97e9e6626e
ci: Fix deploy log capture and error handling
2026-03-20 20:33:14 -03:00
f2808be825
ci: Trigger deploy after container migration
2026-03-20 20:20:45 -03:00
ac6d41f2c9
ci: Add verbose scp logging to debug deploy failure
2026-03-20 19:51:08 -03:00
654147d43f
ci: Trigger new run to debug deploy step
2026-03-20 19:35:10 -03:00
cac045d98a
fix: Clone botserver to temp dir then replace submodule to avoid workspace conflict
2026-03-20 19:15:03 -03:00
6e54799973
fix: Kill botserver before scp deploy to prevent file lock
2026-03-20 18:59:14 -03:00
705d925947
fix: Allow anonymous access to /api/suggestions for bot chat
2026-03-20 18:44:08 -03:00
d19984fa07
feat: Improve KB keywords and package manager installer
2026-03-20 17:38:47 -03:00
57a8b7f8f0
Fix: use pgrep to check valkey/qdrant running state
...
- valkey check_cmd: replaced valkey-cli ping (network) with pgrep -x valkey-server
- qdrant check_cmd: replaced curl https check (TLS error 35) with pgrep -x qdrant
- Prevents duplicate instances on each botserver restart
2026-03-20 15:40:22 -03:00
3bb115266b
feat: Add GUID prefix to Qdrant collection names for KB security isolation
2026-03-19 19:51:28 -03:00
3db53dfd42
chore: trigger CI build
2026-03-19 12:28:36 -03:00
a985dfc168
fix: use id instead of bot_id in SLA policy inserts
2026-03-19 11:59:52 -03:00
d6ebd0cf6e
fix: send suggestions separately from TALK, clear Redis keys for refresh
...
- Remove suggestions fetching from TALK function
- WebSocket handler now fetches and sends suggestions after start.bas executes
- Clear suggestions and start_bas_executed keys to allow re-run on refresh
- Decouple TALK from suggestions handling
2026-03-19 09:53:39 -03:00
2fcfb05fd6
fix: USE_WEBSITE non-blocking - timeout 3s, never blocks start.bas
2026-03-18 19:41:23 -03:00
6e594d68dd
Fix: Wait for send_task to be ready before executing start.bas
2026-03-18 14:38:46 -03:00
8f073a15fd
Fix: Wait for send_task to be ready before executing start.bas so TALK messages work
2026-03-18 14:18:05 -03:00
1a9208b88e
Fix: Use bot_id instead of user_id in TALK suggestions Redis key
2026-03-18 11:05:56 -03:00
ec4fcc094a
Fix: Use bot_id instead of user_id in suggestion Redis keys
...
- Changed all suggestion key formats from suggestions:user_id:session_id to suggestions:bot_id:session_id
- Fixes bug where suggestions were stored under wrong key, preventing frontend from retrieving them
- Affects: CLEAR SUGGESTIONS, ADD SUGGESTION, ADD SUGGESTION TEXT, ADD_SUGGESTION_TOOL
- Impact: Suggestions now correctly associated with bot, not user
2026-03-18 10:39:27 -03:00
346c83871a
Fix Vault TLS certificate to include Subject Alternative Name for modern client compatibility
2026-03-18 09:30:27 -03:00
ed2a1d83f0
fix: include server epoch in start_bas_executed key to invalidate after restart
2026-03-17 15:45:02 -03:00
492530ee77
Fix panic: Cannot start a runtime from within a runtime in secrets module
...
Removed tokio::runtime::Handle::block_on() calls that were causing panics
when called from within async contexts. Now uses direct fallback to
environment variables instead.
2026-03-17 15:04:40 -03:00
282f3487c0
ci: deploy via SSH instead of lxc device mounts
2026-03-17 13:12:41 -03:00
af7441ebcb
fix: generate mcp.json for tools without PARAM declarations
...
Tools using only USE KB or other keywords without PARAM were not
getting .mcp.json generated, causing USE TOOL to silently skip them.
2026-03-17 12:20:47 -03:00
7906a9bf32
security: add CoreDNS ACL hardening and fail2ban proxy jail
...
