58 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Sharang Parnerkar	d9687725e5	Remove Traefik labels from coolify compose — Coolify handles routing ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-13 10:16:59 +01:00
Sharang Parnerkar	6c3911ca47	Fix admin-core build: ensure public directory exists before build ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-13 10:16:59 +01:00
Sharang Parnerkar	30807d1ce1	Fix backend-core TARGETARCH: auto-detect instead of hardcoded arm64 ... The Dockerfile hardcoded TARGETARCH=arm64 for Mac Mini. Coolify server is x86_64, causing exit code 126 (wrong binary arch). Now uses Docker BuildKit's auto-detected TARGETARCH with dpkg fallback. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-13 10:16:59 +01:00
Sharang Parnerkar	82c28a2b6e	Add QDRANT_API_KEY support to rag-service ... - Add QDRANT_API_KEY to config.py (empty string = no auth) - Pass api_key to QdrantClient constructor (None when empty) - Add QDRANT_API_KEY to coolify compose and env example Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-13 10:16:59 +01:00
Sharang Parnerkar	86624d72dd	Sync coolify compose with main: remove voice-service, update rag/embedding ... - Remove voice-service (removed in main branch) - Remove voice_session_data volume - Add OLLAMA_URL and OLLAMA_EMBED_MODEL to rag-service - Update embedding-service default model to BAAI/bge-m3, memory 4G→8G - Update health-aggregator CHECK_SERVICES (remove voice-service) - Update .env.coolify.example accordingly Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-13 10:16:59 +01:00
Sharang Parnerkar	9218664400	fix: use Alpine-compatible addgroup/adduser flags in Dockerfiles ... Replace --system/--gid/--uid (Debian syntax) with -S/-g/-u (BusyBox/Alpine). Coolify ARG injection causes exit code 255 with Debian-style flags. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-13 10:16:59 +01:00
Sharang Parnerkar	8fa5d9061a	refactor(coolify): externalize postgres, qdrant, S3; remove jitsi/synapse ... - Remove PostgreSQL, Qdrant, MinIO services (managed separately in Coolify) - Remove Jitsi stack (web, xmpp, jicofo, jvb) and Synapse/synapse-db - Add POSTGRES_HOST, QDRANT_URL, S3_ENDPOINT/S3_ACCESS_KEY/S3_SECRET_KEY env vars - Remove Traefik labels from internal-only services - Health aggregator no longer checks external services - Core now has 10 services: valkey + 9 application services Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-13 10:16:59 +01:00
Sharang Parnerkar	84002f5719	feat: add Coolify deployment configuration ... Add docker-compose.coolify.yml (17 services), .env.coolify.example, and Gitea Action workflow for Coolify API deployment. Removes nginx, vault, gitea, woodpecker, mailpit, and dev-only services. Adds Traefik labels for *.breakpilot.ai domain routing with Let's Encrypt SSL. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-13 10:16:59 +01:00
Benjamin Admin	8b87b90cbb	fix(qdrant): Increase ulimits for RocksDB (Too many open files) ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-11 22:31:16 +01:00
Benjamin Admin	be45adb975	fix(rag): Auto-create Qdrant collection on first index ... Collections may not exist if init_collections() failed at startup (e.g. Qdrant not ready). Now index_documents() ensures the collection exists before upserting. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-11 21:02:05 +01:00
Benjamin Admin	7c932c441f	feat(rag): Add bp_compliance_gesetze + bp_compliance_ce collections ... Required for Verbraucherschutz + EU law ingestion. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-11 20:41:26 +01:00
Benjamin Admin	1eb402b3da	fix(ci): Remove Ollama host port binding — port 11434 already in use ... Host already has Ollama running (LibreChat). Our container only needs internal docker network access via container name. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-11 20:04:32 +01:00
Benjamin Admin	963e824328	fix(ci): Use external network + pre-create breakpilot-network ... Network already exists from compliance project — use external: true and pre-create with docker network create before docker compose up. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-11 20:01:17 +01:00
Benjamin Admin	c0782e0039	fix(ci): Fix backend-core TARGETARCH for amd64 + set -e in deploy ... - backend-core Dockerfile defaults TARGETARCH=arm64, override with build arg - Add set -e in helper container to fail fast on build errors Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-11 19:51:19 +01:00
