Hare
931bf3b27d
test: add isolated saved worker restore scenarios
2026-10-24 12:33:31 +09:00
Hare
b8e548b92d
chore: integrate reviewed browser session navigation
2026-10-20 05:31:32 +09:00
Hare
bfeee487fd
feat(auth): separate anonymous entry from expired session recovery
2026-10-20 03:52:48 +09:00
Hare
4555aace28
feat: capture bounded Bash output over replayable byte transport
2026-10-20 03:01:22 +09:00
Hare
9c12fb4372
feat: verify discoverable passkeys against their saved owners
2026-10-16 19:01:43 +09:00
Hare
9debf43645
Merge remote-tracking branch 'origin/develop' into work/T-734-journal-recording
2026-10-16 02:19:24 +09:00
Hare
81af1f085c
feat: record confirmed public Session history through durable Journal Jobs
2026-10-16 02:19:24 +09:00
Hare
6218c27fb6
fix: separate account registration from authenticated passkey addition
...
Bind enrollment purpose and allocated/current account to verifier state. Reject existing-handle registration, derive additions from live transport authentication, recheck revocation/expiry in the insert-only transaction, and consume challenges atomically across connections. Derive stable account WebAuthn handles without rewriting legacy credentials; reject implicit-user login and unsafe legacy ceremonies.
Align account callers, DTO/OpenAPI/generated artifacts and migration/recovery rationale. Preserve credential-less legacy identities rather than allowing anonymous reclaim.
Validation: 14 actual-verifier passkey tests; full workspace-server 1086 library + 11 binary passed (Drive ignored case explicitly selected separately and passed); server-api default 99 and TypeScript feature 108 passed; isolated auth/Runtime E2E 1+2 passed; Web 645 + component 394 passed; root cargo check, docs/doctests, Server/Runtime builds, fmt, naming and generated consistency passed. Software authenticator only; hosted CI/hardware login not claimed.
2026-10-16 00:55:16 +09:00
Hare
c78f7f7d80
feat: replace revision counters with domain state contracts
...
Use content digests, key fingerprints, binding and trust identities, immutable mutation receipts, and observation tokens instead of state-update ordinals across API, storage, Runtime, and Web contracts.
Preserve historical replay and secret material through frozen migrations; preflight uncertain removals before cutover, resume provisioning receipts, validate encrypted migration candidates, and align fresh/upgraded schemas. Include reviewed regression fixes, generated artifacts, and validation evidence.
2026-10-10 15:55:20 +09:00
Hare
5831190012
fix: integrate safe Workdir removal recovery
...
Merge approved T-730 source b1dc8f9f into develop. Resolve the test-registration conflict by preserving both Drive and Workdir-removal tests. Integration root check, Runtime/Server/Worker suites, real Web Drive adapter, generated Workdir contract, Web check/unit/components/build/browser, fmt and diff checks passed.
2026-10-09 17:43:19 +09:00
Hare
b1dc8f9f1c
fix: guard mount-safe Workdir cleanup and current-condition recovery
2026-10-09 17:20:51 +09:00
Hare
34f9e70ce8
chore: merge develop into hare/develop
2026-10-09 16:25:49 +09:00
Hare
e90e2ab391
fix(ticket): validate configuration adapters through structured WIP
2026-10-09 03:04:47 +09:00
Hare
ea1badc0be
chore: merge develop into hare/develop
...
# Conflicts:
# crates/api-macros/src/axum.rs
2026-10-09 02:28:08 +09:00
Hare
f9d4c97f1e
feat: integrate WIP 0.2.0 object-centered tools
2026-10-09 01:34:42 +09:00
Hare
23cf6c4f88
fix: wip bind live ancestor scopes and adopt 0.2.0
2026-10-09 01:00:12 +09:00
Hare
85c9b218dd
feat(wip): integrate scoped SDK and object-centered tools
...
Vendor the reproducible 1cbe03b4 Client/HTTP/Protocol/Text View snapshot with Cargo checksums and credential-free Nix dependency closure. Migrate native and compatibility publications to structured references and scope_ref, preserve target-first preconditions and frozen call descriptors, and expose Tree/Inspect/Invoke with complete edge coverage and official signatures.
Validation: worker 888 unit + 110 integration tests; pinned upstream Client63, HTTP39, Protocol23, TextView20 tests/doctests; root cargo check --locked --offline; format/diff checks; 43-file vendor checksum verification; nix build --no-link .#yoi.cargoDeps. Details and provider migration seams: docs/development/wip-integration-validation.md.
2026-10-09 00:12:38 +09:00
Hare
b5ea162f83
feat(drive): expose authorized typed Workspace Drive API
...
T-722: reuse T-721 storage/CAS/receipts with clone-bound transaction authorization against attached Server authority. Add migration 84 audited Worker read_only/read_write grants and removal/deletion fencing, member-facing ordinary access, owner-controlled grant settings, Workspace-bound decimal entry references, bounded text/binary chunks, streamed HTTP receive/download with integrity and safe headers, typed errors and generated Rust/OpenAPI/TypeScript contracts.
Validation: root cargo check; server-api 83 default / 91 typescript tests; FeatureStorage 16; Drive 31 unit + 12 integration; Workspace Server 691 library + 11 binary tests (--test-threads=4), including 9 real DB/LocalFileSystem HTTP tests for two Workers/non-owner usage, revoke during reception, concurrent CAS, response-loss receipts, chunk expiry and safe binary media. cargo fmt --all -- --check and git diff --check HEAD passed. Existing OpenAPI schemas/routes semantically unchanged; dependent TS digest projections regenerated.
