switchboard/core
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Releases 9 Wiki Activity
218 Commits 1 Branch 9 Tags
b10f5bee0533a8065ad390fbd84604c799ec4658
Commit Graph

13 Commits

Author SHA1 Message Date
Jeffrey Smith
b10f5bee05 drop users.role column: full RBAC through group membership
All checks were successful
CI/CD / detect-changes (pull_request) Successful in 4s
Details
CI/CD / test-frontend (pull_request) Successful in 5s
Details
CI/CD / test-go-pg (pull_request) Successful in 2m22s
Details
CI/CD / test-sqlite (pull_request) Successful in 2m35s
Details
CI/CD / build-and-deploy (pull_request) Successful in 1m18s
Details 
The role column was a pre-RBAC artifact. All authorization now flows
through explicit group membership and permission grants:

- Everyone group: all users added on creation (no implicit membership)
- Admins group: grants surface.admin.access + all platform permissions
- JWT claims, login response, profile: role field removed
- OIDC: isIdPAdmin() maps IdP claims → Admins group (no role writes)
- Admin UI: role dropdown removed, admin managed through groups
- Middleware cache simplified to isActive only

28 files changed, -79 lines net. Zero magic roles.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-26 17:23:12 +00:00
Jeffrey Smith
e8e45184f7 remove token budgets + allowed models from groups
All checks were successful
CI/CD / detect-changes (pull_request) Successful in 4s
Details
CI/CD / test-frontend (pull_request) Successful in 5s
Details
CI/CD / test-go-pg (pull_request) Successful in 2m12s
Details
CI/CD / test-sqlite (pull_request) Successful in 2m45s
Details
CI/CD / build-and-deploy (pull_request) Successful in 1m18s
Details 
Provider-era cruft: token_budget_daily, token_budget_monthly, and
allowed_models columns removed from groups table (both dialects).
ResolveTokenBudget() and ResolveModelAllowlist() deleted. GroupPatch
trimmed to name/description/permissions. Admin groups UI simplified
to permissions-only. -283 lines.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-26 16:53:18 +00:00
Jeffrey Smith
316c9cbfa7 admin → RBAC group migration: grant-based access replaces role check
All checks were successful
CI/CD / detect-changes (pull_request) Successful in 19s
Details
CI/CD / test-frontend (pull_request) Has been skipped
Details
CI/CD / test-go-pg (pull_request) Successful in 2m14s
Details
CI/CD / test-sqlite (pull_request) Successful in 2m56s
Details
CI/CD / build-and-deploy (pull_request) Successful in 1m21s
Details 
surface.admin.access permission + seeded Admins system group replaces
hardcoded role == "admin" middleware checks. Admin bypass removed from
RequirePermission — all permissions flow through group membership.
Bootstrap, seed, OIDC, and admin handlers sync group membership on
role changes. Demotion/deletion safeguards use group member count.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-26 16:14:46 +00:00
Jeffrey Smith
e4b7ee98a5 step 5 (partial): strip dropped packages from production code 
Removed all references to dropped packages in non-test code.
Zero dropped imports, store refs, or model types remaining.

Major removals:
  - scheduler/ package (entire dir) — tasks moved to extension track
  - taskutil/ package (entire dir)
  - health/ package (entire dir) — provider/tool health
  - sandbox/provider_module.go — provider.complete module
  - handlers: workflow_entry, workflow_instances, workflow_forms,
    workflow_assignments, workflow_monitor, health_admin (6 files)
  - auth/session.go, middleware/session_auth.go
  - store/{postgres,sqlite}/sessions.go, tasks.go

Rewrites:
  - store/{postgres,sqlite}/health.go — kernel-only Prune
    (ws_tickets, rate_limit_counters, stale presence)
  - handlers/admin.go: 847→467 lines (stripped provider CRUD)
  - handlers/teams.go: 520→411 lines (stripped model listing)
  - sandbox/runner.go: removed ProviderResolver
  - sandbox/workflow_module.go: 216→83 lines (definition-only)
  - main.go: 1579→1325 lines (stripped dropped package init)
  - pages/pages.go: stripped channel/session lookups
  - events/types.go: stripped chat/channel/workspace event routes
  - models: stripped stale types, constants, notification types

Store interface cleanup:
  - Removed SessionStore, TaskStore from Stores struct
  - Stripped workflow assignment methods from WorkflowStore iface
  - Stripped assignment methods from PG+SQLite workflow stores
  - Updated testhelper.go table list to kernel-only

Migrations: removed 008_tasks.sql (both dialects)

-9665/+69 lines across 51 files.
 2026-03-26 04:56:07 -04:00
Jeffrey Smith
11fd8c1e57 step 1: rename module chat-switchboard → switchboard-core 
- go.mod module name
- All 714 import references across 289 Go files
- VERSION: 0.1.0
- CI DB names: switchboard_core_{ci,dev,test}
- Docker image: gobha/switchboard-core
- Test fixtures: JWT issuer, repo names
- .env.example, docker-compose container name
- Compiles clean (go build exit 0)
 2026-03-25 19:48:04 -04:00
xcaliber
b1266b0d7c Changeset 0.32.0 (#206) 2026-03-19 18:50:27 +00:00
xcaliber
3237d55e0c Changeset 0.28.7 (#193) 2026-03-15 15:45:00 +00:00
xcaliber
8e08f3e4b0 Changeset 0.28.0.2 (#174) 2026-03-11 19:41:04 +00:00
xcaliber
dcb915555e Changeset 0.27.2 (#169) 2026-03-11 00:22:02 +00:00
xcaliber
937be26578 Changeset 0.24.3 (#159) 2026-03-07 20:49:23 +00:00
xcaliber
ea082e2016 Changeset 0.24.2 (#158) 2026-03-07 19:58:43 +00:00
xcaliber
b6cc4df6e7 Changeset 0.24.1 (#157) 2026-03-07 17:11:32 +00:00
xcaliber
a63728a481 Changeset 0.24.0 (#156) 2026-03-07 11:27:24 +00:00