Benjamin Admin	44d66e2d6c	feat(ci): Add Hetzner deployment for Core services ... - docker-compose.hetzner.yml: Override for x86_64 (platform, ports, Ollama container for CPU embeddings, mailpit dummy, disabled services) - CI: deploy-hetzner job using helper-container pattern - Services: postgres, valkey, qdrant, ollama, backend-core, consent-service, rag-service, embedding-service, health-aggregator Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-11 19:42:41 +01:00
Benjamin Admin	f9b475db8f	fix: Ensure public/ dir exists in Docker build for levis-holzbau ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-11 10:06:54 +01:00
Benjamin Admin	0770ff499b	feat: Add LEVIS Holzbau — Kinder-Holzwerk-Website (Port 3013) ... Neue statische Website fuer Kinder (6-12 Jahre) mit 8 Holzprojekten, SVG-Illustrationen, Sicherheitshinweisen und kindgerechtem Design. Next.js 15 + Tailwind + Framer Motion. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-11 10:03:21 +01:00
Benjamin Admin	32aade553d	Switch MinIO from local to Hetzner Object Storage ... Migrate rag-service S3 config from local MinIO (minio:9000) to Hetzner Object Storage (nbg1.your-objectstorage.com) with HTTPS. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-06 14:07:26 +01:00
Benjamin Admin	f467db2ea0	fix(pitch-deck): Waiting-Indicator in ChatFAB (richtiges Komponente) ... ChatInterface.tsx war falsch — der echte Investor Agent laeuft in ChatFAB.tsx. Animierte Punkte + firstChunk-Logik dort implementiert. Session-History laeuft bereits korrekt (FAB permanent gemountet). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-06 09:39:19 +01:00
Benjamin Admin	35aad9b169	fix(pitch-deck): Stale-Closure-Bug im Waiting-Indicator behoben ... isWaiting im async Closure war immer true — lokale Variable firstChunk ersetzt den State-Check zuverlaessig. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-06 09:28:12 +01:00
Benjamin Admin	806d3e0b56	feat(pitch-deck): Waiting-Indicator im Investor Agent Chat ... Drei animierte Punkte (iMessage-Style) erscheinen sofort nach dem Absenden und verschwinden wenn der erste Token eintrifft. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-06 09:16:22 +01:00
Benjamin Admin	9f0e8328e5	fix(pitch-deck): qwen3.5 thinking-mode deaktiviert, num_ctx 8192 ... Qwen3.5 denkt standardmaessig intern durch (think: true) — das ueberschreitet den 2-Minuten-Timeout des Investor Agents. think: false + num_ctx 8192 sorgt fuer schnelle direkte Antworten. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-06 08:31:17 +01:00
Benjamin Admin	65184c02c3	chore: LLM qwen3:30b-a3b → qwen3.5:35b-a3b ... Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-06 07:32:35 +01:00
Benjamin Admin	4245e24980	docs: Woodpecker CI aus MkDocs entfernt — Gitea Actions dokumentiert ... Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-05 23:27:00 +01:00
Benjamin Admin	8dc1b4c67f	chore: Woodpecker CI entfernt — nur noch Gitea Actions ... Woodpecker wird nicht mehr verwendet. Wir migrieren vollstaendig auf Gitea Actions (gitea.meghsakha.com). Entfernt: - woodpecker-server + woodpecker-agent Container (docker-compose.yml) - woodpecker_data Volume - backend-core/woodpecker_proxy_api.py (SQLite-DB Proxy) - admin-core/app/api/admin/infrastructure/woodpecker/route.ts - admin-core/app/api/webhooks/woodpecker/route.ts - .woodpecker/main.yml (alte CI-Pipeline-Konfiguration) Bereinigt: - ci-cd/page.tsx: Woodpecker-Tab + Status-Karte + State entfernt - types/infrastructure-modules.ts: Woodpecker-Typen + API-Endpunkte - DevOpsPipelineSidebar.tsx: Textbeschreibungen auf Gitea Actions - dashboard/page.tsx: Woodpecker aus Service-Health-Liste - sbom/page.tsx: Woodpecker aus SBOM-Liste - navigation.ts: Beschreibung aktualisiert - .env.example: WOODPECKER_* Variablen entfernt Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-05 23:05:08 +01:00
Benjamin Admin	2801e44d39	feat(pitch-deck): Wettbewerbsanalyse aktualisiert — 761K LOC, 44 Features, 57 Compliance-Module, 9 USPs ... - EngineeringSlide: 691K→761K LOC, TS 403K→408K, Python 160K→213K, Go 127K→141K - CompetitionSlide: Security-Features durch Compliance-USPs ersetzt (Self-Hosted, PII-Redaction, IPFS, SDK) - i18n: Solution Pillar '57 Module', Competition Subtitle, Engineering Subtitle aktualisiert - DB: 18 neue Features (DSR, Consent, Academy, Whistleblower, Incidents, etc.), Metrics + Competitors aktualisiert Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-05 22:59:54 +01:00
