Commit Graph - kms

hanzoai/kms

Fork 0

mirror of https://github.com/hanzoai/kms.git synced 2026-10-17 11:18:16 +00:00

Commit Graph

Select branches

Hide Pull Requests

main

release/v2.5.0-multi-issuer

backup/kms-premerge

mirror/fix/kms-require-env-on-writes-1fe217d

mirror/fix/quiet-per-request-access-log-025edeb

mirror/main-2e4e701

sdk/go/v1.0.0

sdk/go/v1.1.0

sdk/go/v1.1.1

sdk/go/v1.1.2

sdk/go/v1.1.3

sdk/go/v1.1.4

sdk/go/v1.1.5

sdk/go/v1.1.6

sdk/go/v1.1.7

v0.0.1

v0.159.0

v0.159.1

v0.159.10

v0.159.2

v0.159.3

v0.159.4

v0.159.5

v0.159.6

v0.159.7

v0.159.8

v0.159.9

v2.5.3

v2.5.4

v2.6.0

v2.6.1

v2.6.10

v2.6.11

v2.6.2

v2.6.3

v2.6.4

v2.6.5

v2.6.7

v2.6.8

v2.6.9

wip/snapshot

5517823478 Grant the CI reusable its ID token main zeekay 2026-10-17 04:18:04 -07:00
8b3c902075 Publish the console as hanzo-kms, since kms is a reserved slug zeekay 2026-10-16 22:47:18 -07:00
f447ec6bd5 Build on the GitHub plane again, so the console ships zeekay 2026-10-16 22:34:22 -07:00
5cab2f1f5a The console signs in on hanzo.ai, carrying hanzo-kms's own request zeekay 2026-10-16 18:37:41 -07:00
8448502838 LLM.md is the one committed guide; CLAUDE.md, AGENTS.md and GEMINI.md are local links to it zeekayandHanzo Dev 2026-09-24 15:57:55 -07:00
01d52f0aec Declare operations on the group that serves them v0.159.10 zeekayandHanzo Dev 2026-09-17 06:03:33 -07:00
3029fc12e0 zip v1.36.50, so the wire does not follow the toolchain zeekayandHanzo Dev 2026-09-16 22:53:28 -07:00
26a9f1d25e Compile with TypeScript 7 zeekayandHanzo Dev 2026-09-16 21:31:25 -07:00
4bcdcbfbf6 Go 1.27.1, and the code it can say more simply zeekayandHanzo Dev 2026-09-16 18:32:14 -07:00
8b991fbf37 Images build at versions past the newest published tag zooqueenandHanzo Dev 2026-09-15 11:47:34 -07:00
6ba3f6d83c Build, test and publish on the forge from hanzo.yml zooqueenandHanzo Dev 2026-09-15 11:33:56 -07:00
81e27efff6 The console signs in with Hanzo IAM and manages secrets over cloud's /v1/kms zooqueenandHanzo Dev 2026-09-15 11:33:56 -07:00
1d211df160 deps: luxfi/kms v1.12.26, zip v1.36.48 v2.6.11 sdk/go/v1.1.7 zeekayandHanzo Dev 2026-09-11 12:36:33 -07:00
f72cf9378c our runners persist, so a dependency cache is a tar of what is already there zeekay 2026-09-09 05:34:21 -07:00
6d34528fb1 Drop the workflows that never ran zeekayandHanzo Dev 2026-09-09 00:49:41 -07:00
6b6f45406a one runner label, one go toolchain zeekayandHanzo Dev 2026-09-09 00:02:47 -07:00
77134a39ec Move the pipelines onto our own runners, on every arch zeekay 2026-09-06 19:02:18 -07:00
5f92bdfb56 feat(custody): hand the serving side a store, not the database v2.6.10 zeekayandHanzo Dev 2026-09-05 23:22:18 -07:00
e699578ba8 feat(custody): hold node identity keys, sign on their behalf v2.6.9 sdk/go/v1.1.6 zeekayandHanzo Dev 2026-09-05 23:15:43 -07:00
d445023116 make: add help, build, lint to the canonical target set v2.6.8 zeekayandHanzo Dev 2026-08-04 14:38:19 -07:00
a0222b2e03 Ship the secret store as its binaries alone zeekay 2026-09-03 10:58:43 -07:00
