7 Commits

Include renames

Author	SHA1	Message	Date
Latte	79aa4f7fc0	fix: load ./.env only when private and owned, add --env-file and AEGIS_ENV_FILE (SEC-04)	2026-10-14 17:22:29 +02:00
Latte	b82e2866cb	feat: new settings, CLI skeleton and interface skeletons ... Adds the pydantic-settings Settings with validated GITEA_URL, OAuth scopes and toolsets, the argparse CLI skeleton, catalog.model, identity and GiteaAPIError. Test fixtures now isolate env, cwd and state paths in tmp.	2026-10-14 15:40:37 +02:00
LatteandClaude Sonnet 4.6	b8217dce8a	feat: harden OAuth state secret validation, DCR file permissions, and policy defaults ... - Enforce 32-char minimum on OAUTH_STATE_SECRET at startup (config.py) - Write DCR client registry with owner-only (0o600) permissions before atomic replace - Flip policy.yaml default write action from allow → deny - Add CLAUDE.md with architecture, commands, and AGENTS.md contract summary - Add .pre-commit-config.yaml mirroring `make lint` checks - Update .gitignore: add .venv, .claude, .mypy_cache, .ruff_cache, .coverage.* - Extend docs: audit log rotation guidance, OAUTH_STATE_SECRET and DCR_STORAGE_PATH notes - Tests: short-secret rejection, 32-char acceptance, POSIX permission check for DCR store Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-06-14 14:13:22 +02:00
Latte	8504a95a11	feat: add opt-in write access for all token-visible repos	2026-02-14 16:35:03 +01:00
Latte	5969892af3	feat: harden gateway with policy engine, secure tools, and governance docs	2026-02-14 16:06:43 +01:00
Ubuntu	3c71d5da0a	update	2026-01-31 15:55:22 +00:00
Latte	a9708b33e2	.	2026-01-29 19:53:36 +01:00