Commit graph

1792 commits

Author SHA1 Message Date
stevef
b79dca6ec1 Merge branch 'security_shield_v2' 2026-04-17 22:57:40 +02:00
stevef
cdf1741222 Update build-raspberry-pi to include docker build 2026-04-17 22:34:01 +02:00
stevef
f5ad3a51c0 Add build-raspberry-pi and docker-build-raspberry-pi aliases to Makefile 2026-04-17 22:21:55 +02:00
stevef
5f7c6b32ba Harden security: prevent shell bypasses in exec and synchronize Web API guards for skills 2026-04-17 22:14:49 +02:00
stevef
a8104eed05 closed gap in skills adding 2026-04-17 19:31:45 +02:00
stevef1uk
60364cfffb
Update Dockerfile.rpi 2026-04-17 18:34:52 +02:00
stevef
7a7c00d51f added missing file 2026-04-17 18:29:08 +02:00
stevef
6f04e3e11c Merge remote-tracking branch 'origin/security_shield_v2' 2026-04-17 18:23:58 +02:00
stevef
cf01fa8708 Remove tmp_run directory 2026-04-17 18:17:54 +02:00
stevef
bfdb62589e Remove k3s secrets directory and backup files 2026-04-17 18:17:19 +02:00
stevef
9e386328a8 Merge upstream main 2026-04-17 17:35:40 +02:00
stevef
768737b759 baseline 2026-04-17 17:34:44 +02:00
stevef
3b9829b208 Fix for range over int constant 2026-04-17 16:56:16 +02:00
stevef
c501efe6b6 refactor: reorganize scratch files into subdirectories to fix main collision in make check 2026-04-17 13:20:09 +02:00
stevef
10f568f87e Update mock tool registry tests for consistency 2026-04-14 10:23:56 +02:00
stevef
bfdc9734f5 Remove all MCP server configurations and update whitelists for security hardening 2026-04-14 10:16:14 +02:00
stevef
e7df4e6fe8 Remove Harvest and Monday integrations 2026-04-14 10:13:52 +02:00
stevef
fd4c6711b9 fix: enforce content-first delivery order for WebSocket bridge stability 2026-04-13 22:00:25 +02:00
stevef
9b9796e52f fix: enforce synchronous typing-stop signaling for Monitor UI stability 2026-04-13 21:52:26 +02:00
stevef
6ee2bf02e3 fix: robust parameter mapping for inbound pico messages 2026-04-13 21:34:07 +02:00
stevef
86c81f666f debug: add verbose pico auth logging and trim whitespace 2026-04-13 21:21:59 +02:00
stevef
592508db56 fix: prioritize stable pico token for HDN compatibility 2026-04-13 21:12:10 +02:00
stevef
050083d7ef fix: stabilize pico channel and hdn connection 2026-04-13 21:02:45 +02:00
stevef
f7c4820a84 feat(k3s): support env:// credentials and improve stale config cleanup on security_shield_v2 2026-04-13 19:55:58 +02:00
stevef
98aaed0498 feat(k3s): support env:// credentials and fix stale security config cleanup 2026-04-13 19:54:41 +02:00
stevef
eaee2fb7d7 Diag: add debug logs for API key and URL 2026-04-13 09:42:05 +02:00
stevef
c0d90f2ca8 Fix: strip gemini protocol prefix for OpenAI-compatible endpoint 2026-04-13 09:25:47 +02:00
stevef
316b0f64ad Fix: add RPI docker build targets and enforce ARM64 2026-04-13 09:10:55 +02:00
stevef
047f055f4e Fix: correct Google OpenAI-compatible api_base URL 2026-04-13 09:09:34 +02:00
stevef
8496c3ed2d Fix: enforce ARM64 platform for RPI Docker image 2026-04-13 09:08:50 +02:00
stevef
5159262c97 Fix: stable Gemini auth and ARM64 architecture for RPI 2026-04-13 09:08:36 +02:00
stevef
6b040ef853 fix(agent): defer InvokeTypingStop until runTurn completion 2026-04-13 08:26:45 +02:00
stevef
0c826f4efe fix(k3s): restore working gemini-flash mapping with API_KEY auth 2026-04-12 23:44:22 +02:00
stevef
725acba642 fix(k3s): update default model to working gemini-flash 2026-04-12 23:39:00 +02:00
stevef
b2041763f7 fix(k3s): enable placeholder/typing for pico channel to support turn sync 2026-04-12 23:37:00 +02:00
stevef
fe93c6387a fix(k3s): use static prefixed token for picoclaw-agent to enable websocket connectivity 2026-04-12 23:14:52 +02:00
stevef
de586ba1b2 chore: sanitize k3s configuration 2026-04-04 12:47:22 +02:00
stevef
841bd0098a chore: address linter issues from PR review 2026-04-04 06:28:09 +02:00
stevef
bf7756466e chore: compatibility fixes for linter 2026-04-03 22:49:40 +02:00
stevef
f53e50c96a Final resolution of all merge conflicts and config cleanup 2026-04-03 22:49:25 +02:00
stevef
268377b99e chore: restore stable Gemini configuration for k3s deployment 2026-04-03 21:40:07 +02:00
stevef
d903381f66 chore: remove n8n-test MCP server from k3s configuration 2026-04-03 21:40:07 +02:00
stevef
d37d6e6871 chore: fixes for userAgent support and host detection after rebase stabilization 2026-04-03 21:40:07 +02:00
stevef
42dfb5bdae chore: final stabilization fixes for security_shield after rebase 2026-04-03 21:40:07 +02:00
stevef
4b09745b96 Fix: Reverted workspace to align internal agent paths 2026-04-03 21:40:07 +02:00
stevef
2f58fc3b89 Hardening: Finalized K3s deployment with relative secret paths and agi namespace 2026-04-03 21:40:07 +02:00
stevef
d7532131fa Docs: Added K3s deployment README 2026-04-03 21:40:07 +02:00
stevef
e0bd93a732 Security: Migrated API keys to K8s Secrets via file:// scheme 2026-04-03 21:40:07 +02:00
stevef
746c3ec02c Hardening: Relaxed Git push/force restrictions and sanitized configuration secrets 2026-04-03 21:40:07 +02:00
stevef
56478a031b added k3s deployment on RPi 2026-04-03 21:40:07 +02:00