Repository navigation

chú ngọc merge cho cháu với T.T - #7

Open

askerNQK wants to merge 120 commits into

AI-Decenter:mainfrom

askerNQK:main

Open

chú ngọc merge cho cháu với T.T#7
askerNQK wants to merge 120 commits into
AI-Decenter:mainfrom
askerNQK:main

Commits on Oct 1, 2025
- feat(issue-05): add basic graceful reload (node --watch), sidecar backoff+jitter, improved JSON extraction; update checklist
  iOS E2E Implementation
  committed
  d99f799
- feat(dev-hot): signature verifier, sidecar image infra, supervisor, E2E signature workflow & metrics
  iOS E2E Implementation
  committed
  bf2c3b1
- feat(dev-hot): sidecar publish workflow, multi-namespace ingest, provenance docs, enhanced supervisor & signature metric
  iOS E2E Implementation
  committed
  10f27ab
- feat(supply-chain): server signature enforcement flag, SBOM endpoint, provenance integration, multi-NS ingest, Issue05 doc updates
  iOS E2E Implementation
  committed
  6f6edfc
- chore(licenses): add MIT license fields to internal helper crates to satisfy cargo-deny
  iOS E2E Implementation
  committed
  65a7ad9
- docs(issue06): detailed SBOM & supply chain status, roadmap, checklist, gaps
  iOS E2E Implementation
  committed
  01996a0
- issue06: add CycloneDX generation, SBOM upload endpoint, enforcement flag, CLI support
  iOS E2E Implementation
  committed
  c65bb3a
- issue06: provenance v2, DSSE signing, full CycloneDX validation, lockfile integrity, provenance endpoints
  iOS E2E Implementation
  committed
  bc0948c
- cli: fix dead_code PackageLock removal & clippy never_loop; replace or_insert_with -> or_default
  iOS E2E Implementation
  committed
  48542f0
Commits on Oct 7, 2025
- control-plane: fix artifact_meta select (provenance_present) and deterministic retention/list ordering
  iOS E2E Implementation
  committed
  4402d2b
- issue06 phase3: manifest upload + digest cross-check, strict SBOM enforcement, metrics (provenance_emitted_total, sbom_invalid_total)
  iOS E2E Implementation
  committed
  8a94b3f
- issue06 doc: mark manifest upload, strict enforcement, new metrics done
  iOS E2E Implementation
  committed
  1025bb3
- tests: add manifest/SBOM enforcement & metrics coverage
  iOS E2E Implementation
  committed
  7cba999
- feat: gzip negotiation, full-schema test, provenance & attestation ETag/gzip, backfill job + tests
  iOS E2E Implementation
  committed
  12ad81e
- chore: collapse nested if let in artifacts handler (clippy clean)
  iOS E2E Implementation
  committed
  e6406b2
- chore: remove unused AppState imports in tests (clippy clean)
  iOS E2E Implementation
  committed
  79846a0
- chore: clippy fix iter().cloned().collect() -> to_vec() in sbom_manifest_enforcement test
  iOS E2E Implementation
  committed
  46eae47
Commits on Oct 8, 2025
- test: speed/stability improvements (shared pool policy, TRUNCATE cleanup, readiness retry, pool warm-up)
  iOS E2E Implementation
  committed
  34a93da
- feat(issue-06): complete extended provenance, cyclonedx advanced sections, provenance enforcement, key listing
  iOS E2E Implementation
  committed
  84fb7bd
- test(provenance): dual-sign and key retirement test
  iOS E2E Implementation
  committed
  c2dc076
- chore(lint): fix unused openapi assignment & redundant closure
  iOS E2E Implementation
  committed
  ed2334f
- feat(observability,security): implement Issue 07 metrics & trace propagation; provenance + keystore tests; clippy fixes
  iOS E2E Implementation
  committed
  764c49e
- test: add artifact_verify_failure_total increment test
  iOS E2E Implementation
  committed
  42f2b8d
- feat(issue-08): dev automation + hot reload (deploy-sample, hot-upload, hot-patch, downward API sidecar)
  iOS E2E Implementation
  committed
  fea537f
- ci: add fast + full test workflow with sccache and fast test gating
