• v0.0.4 3b8345dfe0

    coreci-bot released this 2026-08-25 02:03:52 +00:00 | 16 commits to main since this release

    Wave C — BYOM (Bring Your Own Model) (v0.0.4)

    BYOM endpoint registry + validate-on-save + OpenAI-compatible routing shim + REQ-009 reject path.

    What shipped:

    • packages/byom: types (OpenAI-compatible /v1/chat/completions), validator, repository, router
    • ByomUnconfiguredError (→ 400) + ByomUnreachableError (→ 503) — REQ-009
    • G-001: /api/byom/test-inference proxy endpoint for REQ-008 (M3 deprecation)
    • API routes: /api/byom (GET/POST/DELETE), /api/byom/test-inference (POST)
    • BYOM dashboard page with validate-and-save form

    Requirements covered: REQ-006, REQ-007, REQ-008, REQ-009
    Tests: 18 new (validator 8 + repository 5 + router 5)

    Downloads
  • v0.0.3 bcca7686ee

    coreci-bot released this 2026-08-25 02:03:47 +00:00 | 16 commits to main since this release

    Wave B — Identity & RBAC (v0.0.3)

    WorkOS SSO + tenant provisioning + RBAC enforcement at the API gateway from the first endpoint.

    What shipped:

    • packages/auth: sessions (HS256 JWT), RBAC (admin/operator/viewer → route permission map), tenant resolution middleware, provisioning (first signup → tenant + admin), invitations (single-use link, Edge 15 bounce)
    • WorkOS SSO with dev/mock mode
    • API routes: /api/auth/login, /api/auth/callback, /api/me (first protected endpoint), /api/team, /api/invitations
    • Dashboard shell with 5-step onboarding checklist
    • Role change enforced on the next API call

    Requirements covered: REQ-001, REQ-002, REQ-003, REQ-004, REQ-005
    Tests: 52 auth + 8 control-plane = 60 new

    Downloads
  • v0.0.2 be70f56657

    coreci-bot released this 2026-08-25 01:34:18 +00:00 | 18 commits to main since this release

    Wave A — Foundations (v0.0.2)

    Monorepo scaffold + Postgres schema with RLS + append-only hash-chain audit + SecretProvider interface + Trigger.dev runtime bootstrap.

    What shipped:

    • pnpm monorepo: apps/control-plane (Next.js), apps/relay-agent (Go), packages/{db,secrets,runtime,config}
    • Postgres schema: tenants, users, tenant_memberships, targets, byom_endpoints, invitations, audit_log (append-only hash-chain), runtime_health
    • RLS policies on all tenant-scoped tables + FORCE ROW LEVEL SECURITY
    • withTenant(tenantId, fn): transaction-scoped RLS enforcement helper
    • Audit writer: sha256(prev_hash || canonical(payload)); BEFORE INSERT trigger; REVOKE UPDATE/DELETE; AuditWriteHaltError on failure
    • SecretProvider: AWS Secrets Manager (prod) + LocalEncryptedProvider (dev, AES-256-GCM) + SecretValue [REDACTED]
    • Relay token contract: JWT HS256 (G-005)
    • Trigger.dev bootstrap + runtimeHealthCheck (writes runtime_health, NOT audit_log — G-002)

    Requirements covered: REQ-038, REQ-039, REQ-040
    Tests: 45 passing | DB coverage 98%

    Downloads
  • v0.0.1 61221222eb

    coreci-bot released this 2026-08-24 22:41:32 +00:00 | 21 commits to main since this release

    Phase 0 — Pre-execution (v0.0.1)

    Spec parsed, clarified, researched, planned, grilled, MVP/UX-checked. All .ciagent/ reference files landed.

    Pipeline stages:

    • SPECIFY: PROJECT.md, REQUIREMENTS.md, ARCHITECTURE.md rewritten with spec-derived content (CoreCI Chat v0.1 spec v1.1, Sarah Chen, locked 2026-08-24)
    • CLARIFY: 5 architectural decisions (D-001..D-005) approved — OpenAI-compatible BYOM, Go Relay Agent, AWS SM + local-encrypted secrets, Postgres hash-chain audit, Next.js SPA
    • RESEARCH: 7 research artifacts (R-001..R-007) + PERSONAS.md
    • PLAN: 5 execution waves (A-E) + final phase, 17 M1 REQs mapped
    • GRILL: PASS-WITH-FIXES, 10 binding fixes (G-001..G-010) applied
    • MVP/UX CHECK: PASS (User-Facing Surface, Happy Path, UX Acceptance Criteria)

    Requirements covered: REQ-001..004 (specification, clarify, research, plan)
    Milestone: v0.1 (Feature)

    Downloads