26c5ee8623 make: point the test target at the packages that exist zeekayandHanzo Dev 2026-07-28 19:04:22 -07:00
48df2ef2f1 every Hanzo dependency is the version npm serves zeekay 2026-09-01 16:13:29 -07:00
0a4cce22cf the job asks for its runner the way the fleet answers zeekay 2026-08-29 13:22:19 -07:00
244962f269 Name Zen in the hero card's font stack zeekay 2026-08-28 11:28:48 -07:00
55ebfcda1f fix(type): the binding is named for the face it holds zeekay 2026-08-28 08:34:01 -07:00
dc11ce14e2 fix: the favicon is the Hanzo mark, not a red tile with a drawn H zeekay 2026-08-24 14:21:56 -07:00
e77ebda381 Depend on github.com/zap-proto/zip v1.34.2 zeekay 2026-08-22 17:36:12 -07:00
38efec717e Depend on github.com/zap-proto/zip v1.34.1 zeekay 2026-08-22 15:20:49 -07:00
e48184d514 track the name agents read, so a clone documents itself zeekay 2026-08-20 16:27:27 -07:00
e6a50f427e Hold the secrets; let cloud decide who may read them zeekayandHanzo Dev 2026-08-20 13:12:50 -07:00
883af76599 kmsclient: an absent secret answers to errors.Is, not to its own wording sdk/go/v1.1.5 zeekayandHanzo Dev 2026-08-20 10:10:19 -07:00
3b14e17649 kms: build both images with no credential and the checksum db authoritative v2.6.7 zooqueen 2026-08-20 00:03:07 -07:00
c0486a09bc the ZAP dial addresses its request to the session it goes out on sdk/go/v1.1.4 zeekayandHanzo Dev 2026-08-15 04:51:55 -07:00
d7e864494f the secret URL carries no org, because the server does not read one there sdk/go/v1.1.3 zeekayandHanzo Dev 2026-08-15 04:24:33 -07:00
974073844f kms client: the ZAP dial carries a secret only over a hybrid session sdk/go/v1.1.2 zeekayandHanzo Dev 2026-08-14 23:49:51 -07:00
71b20b983c Merge the forge line into main — one history, two remotes zeekayandHanzo Dev 2026-08-12 20:29:14 -07:00
c0ebcb714c kms: fetch the module graph through the proxy, not straight from git zeekay 2026-08-12 20:08:21 -07:00
68fea39969 go.sum: record the modules the build already uses zooqueen 2026-08-11 17:09:20 -07:00
4323e1e762 sdk/go: unblock it, then take it to zero minio zooqueen 2026-08-10 22:31:02 -07:00
2ba926f24c zero minio in the root module: zapdb v1.10.6 zooqueen 2026-08-10 21:42:59 -07:00
4cbdfe4a9b kms is an app, so it builds its own zip.App instead of taking cloud's Deps zeekayandHanzo Dev 2026-08-10 12:47:40 -07:00
b3428751e3 reconcile the two mains: the forge carried CI and deps, GitHub carried the notice zooqueenandHanzo Dev 2026-08-08 19:52:53 -07:00
d4087f00e3 ci: drop generate_release_notes — the forge does not implement that endpoint zeekayandHanzo Dev 2026-08-01 19:18:58 -07:00
f88cf1235a ci: registry cache — the gha backend cannot work on this forge zeekayandHanzo Dev 2026-08-01 18:13:12 -07:00
8d4ec337a9 ci: ghcr login uses the credential hanzoai provisions zeekayandHanzo Dev 2026-08-01 16:46:22 -07:00
d7484e8d06 deps: exclude versions that no longer exist upstream zeekayandHanzo Dev 2026-07-28 16:09:38 -07:00
866c76d8ff deps: drop the stale luxfi/vm v1.3.1 go.sum lines zeekayandHanzo Dev 2026-07-28 02:01:10 -07:00
