admin/c0py - c0py - Gitea: Git with a cup of tea

4 Commits

Include renames

Author	SHA1	Message	Date
Claude CodeandClaude Sonnet 5.5	1258903289	fix(deps): patch HIGH advisories in postcss (CVE-2026-45623, CVE-2026-73646) CI (SIAX Cloud) / sonar (push) Skipped Details CI (SIAX Cloud) / sonar (pull_request) Skipped Details CI (SIAX Cloud) / security (push) Successful in 23s Details CI (SIAX Cloud) / security (pull_request) Successful in 16s Details CI (SIAX Cloud) / contracts (pull_request) Successful in 21s Details CI (SIAX Cloud) / contracts (push) Successful in 1m5s Details CI (SIAX Cloud) / quality (push) Successful in 1m26s Details CI (SIAX Cloud) / quality (pull_request) Successful in 1m22s Details next@15.5.x hard-pins postcss 8.4.31, so a plain lockfile update cannot reach the fix. Add a pnpm override (postcss@<8.5.18 -> 8.5.28, same major, already resolved for vite) so the whole tree uses one patched postcss. Lockfile diff is limited to dropping postcss 8.4.31 and repointing next. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-09-30 12:06:29 +02:00
admin	12f6a65b80	feat(api): deterministic scan worker + AUD0 wire + tenant binding CI (SIAX Cloud) / security (pull_request) Successful in 14s Details CI (SIAX Cloud) / security (push) Successful in 14s Details CI (SIAX Cloud) / contracts (pull_request) Successful in 15s Details CI (SIAX Cloud) / contracts (push) Successful in 17s Details CI (SIAX Cloud) / quality (push) Successful in 1m9s Details CI (SIAX Cloud) / quality (pull_request) Successful in 1m10s Details - scan worker: atomic claim (FOR UPDATE SKIP LOCKED), Playwright-core + system chromium capture → typed EvidenceRecords (runtime-html/dom/computed-style/ stylesheet/asset/network-request/screenshot), confidence=measured - AUD0 emitter (fire-and-forget, advisory): c0py.registry_created/.scan_created/ .scan_completed/.scan_failed, tenant_id = Zitadel resourceowner (org) - tenant binding: resourceowner claim from introspection (deny-by-default 403), migration 002 tenant_id on registries+scans, all queries tenant+owner scoped - evidence gaps stay explicit (screenshot miss → no screenshot record) - 30/30 tests, canonical validator OK	2026-09-16 22:53:55 +02:00
admin	9482a97795	feat(api): Postgres persistence for registries + scans (owner-scoped, fail-closed) CI (SIAX Cloud) / security (push) Successful in 13s Details CI (SIAX Cloud) / contracts (pull_request) Successful in 17s Details CI (SIAX Cloud) / security (pull_request) Successful in 13s Details CI (SIAX Cloud) / contracts (push) Successful in 16s Details CI (SIAX Cloud) / quality (push) Successful in 52s Details CI (SIAX Cloud) / quality (pull_request) Successful in 1m13s Details - schema migration 001 (registries, scans; owner_sub = introspected subject) - pg pool + services; scan ownership enforced in SQL (INSERT ... SELECT WHERE owner_sub) - real handlers: 201/400/404/500, owner-scoped GET/POST, listScans registryId filter - graceful shutdown closes pool; 7 new persistence tests (21/21)	2026-09-16 22:32:48 +02:00
admin	e04cf8fbd3	c0py: initial scaffolding for website registry tool Repo: sax3l/c0py (created on Gitea, code pushed) Initial scaffolding includes: - apps/api: Fastify API server (typecheck, build, test pass) - apps/web: Next.js UI (build passes) - packages/c0py-core: Crawler, registry assembler, analyzer (6 tests pass) - packages/config: Zod-validated env loader - packages/types: Shared TypeScript types CI/CD: .gitea/workflows/ci.yml + deploy.yml Dockerfile for Coolify deployment mise.toml (toolchain contract) lefthook.yml, renovate.json docs/architecture/OVERVIEW.md, docs/PLATFORM.md Platform setup required (see docs/PLATFORM.md): 1. Coolify app provision (c0py on server5/6) 2. Postgres database (dedicated, not shared) 3. Infisical secrets (DATABASE_URL, CL0UD, ZITADEL, AUD0, ST0RE, INF0, N0D) 4. DNS c0py.siax.io A-record 5. Zitadel OIDC project (Simon-decision) Status: dev (repo live, code pushable, platform infra pending)	2026-09-16 13:33:45 +02:00