e70dab1f88
fix(v02): wire Keycloak OIDC runtime
2026-06-04 15:01:30 +08:00
36b264f212
fix(keycloak): use supported admin bootstrap env
2026-06-04 15:01:30 +08:00
4d48db9e7c
feat(hwlab-cli): client auth oidc-login returns Keycloak authorize URL
2026-06-04 15:01:30 +08:00
6b93ebd0ef
fix(k8s): keycloak admin bootstrap Job - simpler mount and script
2026-06-04 15:01:30 +08:00
0370135a35
feat(k8s+tests): keycloak bootstrap Job + AgentRun actor trace tests
...
- new deploy/k8s/keycloak/keycloak-bootstrap-job.yaml: one-shot Job that waits for Keycloak, authenticates as admin, creates hwlab realm + hwlab-cloud-web OIDC client via REST API
- secret hwlab-cloud-web-client holds the OIDC client_secret used by cloud-api
- kustomization.yaml picks up the new Job and Secret
- access-control.test.ts: cloud api AgentRun trace records real actor.userId from OIDC-upserted user (issue 788 spec)
- access-control.test.ts: cloud api /v1/users/me returns actor with authMethod=api-key for HWLAB_API_KEY Bearer token
- 31 pass / 4 pre-existing fail
2026-06-04 15:01:30 +08:00
1ba5103d33
fix(k8s): add --bootstrap-admin-username/password CLI args to keycloak
2026-06-04 15:01:30 +08:00
ca5ff418dd
feat(k8s): keycloak namespace manifests + apply on G14
...
- new deploy/k8s/keycloak/ kustomization with namespace, keycloak-postgres StatefulSet, keycloak Deployment
- keycloak Deployment uses quay.io/keycloak/keycloak:25.0 with --hostname-strict=false, postgres backend
- PVC data-keycloak-postgres-0 (5Gi local-path) bound to the StatefulSet
- secrets keycloak-postgres / keycloak-admin provisioned in keycloak namespace
- OIDC discovery endpoint confirmed reachable via port-forward; master realm issuer http://.../realms/master
- next round will provision the hwlab realm + OIDC client
2026-06-04 15:01:30 +08:00
bacfa24289
fix: replace device pod lease with api key
2026-06-02 18:11:32 +08:00
0fb8004896
fix: reuse agent worker env image in v02 ci
2026-06-01 22:29:54 +08:00
3d10fd275b
feat: 接入 AgentRun v0.1 adapter
2026-06-01 17:06:11 +08:00
ca714bfa27
fix: 优化 device-pod CLI 短入口
2026-05-31 19:16:17 +08:00
ff5da23083
fix: checkout env reuse runtime from source refs
2026-05-31 15:50:02 +08:00
89b83465e4
fix: add cloud web env reuse runtime
2026-05-31 14:37:28 +08:00
70ebd1689c
feat: add uploaded skills management
2026-05-31 11:45:10 +08:00
395216122a
fix: make hwlab cli a short web client
2026-05-30 12:31:07 +08:00
200aa99f1f
fix: resolve bun binary for v02 device-pod boot
2026-05-29 22:51:11 +08:00
d1ffc007e4
feat: add v02 device-pod env reuse boot path
2026-05-29 22:49:08 +08:00
5ebadee19f
fix: require internal token for device pod executor
2026-05-29 16:28:34 +08:00
d7ff08f3f2
refactor: run hwlab gateway through bun ts
2026-05-29 15:01:56 +08:00
5c9d04766b
fix: remove legacy simulator runtime defaults
2026-05-29 13:28:22 +08:00
4cdc80e672
feat: wire device pod gateway dispatch
2026-05-29 10:44:59 +08:00
b99c663614
feat: enforce v02 runtime authority
2026-05-29 08:10:19 +08:00
64862b4b70
fix: add bun to v02 ci tools image
2026-05-29 03:26:53 +08:00
03c09f5c94
refactor: migrate v0.2 runtime services to TypeScript
2026-05-29 02:09:35 +08:00
a0869c5afa
refactor: migrate v02 cloud api to TypeScript
2026-05-29 00:33:22 +08:00
d6a02cb14c
feat: add v0.2 GitOps lane
2026-05-28 16:56:19 +08:00
7288f39031
fix: bootstrap device pod profiles from canonical skill
2026-05-28 08:45:02 +08:00
297206b695
feat: add fake device pod sidebar service
2026-05-28 01:39:03 +08:00
d02b7cd8a6
fix: persist code agent workspace
2026-05-27 13:26:12 +08:00
dddfdbf4c9
fix: keep deploy manifest human-authored
2026-05-27 10:39:50 +08:00
336a9b2c2c
fix: keep G14 generated state on gitops branch
2026-05-27 10:14:24 +08:00
278bbe1c6a
chore: promote G14 GitOps source 8bdcff5
2026-05-27 01:28:16 +00:00
d5c6ead870
fix: keep deploy manifest human-authored
2026-05-27 09:21:50 +08:00
f6b9ab3206
chore: promote G14 GitOps source af46386
2026-05-27 00:20:37 +00:00
8d533cb736
Merge remote-tracking branch 'origin/G14' into fix/code-agent-timeout-control-20260527004132
...
# Conflicts:
# deploy/deploy.json
2026-05-27 08:11:49 +08:00
243a77fb41
chore: promote G14 GitOps source 2be9f52
2026-05-27 00:03:47 +00:00
a56ea7e33e
fix: extend code agent timeout recovery
2026-05-27 07:46:24 +08:00
c530eb19c2
chore: promote G14 GitOps source 01de135
2026-05-26 18:21:05 +00:00
9a6219bcbc
chore: promote G14 GitOps source b59d5b0
2026-05-26 17:32:02 +00:00
4db9c32b63
chore: promote G14 GitOps source 9d4ad03
2026-05-26 17:22:26 +00:00
19ed66f2f8
chore: promote G14 GitOps source 39253b2
2026-05-26 17:13:28 +00:00
78d2d4a6bf
chore: promote G14 GitOps source 4144bb8
2026-05-26 12:21:05 +00:00
4f97ed22e6
chore: promote G14 GitOps source 9f142ea
2026-05-26 11:15:10 +00:00
c6c4f15d70
chore: promote G14 GitOps source 6cab956
2026-05-26 10:49:51 +00:00
1ebb37f78b
chore: promote G14 GitOps source 7bc492f
2026-05-26 10:28:53 +00:00
7bc492fd1c
fix: probe codex forwarder via loopback exec
2026-05-26 18:25:24 +08:00
c176e4c849
chore: promote G14 GitOps source 288a80d
2026-05-26 09:54:35 +00:00
f1067bb51f
fix: restore codex-api via pod-local forwarder
2026-05-26 17:05:43 +08:00
c2344b2950
chore: promote G14 GitOps source 803ba22
2026-05-26 08:42:24 +00:00
4890501cd8
chore: promote G14 GitOps source 701d934
2026-05-26 08:31:55 +00:00
Codex Agent