-09-29 into main	2026-11-07 19:10:17 +00:00
admin	aba909c29a	Merge branch 'main' into fix/prod-evidence-2026-09-29	2026-11-07 19:10:04 +00:00
admin	e00c7b0fc5	Merge pull request 'docs(runbook): legacy-instansaudit server5 (0pt + L0RE)' (#501) from docs/legacy-instances-20261107 into main	2026-11-07 17:34:12 +00:00
admin	de76f3795b	Merge pull request 'fix(canonical): RFC3339-serialisering av timestamptz' (#498) from fix/canonical-iso-timestamps-20261107 into main	2026-11-07 17:34:07 +00:00
admin	3421748f07	Merge branch 'main' into docs/legacy-instances-20261107	2026-11-07 17:19:41 +00:00
admin	9ac681ee27	Merge branch 'main' into fix/canonical-iso-timestamps-20261107	2026-11-07 17:19:39 +00:00
admin	cdbb10b8e3	Merge pull request 'test(lint): typa idempotency-store (fixar quality-gaten som blockerar alla PR)' (#503) from fix/lint-siax-access-idempotency into main	2026-11-07 17:19:35 +00:00
SIAX Agent	6bbbcf75d4	test(lint): typa idempotency-store i stället för any (blockerar quality-gaten) ... tests/siax-access/idempotency.test.ts hade fyra @typescript-eslint/no-explicit-any vilket fick quality-jobbet att exita 1 (133 testfiler gröna men lint röd) och därmed blockerade alla PR:er. Använder exporterade IdempotencyStore<unknown, {x:number}>; eslint rent, 7/7 tester gröna.	2026-11-07 18:15:04 +01:00
admin	58dca92d9f	Merge pull request 'fix(sql): 023 grants för canonical-tabellerna till app-rollen' (#499) from fix/canonical-grants-20261107 into main	2026-11-07 17:12:03 +00:00
admin	7ca7b98fb2	Merge branch 'main' into docs/legacy-instances-20261107	2026-11-07 17:07:45 +00:00
admin	b269a05538	Merge branch 'main' into fix/canonical-grants-20261107	2026-11-07 17:07:44 +00:00
admin	1b7c6c2de9	Merge branch 'main' into fix/canonical-iso-timestamps-20261107	2026-11-07 17:07:42 +00:00
SIAX Agent	b7627a3a31	docs(runbook): legacy-instansaudit server5 (0pt + L0RE) och disposition ... 0pt legacy: 32 kanoniska facts exporterade och återinförda via API (replay duplicates=32), dump till server11, api/web stoppade med restart=no, pg kvar för forensik. L0RE-orphan refererad till PR #485. Ingen databas/volymer raderade.	2026-11-07 17:37:33 +01:00
SIAX Agent	afd0b4ec46	fix(canonical): serialisera timestamptz som RFC3339 (ISO-8601) ... queryFacts använde String(Date) -> 'Sat Nov 07 2026 15:00:00 GMT+0000 (...)', vilket L0RE:s canonical-projection avvisar ('must be RFC3339 date-time'). Inför iso()-helper: Date -> toISOString(), annars String(). Gäller observed_at, valid_from, valid_to, created_at.	2026-11-07 17:30:40 +01:00
SIAX Agent	4dbabd14ac	fix(sql): 023 grants for canonical tables to app-role 0pt_app ... 022 skapade tabellerna som 0pt_edge; appen kör som 0pt_app och fick 'permission denied'. Övriga 0pt-tabeller har explicita grants (inga default ACL), så kanoniska tabeller behöver samma. Idempotent och rollskyddad; RLS (FORCE) gäller fortfarande för 0pt_app.	2026-11-07 17:29:03 +01:00
admin	b2499ace79	Merge pull request #497: idempotent 022 canonical facts ... Retry-safe RLS policies (DROP POLICY IF EXISTS) + header fix.	2026-11-07 16:28:21 +00:00
SIAX Agent	0213459f33	fix(sql): 022 canonical facts blir idempotent (DROP POLICY IF EXISTS) ... CREATE POLICY saknade skydd mot omkörning, så en retry efter partiell körning skulle fastna på 'policy already exists'. Tabellerna använder redan CREATE TABLE/INDEX IF NOT EXISTS; policynivån görs nu likvärdig. Rubriken rättad från 020 till 022. Verifierat på scratch-databas: två körningar i rad OK, RLS ENABLE+FORCE, 3 policies, 11 index, cross-tenant INSERT nekad och tenant B ser 0 rader.	2026-11-07 17:24:56 +01:00
admin	c91d2aaca6	Merge pull request #494: 0pt internal-service tenant isolation ... Server-configured INTERNAL_SERVICE_TENANTS; forged verified headers stripped; bridge-run guarded; single-tenant rule until workload-identity binding exists.	2026-11-07 15:55:11 +00:00
SIAX Agent	1a581fde29	fix(auth): en (1) tenant per intern serviceprincipal — multi-tenant nekas ... Den delade X-Internal-Token identifierar EN tjänsteprocess, inte flera oberoende principaler. En allowlist med flera tenants skulle låta varje tokeninnehavare välja mellan dem — samma klientstyrda auktoritet som guarden ska ta bort. Multi-tenant-tjänsteåtkomst kräver verifierad workload-identity-binding (CL0UD-delegation); tills den finns failar en ambig konfiguration stängt (401) och ingen identitet forwardas. Tester: multi-tenant nekas utan side effect, en tenant fungerar, 75/75 i auth+ cross-tenant-sviterna, tsc ren.	2026-11-07 16:39:48 +01:00
admin	bfdc5d1326	Merge pull request 'ci: add blocking component conformance gate' (#496) from ci/design-gate-20261107 into main	2026-11-07 15:32:45 +00:00
admin	831781f19d	ci: add blocking component conformance gate	2026-11-07 15:21:31 +00:00
