Repository navigation

Gemba Remote foundations: M1 OSS core + M2 federation + M3 hosted plane + ASDD Phase 1 - #2

Merged

MikeBengtson merged 91 commits into

mainfrom

feat/gemba-remote-foundations

May 13, 2026

Merged

Gemba Remote foundations: M1 OSS core + M2 federation + M3 hosted plane + ASDD Phase 1#2
MikeBengtson merged 91 commits into
mainfrom
feat/gemba-remote-foundations

Commits on May 12, 2026
- gm-o9t8.1.1.2: gemba login + whoami with PAT credstore
  
  MikeBengtson
  and
  claude
  committed
  321a0a0
- gm-o9t8.14: OpenAPI surface + 501 stubs for Govern + Convenience verbs
  
  MikeBengtson
  and
  claude
  committed
  2cb4a5a
- gm-o9t8.1.2.3: embedded Dolt sql-server lifecycle supervisor
  
  MikeBengtson
  and
  claude
  committed
  318f61e
- Merge gm-o9t8.1.1.2: gemba login + whoami + credstore
  MikeBengtson
  committed
  145914d
- Merge gm-o9t8.14: Govern OpenAPI surface + 501 stubs
  
  MikeBengtson
  and
  claude
  committed
  a31bcc7
- Merge gm-o9t8.1.2.3: embedded Dolt sql-server supervisor
  MikeBengtson
  committed
  c0036db
- gm-o9t8.1.1.4: typed Go client generated from OpenAPI
  
  MikeBengtson
  and
  claude
  committed
  c7bb468
- Merge gm-o9t8.1.1.4: typed Go client + credstore-aware wrapper
  MikeBengtson
  committed
  15d65e2
- WIP: SSE consumer helper
  MikeBengtson
  committed
  3887117
- WIP: gemba agent dispatch
  MikeBengtson
  committed
  adf15b8
- WIP: gemba run + logs skeletons
  MikeBengtson
  committed
  2099df1
- gm-o9t8.1.5.5: gemba run + agent dispatch + logs -f
  MikeBengtson
  committed
  5c0c4d9
- Merge gm-o9t8.1.5.5: gemba run + agent dispatch + logs -f
  MikeBengtson
  committed
  fd45084
- gm-o9t8.1.3.2: gemba bead CRUD CLI + enrichment subgroup
  
  MikeBengtson
  and
  claude
  committed
  95ac46e
- Merge gm-o9t8.1.3.2: gemba bead CRUD CLI + enrichment subgroup
  MikeBengtson
  committed
  157987a
- test(server): add gm-o9t8.1.3.3 CLI→server schema round-trip test
  MikeBengtson
  committed
  23d8dfb
- Merge gm-o9t8.1.3.3: schema round-trip integration test (HTTP boundary)
  MikeBengtson
  committed
  693474d
- WIP: review baseline before adding status command
  MikeBengtson
  committed
  c13c614
- WIP: serverconfig package + tests
  MikeBengtson
  committed
  b43518c
- WIP: gemba status command + root no-args wiring
  MikeBengtson
  committed
  cd1b852
- WIP: wire serverconfig resolver into CLI commands + add gemba config show
  MikeBengtson
  committed
  c8f8297
- gm-o9t8.1.6.4: gemba status dashboard (Ad-hoc mode) + root no-args wiring
  MikeBengtson
  committed
  ea5e986
- Merge gm-o9t8.1.6.4: gemba status dashboard (Ad-hoc mode) + bare gemba
  MikeBengtson
  committed
  c205f95
- WIP: integration tests for GEMBA_SERVER env + config.toml file routing
  MikeBengtson
  committed
  de238d0
- WIP: wire embedded dolt supervisor DSN into serve.go
  MikeBengtson
  committed
  f2e1fa7
- Merge gm-o9t8.1.1.3: server URL config resolver + gemba config show
  MikeBengtson
  committed
  02a3a73
- WIP: add embedded dolt DSN e2e round-trip test
  MikeBengtson
  committed
  d1ed84f
- Merge gm-o9t8.1.7: wire embedded Dolt supervisor DSN into bd adapter
  MikeBengtson
  committed
  a58dd36
- WIP: workspacelayout package + ratify hook
  MikeBengtson
  committed
  059ea97
- WIP: ratify layout test + docs
  MikeBengtson
  committed
  7727d00
- gm-o9t8.1.11: migrate run/logs/agent-dispatch to typed client
  
