7 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Sharang ParnerkarandClaude Opus 4.7	079f913024	feat(smoke): add compliance-smoke crate + scripts/smoke.sh tenant-gating harness ... A minimal Axum binary that mounts compliance-core's M7.1 middleware on three endpoints (public health, protected GET echo, protected POST echo) so we can prove the tenant-gating contract end-to-end against a live KC before any auth-path PR merges. scripts/smoke.sh drives the binary against the five test users defined in the certifai realm (admin/user → active, trial/frozen/archived) and asserts the exact response code per (user × method × endpoint). Run it once before touching auth, tenant_status, or org_roles code. Validated locally — 15/15 assertions pass: * anon/bogus → 401 on protected, 200 on /health * active/trial → 200 on read + write * frozen → 200 read, 402 write (read-after-cancel gate) * archived → 410 read + 410 write (retention window closed) Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-06-04 11:07:45 +02:00
Sharang ParnerkarandClaude Opus 4.7	f583d0788c	feat(core): lift M7.1 tenant types, db helper, and auth middleware into compliance-core ... Moves the tenant-aware HTTP infrastructure into compliance-core so every future product (compliance-agent, compliance-dast, compliance-mcp, the upcoming smoke harness) shares one source of truth instead of each crate re-implementing claims extraction and the status gate. * tenant.rs — TenantStatus / OrgRole / TenantContext (unconditional) * db.rs — tenant_filter + tenant_filter_merge for query scoping * auth.rs — require_jwt_auth + require_tenant_status + JwksState * tenant_ctx.rs — Axum TenantCtx extractor * `axum` cargo feature gates the HTTP-dependent modules so wasm consumers (the dashboard frontend) don't pull axum/jsonwebtoken/reqwest 40 unit tests across the moved modules — all green. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	2026-06-04 11:07:31 +02:00
Sharang Parnerkar	5cafd13f44	ci: log orca webhook response so deploy steps arent silent	2026-04-08 15:09:27 +02:00
Sharang ParnerkarandClaude Opus 4.6	69209649a5	ci: trigger first orca build for all services ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:10:07 +02:00
Sharang ParnerkarandClaude Opus 4.6	d5439adc0d	ci: trigger build of dashboard, docs, mcp images for orca ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:09:49 +02:00
Sharang ParnerkarandClaude Opus 4.6	bc7cdd35e4	ci: replace coolify webhook with orca deploy ... Each deploy job now builds the per-service image, pushes to the private registry as :latest and :sha, then triggers an HMAC-signed orca redeploy webhook. Coolify webhooks are no longer used. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-08 10:06:11 +02:00
Sharang ParnerkarandClaude Opus 4.6	c062d834a1	fix: downgrade dotenv missing file from FAILED to info message ... Non-fatal in Docker where env vars come from container config. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-30 15:33:24 +02:00