da76d6e93e
Concelier: - Register Topology.Read, Topology.Manage, Topology.Admin authorization policies mapped to OrchRead/OrchOperate/PlatformContextRead/IntegrationWrite scopes. Previously these policies were referenced by endpoints but never registered, causing System.InvalidOperationException on every topology API call. Gateway routes: - Simplified targets/environments routes (removed specific sub-path routes, use catch-all patterns instead) - Changed environments base route to JobEngine (where CRUD lives) - Changed to ReverseProxy type for all topology routes KNOWN ISSUE (not yet fixed): - ReverseProxy routes don't forward the gateway's identity envelope to Concelier. The regions/targets/bindings endpoints return 401 because hasPrincipal=False — the gateway authenticates the user but doesn't pass the identity to the backend via ReverseProxy. Microservice routes use Valkey transport which includes envelope headers. Topology endpoints need either: (a) Valkey transport registration in Concelier, or (b) Concelier configured to accept raw bearer tokens on ReverseProxy paths. This is an architecture-level fix. Journey findings collected so far: - Integration wizard (Harbor + GitHub App): works end-to-end - Advisory Check All: fixed (parallel individual checks) - Mirror domain creation: works, generate-immediately fails silently - Topology wizard Step 1 (Region): blocked by auth passthrough issue - Topology wizard Step 2 (Environment): POST to JobEngine needs verify - User ID resolution: raw hashes shown everywhere Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
31 lines
1.6 KiB
JSON
31 lines
1.6 KiB
JSON
{
|
|
"name": "stellaops-docs",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"type": "module",
|
|
"scripts": {
|
|
"docs:attestor:validate": "node scripts/validate-attestation-schemas.mjs",
|
|
"docs:attestor:generate": "dotnet run --project src/Attestor/StellaOps.Attestor.Types/Tools/StellaOps.Attestor.Types.Generator --configuration Release",
|
|
"api:lint": "sh -c 'set -e; files=$(find src/Api/StellaOps.Api.OpenApi -type f -name \"*.yaml\" 2>/dev/null | wc -l); if [ \"$files\" -eq 0 ]; then echo \"[api:lint] no OpenAPI files found; skipping\"; exit 0; fi; npx --yes @stoplight/spectral-cli lint src/Api/StellaOps.Api.OpenApi/**/*.yaml'",
|
|
"api:examples": "node scripts/api-example-coverage.mjs",
|
|
"api:compose": "node src/Api/StellaOps.Api.OpenApi/compose.mjs",
|
|
"api:compat": "node scripts/api-compat-diff.mjs",
|
|
"api:compat:test": "node scripts/api-compat-diff.test.mjs",
|
|
"api:changelog": "node scripts/api-changelog.mjs",
|
|
"sdk:smoke:ts": "bash src/Sdk/StellaOps.Sdk.Generator/ts/test_generate_ts.sh",
|
|
"sdk:smoke:python": "bash src/Sdk/StellaOps.Sdk.Generator/python/test_generate_python.sh",
|
|
"sdk:smoke:go": "bash src/Sdk/StellaOps.Sdk.Generator/go/test_generate_go.sh",
|
|
"sdk:smoke:java": "bash src/Sdk/StellaOps.Sdk.Generator/java/test_generate_java.sh",
|
|
"sdk:smoke": "npm run sdk:smoke:ts && npm run sdk:smoke:python && npm run sdk:smoke:go && npm run sdk:smoke:java"
|
|
},
|
|
"dependencies": {
|
|
"@openai/codex": "^0.115.0-alpha.24",
|
|
"ajv": "^8.17.1",
|
|
"ajv-formats": "^2.1.1",
|
|
"yaml": "^2.4.5"
|
|
},
|
|
"devDependencies": {
|
|
"playwright": "^1.58.2"
|
|
}
|
|
}
|