  MikeBengtson
  and
  claude
  committed
  acd4e34
- Merge gm-o9t8.1.2.4: per-workspace data layout + permission model
  MikeBengtson
  committed
  07b4da6
- Merge gm-o9t8.1.11: migrate run/logs/agent-dispatch to typed client + close gm-o9t8.1.13
  MikeBengtson
  committed
  20e4aa7
- gm-o9t8.1.6.2: gemba diff streams uncommitted workspace changes
  MikeBengtson
  committed
  32fad8e
- Merge gm-o9t8.1.6.2: gemba diff command (server streams git diff)
  MikeBengtson
  committed
  6414607
- gm-o9t8.1.4.4: replace workspace status 501 stub with real handler
  MikeBengtson
  committed
  d379608
- gm-o9t8.1.4.4: document workspace status response shape in OpenAPI
  MikeBengtson
  committed
  e1ed964
- gm-o9t8.1.4.4: drive CLI dashboard off new /workspaces/{wsid}/status
  MikeBengtson
  committed
  8861067
- Merge gm-o9t8.1.4.4: workspace status RPC (real handler + diff route kept)
  MikeBengtson
  committed
  2d0ba89
- gm-o9t8.15: reject --project-dir + --embedded-dolt combo
  MikeBengtson
  committed
  54eec05
- gm-o9t8.1.10: track web/dist/.gitkeep so go build works on fresh checkout
  MikeBengtson
  committed
  5322eb4
- gm-o9t8.1.17: route gemba status through internal/client with bearer auth
  
  MikeBengtson
  and
  claude
  committed
  26a1dbf
- Merge gm-o9t8.1.10: track web/dist/.gitkeep so embed always finds a file
  MikeBengtson
  committed
  90577d8
- gm-o9t8.1.17: test bearer header on gemba status
  
  MikeBengtson
  and
  claude
  committed
  b73879b
- Merge gm-o9t8.1.17: route CLI status through typed client + bearer
  MikeBengtson
  committed
  17e7e24
- gm-o9t8.16: wire AttachWorkspacesRoot from cmd/gemba serve
  MikeBengtson
  committed
  26f5989
- gm-o9t8.1.12: extend round-trip to full CLI→server→Dolt path
  
  MikeBengtson
  and
  claude
  committed
  93c2cc3
- Merge gm-o9t8.1.12: full CLI→server→Dolt round-trip test
  MikeBengtson
  committed
  90a2a3f
- gm-o9t8.1.9: expose embedded-dolt status for SPA degraded-state banner
  
  MikeBengtson
  and
  claude
  committed
  b46ced2
- gm-o9t8.14: auto-bootstrap embedded-dolt schema on first start
  MikeBengtson
  committed
  ba71033
- Merge serve bundle: gm-o9t8.1.14 (schema bootstrap) + 1.15 (project-dir reject) + 1.16 (AttachWorkspacesRoot wiring)
  MikeBengtson
  committed
  6d34ec6
- gm-o9t8.1.18: real transcript summarisation for last_run_summary
  
  MikeBengtson
  and
  claude
  committed
  7516201
- Merge status bundle: gm-o9t8.1.9 (embedded-dolt banner) + 1.18 (real last_run_summary)
  MikeBengtson
  committed
  43af7d7
- feat(secrets): per-workspace AES-GCM encrypted secret vault
  
  MikeBengtson
  and
  claude
  committed
  7fcd79d
- WIP: vault package with bbolt-backed envelope encryption
  MikeBengtson
  committed
  c1a66d6
- feat(gitops): server-side git canonicalization + push-back
  
  MikeBengtson
  and
  claude
  committed
  b7acde0
- Add tenant + WSID parsing for multi-tenant control plane
  
  MikeBengtson
  and
  claude
  committed
  e35b76d
- feat(audit): append-only, hash-chained, Ed25519-signed audit log
  
  MikeBengtson
  and
  claude
  committed
  f6421cf
- feat(dolthub): per-workspace DoltHub remote push/pull via secrets vault
  
  MikeBengtson
  and
  claude
  committed
  05aee17
- WIP: wire vault into router + cmd/gemba serve, add HTTP secrets surface
  MikeBengtson
  committed
  984afd0
- Merge vault impl (Workstream B foundation)
  MikeBengtson
  committed
  0ad8999
- feat(restore): reconstruct-from-remotes capstone (git + DoltHub)
  
