 gilles
|
edb22a59c7
|
feat(docker): apply/prune/down + socle action_requests (tâche 2 SJ-6)
- migration 0005 : tables docker_image_events + action_requests
- templates apply-compose (up -d --remove-orphans), prune-images (safe/agressif),
down-compose (sans volumes/rmi)
- dockerApply: parsers TDD (apply recreated/running/exited, prune images+bytes,
down removed, parseHumanBytes) + orchestration applyStack/pruneImages/downStack
réservée aux stacks enabled, insère docker_image_events
- actionRequests: create/approve/reject/list — actions destructives validées
explicitement (Hermes propose, opérateur approuve, run en arrière-plan) ;
hors API directe (POST /:id/actions reste passif uniquement)
- routes /machines/:id/action-requests + /action-requests/:id[/approve|/reject]
- execute: RunActionOpts.aggressive, branches apply/prune/down, helper
archiveExecution mutualisant le boilerplate d'archivage
tsc 0 erreur · 91 tests · build OK · boot OK (migrations 0000→0005).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-06 06:05:59 +02:00 |
|
|
gilles
|
b1c81ba518
|
feat(docker): pull-check + comparaison déterministe par stack (tâche 2 SJ-5)
- template docker/pull-check.sh.tpl (pull sans up, inspect before/after)
- dockerPull: parseDockerPullCheck + buildDockerPullResult (TDD) — compare
image id/digest/label OCI → services up_to_date|updates_available|error,
changes operation=pulled ; erreurs registry nettoyées (URL/token/password)
- dockerDedupKey (digests prioritaires, fallback image ids) + DockerImageChange.dedupKey
- pullCheckStack: SSH + upsert docker_stack_services, refuse stack non enabled,
refresh Docker séparé (hors refreshMachine, pas de pull auto)
- execute: runAction(opts.stackId), branche docker_pull_check, injection stackDir
(corrige docker_inspect_current) ; route: allowlist Docker passifs + pull_check,
destructives toujours hors API jusqu'à action_requests (SJ-6)
Pas de migration (schéma SJ-4 suffisant). tsc 0 erreur · 85 tests · build OK.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-05 21:02:38 +02:00 |
|
|
gilles
|
08919752e3
|
feat: socle BDD (tâche 1.9 Phase 1-2) + moteur APT (tâche 2 SJ-0→3) + WIP capabilities/auth/Rust
Checkpoint multi-chantiers (arbre vert : tsc 0 erreur, 70 tests, build OK).
- tâche 1.9 Phase 1 : schéma socle (machine_state/events/reports/raw_artifacts/
hardware/metrics + colonnes étendues) + wiring refresh/execute. Migration 0002.
- tâche 1.9 Phase 2 : machine_credentials + machine_host_keys (non destructif,
dual-read + backfill). Migration 0003. Fix séquence journal de migration.
- tâche 2 : SJ-0 (types étendus rétro-compatibles, réducteur Docker, resolveTemplate),
SJ-1 (update-analyze enrichi), SJ-2 (apply + diff dpkg + timeout inactivité SSH),
SJ-3 (reboot vérifié boot_id).
- WIP parallèle inclus : /api/capabilities, auth/apiTokens/apiClients, system metrics,
scaffold app_rust, ajustements frontend.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-05 19:50:25 +02:00 |
|
|
gilles
|
c3584f4ec8
|
feat: routes HTTP Hono (machines, refresh, actions, executions)
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-06-05 04:13:15 +02:00 |
|