Sync develop into agent-develop #109

Merged

gotoi-agent merged 6 commits from develop into agent-develop

2026-10-10 00:55:25 +02:00

gotoi-agent commented

2026-10-10 00:54:56 +02:00

Collaborator

Mechanical sync: brings the current develop into agent-develop so agent work integrates against it. No content change of its own.

Mechanical sync: brings the current `develop` into `agent-develop` so agent work integrates against it. No content change of its own.

gotoi-agent added 6 commits

2026-10-10 00:54:57 +02:00

fix(middleware): preproduction integrity, security and restart correctness 39559f55f8

- UC-MW-179 idempotent plan commits; reconcile orphan plan repos at boot
- UC-MW-180 redact agent path tokens from request logs
- UC-MW-181 cap every request body (8 MiB manual counter for stream parsers)
- UC-MW-182 per-IP rate limit on /auth/*
- UC-MW-183 public /agent/releases/index.json and artifact download
- UC-MW-184 persist the claim clock (executions.claimed_at + migration 0036)
- UC-MW-185 /services off the request path (cached, docker-less safe)
- UC-MW-186 bounded executions/traces/audit/incidents retention
- UC-MW-187 bulk rotate no longer echoes the agent secret
- CORS allow-list, security headers, trustProxy, /metrics/prom, flush failure visibility

fix(dashboard): public /api/healthz, retention card, drop secret from bulk rotate wire 20aca7673a

chore(agent): delete dead report package 0824481469

feat(deploy): preproduction compose contract 111416e3fb

- Caddyfile: encode response matcher for SSE (encode has no except/path matcher),
  route /events to middleware
- compose: healthchecks, json-file log limits, docs bound to loopback,
  middleware tunables, caddy port overrides
- .env.example rewritten; backup.sh (pg_dump + plans tar + checksums, --restore)
- test-preprod-smoke.sh (17 live assertions)

ci: preflight job (bash -n, compose config, caddy validate, footer guard) f91006b229

docs: flip deploy positioning to preproduction; UCs for MW-179..187, FE-101, OP-29 b06fc842c5

gotoi-agent merged commit 3a26f6a949 into agent-develop

2026-10-10 00:55:25 +02:00

gotoi-agent referenced this pull request from a commit

2026-10-10 00:55:31 +02:00

Merge pull request 'Sync develop into agent-develop' (#109) from develop into agent-develop