10 Releases 10 Tags

RSS Feed

• v0.1.1 8b92b23a3f

  Compare

  v0.1.1 — core skeleton Stable

  coreci-bot released this 2026-10-10 00:00:26 +00:00 | 4 commits to main since this release

  Phase 1 (Core Skeleton) of milestone v0.1 coreci-broker.

  Delivered

  • coreci_broker.py (618 lines, stdlib-only, AC14-enforced): .env config bootstrap + first-boot pepper/admin-pass generation (printed exactly once)
  • SQLite store per spec §5.2 (5 tables + index) at mode 0600, umask-independent
  • Append-only JSONL audit writer (9 verbs, fsync per write, 0600)
  • Dual-mode bcrypt/scrypt hasher (format-prefixed, format-aware verification)
  • Derived token engine: base64(sha256(pepper:UUID:user:agent:sorted_tags)) — 44-char, byte-exact
  • ThreadingHTTPServer router + {"error,message} contract + traversal-rejecting static hook
  • OWUI Tools mount (once-per-process guard) + standalone main
  • 92 tests green; security fix: static hook no longer serves broker state files (CWE-552)

  Requirements

  REQ-03, REQ-11, REQ-14, REQ-15, REQ-16, REQ-17, REQ-18 — complete

  Next

  P2 admin plane → v0.1.2

  Downloads

  • broker-v0.1.1.tar.gz
    44 KiB

    2026-10-10 00:00:31 +00:00
  • Source Code (ZIP)
  • Source Code (TAR.GZ)