SIAX Agent	b97ad0b2f4	fix(auth): bind internal-service tenant authority to server config ... The first revision of this fix copied a CLIENT header (X-0pt-Internal-Tenant) or a single INTERNAL_TENANT_ID into x-0pt-verified-tenant. That is not an authorization source: any holder of the shared internal token could still name any tenant, leaving the original cross-tenant write reachable through a different header. - INTERNAL_SERVICE_TENANTS (server env) is now the only tenant authority for the X-Internal-Token principal; empty => no authority (fail closed, 403). - Middleware strips inbound x-0pt-verified-{tenant,sub} and the service scope header on every path, including the dev escape hatch. - x-0pt-verified-service-tenants carries the allowlist; the tenant guard checks membership and denies anything outside it. - POST /api/0pt/quality/bridge-run now runs the same tenant guard as canonical/facts (it auto-provisions tenant-scoped rules). - 16 new regression tests; auth + cross-tenant + canonical + bridge suites 87/87; tsc --noEmit clean.	2026-11-07 15:32:51 +01:00
admin	019cc23fa2	feat(capability): descriptor-completion wave 1 (0pt) — verified openapi operationIds	2026-11-07 15:23:41 +01:00
admin	849e7ae802	fix(auth): internal-token requests får verifierad tenant (P0 tenant-isolering) ... Bevisat: POST /api/0pt/canonical/facts med X-Internal-Token och tenant_id 999999999999999999 returnerade 201 och skrev data i annan tenant. Orsak: internal-token-grenen returnerade next() utan x-0pt-verified-tenant, så assertTenantMatchesVerified blev no-op. Fix: INTERNAL_TENANT_ID (eller X-0pt-Internal-Tenant) sätts som verifierad tenant, vilket gör guard-enforcement identisk med verifierad Bearer. Varnar om variabeln saknas.	2026-11-07 14:55:59 +01:00
admin	04aeaa754b	Merge pull request 'ci(sonar): hosten är sonar.siax.dev, inte .io' (#492) from fix/sonar-host-url into main	2026-11-06 11:33:13 +00:00
admin	98039d3d68	ci(sonar): self-hosted SonarQube lives at sonar.siax.dev, not .io ... 2 of 3 recent main runs failed the sonar gate with 'Failed to query server version: Call to URL https://sonar.siax.io/... failed: null' -- DNS for sonar.siax.io does not resolve (000) while sonar.siax.dev answers 200 UP (SonarQube 26.10). Internal tool + admin console = siax.dev per the 2026-11-03 domain policy; the .io hostname was never registered.	2026-11-06 12:17:53 +01:00
admin	8c91b90ae0	Merge pull request 'fix(portal): återanvänd kanonisk @siax/ui FileDropzone' (#490) from feat/ui-reuse-canonical-dropzone into main	2026-11-06 10:19:28 +00:00
admin	4f92cdd102	fix(portal): reuse canonic @siax/ui FileDropzone instead of a local ad-hoc one ... 0pt rendered its own dashed drop surface (role=button + hidden input). @siax/ui already ships FileDropzone — the native labelled input with drag-over/drop forwarding, aria wiring and no upload logic — so replace the local variant (REUSE, CLASSIFICATION per UI standard). Removes the local inputRef.	2026-11-06 11:04:03 +01:00
admin	9ca16b7f6c	Merge pull request 'feat(@siax/access): universell idempotenskontrakt' (#489) from feat/universal-idempotency-tuple into main	2026-11-06 10:01:59 +00:00
admin	a424cf1581	fix(@siax/access): restore relationships.ts that disappeared when the package split into two files ... b323948 shipped the OpenFGA relationship client inside src/index.ts; when src/idempotency.ts was added, index.ts was rewritten as the diff of both, losing every relationship export and breaking the existing tests. Move the original module to src/relationships.ts and let index.ts re-export both. Restores 7 pre-existing relationship tests (both suites 14 passed).	2026-11-06 10:49:11 +01:00
admin	f77a4fec96	feat(@siax/access): universal idempotency contract ... operationIdentity binds tenant/project/actor + every result-affecting input into a stable fingerprint; a changed payload under the same key is a CONFLICT, never a replay of someone else's receipt. runIdempotentOperation encodes the 0pt-proven order (durable claim -> downstream dispatch -> save receipt -> replay) and the commit boundaries. Structural IdempotencyStore lets each product ship its own Postgres adapter while sharing the contract. Derived from 0pt's durable upload attempts; DOC0/N0D can adopt the same shape instead of re-implementing it.	2026-11-06 10:47:59 +01:00
admin	58f81a10b7	Merge pull request 'feat(idempotens): operationsscope på uppladdningsidentitet' (#488) from feat/idempotency-operation-scope into main	2026-11-06 09:44:37 +00:00
admin	6ca6e8e0a6	feat(idempotency): operation-scope binding for upload identity ... Per the reap-use mandate: 'identical file + different instruction' is a DIFFERENT operation. bindOperationToUploadIdentity() folds instruction, field contract, model, data class and export format into the DOC0-compatible upload filename so the durable fingerprint covers every result-affecting input. The bytes' SHA-256 stays stable; DOC0 still receives the caller's x-idempotency-key (its own idempotency, its own contract). Classification: STANDARDIZE/0pt-owned (upstream DOC0 untouched).	2026-11-06 10:29:59 +01:00
admin	cb0b951c42	Merge pull request 'chore(ui): document domain/legacy UI exceptions' (#486) from feat/component-allowlist-20261105 into main	2026-11-05 23:36:47 +00:00
admin	415396f25d	chore(ui): document domain/legacy UI exceptions	2026-11-06 00:36:16 +01:00