  iOS E2E Implementation
  committed
  22f6dc2
- ci: pin rust 1.90.0 and use install-action for sccache
  iOS E2E Implementation
  committed
  311e4e9
- chore: harden SBOM tests & diagnostics (debug logging, metrics assertions, fast-mode guard)
  iOS E2E Implementation
  committed
  f077d1c
- ci: allow full-tests job on PR via full-tests label
  iOS E2E Implementation
  committed
  f4c5b1b
- ci: run full-tests on every PR
  iOS E2E Implementation
  committed
  5db90af
Commits on Oct 11, 2025
- test(control-plane): speed up and stabilize DB-bound tests; reduce contention; gate background; add indexes; once-only schema checks
  iOS E2E Implementation
  committed
  a9c8d5c
- docs: add fast test env flags and setup guidance for control-plane tests
  iOS E2E Implementation
  committed
  db86143
- test(harness): fix clippy min/max pattern by capping to env-specific limit and honoring requested pool size
  iOS E2E Implementation
  committed
  74424eb
- docs(issues): add task checklist and execution plan for Issue 09 (benchmarks & regression CI)
  iOS E2E Implementation
  committed
  af1f0d2
- docs(issues): add TDD plan for Issue 09 as a standalone document to avoid nested fence conflicts
  iOS E2E Implementation
  committed
  231892d
- perf(bench): add regression checker + fixtures; emit JSON from packaging & streaming benches; add baseline file; update bench targets
  iOS E2E Implementation
  committed
  62bb2d1
- ci(bench): add benchmarks job to run regression fixtures, benches, comparisons, and upload JSON artifacts
  iOS E2E Implementation
  committed
  6a70de4
- tdd(bench): finalize T1–T10; schema validation in regression script; update TDD doc with completion markers
  iOS E2E Implementation
  committed
  66cf3cb
- bench: implement mock streaming bench; docs: benches usage & baseline; issue09: mark completed tasks
  iOS E2E Implementation
  committed
  17f0031
- bench: add committed streaming baseline; ci: pin threads/logs and compare against committed baseline; docs: expand dedicated bench section
  iOS E2E Implementation
  committed
  ce92943
- ci: enforce benchmarks on main/PR; run benches and fail on >20% p95 regressions; upload artifacts
  iOS E2E Implementation
  committed
  88dd563
- bench(regression): make script resilient and fix exit codes on success; helpful logs locally
  iOS E2E Implementation
  committed
  ea673ad
- docs(issue09): mark docs + stabilization guardrails completed; Issue 09 complete
  iOS E2E Implementation
  committed
  04d31c5
- bench: update packaging baseline (p95 ~1.2ms) to reflect CI runs; keep 20% regression guard
  iOS E2E Implementation
  committed
  e3f6192
- issue10: auth & RBAC foundation
  iOS E2E Implementation
  committed
  ef2b567
- issue10: observability/logs
  iOS E2E Implementation
  committed
  19dcaf9
- ci: provide dummy AETHER_API_TOKENS in tests; fix workflow lint; auth/RBAC clippy cleanups
  iOS E2E Implementation
  committed
  8f3c3fc
- ci(feature): fix MinIO service image tag to a valid release; remove unsupported command field
  iOS E2E Implementation
  committed
  521604b
- ci(feature): switch MinIO service to bitnami/minio:latest to fix pull errors; keep health check
  iOS E2E Implementation
  committed
  01fc255
- test(ci): default to per-test DB pools (AETHER_TEST_SHARED_POOL=0) to avoid Tokio runtime shutdown errors
  iOS E2E Implementation
  committed
  4d9627f
- ci(feature): run MinIO via docker run (minio/minio:latest) with health wait to avoid service image tag issues
  iOS E2E Implementation
  committed
  82945e9
- tests: fix bench fixtures schema for streaming (p95>=p50) and align deltas with comments
  iOS E2E Implementation
  committed
  4bb53df
- tests: correct stream -10% fixture to p95=72 (baseline 80), schema-valid
  iOS E2E Implementation
  committed
