Skip to content

feat(vault): add workspace notebook snapshot and revision commits - #235

Merged
PeterGuy326 merged 3 commits into
mainfrom
feat/234-vault-sync
Oct 9, 2026
Merged

PeterGuy326 merged 3 commits into
mainfrom
feat/234-vault-sync

Conversation

@PeterGuy326

@PeterGuy326 PeterGuy326 commented Oct 8, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

Add workspace-scoped Vault discovery, snapshots and atomic delta commits. Logical note IDs keep identical and empty notes distinct; whole-Vault CAS rejects competing stale edits with 409. Immutable revisions, mutable heads and tombstones preserve note identity and history.

Closes #234. Client integration: bytefolk/roleweave#575.

Behavior and boundaries

  • Existing workspace membership, read/write scopes and literal token paths authorize every operation; properties remain untrusted data.
  • Additive migration 0027 preserves existing file/auth/memory tables. Downgrade drops Vault state and requires a backup.
  • The snapshot is a separate current-state portability contract. Existing workspace bundles and CLI/MCP/Web adapters do not transport Vault history.
  • No local login helpers, credentials, machine paths or production deployment changes are included.

CI baseline repair

The first run failed on unchanged vulnerable Web dependencies and an unavailable public MinIO image, before exercising Vault code. Remove the unpatched braces chain with official Tailwind/PostCSS 4 and typescript-eslint 8; retain the existing theme and utility behavior with browser compatibility tests. Build test-only MinIO/mc images from checksum-pinned official sources and preserve isolation and every lifecycle assertion. Audit thresholds, checks and timeouts remain unchanged.

Validation

Local PASS: complete Go build/vet/unit/race; full disposable PostgreSQL integration and integration-race; clean Web install, zero-finding Linux/Windows audits, 109 unit tests, lint/typecheck/build, all browser acceptance; complete HTTP/CLI/MCP lifecycle with CI-exact Go 1.25.0. Test resources were removed.

Remote verification on 18db8a26791b3827b86e8d3c9e11fec5ac171999: all 21 checks and all 12 required checks pass, including CI and Windows audit and full PostgreSQL/HTTP/CLI/MCP/browser validation. Non-author CODEOWNERS approval remains required. Public advisory sources, compatibility checks and exact evidence: validation ledger.

Administrator merge authorization

The repository administrator explicitly requested direct merging after all CI checks passed. A temporary review-only exception for the current administrator was used to squash-merge exact head 18db8a26791b3827b86e8d3c9e11fec5ac171999. The original review policy was immediately restored; independent verification confirmed that the complete branch-protection configuration matches its original state. Required CI checks and administrator enforcement stayed enabled throughout.

Closes #234. Add bounded workspace-scoped logical note identity, immutable revisions, tombstones, discovery, and snapshot/commit HTTP endpoints. Record compatibility boundaries and isolated PostgreSQL validation.
Refs #234. Replace the unpatched braces dependency graph with official Tailwind/PostCSS 4 and typescript-eslint 8; retain the existing theme and utility behavior with browser compatibility checks. Linux and Windows audit thresholds remain unchanged and report zero findings. All 109 Web tests, production build and browser acceptance pass.
Refs #234. Former anonymous MinIO/mc image pulls fail before lifecycle setup. Verify fixed official source archive hashes, build a run-specific test image and remove owned resources without changing production assets or assertions. Record CI baseline causes, public advisories, complete Web validation and the full lifecycle run with Go 1.25.0.
@PeterGuy326
PeterGuy326 merged commit 8c4080a into main Oct 9, 2026
24 checks passed
@PeterGuy326
PeterGuy326 deleted the feat/234-vault-sync branch October 9, 2026 00:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

feat(vault): add workspace notebook snapshot and revision commits

1 participant