chú ngọc merge cho cháu với T.T#7

Open

askerNQK wants to merge 120 commits intoAI-Decenter:mainfrom

Commits on Oct 1, 2025

feat(issue-05): add basic graceful reload (node --watch), sidecar backoff+jitter, improved JSON extraction; update checklist
iOS E2E Implementation
committed
feat(dev-hot): signature verifier, sidecar image infra, supervisor, E2E signature workflow & metrics
iOS E2E Implementation
committed
feat(dev-hot): sidecar publish workflow, multi-namespace ingest, provenance docs, enhanced supervisor & signature metric
iOS E2E Implementation
committed
feat(supply-chain): server signature enforcement flag, SBOM endpoint, provenance integration, multi-NS ingest, Issue05 doc updates
iOS E2E Implementation
committed
chore(licenses): add MIT license fields to internal helper crates to satisfy cargo-deny
iOS E2E Implementation
committed
docs(issue06): detailed SBOM & supply chain status, roadmap, checklist, gaps
iOS E2E Implementation
committed
issue06: add CycloneDX generation, SBOM upload endpoint, enforcement flag, CLI support
iOS E2E Implementation
committed
issue06: provenance v2, DSSE signing, full CycloneDX validation, lockfile integrity, provenance endpoints
iOS E2E Implementation
committed
cli: fix dead_code PackageLock removal & clippy never_loop; replace or_insert_with -> or_default
iOS E2E Implementation
committed

Commits on Oct 7, 2025

control-plane: fix artifact_meta select (provenance_present) and deterministic retention/list ordering
iOS E2E Implementation
committed
issue06 phase3: manifest upload + digest cross-check, strict SBOM enforcement, metrics (provenance_emitted_total, sbom_invalid_total)
iOS E2E Implementation
committed
issue06 doc: mark manifest upload, strict enforcement, new metrics done
iOS E2E Implementation
committed
tests: add manifest/SBOM enforcement & metrics coverage
iOS E2E Implementation
committed
feat: gzip negotiation, full-schema test, provenance & attestation ETag/gzip, backfill job + tests
iOS E2E Implementation
committed
chore: collapse nested if let in artifacts handler (clippy clean)
iOS E2E Implementation
committed
chore: remove unused AppState imports in tests (clippy clean)
iOS E2E Implementation
committed
chore: clippy fix iter().cloned().collect() -> to_vec() in sbom_manifest_enforcement test
iOS E2E Implementation
committed

Commits on Oct 8, 2025

test: speed/stability improvements (shared pool policy, TRUNCATE cleanup, readiness retry, pool warm-up)
iOS E2E Implementation
committed
feat(issue-06): complete extended provenance, cyclonedx advanced sections, provenance enforcement, key listing
iOS E2E Implementation
committed
test(provenance): dual-sign and key retirement test
iOS E2E Implementation
committed
chore(lint): fix unused openapi assignment & redundant closure
iOS E2E Implementation
committed
feat(observability,security): implement Issue 07 metrics & trace propagation; provenance + keystore tests; clippy fixes
iOS E2E Implementation
committed
test: add artifact_verify_failure_total increment test
iOS E2E Implementation
committed
feat(issue-08): dev automation + hot reload (deploy-sample, hot-upload, hot-patch, downward API sidecar)
iOS E2E Implementation
committed
ci: add fast + full test workflow with sccache and fast test gating
iOS E2E Implementation
committed
ci: pin rust 1.90.0 and use install-action for sccache
iOS E2E Implementation
committed
chore: harden SBOM tests & diagnostics (debug logging, metrics assertions, fast-mode guard)
iOS E2E Implementation
committed
ci: allow full-tests job on PR via full-tests label
iOS E2E Implementation
committed
ci: run full-tests on every PR
iOS E2E Implementation
committed