  43edbb0
- ci(macos): remove Docker-based MinIO (not available) and use mock storage
  iOS E2E Implementation
  committed
  dfc5541
- ci: faster, less flaky tests – per-test DB pools, once-only migrations, tuned pool, limited test threads; Linux MinIO via docker run, macOS mock storage
  iOS E2E Implementation
  committed
  ecc7f14
- net: unify default HTTP/TLS stack to hyper1/rustls23; gate AWS S3 to avoid hyper-014 path by default; add TLS smoke test and measurement scripts; update Issue 11 docs and guard
  iOS E2E Implementation
  committed
  46add97
- docs: add build time and binary sizes (release) for Issue 11 baseline-after-unify
  iOS E2E Implementation
  committed
  2f9a2df
- chore(workspace): set kube default-features=false to honor per-crate config and silence cargo warning; keep modern HTTP/TLS stack guard passing
  iOS E2E Implementation
  committed
  1f7d136
- docs(issue-11): acceptance results + measurements; chore(deny): allow duplicate windows target crates in bans policy; workspace: kube default-features=false
  iOS E2E Implementation
  committed
  5ff2441
Commits on Oct 13, 2025
- ci: fix linker bus errors by avoiding all-features on PR runs; set RUSTFLAGS debuginfo=1; add S3 compile check only on non-PR. chore(deny): stabilize cargo-deny bans config (skip known dev trees, s…
  iOS E2E Implementation
  committed
  8e5970e
- ci(feature): reduce linker pressure by avoiding all-features workspace tests; add dedicated control-plane s3 tests; set RUSTFLAGS debuginfo=1
  iOS E2E Implementation
  committed
  844a819
- docs(issue-11): update progress, CI/linker fixes, cargo-deny bans policy, and bench guard tolerance; mark completed phases and add 2025-10-13 status
  iOS E2E Implementation
  committed
  1316d09
- ci(deny): avoid sccache wrapper inside cargo-deny action container by unsetting RUSTC_WRAPPER for the step; fixes rustc not found (sccache) error
  iOS E2E Implementation
  committed
  1e0e870
- ci(deny): replace cargo-deny action with direct cargo-deny runner to avoid krates panic on aws_lc_rs feature resolution under --all-features; keep bans strict
  iOS E2E Implementation
  committed
  1b0a627
- ci(deny): run cargo-deny with --all-features explicitly; ci: add opt-in Control-plane S3 tests via AETHER_ENABLE_S3_FULL_CI; docs(issue-11): note S3 CI toggle and steps post AWS hyper 1.x
  iOS E2E Implementation
  committed
  dd7d751
- ci: enable S3 tests on non-PR runs via AETHER_ENABLE_S3_FULL_CI=1; docs(issue-11): add latest build time and binary sizes; note AWS hyper 1.x bump is blocked upstream; keep aws crates at 1.x rustls…
  iOS E2E Implementation
  committed
  9ac226c
- chore(deny): add temporary skip for hashbrown duplicate (0.14 via sqlx/hashlink, 0.15 via aws-sdk-s3/lru); to be removed when upstream unifies
  iOS E2E Implementation
  committed
  ffa089a
- perf(bench): make tolerances configurable via env (DURATION_TOLERANCE, THROUGHPUT_TOLERANCE); defaults remain 20%/25%
  iOS E2E Implementation
  committed
  0aabae4
- ci(bench): set DURATION_TOLERANCE=0.22 for regression guard to reduce runner noise; throughput tolerance unchanged
  iOS E2E Implementation
  committed
  c2918e7
- ci(s3): ensure MinIO is started/configured for S3 tests; test env set for control-plane; deny(advisories): temporarily ignore instant/paste and sqlx advisories until deps bump
  iOS E2E Implementation
  committed
  4317a2a
- deny: fix advisories schema; add ignores for backoff/derivative; allow Unicode-3.0 & MPL-2.0; add webpki-roots CDLA exception; run cargo-deny with --all-features clean
  iOS E2E Implementation
  committed
  f058af7
- feat: sync with upstream PR #6 (graceful reload, SBOM/provenance, CI/bench/deny/observability, fixes, docs, tests)
  iOS E2E Implementation
  committed
  41cf6e6