129f058375 docs(readme): say at the top that this is archived and superseded zeekay 2026-08-01 13:51:00 -07:00
4eca56f961 ci: upload-artifact v3 — v4+ is refused by the forge zeekayandHanzo Dev 2026-07-31 20:35:52 -07:00
a7829094c5 On main: wip snapshot wip/snapshot zeekay 2026-07-31 19:22:54 -07:00
46fcd3e8a8 index on main: 20ede2c6bb build(deps): zip v1.10.0 + http v0.3.0; cover the AdaptNetHTTP mount bridge zeekay 2026-07-31 19:22:54 -07:00
76a00f0e3c deps: zip v1.10.0 -> v1.18.1 mirror/main-2e4e701 zeekayandHanzo Dev 2026-07-28 19:04:47 -07:00
5c428143ca make: point the test target at the packages that exist zeekayandHanzo Dev 2026-07-28 19:04:22 -07:00
5d35f25c5e fix: complete the TypeScript 7 tsconfig migration zeekayandHanzo Dev 2026-07-27 17:41:08 -07:00
c067bc1bfb chore(go): bump go directive to 1.26.5 zeekayandHanzo Dev 2026-07-27 16:10:09 -07:00
762ba4f33a build: migrate tsconfig to TypeScript 7 (native compiler) zeekayandHanzo Dev 2026-07-27 14:18:20 -07:00
b1f772e36d ci: drop the Gitea mirror-sync nudge zeekay 2026-07-27 10:36:04 -07:00
20ede2c6bb build(deps): zip v1.10.0 + http v0.3.0; cover the AdaptNetHTTP mount bridge zeekayandHanzo Dev 2026-07-27 10:12:09 -07:00
07e2adb8db build(deps): zip v1.9.0 + http v0.2.2; net/http subtree via AdaptNetHTTP zeekayandHanzo Dev 2026-07-27 09:37:31 -07:00
cd15134667 test: put back the process-global state Embed changes, and measure only our goroutines zeekayandHanzo Dev 2026-07-27 08:53:05 -07:00
fcd565d375 ci: run every lane on the forge, leave sync.yml on the mirror zeekayandHanzo Dev 2026-07-27 08:42:36 -07:00
a5faad7752 ci: nudge git.hanzo.ai to pull on push zeekay 2026-07-27 08:22:11 -07:00
6c98d29d27 ci: remove GitHub CI — native git.hanzo.ai + cd.hanzo.ai only zeekay 2026-07-27 08:16:33 -07:00
6c5e63ceb7 ci: remove GitHub CI — native git.hanzo.ai + cd.hanzo.ai only zeekay 2026-07-27 08:16:32 -07:00
3d1b0524c2 ci: remove GitHub CI — native git.hanzo.ai + cd.hanzo.ai only zeekay 2026-07-27 08:16:30 -07:00
a1ee759a49 ci: remove GitHub CI — native git.hanzo.ai + cd.hanzo.ai only zeekay 2026-07-27 08:16:29 -07:00
667b0a6352 feat(telemetry): spans go to o11y over ZAP, not OTLP zeekay 2026-07-26 18:52:15 -07:00
b3aa45d141 Merge remote-tracking branch 'origin/main' into reconcile-native zeekayandHanzo Dev 2026-07-26 17:44:26 -07:00
3d53f3709a fix(kms-ui): truthful labels for validator key slots zeekayandHanzo Dev 2026-07-21 08:39:43 -07:00
7faddf8cc9 docs: modernize + LLM.md + cross-links (one-way SDK model) zeekay 2026-07-24 12:43:36 -07:00
739e4c42af docs: modernize + LLM.md + cross-links (one-way SDK model) zeekay 2026-07-24 12:43:34 -07:00
5fd730d939 chore(deps): bump luxfi/vm 1.3.1->1.3.2, tidy module graph backup/kms-premerge zeekay 2026-07-19 19:51:55 -07:00
5c7d586194 Merge decruft: drop dead Embedded.HTTPAddr accessor zeekayandGitHub 2026-07-18 11:02:51 -07:00
13ed14b34b Merge decruft: drop dead Embedded.HTTPAddr accessor zeekayandGitHub 2026-07-18 11:02:51 -07:00
a0cced206c refactor(embed): drop dead Embedded.HTTPAddr accessor zeekay 2026-07-18 11:02:07 -07:00
