5 Commits

Include renames

Author	SHA1	Message	Date
Tomáš DvořákandDevin	d44bbcceda	fix: QA hardening across desktop connect, CLI, setup, and PWA update flow (#52) ... - desktop: probe-then-persist server URL — scheme-less input tries https then http; a failed probe no longer saves a dead URL that would trap the next launch in a redirect to a broken address - frontend: close the create-collection modal on successful submit (backdrop stayed mounted and intercepted navigation) - frontend: reload once on service-worker controllerchange so returning users don't run a stale cached shell after a deploy - frontend: gate dashboard empty states on resource loading to stop the "No project selected" / "Create your workspace" flash - cli: resolve scheduled-job refs by name or id for jobs:run, jobs:runs, and jobs:rm, matching bucket/org resolution - cli: correct stale pk_live_/pk_test_ help text to the real prm_ format; align README command spellings and demo seed prefixes - setup: rewrite all public URL vars (auth, vite, backend) and cookie domain for the entered host — https for domains, http for IPs — with anchored full-line substitutions so stale ports/paths can't survive - docs: VITE_* vars never reach the frontend image build; the app resolves API/auth URLs same-origin at runtime, so host changes need no rebuild — noted HTTPS requirement for PWA/secure-context features Generated with [Devin](https://devin.ai) Co-authored-by: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-10-03 18:52:53 +02:00
Tomas DvorakandDevin	236357facb	feat: Client-published events + realtime presence ... - POST /projects/:id/events accepts client-authored events restricted to the custom.* namespace — system types can't be spoofed. They flow through the same publishEvent fan-out: realtime, webhooks, and event_pattern functions all fire. - Presence: subscribe/unsubscribe bumps a per-project count and broadcasts presence.update {online} to the realtime stream only — deliberately not through publishEvent so webhooks and "*" functions don't fire on connect noise. GET …/realtime/presence reads the count. - @primora/client gains publish() and presence(); CLI gains events:send. Verified live: presence 0->1 on subscribe, presence.update frame delivered, custom event delivered to SSE + fired a custom.* function, spoofed document.created rejected 400. Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-09-24 20:55:48 +02:00
Tomas DvorakandDevin	8892c6dc43	feat: PostgREST-style document filtering and ordering ... GET /collections/:id/documents accepts filter (field.op.value terms; eq neq gt gte lt lte like in is; dotted paths index into document data) and order (field.asc|desc). Whitelisted field/operator parsing with parameterized values; plain lists keep the sqlc path. CLI gains `documents list --collection --filter --order`; OpenAPI + generated client updated. Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-09-24 18:55:56 +02:00
Tomas DvorakandDevin	585bb04ab2	feat: encrypted secrets vault across CLI, desktop, dashboard, and backend ... Local vault (apps/cli): clean-room PRMVLT01 format — Argon2id → XChaCha20-Poly1305, AEAD-bound header, atomic writes. vault:* / secrets:* / inject (primora:// refs) / agent credential broker (dummy tokens in the child, real secret on the wire) / TTL sessions / stack:* operator group. Project vault (backend): core.project_secrets, AES-256-GCM via the platform encryptor. Metadata-only list, audit-logged reveal, and secret://NAME refs resolved at job delivery — refs stored, values never. Surfaces: dashboard Vault page (+ local-vault card under the Tauri shell), desktop vault window via IPC to the primora binary, secrets:* --remote CLI mode, metadata/write-only MCP tools so agents consume secrets via secret:// refs without holding plaintext. Authored By: TDvorak <[email protected]> Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-09-24 18:46:37 +02:00
Tomas DvorakandDevin	4f66c72121	docs: slim README, move detail into per-app and contributor docs ... README down to the Containr skeleton: header, three-screenshot row (rest behind <details>), features, architecture, quick start, links. Dropped tables and sections already covered by QUICK_START.md. Native dev commands and repo layout moved to CONTRIBUTING.md; CLI/MCP usage moved to new per-app READMEs. Authored By: TDvorak <[email protected]> Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-09-21 16:46:32 +02:00