Commits on Oct 11, 2025

test(control-plane): speed up and stabilize DB-bound tests; reduce contention; gate background; add indexes; once-only schema checks
iOS E2E Implementation
committed
docs: add fast test env flags and setup guidance for control-plane tests
iOS E2E Implementation
committed
test(harness): fix clippy min/max pattern by capping to env-specific limit and honoring requested pool size
iOS E2E Implementation
committed
docs(issues): add task checklist and execution plan for Issue 09 (benchmarks & regression CI)
iOS E2E Implementation
committed
docs(issues): add TDD plan for Issue 09 as a standalone document to avoid nested fence conflicts
iOS E2E Implementation
committed
perf(bench): add regression checker + fixtures; emit JSON from packaging & streaming benches; add baseline file; update bench targets
iOS E2E Implementation
committed
ci(bench): add benchmarks job to run regression fixtures, benches, comparisons, and upload JSON artifacts
iOS E2E Implementation
committed
tdd(bench): finalize T1–T10; schema validation in regression script; update TDD doc with completion markers
iOS E2E Implementation
committed
bench: implement mock streaming bench; docs: benches usage & baseline; issue09: mark completed tasks
iOS E2E Implementation
committed
bench: add committed streaming baseline; ci: pin threads/logs and compare against committed baseline; docs: expand dedicated bench section
iOS E2E Implementation
committed
ci: enforce benchmarks on main/PR; run benches and fail on >20% p95 regressions; upload artifacts
iOS E2E Implementation
committed
bench(regression): make script resilient and fix exit codes on success; helpful logs locally
iOS E2E Implementation
committed
docs(issue09): mark docs + stabilization guardrails completed; Issue 09 complete
iOS E2E Implementation
committed
bench: update packaging baseline (p95 ~1.2ms) to reflect CI runs; keep 20% regression guard
iOS E2E Implementation
committed
issue10: auth & RBAC foundation
iOS E2E Implementation
committed
issue10: observability/logs
iOS E2E Implementation
committed
ci: provide dummy AETHER_API_TOKENS in tests; fix workflow lint; auth/RBAC clippy cleanups
iOS E2E Implementation
committed
ci(feature): fix MinIO service image tag to a valid release; remove unsupported command field
iOS E2E Implementation
committed
ci(feature): switch MinIO service to bitnami/minio:latest to fix pull errors; keep health check
iOS E2E Implementation
committed
test(ci): default to per-test DB pools (AETHER_TEST_SHARED_POOL=0) to avoid Tokio runtime shutdown errors
iOS E2E Implementation
committed
ci(feature): run MinIO via docker run (minio/minio:latest) with health wait to avoid service image tag issues
iOS E2E Implementation
committed
tests: fix bench fixtures schema for streaming (p95>=p50) and align deltas with comments
iOS E2E Implementation
committed
tests: correct stream -10% fixture to p95=72 (baseline 80), schema-valid
iOS E2E Implementation
committed
ci(macos): remove Docker-based MinIO (not available) and use mock storage
iOS E2E Implementation
committed
ci: faster, less flaky tests – per-test DB pools, once-only migrations, tuned pool, limited test threads; Linux MinIO via docker run, macOS mock storage
iOS E2E Implementation
committed
net: unify default HTTP/TLS stack to hyper1/rustls23; gate AWS S3 to avoid hyper-014 path by default; add TLS smoke test and measurement scripts; update Issue 11 docs and guard
iOS E2E Implementation
committed
docs: add build time and binary sizes (release) for Issue 11 baseline-after-unify
iOS E2E Implementation
committed
chore(workspace): set kube default-features=false to honor per-crate config and silence cargo warning; keep modern HTTP/TLS stack guard passing
iOS E2E Implementation
committed
docs(issue-11): acceptance results + measurements; chore(deny): allow duplicate windows target crates in bans policy; workspace: kube default-features=false
iOS E2E Implementation
committed