- tests(control-plane): gate multipart S3 integration test behind s3 feature and skip when AETHER_STORAGE_MODE!=s3 to prevent false CI failures; no functional code changes
  iOS E2E Implementation
  committed
  5430654
- storage(control-plane): default mock base to localhost; force path-style when AETHER_S3_ENDPOINT_URL set for MinIO compatibility; gate S3 integration tests behind s3 feature and skip when not in S3…
  iOS E2E Implementation
  committed
  7aa84f5
- s3(minio): force path-style for custom endpoint; default mock base to localhost; include x-amz-meta-sha256 in presigned headers; gate all S3 integration tests behind feature and skip if not in S3 mode
  iOS E2E Implementation
  committed
  83987bf
- Merge pull request #2 from askerNQK/feat/complete-aether-engine-mvp
  askerNQK
  authored
  92fb3bb
- docs: add sprint plan and per-epic issues with owners
  iOS E2E Implementation
  committed
  5cc6ceb
- docs(issues): add sprint indices and epic issue docs with owners
  iOS E2E Implementation
  committed
  22a9089
- Merge pull request #3 from askerNQK/feat/complete-aether-engine-mvp
  askerNQK
  authored
  c74bb0f
- Epic D: Base Node.js 20 slim image pipeline
  iOS E2E Implementation
  committed
  49a923c
- CI: gate on 0 CRITICAL vulns; scan local image before push; push only on success; attach JSON + SARIF + SBOM; cosign post-push
  iOS E2E Implementation
  committed
  2a5f216
- CI: make Grype non-blocking (continue-on-error, fail-build=false); keep gating on Trivy CRITICAL only
  iOS E2E Implementation
  committed
  09e71a1
- Epic B: Helm/Kustomize & RBAC/SA – add control-plane chart, RBAC for aether-dev-hot, CI helm lint/template, docs, tests (TDD)
  iOS E2E Implementation
  committed
  8a61d4b
- Security: add Trivy (.trivyignore) & Grype (security/grype-ignore.yaml) allowlists; gate on HIGH+CRITICAL via env GATE_SEVERITY; honor allowlists in scans; keep Grype non-blocking
  iOS E2E Implementation
  committed
  5a71671
- CI: add trivy findings summary artifact for easier allowlisting
  iOS E2E Implementation
  committed
  aed5cc7
- Dockerfile: run apt-get upgrade -y to pick up security fixes while keeping image slim
  iOS E2E Implementation
  committed
  f3c38b7
- Dockerfile: update npm to latest and clean cache to reduce potential npm advisories
  iOS E2E Implementation
  committed
  f18009e
- CI: echo summarized Trivy HIGH/CRITICAL findings in logs for quicker RCA
  iOS E2E Implementation
  committed
  24c9953
- aether-cli: fix logs command deps and tests for hyper v1; add futures-util/urlencoding; switch test server to axum
  iOS E2E Implementation
  committed
  a62c679
- Fix: aether-cli logs deps and tests for Hyper 1.x; enable tokio io-std; unblock cargo sqlx prepare
  iOS E2E Implementation
  committed
  9476362
- cli: add logs mock mode to avoid network in tests; stream JSON/text; keep tests green
  iOS E2E Implementation
  committed
  14a79af
- fix(helm-rbac-tests): satisfy clippy -D warnings by removing let-and-return and using serde rename for snake_case
  iOS E2E Implementation
  committed
  e44009a
- docs: mark Epic D complete (aether-nodejs:20-slim) and record implementation details (Dockerfile, workflow, security gates, SBOM)
  iOS E2E Implementation
  committed
  a18c486
- Docs: mark Epic B done; add Helm chart usage guide and link from issue
  iOS E2E Implementation
  committed
  91d03a0
- Helm: fix ConfigMap indentation to satisfy helm lint
  iOS E2E Implementation
  committed
  90d2585
- docs(issues): update Epic A logs streaming status and checklist (2025-10-13)
  iOS E2E Implementation
  committed
  149ec37
- Helm: make ConfigMap template robust; add .Values.config default
  iOS E2E Implementation
  committed
  086c6c0
- chore(helm-rbac-tests): add SPDX license to satisfy cargo-deny
  iOS E2E Implementation
  committed
  8598276
