6 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Sharang ParnerkarandClaude Fable 5	e5f4b562c3	refactor(werkbank): extract soft-PLC provisioning + ICS probe into werkbank-exec (WB-04a) ... Prep for the Werkbank Docker executor (sharang/werkbank#5): the dynamic-execution logic has to be usable by the runner (a separate repo), so lift it out of the agent into a shared crate. New crate `werkbank-exec` (git-mv preserves history): - src/ics/* — the read-only industrial-protocol probe (Modbus/OPC-UA/ EtherNet-IP/portscan), moved verbatim. - src/plc/* — ephemeral soft-PLC provisioning (DockerSoftPlc), the OpenPLC program-load client, and provision_and_test/extract_program. - src/error.rs — a crate-local ExecError, replacing the agent's AgentError. - src/fingerprint.rs — compute_fingerprint (copied from the agent's dedup). Depends only on compliance-core + compliance-dast, so the runner can pull it without the agent's server stack. compliance-agent consumes it: - AgentError gains `Exec(#[from] werkbank_exec::ExecError)`. - The orchestrator's ICS-probe + provision-and-test call sites point at werkbank_exec::{ics,plc}; the old pipeline::ics and plc::runtime modules are removed (the static PLC scanner stays). - CI clippy-checks + tests the new crate. Pure move + rename — no behaviour change. 27 moved tests pass in the new crate; 283 agent lib tests pass; clippy + fmt clean. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-17 14:25:22 +02:00
Sharang Parnerkar	5cafd13f44	ci: log orca webhook response so deploy steps arent silent	2026-04-08 15:09:27 +02:00
Sharang ParnerkarandClaude Opus 4.6	69209649a5	ci: trigger first orca build for all services ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:10:07 +02:00
Sharang ParnerkarandClaude Opus 4.6	d5439adc0d	ci: trigger build of dashboard, docs, mcp images for orca ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:09:49 +02:00
Sharang ParnerkarandClaude Opus 4.6	bc7cdd35e4	ci: replace coolify webhook with orca deploy ... Each deploy job now builds the per-service image, pushes to the private registry as :latest and :sha, then triggers an HMAC-signed orca redeploy webhook. Coolify webhooks are no longer used. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:06:11 +02:00
Sharang ParnerkarandClaude Opus 4.6	c062d834a1	fix: downgrade dotenv missing file from FAILED to info message ... Non-fatal in Docker where env vars come from container config. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-30 15:33:24 +02:00