ad136cd13e refactor(embed): drop dead Embedded.HTTPAddr accessor zeekay 2026-07-18 11:02:07 -07:00
314e415959 ci: resolve private luxfi modules in the kms release build zeekay 2026-07-18 09:36:19 -07:00
fb1c5a89cc ci: resolve private luxfi modules in the kms release build v2.6.5 zeekay 2026-07-18 09:36:19 -07:00
7427353c76 build(deps): bump luxfi/kms v1.11.8 -> v1.12.4 zeekay 2026-07-18 01:15:58 -07:00
164fe5bf41 build(deps): bump luxfi/kms v1.11.8 -> v1.12.4 v2.6.4 zeekay 2026-07-18 01:15:58 -07:00
feb2c695da Merge chore/debrand-o11y-comment: debrand SigNoz -> o11y in telemetry comment zeekayandGitHub 2026-07-18 00:13:38 -07:00
e65b0a4f19 Merge chore/debrand-o11y-comment: debrand SigNoz -> o11y in telemetry comment zeekayandGitHub 2026-07-18 00:13:38 -07:00
3503def4a9 chore(o11y): debrand SigNoz -> o11y in telemetry comment zeekay 2026-07-18 00:13:25 -07:00
a8ad45cf2b chore(o11y): debrand SigNoz -> o11y in telemetry comment zeekay 2026-07-18 00:13:25 -07:00
f182722b58 Merge chore/fork-hygiene-notice: Infisical provenance + deviations in NOTICE zeekayandGitHub 2026-07-18 00:08:59 -07:00
563b9c7e56 Merge chore/fork-hygiene-notice: Infisical provenance + deviations in NOTICE zeekayandGitHub 2026-07-18 00:08:59 -07:00
bd746663fe feat: migrate SQLite driver to hanzoai/sqlite (#25)
zeekay GitHub hanzo-dev
2026-07-17 22:46:12 -07:00
7acfeb887c feat: migrate SQLite driver to hanzoai/sqlite (#25)
zeekay GitHub hanzo-dev
2026-07-17 22:46:12 -07:00
a750199c4d build(deps): bump kms/sdk/go luxfi/keys v1.2.0 -> v1.4.1 (ServiceIdentity consumer) zeekayandHanzo Dev 2026-07-17 01:00:15 -07:00
2642a474ed build(deps): bump kms/sdk/go luxfi/keys v1.2.0 -> v1.4.1 (ServiceIdentity consumer) zeekayandHanzo Dev 2026-07-17 01:00:15 -07:00
7ccb5b437d build(deps): adopt unified luxfi stack via keys v1.4.1 (unbreak force-moved keys/zap-proto + vanished geth v1.16.98) zeekayandHanzo Dev 2026-07-17 00:58:59 -07:00
ca6f3b34c5 build(deps): adopt unified luxfi stack via keys v1.4.1 (unbreak force-moved keys/zap-proto + vanished geth v1.16.98) zeekayandHanzo Dev 2026-07-17 00:58:59 -07:00
95d86fe8e0 chore(notice): state Infisical derivation provenance and deviations; sweep product branding zeekay 2026-07-13 15:56:39 -07:00
3d7f83855f chore(notice): state Infisical derivation provenance and deviations; sweep product branding zeekay 2026-07-13 15:56:39 -07:00
16cefe9254 ci: route linux/amd64 jobs to hanzo-build-linux-amd64 ARC scale set zeekay 2026-07-10 21:52:38 -07:00
93cac281d1 ci: route linux/amd64 jobs to hanzo-build-linux-amd64 ARC scale set zeekayandHanzo Dev 2026-07-10 21:52:38 -07:00
8123ee23ea fix(kms): require explicit env on secret writes (no silent default) (#22)
zeekay GitHub hanzo-dev
2026-07-08 07:21:40 -07:00
4ad4f9909b fix(kms): require explicit env on secret writes (no silent default) (#22)
zeekay GitHub Hanzo Dev
2026-07-08 07:21:40 -07:00
af4f86a528 fix(kms): require explicit env on secret writes (no silent default) mirror/fix/kms-require-env-on-writes-1fe217d zeekayandHanzo Dev 2026-07-08 07:06:25 -07:00

1 2 3 4 5 ...