5 Commits

Include renames

Author	SHA1	Message	Date
shad	7c25a6a62e	fix(nginx): lazy DNS for /api and /internal/canvas-llm upstreams ... When the K3s node recovers from an outage, cluster DNS (CoreDNS at 10.43.0.10) can be briefly unavailable, and nginx's startup-time resolution of demo.flow-master.ai + canvas-llm-proxy.demo.svc... fails the conf check, leaving the pod in CrashLoopBackOff. The hostnames sat in proxy_pass directives that nginx resolves at boot. Switched to: - resolver 10.43.0.10 valid=30s ipv6=off; - set $upstream_demo / $upstream_llm; proxy_pass $variable; This forces lazy per-request DNS so transient cluster-DNS hiccups don't kill the canvas-frontend pod. Verified during a real K3s node outage today.	2026-06-14 20:37:41 +04:00
shad	e520f39647	feat(llm-proxy): in-cluster FastAPI shim with nginx pass-through ... Closes the 'fork Pi coding agent' integration loop with a tiny broker that mirrors the @earendil-works/pi-ai request shape: POST /internal/canvas-llm/chat body: { messages: [{role, content}], max_tokens } The proxy speaks to OpenAI or Anthropic depending on which env key is set. With no key, returns 503 so the frontend's deterministic fallback in routeAgentInput fires gracefully. - llm-proxy/main.py: FastAPI + httpx (~150 LOC). System messages get split out for Anthropic (separate 'system' field) and inlined for OpenAI. - llm-proxy/Dockerfile: python:3.12-slim, uvicorn on :8080. - Deployment + Service in demo namespace (verified Running). - nginx.conf: /internal/canvas-llm/ proxies to the in-cluster service. Provider keys are set to empty in the manifest by design: customer flip is a single 'kubectl set env' or sealed-secret update.	2026-06-14 16:28:17 +04:00
shad	973aa9c15b	fix(security): lock CSP script-src to self (no unsafe-inline/unsafe-eval) ... Oracle round-9 hard blocker: live CSP advertised script-src 'self' 'unsafe-inline' 'unsafe-eval'. Verified the Vite build emits zero inline <script> tags (only external module script) and no bundled dep uses new Function / eval (reactflow / leaflet / zustand / dagre / cmdk / framer-motion all clean). - nginx.conf script-src reduced to 'self'. - img-src extended for OSM tiles (https://*.tile.openstreetmap.org) and leaflet marker images served from unpkg. Also (Oracle round-9 second blocker) chat_sidebar QA now creates a thread + sends a message before asserting, then strict-asserts threadRowCount >= 1 AND previewRows === threadRowCount AND timeBadges === threadRowCount. No more vacuous PASS when sidebar is empty.	2026-06-14 15:42:28 +04:00
shad	4bc7ae228a	feat: rebuild Process Studio into multi-phase Process Creation Wizard\n\n- Replace toy Studio.tsx with proper Wizard.tsx canvas\n- Build 6-step flow: Intake -> Analyze -> Generate -> Validate -> Draft saved -> Publish\n- Implement incremental EA2 writes via wizardApi.ts (flow, batch apply)\n- Use localStorage for draft recovery across reloads\n- Apply industrial-blueprint UI styling matching core doctrine\n- Add Vitest tests for Wizard components and API wrappers	2026-06-14 03:47:26 +04:00
shad	2b83e3ad0e	deploy: Dockerfile + nginx + Gitea Actions build ... Two-stage build (node:22 → nginx:1.27) bakes dist/ into a static image. nginx reverse-proxies /api/* to demo.flow-master.ai so live mode works same-origin without CORS. CI runs vitest + build, then publishes gitea.flow-master.ai/shad/mission-control-demo:sha-${git} on push to main. Constraint: backend rejects cross-origin → same-origin proxy required Confidence: high Scope-risk: narrow Not-tested: image actually built in Gitea Actions (requires registry secret)	2026-06-14 00:10:56 +04:00