2026-10-09 00:02:09 +09:00
Hare
633522278b
feat(drive): add durable Workspace document storage and lifecycle
...
Use object_store 0.13.2 immutable local blobs and FeatureStorage SQLite trees, revision CAS, same-transaction receipts, bounded reads/search, staged/orphan GC and retryable deletion. Attach Server authority to serialize cached Drive operations with deletion reservation. Document fsync compensation, Linux guarantees and offline DB-plus-blob restore.
Validation: root cargo check; workspace-drive 29 unit + 12 integration tests; feature-storage 13 tests; workspace-server 649 library + 11 binary tests with test-threads=4; cargo fmt --all -- --check; git diff --check HEAD. Default-parallel Server run hit the existing ticket_checker_burst timeout assertion (648 passed); the isolated filter and bounded-parallel full suite passed. Fault tests are not physical power-cut evidence.
2026-10-08 21:39:51 +09:00
Hare
56ab8c22ba
fix: preserve generated API error details in logs
2026-10-08 15:33:38 +09:00
Hare
4343be86c1
feat(config-source): add confined read-only builtin Decodal imports
...
Share the explicit embedded Profile catalog with native and WASM evaluators. Preserve ordinary Decodal values, isolate builtin relative imports, reject reserved Workspace mutations, and capture the exact loaded builtin closure. Guard lazy import cycles and dependency depth before evaluation recurses.
Validation: config-source 48 tests, builtin-source 2 tests, manifest 185 tests; root cargo check, formatting and diff checks pass. Existing contract version/fingerprint stay unchanged; archive provenance binds builtin content instead of invalidating stored Workspace metadata.
2026-10-07 03:35:59 +09:00
Hare
24ae6288a5
feat(subjektiv): share domain and add explicit standalone Subject hosts
2026-10-07 01:52:06 +09:00
Hare
13055d7ee1
feat: execute durable standalone Jobs through Host-owned Internal Workers (T-708)
2026-10-07 00:08:01 +09:00
Hare
6f9621ca2e
fix: retain Restore recovery intent and retire stale caller conflicts (T-701)
2026-10-06 18:15:31 +09:00
Hare
603a814b80
Merge commit '5670c20a6a50077985168269dfc15a6776c66ba6' into work/T-699-checkout-projection
2026-10-06 03:37:07 +09:00
Hare
149853bb0e
feat: project attached checkouts with scoped native AI operations
2026-10-06 03:37:07 +09:00
Hare
5670c20a6a
fix: integrate develop and preserve invocation notification recovery
2026-10-05 22:25:32 +09:00
Hare
f7783b3d2a
feat: add declarative Feature chat invocations and typed composers
2026-10-05 18:44:41 +09:00
Hare
74a00f9edc
fix: recover from provider image size rejections
2026-10-04 23:17:43 +09:00
Hare
e2181e9052
fix(worker): preserve typed native WIP contracts
2026-10-04 00:46:51 +09:00
Hare
4a05aad508
feat: add explicit Worker WIP mode
2026-10-04 00:26:15 +09:00
Hare
ec7a6f59c8
fix: complete subject session paging
2026-10-02 18:00:30 +09:00
Hare
717d28839d
fix: exercise production CLI image provider
2026-09-30 08:32:43 +09:00
Hare
4e8a7fc118
fix: address ViewImage external review findings
2026-09-30 08:16:06 +09:00
Hare
8b951d53e6
feat: add external workdir command permissions
2026-09-29 11:26:25 +09:00
Hare
ed99be3e24
fix: type runtime config and test passkey lifecycle
2026-09-23 20:15:23 +09:00
Hare
97822cf691
feat: add bounded binary API request bodies
2026-09-23 18:29:54 +09:00
Hare
7a975765ac
feat: migrate repository and workdir domains to ServerApi
2026-09-23 06:51:05 +09:00
Hare
6d65d50ec1
feat: migrate ticket and objective domains to ServerApi
2026-09-23 05:42:50 +09:00
Hare
6cbc3a6988
feat: migrate workspace configuration domains to ServerApi
2026-09-23 04:27:52 +09:00
Hare
617c56bd85
Merge remote-tracking branch 'origin/develop' into work/T-452-remove-repository-local-yoi
2026-09-22 23:41:17 +09:00
Hare
5fb3cb20cd
refactor: remove repository-local yoi authority
2026-09-22 22:52:41 +09:00
Hare
0869ef0cc6
test(e2e): isolate worker server runtime environments
2026-09-22 22:26:02 +09:00
Hare
ce9534f3a2
feat: add client-hosted external workdirs
2026-09-22 06:49:15 +09:00
Hare
e12b555f43
Migrate repository routes to ServerApi
2026-09-18 17:17:02 +09:00
Hare
bd07f3a66f
refactor: rename Workspace API crate to server API
2026-09-18 06:35:33 +09:00
Hare
c6cb038683
refactor(api): rename workspace-api authority to server-api
...
Absorb the Server HTTP DTO catalog and generators into server-api, remove the obsolete workspace-api package/path, preserve the separate runtime transport authority through explicit boundary DTO conversions, and rename the aggregate frontend projection as a bounded legacy artifact.
2026-09-18 06:21:46 +09:00
Hare
991adc2fa1
feat: generate OpenAPI from API contracts
2026-09-18 06:05:11 +09:00
Hare
f513cfca10
feat(api): generate deterministic OpenAPI 3.1 contracts
2026-09-18 05:29:13 +09:00
Hare
74981f8217
fix: harden retained session observation
2026-09-18 04:59:05 +09:00