-
released this
2026-08-25 02:03:52 +00:00 | 16 commits to main since this releaseWave C — BYOM (Bring Your Own Model) (v0.0.4)
BYOM endpoint registry + validate-on-save + OpenAI-compatible routing shim + REQ-009 reject path.
What shipped:
packages/byom: types (OpenAI-compatible /v1/chat/completions), validator, repository, router- ByomUnconfiguredError (→ 400) + ByomUnreachableError (→ 503) — REQ-009
- G-001: /api/byom/test-inference proxy endpoint for REQ-008 (M3 deprecation)
- API routes: /api/byom (GET/POST/DELETE), /api/byom/test-inference (POST)
- BYOM dashboard page with validate-and-save form
Requirements covered: REQ-006, REQ-007, REQ-008, REQ-009
Tests: 18 new (validator 8 + repository 5 + router 5)Downloads
-
released this
2026-08-25 02:03:47 +00:00 | 16 commits to main since this releaseWave B — Identity & RBAC (v0.0.3)
WorkOS SSO + tenant provisioning + RBAC enforcement at the API gateway from the first endpoint.
What shipped:
packages/auth: sessions (HS256 JWT), RBAC (admin/operator/viewer → route permission map), tenant resolution middleware, provisioning (first signup → tenant + admin), invitations (single-use link, Edge 15 bounce)- WorkOS SSO with dev/mock mode
- API routes: /api/auth/login, /api/auth/callback, /api/me (first protected endpoint), /api/team, /api/invitations
- Dashboard shell with 5-step onboarding checklist
- Role change enforced on the next API call
Requirements covered: REQ-001, REQ-002, REQ-003, REQ-004, REQ-005
Tests: 52 auth + 8 control-plane = 60 newDownloads
-
released this
2026-08-25 01:34:18 +00:00 | 18 commits to main since this releaseWave A — Foundations (v0.0.2)
Monorepo scaffold + Postgres schema with RLS + append-only hash-chain audit + SecretProvider interface + Trigger.dev runtime bootstrap.
What shipped:
- pnpm monorepo:
apps/control-plane(Next.js),apps/relay-agent(Go),packages/{db,secrets,runtime,config} - Postgres schema: tenants, users, tenant_memberships, targets, byom_endpoints, invitations, audit_log (append-only hash-chain), runtime_health
- RLS policies on all tenant-scoped tables + FORCE ROW LEVEL SECURITY
withTenant(tenantId, fn): transaction-scoped RLS enforcement helper- Audit writer: sha256(prev_hash || canonical(payload)); BEFORE INSERT trigger; REVOKE UPDATE/DELETE; AuditWriteHaltError on failure
- SecretProvider: AWS Secrets Manager (prod) + LocalEncryptedProvider (dev, AES-256-GCM) + SecretValue [REDACTED]
- Relay token contract: JWT HS256 (G-005)
- Trigger.dev bootstrap + runtimeHealthCheck (writes runtime_health, NOT audit_log — G-002)
Requirements covered: REQ-038, REQ-039, REQ-040
Tests: 45 passing | DB coverage 98%Downloads
- pnpm monorepo:
-
v0.0.1 — Phase 0: Pre-execution Pre-Release
released this
2026-08-24 22:41:32 +00:00 | 21 commits to main since this releasePhase 0 — Pre-execution (v0.0.1)
Spec parsed, clarified, researched, planned, grilled, MVP/UX-checked. All
.ciagent/reference files landed.Pipeline stages:
- SPECIFY: PROJECT.md, REQUIREMENTS.md, ARCHITECTURE.md rewritten with spec-derived content (CoreCI Chat v0.1 spec v1.1, Sarah Chen, locked 2026-08-24)
- CLARIFY: 5 architectural decisions (D-001..D-005) approved — OpenAI-compatible BYOM, Go Relay Agent, AWS SM + local-encrypted secrets, Postgres hash-chain audit, Next.js SPA
- RESEARCH: 7 research artifacts (R-001..R-007) + PERSONAS.md
- PLAN: 5 execution waves (A-E) + final phase, 17 M1 REQs mapped
- GRILL: PASS-WITH-FIXES, 10 binding fixes (G-001..G-010) applied
- MVP/UX CHECK: PASS (User-Facing Surface, Happy Path, UX Acceptance Criteria)
Requirements covered: REQ-001..004 (specification, clarify, research, plan)
Milestone: v0.1 (Feature)Downloads