Commits on Oct 14, 2025
- feat(control-plane): implement Kubernetes logs streaming (kube-rs) with follow/tail/since/container; expose in OpenAPI; keep mock mode for tests
  iOS E2E Implementation
  committed
  c66eecb
- tests(epic-f): TDD for E2E smoke; feat: sample-node app, smoke_e2e.sh (dry-run JSON+MD), e2e-smoke workflow, README docs
  iOS E2E Implementation
  committed
  775b3a2
- docs(issues): mark Epic A A1 done, partial A2 complete; add 2025-10-14 status update
  iOS E2E Implementation
  committed
  b380084
- docs: mark Epic F complete (E2E smoke + metrics) and record implementation details (sample app, smoke script, CI, README)
  iOS E2E Implementation
  committed
  d65edb0
- Epic C: CI DB stability via matrix and harness retries
  iOS E2E Implementation
  committed
  5236b18
- test(harness): fix retry loop ownership and warning in test_support.rs
  iOS E2E Implementation
  committed
  1e88e68
- feat(logs): WS route (feature-gated) and refined mock path; add multi-pod mock test; real kube streaming intact
  iOS E2E Implementation
  committed
  3109bd7
- docs(epic-A): mark logs streaming as complete, update status for 2025-10-14
  iOS E2E Implementation
  committed
  b46ed1e
- Epic H: SBOM/Provenance hardening (TDD)
  iOS E2E Implementation
  committed
  5b68732
- docs(epic-A): mark all logs streaming tasks complete, add final status update
  iOS E2E Implementation
  committed
  550b955
- Epic G: TLS Ingress and Auth Policy hardening complete (TDD, implementation, docs)
  iOS E2E Implementation
  committed
  8988c47
- Epic H follow-ups: fix manifests and tests\n\n- aether-cli: tidy Cargo.toml deps, ensure clean JSON/stdout for logs, minor flags doc\n- tests: add logs_command.rs (unit)\n- docs: update epic E logs…
  iOS E2E Implementation
  committed
  bbc4fe7
- feat(cli/logs): TDD tests + implementation verified; docs: README and Epic E final update
  iOS E2E Implementation
  committed
  f5c5ca7
- Auth policy: make auth_required enforce even without tokens; fix tests flakiness via serial; correct Authorization header in test; update docs
  iOS E2E Implementation
  committed
  da297ba
- test(helm-rbac-tests): remove unused anyhow::Context import to satisfy -D warnings
  iOS E2E Implementation
  committed
  3942c10
- Epic I: Operator guide and troubleshooting (TDD)\n\n- TDD: add tests/epic_i_test.sh\n- Docs: docs/operator-guide.md and docs/troubleshooting.md\n- Cross-links: README and STATUS updated\n- Issue do…
  iOS E2E Implementation
  committed
  bbd1875
- chore(clippy): fix needless-bool in cli deploy and needless-return in control-plane auth; clean unused import in cli tests
  iOS E2E Implementation
  committed
  148e4f4
- CLI tests: accept CycloneDX SBOM default in deploy_sbom_and_sig (still supports legacy)
  iOS E2E Implementation
  committed
  40d6c37
- fix(cli/sbom): default to legacy aether-sbom-v1 unless --cyclonedx is explicitly set; satisfies sbom_dependencies test
  iOS E2E Implementation
  committed
  0c6649d
- ci: mitigate disk exhaustion on runners (free space, prune docker); reduce debug info; cap sccache; disable incremental
  iOS E2E Implementation
  committed
  89bd784
- ci: reduce memory pressure (prefer-dynamic, -j2) and stabilize linking for S3 tests; keep free-space and prune steps
  iOS E2E Implementation
  committed
  291e0c2
- ci: mitigate linker crashes in S3 tests (no-threads, strip, serialize link); keep free-space & prune steps
  iOS E2E Implementation
  committed
  c565953
Commits on Oct 15, 2025
- ci: build MerkleKV-Mobile Windows single-file SFX and upload artifact
  iOS E2E Implementation
  committed
  928aeca

Commits

Commits on Oct 1, 2025

Commits on Oct 7, 2025

Commits on Oct 8, 2025

Commits on Oct 11, 2025

Commits on Oct 13, 2025

Commits on Oct 14, 2025

Commits on Oct 15, 2025