Commits on Oct 13, 2025

ci: fix linker bus errors by avoiding all-features on PR runs; set RUSTFLAGS debuginfo=1; add S3 compile check only on non-PR. chore(deny): stabilize cargo-deny bans config (skip known dev trees, s…
iOS E2E Implementation
committed
ci(feature): reduce linker pressure by avoiding all-features workspace tests; add dedicated control-plane s3 tests; set RUSTFLAGS debuginfo=1
iOS E2E Implementation
committed
docs(issue-11): update progress, CI/linker fixes, cargo-deny bans policy, and bench guard tolerance; mark completed phases and add 2025-10-13 status
iOS E2E Implementation
committed
ci(deny): avoid sccache wrapper inside cargo-deny action container by unsetting RUSTC_WRAPPER for the step; fixes rustc not found (sccache) error
iOS E2E Implementation
committed
ci(deny): replace cargo-deny action with direct cargo-deny runner to avoid krates panic on aws_lc_rs feature resolution under --all-features; keep bans strict
iOS E2E Implementation
committed
ci(deny): run cargo-deny with --all-features explicitly; ci: add opt-in Control-plane S3 tests via AETHER_ENABLE_S3_FULL_CI; docs(issue-11): note S3 CI toggle and steps post AWS hyper 1.x
iOS E2E Implementation
committed
ci: enable S3 tests on non-PR runs via AETHER_ENABLE_S3_FULL_CI=1; docs(issue-11): add latest build time and binary sizes; note AWS hyper 1.x bump is blocked upstream; keep aws crates at 1.x rustls…
iOS E2E Implementation
committed
chore(deny): add temporary skip for hashbrown duplicate (0.14 via sqlx/hashlink, 0.15 via aws-sdk-s3/lru); to be removed when upstream unifies
iOS E2E Implementation
committed
perf(bench): make tolerances configurable via env (DURATION_TOLERANCE, THROUGHPUT_TOLERANCE); defaults remain 20%/25%
iOS E2E Implementation
committed
ci(bench): set DURATION_TOLERANCE=0.22 for regression guard to reduce runner noise; throughput tolerance unchanged
iOS E2E Implementation
committed
ci(s3): ensure MinIO is started/configured for S3 tests; test env set for control-plane; deny(advisories): temporarily ignore instant/paste and sqlx advisories until deps bump
iOS E2E Implementation
committed
deny: fix advisories schema; add ignores for backoff/derivative; allow Unicode-3.0 & MPL-2.0; add webpki-roots CDLA exception; run cargo-deny with --all-features clean
iOS E2E Implementation
committed
feat: sync with upstream PR #6 (graceful reload, SBOM/provenance, CI/bench/deny/observability, fixes, docs, tests)
iOS E2E Implementation
committed
tests(control-plane): gate multipart S3 integration test behind s3 feature and skip when AETHER_STORAGE_MODE!=s3 to prevent false CI failures; no functional code changes
iOS E2E Implementation
committed
storage(control-plane): default mock base to localhost; force path-style when AETHER_S3_ENDPOINT_URL set for MinIO compatibility; gate S3 integration tests behind s3 feature and skip when not in S3…
iOS E2E Implementation
committed
s3(minio): force path-style for custom endpoint; default mock base to localhost; include x-amz-meta-sha256 in presigned headers; gate all S3 integration tests behind feature and skip if not in S3 mode
iOS E2E Implementation
committed
Merge pull request #2 from askerNQK/feat/complete-aether-engine-mvp
askerNQK
authored
docs: add sprint plan and per-epic issues with owners
iOS E2E Implementation
committed
docs(issues): add sprint indices and epic issue docs with owners
iOS E2E Implementation
committed
Merge pull request #3 from askerNQK/feat/complete-aether-engine-mvp
askerNQK
authored
Epic D: Base Node.js 20 slim image pipeline
iOS E2E Implementation
committed
CI: gate on 0 CRITICAL vulns; scan local image before push; push only on success; attach JSON + SARIF + SBOM; cosign post-push
iOS E2E Implementation
committed
CI: make Grype non-blocking (continue-on-error, fail-build=false); keep gating on Trivy CRITICAL only
iOS E2E Implementation
committed
Epic B: Helm/Kustomize & RBAC/SA – add control-plane chart, RBAC for aether-dev-hot, CI helm lint/template, docs, tests (TDD)
iOS E2E Implementation
committed
Security: add Trivy (.trivyignore) & Grype (security/grype-ignore.yaml) allowlists; gate on HIGH+CRITICAL via env GATE_SEVERITY; honor allowlists in scans; keep Grype non-blocking
iOS E2E Implementation
committed
CI: add trivy findings summary artifact for easier allowlisting
iOS E2E Implementation
committed
Dockerfile: run apt-get upgrade -y to pick up security fixes while keeping image slim
iOS E2E Implementation
committed
Dockerfile: update npm to latest and clean cache to reduce potential npm advisories
iOS E2E Implementation
committed
CI: echo summarized Trivy HIGH/CRITICAL findings in logs for quicker RCA
iOS E2E Implementation
committed
aether-cli: fix logs command deps and tests for hyper v1; add futures-util/urlencoding; switch test server to axum
iOS E2E Implementation
committed
Fix: aether-cli logs deps and tests for Hyper 1.x; enable tokio io-std; unblock cargo sqlx prepare
iOS E2E Implementation
committed
cli: add logs mock mode to avoid network in tests; stream JSON/text; keep tests green
iOS E2E Implementation
committed
fix(helm-rbac-tests): satisfy clippy -D warnings by removing let-and-return and using serde rename for snake_case
iOS E2E Implementation
committed
docs: mark Epic D complete (aether-nodejs:20-slim) and record implementation details (Dockerfile, workflow, security gates, SBOM)
iOS E2E Implementation
committed
Docs: mark Epic B done; add Helm chart usage guide and link from issue
iOS E2E Implementation
committed
Helm: fix ConfigMap indentation to satisfy helm lint
iOS E2E Implementation
committed
docs(issues): update Epic A logs streaming status and checklist (2025-10-13)
iOS E2E Implementation
committed
Helm: make ConfigMap template robust; add .Values.config default
iOS E2E Implementation
committed
chore(helm-rbac-tests): add SPDX license to satisfy cargo-deny
iOS E2E Implementation
committed