Benjamin Admin	62ecb3eb24	refactor: GPU Infrastruktur aus Core Admin entfernt (liegt im Lehrer) ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-05 18:30:02 +01:00
Benjamin Admin	fe9a9c2df2	refactor: Entwicklung-Kategorie aus Core Admin entfernt ... Screen Flow, Brandbook und Developer Docs waren veraltet und werden nicht mehr benoetigt. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-05 18:20:03 +01:00
Benjamin Admin	5fe2617857	refactor: Unified Inbox aus Core entfernt (nach Lehrer migriert) ... - Mail-Seite, API-Route, Kommunikation-Kategorie entfernt - Screen-Flow: Mail-Node und Kommunikation-Legende entfernt Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-05 18:05:48 +01:00
Benjamin Admin	c8cc8774db	refactor: Video Chat, Voice Service, Alerts Seiten aus Core Admin entfernt ... - Kommunikation-Seiten nach Lehrer migriert - API-Routes, Health-Check, Navigation bereinigt - Screen-Flow, SBOM, Tests aktualisiert Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-05 17:36:22 +01:00
Benjamin Admin	1527f4ffe7	refactor: Camunda löschen, Jitsi/Matrix/Voice nach Lehrer verschieben ... Camunda war nie aktiv (nur Frontend-Stub ohne Backend) — komplett entfernt. Jitsi (5 Services), Synapse (2 Services) und Voice Service werden ausschließlich vom Lehrer-Stack genutzt und gehören nicht in Core. Nginx-Container-Namen auf bp-lehrer-jitsi-* aktualisiert (shared Network). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-05 17:01:30 +01:00
Benjamin Admin	db1b3c40ed	fix: Compliance Dashboard + Katalogverwaltung Kacheln vom Portal entfernt ... Beide verlinkten auf /dashboard und waren redundant zum SDK-Einstiegspunkt. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-04 22:45:11 +01:00
Benjamin Admin	85df14c552	feat: HTTPS-Proxy fuer Compliance MkDocs auf Port 8011 ... Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-04 12:23:57 +01:00
Benjamin Admin	72e0f18d08	feat(sbom): OCR- und HTR-Pakete für klausur-service ergänzen ... Neue Python-Pakete dokumentiert: - pyspellchecker 0.8.1+ (MIT) – OCR-Regelkorrektur Step 6 - pytesseract 0.3.10+ (Apache-2.0) – Tesseract OCR Wrapper - opencv-python-headless 4.8+ (Apache-2.0) – Bildverarbeitung/Inpainting - rapidocr-onnxruntime (Apache-2.0) – Schnelles OCR ARM64 - onnxruntime (MIT) – ONNX-Inferenz für RapidOCR - eng-to-ipa (MIT) – IPA-Lautschrift-Lookup - sentence-transformers 2.2+ (Apache-2.0) – Lokale Embeddings - torch 2.0+ (BSD-3-Clause) – ML-Framework CPU/MPS - transformers 4.x (Apache-2.0) – TrOCR/HTR-Modelle Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-03 18:42:53 +01:00
Benjamin Admin	1c8f528c7a	feat(nginx): add /rag-originals/ location for QA PDF serving ... Serves original regulation PDFs from ~/rag-originals/ on port 3002 for the RAG QA Split-View Chunk-Browser. Adds volume mount to nginx. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-28 17:46:13 +01:00
Benjamin Admin	403cb5b85d	fix: increase RAG service proxy timeout to 600s ... - Increase proxy_read_timeout from 300s to 600s for large PDF uploads - Add proxy_send_timeout 600s (was defaulting to 60s) - Fixes 504 Gateway Timeout when uploading 7.5MB+ IFRS PDFs Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-28 09:07:03 +01:00
Benjamin Admin	5c8307f58a	fix(rag): use query_points instead of deprecated search method ... qdrant-client 1.17.0 removed the search() method in favor of query_points(). Update the wrapper to use the new API. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-27 07:51:12 +01:00
Benjamin Admin	92ca5b7ba5	feat(rag): use Ollama for embeddings instead of embedding-service ... Switch to Ollama's bge-m3 model (1024-dim) for generating embeddings, solving the dimension mismatch with Qdrant collections. Embedding-service still used for chunking, reranking, and PDF extraction. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-27 07:46:57 +01:00
Benjamin Admin	d7cc6bfbc7	Switch embedding model to bge-m3 (1024-dim) ... The Qdrant collections use 1024-dim vectors (bge-m3) but the embedding-service was configured with all-MiniLM-L6-v2 (384-dim). Also increase memory limit to 8G for the larger model. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-26 23:29:23 +01:00
