7 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Sharang ParnerkarandClaude Opus 4.7	bd6d4572e0	feat(keycloak): add tenant-context client scope + M7.1 test users ... Adds the breakpilot platform multi-tenancy claims to the dev realm so M7.x products (starting with compliance-scanner-agent) can authenticate against the local CERTifAI stack end-to-end. New tenant-context client scope, included by default on all three clients, with six protocol mappers backed by user attributes: tenant_id, tenant_slug, tenant_status, plan (strings) org_roles, products (multi-valued) Five test users cover every tenant_status branch: admin@certifai.local (acme, active, IT_ADMIN + CXO) user@certifai.local (acme, active, USER) trial@acme.local (trialco, trial) frozen@acme.local (frozenco, frozen) -> 402 on writes archived@acme.local (archiveco, archived) -> 410 always Enables Direct Access Grants on certifai-dashboard so password- grant requests work for local API testing. This is the dev realm only (KC_DB: dev-mem); prod realms inherit nothing from this file. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-20 17:21:04 +02:00
Sharang Parnerkar	78b215bb77	ci: retrigger after transient clippy failure	2026-04-08 16:20:43 +02:00
Sharang Parnerkar	58428892a8	ci: log orca webhook response so the step isnt silent on success	2026-04-08 15:09:01 +02:00
Sharang Parnerkar	24b604ce51	ci: install openssl for orca webhook HMAC signing	2026-04-08 14:56:12 +02:00
Sharang Parnerkar	a02827a34b	ci: smoke test full deploy cycle (build → push → orca redeploy)	2026-04-08 12:58:53 +02:00
Sharang ParnerkarandClaude Opus 4.6	5b431f65dc	chore(deps): cargo update to fix audit vulnerabilities ... Bumps transitive deps (aws-lc-sys, quinn-proto, rustls-webpki, etc.) to versions without RUSTSEC advisories. Two unmaintained-warning deps remain (fxhash via scraper, instant via async-stripe) but those are non-blocking warnings only. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:05:36 +02:00
Sharang ParnerkarandClaude Opus 4.6	b5ee887387	ci: replace coolify webhook with orca deploy ... Build and push image to registry, then trigger orca redeploy via HMAC-signed webhook. Coolify webhook is no longer the source of truth. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 09:31:43 +02:00