Commits on Oct 14, 2025

feat(control-plane): implement Kubernetes logs streaming (kube-rs) with follow/tail/since/container; expose in OpenAPI; keep mock mode for tests
iOS E2E Implementation
committed
tests(epic-f): TDD for E2E smoke; feat: sample-node app, smoke_e2e.sh (dry-run JSON+MD), e2e-smoke workflow, README docs
iOS E2E Implementation
committed
docs(issues): mark Epic A A1 done, partial A2 complete; add 2025-10-14 status update
iOS E2E Implementation
committed
docs: mark Epic F complete (E2E smoke + metrics) and record implementation details (sample app, smoke script, CI, README)
iOS E2E Implementation
committed
Epic C: CI DB stability via matrix and harness retries
iOS E2E Implementation
committed
test(harness): fix retry loop ownership and warning in test_support.rs
iOS E2E Implementation
committed
feat(logs): WS route (feature-gated) and refined mock path; add multi-pod mock test; real kube streaming intact
iOS E2E Implementation
committed
docs(epic-A): mark logs streaming as complete, update status for 2025-10-14
iOS E2E Implementation
committed
Epic H: SBOM/Provenance hardening (TDD)
iOS E2E Implementation
committed
docs(epic-A): mark all logs streaming tasks complete, add final status update
iOS E2E Implementation
committed
Epic G: TLS Ingress and Auth Policy hardening complete (TDD, implementation, docs)
iOS E2E Implementation
committed
Epic H follow-ups: fix manifests and tests\n\n- aether-cli: tidy Cargo.toml deps, ensure clean JSON/stdout for logs, minor flags doc\n- tests: add logs_command.rs (unit)\n- docs: update epic E logs…
iOS E2E Implementation
committed
feat(cli/logs): TDD tests + implementation verified; docs: README and Epic E final update
iOS E2E Implementation
committed
Auth policy: make auth_required enforce even without tokens; fix tests flakiness via serial; correct Authorization header in test; update docs
iOS E2E Implementation
committed
test(helm-rbac-tests): remove unused anyhow::Context import to satisfy -D warnings
iOS E2E Implementation
committed
Epic I: Operator guide and troubleshooting (TDD)\n\n- TDD: add tests/epic_i_test.sh\n- Docs: docs/operator-guide.md and docs/troubleshooting.md\n- Cross-links: README and STATUS updated\n- Issue do…
iOS E2E Implementation
committed
chore(clippy): fix needless-bool in cli deploy and needless-return in control-plane auth; clean unused import in cli tests
iOS E2E Implementation
committed
CLI tests: accept CycloneDX SBOM default in deploy_sbom_and_sig (still supports legacy)
iOS E2E Implementation
committed
fix(cli/sbom): default to legacy aether-sbom-v1 unless --cyclonedx is explicitly set; satisfies sbom_dependencies test
iOS E2E Implementation
committed
ci: mitigate disk exhaustion on runners (free space, prune docker); reduce debug info; cap sccache; disable incremental
iOS E2E Implementation
committed
ci: reduce memory pressure (prefer-dynamic, -j2) and stabilize linking for S3 tests; keep free-space and prune steps
iOS E2E Implementation
committed
ci: mitigate linker crashes in S3 tests (no-threads, strip, serialize link); keep free-space & prune steps
iOS E2E Implementation
committed

Commits on Oct 15, 2025

ci: build MerkleKV-Mobile Windows single-file SFX and upload artifact
iOS E2E Implementation
committed