  MikeBengtson
  and
  claude
  committed
  14a500e
- Add tenant store + WSID-tenant routing middleware
  
  MikeBengtson
  and
  claude
  committed
  06ff60a
- Wire tenant MemStore into gemba serve startup
  
  MikeBengtson
  and
  claude
  committed
  afd4ec9
- Merge tenant model + vault co-existence (route-group resolution)
  MikeBengtson
  committed
  29cba27
- egress: add per-workspace rule storage layer (gm-o9t8.3.6.1)
  
  MikeBengtson
  and
  claude
  committed
  cf7b55d
- gm-o9t8.3.2.3+3.2.8: VM Supervisor for Firecracker + subprocess fallback
  
  MikeBengtson
  and
  claude
  committed
  a73d2d3
- Merge gm-o9t8.3.2.3 + 3.2.8: microVM supervisor + non-Linux fallback
  MikeBengtson
  committed
  c57a2ec
- gm-o9t8.3.5.1: OAuth app config + redirect URI registration
  
  MikeBengtson
  and
  claude
  committed
  5ee0353
- egress: HTTP surface + audit constants (gm-o9t8.3.6.1)
  
  MikeBengtson
  and
  claude
  committed
  045621f
- gm-o9t8.3.1.1: admin CRUD endpoints for tenants
  MikeBengtson
  committed
  adb6190
- Merge gm-o9t8.3.6.1: egress policy storage + defaults
  MikeBengtson
  committed
  a35f4c7
- gm-o9t8.3.5.2: gemba login --github (device flow)
  
  MikeBengtson
  and
  claude
  committed
  84f2821
- Merge gm-o9t8.3.1.1: tenant CRUD admin endpoints
  MikeBengtson
  committed
  cbb2229
- Merge gm-o9t8.3.5.1+.5.2: OAuth core (config + device flow)
  MikeBengtson
  committed
  ba7d90c
- firecracker: add VM image manifest + sha256 verification (gm-o9t8.3.2.2)
  
  MikeBengtson
  and
  claude
  committed
  4802604
- gm-o9t8.3.2.4: per-VM volume mount
  MikeBengtson
  committed
  955a7b1
- vm-image: Buildroot + kernel + init pipeline & docs (gm-o9t8.3.2.2)
  
  MikeBengtson
  and
  claude
  committed
  d51743d
- gm-o9t8.3.5.5: server-side revoke/rotate/list for OAuth tokens
  
  MikeBengtson
  and
  claude
  committed
  0732c10
- Merge gm-o9t8.3.2.2: Linux kernel + rootfs image bake pipeline
  MikeBengtson
  committed
  5a43760
- Merge gm-o9t8.3.5.5: OAuth token revoke/rotate/list (server-side; CLI partial)
  MikeBengtson
  committed
  7ecc8d9
- egress(3.6.2): add EventVMEgressDenied + cross-platform translation IR
  
  MikeBengtson
  and
  claude
  committed
  b229416
- gm-o9t8.3.2.5: boot-time secret injection from vault
  MikeBengtson
  committed
  0648908
- egress(3.6.2): nftables-backed Linux applier + non-Linux no-op
  
  MikeBengtson
  and
  claude
  committed
  f06c1d7
- gm-o9t8.3.2.6: VM-aware dispatch path
  MikeBengtson
  committed
  2aff81e
- egress(3.6.2): wire EgressProvider into Firecracker supervisors
  
  MikeBengtson
  and
  claude
  committed
  9012286
- gm-o9t8.3.2.7: VM lifecycle audit events
  MikeBengtson
  committed
  c2e60b1
- Merge gm-o9t8.3.6.2: egress runtime enforcement (nftables Linux + fallback)
  MikeBengtson
  committed
  c9c49e8
- Merge VM completion bundle: 3.2.4 (volume) + 3.2.5 (secrets) + 3.2.6 (dispatch) + 3.2.7 (audit events)
  MikeBengtson
  committed
  b0ec4ac
- gm-v0sp.15-19: Spec Kit interception layer (Phase 1)
  
  MikeBengtson
  and
  claude
  committed
  d06966e
- Merge ASDD Phase 1: Spec Kit interception layer (gm-v0sp.15-19)
  MikeBengtson
  committed
  bac0264

Commits

Commits on May 12, 2026