busya
731aaaa8df
044 provider runtime completion (pre-staged workstream): capacity/operator stores, provider ops/protocol/reconciler/dispatch revalidation, exploration sandbox runtime, alembic 0014-0016, live canary evidence (browser provider 6/6 against the live stand). 050 Phases 0-2: RBAC FastMCP server with a 45-tool explicit catalog, OAuth/DCR transport guards with bounded bodies, per-call provenance (McpToolInvocationRecord), durable ActionApprovalGate + CAS decide + leased/fenced poller, authoring workspace ops, bounded-response discipline, hidden-vs-gated matrices. Parity domains (T012-T014): gated git/deploy/migration/backup/llm tools with reviewed dispatch adapters in explicit poll chains; Superset reads/writes with a dedicated plugin:superset_sql risk class (terminal PROD denial via the canonical execution-policy criterion, hardened danger-SQL guard covering INTO/CALL/SET/REFRESH/file primitives/multi-statement); baseline 037 tools over the shared REST-surface services. Evidence (T016/T023/T028): REST-vs-MCP field parity on shared 037 fixtures; vertical E2E from tools/list through registry revision activation with real scenario:EDIT RBAC; sandbox-to-revision promotion E2E with unsafe-payload and caller-digest rejection; dispatcher soak (three poll cycles, exactly-once). Orthogonal QA+security audit hardening: enforced response_limit fail-closed envelope, poisoned-exploration fail-closed (EXPLORATION_TARGET_UNRESOLVED), sha256 exploration evidence digests, actor-UUID task ownership, is_active guard on baseline consume, 038 resolver description=None selector fix. Phase 3/4 decommission: HandoffSurface behind the MCP_DECOMMISSION flag, then unconditional removal — agent/ service tree, chat components/models/ stores/types, gradio proxies (vite + nginx), agent service in run.sh, docker-compose profiles, build.sh bundles; /agent renders the handoff only. Docs: AGENTS.md/INSTALL.md two-service rewrite; 036-047 drift amendments marked done; WORKSTATE checkpoints with all evidence. Suites: backend 11199 passed / 240 skipped / 1 xpassed; frontend 3454 passed (197 files), lint 0 errors, build OK; browser E2E login+handoff 6/6 twice on the isolated compose stack (no 7860); ruff/compileall clean. Misc: gitignore hardening (tmp/, tool model cache); E2E selector repairs (nav strict-mode, invalid-credentials passthrough detail).
166 lines
2.5 KiB
Plaintext
Executable File
166 lines
2.5 KiB
Plaintext
Executable File
# Python
|
|
__pycache__/
|
|
*.py[cod]
|
|
*$py.class
|
|
*.so
|
|
.Python
|
|
build/
|
|
develop-eggs/
|
|
dist/
|
|
downloads/
|
|
eggs/
|
|
.eggs/
|
|
parts/
|
|
sdist/
|
|
var/
|
|
wheels/
|
|
pip-wheel-metadata/
|
|
share/python-wheels/
|
|
*.egg-info/
|
|
.installed.cfg
|
|
*.egg
|
|
MANIFEST
|
|
.venv
|
|
venv/
|
|
ENV/
|
|
env/
|
|
backend/backups/*
|
|
|
|
# Node.js
|
|
frontend/node_modules/
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
.svelte-kit/
|
|
.vite/
|
|
build/
|
|
dist/
|
|
.env*
|
|
!.env.example
|
|
config.json
|
|
package-lock.json
|
|
package.json
|
|
|
|
# Logs
|
|
*.log
|
|
*.log.*
|
|
logs/
|
|
backend/logs/
|
|
backend/backend.log
|
|
|
|
# OS
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# IDE
|
|
.vscode/
|
|
.idea/
|
|
*.swp
|
|
*.swo
|
|
|
|
# Project specific
|
|
*.ps1
|
|
keyring passwords.py
|
|
*github*
|
|
*tech_spec*
|
|
/dashboards
|
|
dashboards_example/**/dashboards/
|
|
backend/mappings.db
|
|
backend/tasks.db
|
|
backend/auth.db
|
|
semantics/reports
|
|
backend/**/*.db
|
|
backend/**/*.sqlite
|
|
backend/:memory
|
|
|
|
# Universal / tooling
|
|
node_modules/
|
|
.venv/
|
|
coverage/
|
|
coverage-summary/
|
|
*.tmp
|
|
.coverage
|
|
*.cover
|
|
coverage_html_backend/
|
|
coverage_html_frontend/
|
|
audit_report.txt
|
|
check_semantics.py
|
|
docs_audit_report.txt
|
|
run_mcp.py
|
|
semantic_audit_report.md
|
|
.axiom/checkpoints
|
|
.axiom/runtime/
|
|
|
|
# Semantic index binaries (regenerated on each rebuild)
|
|
.axiom/semantic_index/*.duckdb
|
|
**/.axiom/semantic_index/*.duckdb
|
|
|
|
# Pytest temp artifacts
|
|
.axiom/temp/
|
|
|
|
# E2E screenshots
|
|
e2e_*.png
|
|
|
|
#generated doxygen
|
|
docs/api/html
|
|
docs/api/nav/
|
|
docs/api/build/
|
|
superset-tools.bundle
|
|
|
|
# Axiom semantic index (auto-generated)
|
|
.axiom/
|
|
|
|
# Generated audit reports
|
|
axiom-mcp-tools-audit-report.md
|
|
*.docx
|
|
backend/relative
|
|
.kilo/plans
|
|
|
|
# GitService runtime repos (test artifacts, lock files)
|
|
backend/git_repos
|
|
backend/data
|
|
.playwright-mcp
|
|
storage
|
|
git_repos
|
|
|
|
# Session logs (DSH/agent transcripts — not source)
|
|
session.jsonl
|
|
|
|
# Debug/integration artifacts (temporary test logs)
|
|
artifacts/
|
|
|
|
# Machine-local npm config
|
|
.npmrc
|
|
|
|
# Binary blobs / PDFs (research material, not source)
|
|
research
|
|
*.pdf
|
|
|
|
# SQLite in-memory test artifacts
|
|
:memory:*
|
|
backend/:memory:test_*
|
|
|
|
# Client-specific certs (not secrets, but not part of the source tree)
|
|
/RUSAL_ROOT.cer
|
|
|
|
# Generated semantic-index / bundle artifacts (purged from history)
|
|
semantics/semantic_map.json
|
|
ss-tools.bundle
|
|
|
|
# Coverage reports / data (pytest-cov, coverage.py, vitest)
|
|
backend/htmlcov/
|
|
backend/htmlcov_unit/
|
|
backend/htmlcov_integration/
|
|
backend/coverage_html_*/
|
|
backend/cov_*.json
|
|
backend/cov_*.log
|
|
backend/coverage_unit.json
|
|
backend/coverage_integration.json
|
|
backend/unit_run.log
|
|
backend/integration_run.log
|
|
ss-tools-0.7.0.bundle
|
|
|
|
# Ephemeral local scripts (canaries/probes) and tool model caches
|
|
tmp/
|
|
.smarttrot-models.json
|