Benjamin Admin	13ba1457b0	Fix embedding client endpoint paths ... The embedding-service exposes endpoints at root level (/chunk, /embed, /extract-pdf, /rerank) not under /api/v1/. Fix the RAG service's embedding client to use the correct paths. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-26 23:24:47 +01:00
Benjamin Admin	0ac23089f4	docs: update CLAUDE.md for direct MacBook development workflow ... Remove rsync-based workflow, document git push + Mac Mini pull workflow.	2026-02-25 23:09:41 +01:00
Benjamin Boenisch	e87ec2520d	feat(pitch-deck): pivot to Maschinen- und Anlagenbau target market ... Refocus entire pitch deck narrative on machine/plant manufacturers with in-house embedded software development. Key changes: - i18n: All DE/EN texts updated (cover, problem, solution, market, etc.) - MarketSlide: Dynamic unit formatting (Mrd/Mio/k) for SOM in millions - SolutionSlide: Code-Security pillar with ScanLine icon - HowItWorksSlide: GitBranch icon for code repo connection step - CompetitionSlide: Security features reframed for firmware/embedded - RegulatorySlide: Added CRA (Cyber Resilience Act) as 4th tab - AI chat prompt: Updated Kernbotschaften for Maschinenbau USP - DB migration: TAM 8.7B, SAM 850M, SOM 7.2M, customers 5-380 (2026-2030), 4 new differentiator features, product capabilities for code-security Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-17 21:42:29 +01:00
Benjamin Boenisch	b7d21daa24	feat: Add DevSecOps tools, Woodpecker proxy, Vault persistent storage, pitch-deck annex slides ... - Install Gitleaks, Trivy, Grype, Syft, Semgrep, Bandit in backend-core Dockerfile - Add Woodpecker SQLite proxy API (fallback without API token) - Mount woodpecker_data volume read-only to backend-core - Add backend proxy fallback in admin-core Woodpecker route - Add Vault file-based persistent storage (config.hcl, init-vault.sh) - Auto-init, unseal and root-token persistence for Vault - Add 6 pitch-deck annex slides (Assumptions, Architecture, GTM, Regulatory, Engineering, AI Pipeline) - Dynamic margin/amortization KPIs in BusinessModelSlide - Market sources modal with citations in MarketSlide - Redesign nginx landing page to 3-column layout (Lehrer/Compliance/Core) - Extend MkDocs nav with Services and SDK documentation sections - Add SDK Protection architecture doc Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-17 15:42:43 +01:00
Benjamin Boenisch	eb43b40dd0	feat: voice-service hinzugefuegt, nginx upstreams aktualisiert ... - voice-service in docker-compose.yml hinzugefuegt (bp-core-voice-service) - nginx: voice-service upstream von bp-lehrer auf bp-core geaendert - nginx: edu-search upstream von breakpilot-edu-search auf bp-lehrer-edu-search geaendert - extra_hosts fuer edu-search entfernt (jetzt containerisiert in lehrer) - health-aggregator: voice-service zu CHECK_SERVICES hinzugefuegt Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-15 18:24:32 +01:00
Benjamin Boenisch	bde0e11ba2	fix: add go-redis/v9 dependency to consent-service ... The session_store imports github.com/redis/go-redis/v9 but it was missing from go.mod, causing build failures in CI. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-15 17:32:23 +01:00
Benjamin Boenisch	c736a596c0	fix(ci): replace actions/checkout with manual git clone ... The act_runner cannot create /home/act_runner cache dir inside container images. Replace actions/checkout@v4 with manual git clone using GITHUB_SERVER_URL and GITHUB_REPOSITORY env vars. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-02-15 16:58:28 +01:00
Benjamin Boenisch	022c00cd17	fix(ci): use docker runner label instead of ubuntu-latest ... The Gitea Actions runner on meghsakha uses label "docker". Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-02-15 16:53:31 +01:00
Benjamin Boenisch	19ee99a3bc	ci: add Gitea Actions workflow for external CI ... Adds .gitea/workflows/ci.yaml with lint and test jobs. Runs on gitea.meghsakha.com with Gitea Actions runner. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>	2026-02-15 16:38:59 +01:00
Benjamin Boenisch	1089c73b46	feat: voice-service von lehrer nach core verschoben, Pipeline erweitert (voice, BQAS, embedding, night-scheduler)	2026-02-15 13:26:06 +01:00
Benjamin Boenisch	a7e4500ea6	Re-add clone config with extra_hosts (repos now trusted)	2026-02-15 11:28:10 +01:00