- dns_hardener.rs: apply ACL (anti-amplification) + errors plugin to Corefile via lxc
- fail2ban.rs: add apply_proxy() for caddy-http-flood jail in pragmatismo-proxy container
- security_fix.rs: integrate dns and fail2ban_proxy steps into run_security_fix/status
- mod.rs: export dns_hardener module
2026-03-17 11:18:19 -03:00
c340f95da1
security: bind MinIO and Valkey to 127.0.0.1 only
BotServer CI / build (push) Failing after 6m44s
2026-03-17 01:32:21 -03:00
9fc38b80d3
Fix clippy type complexity warnings
2026-03-17 01:12:05 -03:00
ab1f2df476
Read Drive config from Vault at runtime with fallback defaults
BotServer CI / build (push) Failing after 7m26s
2026-03-17 00:00:36 -03:00
b57c53e2ff
Remove WORKFLOW_PLAN.md (moved to gb/prompts)
BotServer CI / build (push) Failing after 7m22s
2026-03-16 23:40:56 -03:00
7849031ffe
Move WORKFLOW_PLAN.md to src/basic/
BotServer CI / build (push) Has been cancelled
2026-03-16 23:38:35 -03:00
91a79bbe82
WORKFLOW_PLAN: add keyword compatibility matrix and compilation without Rhai
BotServer CI / build (push) Failing after 7m47s
2026-03-16 23:24:34 -03:00
a24347b0f8
WORKFLOW_PLAN: add open source alternatives comparison (Restate, Rhythm, Temporal)
BotServer CI / build (push) Has been cancelled
2026-03-16 23:22:48 -03:00
38e21431ed
Add WORKFLOW_PLAN.md: durable BASIC execution via step engine
BotServer CI / build (push) Has been cancelled
2026-03-16 23:20:01 -03:00
ec1e203859
HEAR: add configurable timeout (hear-timeout-secs, default 1h)
BotServer CI / build (push) Has been cancelled
2026-03-16 23:12:45 -03:00
dae78479d2
Fix HEAR: block thread on channel instead of throw+re-run from top
...
BotServer CI / build (push) Failing after 6m54s
- Add hear_channels: HashMap<Uuid, SyncSender<String>> to AppState
- HEAR now blocks the spawn_blocking thread via sync_channel recv()
- deliver_hear_input() called at top of stream_response() to unblock
- Script continues from exact HEAR position, no side-effect re-execution
- All three HEAR variants (basic, AS TYPE, AS MENU) use same mechanism
2026-03-16 23:00:17 -03:00
35b793d29c
Add interactive vault put - prompt for secrets instead of CLI args
BotServer CI / build (push) Successful in 10m50s
2026-03-16 22:27:06 -03:00
c0b619b58f
Fix: add FromRequestParts impl for security AuthenticatedUser extractor
BotServer CI / build (push) Successful in 11m32s
2026-03-16 22:04:59 -03:00
49e9f419f3
Fix: export observability module from llm/mod.rs
BotServer CI / build (push) Has been cancelled
2026-03-16 22:00:55 -03:00
5ca5e98f8b
Fix: add missing async_trait on AuthenticatedUser extractor, type annotation on analytics router, import ObservabilityManager
BotServer CI / build (push) Has been cancelled
2026-03-16 21:54:29 -03:00
7326413ea8
Add security audit script
BotServer CI / build (push) Failing after 7m38s
2026-03-16 21:42:02 -03:00
16394aef01
Fix LXD IPv4: retry DHCP 30s, fallback to static IP for privileged containers
BotServer CI / build (push) Failing after 6m46s
2026-03-16 21:34:59 -03:00
03fe5bc94d
Fix LXD container install: PATH, socket proxy, DNS
BotServer CI / build (push) Failing after 7m36s
2026-03-16 21:24:04 -03:00
6c139fdf63
fix: suggestion and talk keyword improvements
BotServer CI / build (push) Successful in 13m59s
2026-03-16 13:29:14 -03:00
0db08fbf39
fix: fallback to get_or_create_user_session when session_id not found in start.bas
2026-03-16 13:25:45 -03:00
c87536d24a
fix: reuse existing user/session in auth_handler via user_id param
2026-03-16 13:15:48 -03:00
f062cc4a3e
Add THINK KB keyword for explicit knowledge base reasoning
...
- Implement think_kb.rs with structured search results
- Add keyword registration in mod.rs files
- Include confidence scoring and multi-KB support
2026-03-16 08:15:21 -03:00
7ef1efa047
feat: add setup-env command to generate .env from vault container
2026-03-15 21:15:48 -03:00
dfe5162f66
feat(install): add --container-only flag to install command
...
- Add --container-only flag to create container without completing full installation
- Exit immediately after container creation
- Useful for manual setup or debugging installation issues
2026-03-15 20:49:08 -03:00
d1cb6b758c
Fix LXD container mode: PATH, socket proxy, exec
BotServer CI / build (push) Successful in 10m54s
2026-03-15 20:00:06 -03:00
ba53a0c178
Fix LXD socket handling in container mode
BotServer CI / build (push) Successful in 11m6s
2026-03-15 18:58:21 -03:00
bf5ee0bef2
Remove botui SVG dependency - use None for svg_content
BotServer CI / build (push) Successful in 15m48s
2026-03-15 16:20:41 -03:00