codex_b

codex_b opened issue mark/thearchive#161

2026-03-14 18:01:44 +00:00

Production env is behind current OpenBao path and runtime secret expectations

codex_b pushed to fix/preview-deploy-diagnostics at mark/thearchive

2026-03-14 17:57:39 +00:00

59088d118c fix: align openbao secret path resolution

codex_b pushed to fix/preview-deploy-diagnostics at mark/thearchive

2026-03-14 17:49:49 +00:00

9ac229bf05 fix: preflight encryption secrets before deploy

codex_b created pull request mark/thearchive#160

2026-03-14 17:41:46 +00:00

fix: improve preview deploy failure diagnostics

codex_b created branch fix/preview-deploy-diagnostics in mark/thearchive

2026-03-14 17:41:23 +00:00

codex_b pushed to fix/preview-deploy-diagnostics at mark/thearchive

2026-03-14 17:41:23 +00:00

764be97e89 fix: improve preview deploy failure diagnostics

codex_b approved mark/thearchive#159

2026-03-14 16:49:42 +00:00

fix: align Keycloak client scope manifests with hosted realm

Approving based on the successful hosted fallback audit verification above.

codex_b commented on pull request mark/thearchive#159

2026-03-14 16:49:09 +00:00

fix: align Keycloak client scope manifests with hosted realm

Re-reviewed the latest update. The original contract change still looks correct, and the previous acceptance gap is now closed: scripts/audit-keycloak-client.py can verify defaultClientScopes / optionalClientScopes directly from agent-workspace via the new DB-backed fallback when the shared admin token path is unavailable. I independently ran the new fallback successfully against both infra/keycloak/the-archive-client.json and infra/keycloak/the-archive-dev-client.json, and both matched the hosted realm state.

codex_b commented on pull request mark/thearchive#159

2026-03-14 16:45:05 +00:00

fix: align Keycloak client scope manifests with hosted realm

Tooling test only: creating an approval review via MCP to verify that create + submit without a submit body produces a single visible review post.

codex_b suggested changes for mark/thearchive#159

2026-03-14 16:35:16 +00:00

fix: align Keycloak client scope manifests with hosted realm

Requesting changes for the acceptance-criteria gap above.

codex_b commented on pull request mark/thearchive#159

2026-03-14 16:35:12 +00:00

fix: align Keycloak client scope manifests with hosted realm

Medium: issue #157 explicitly requires scripts/audit-keycloak-client.py to pass against the hosted realm for this field, but this branch does not actually deliver or prove that outcome. The only change in scripts/audit-keycloak-client.py is explanatory text; the script still depends on a working KC_TOKEN admin bearer token path (scripts/audit-keycloak-client.py:23-42). The PR body also says the hosted admin-API run is still blocked by #158, and docs/deployment.md:190 still points at the manual hosted audit flow. This fixes the in-repo expectation mismatch, but it does not fully satisfy the acceptance criterion the PR claims to close.

codex_b commented on pull request mark/thearchive#156

2026-03-14 15:32:08 +00:00

Fix hosted Keycloak auth stability regressions

Updated the documentation contract in bc71556 to reflect the current shared Keycloak audit secret location.

What changed:

docs/deployment.md now explicitly documents `secret/shared/keycloak-…

codex_b pushed to fix/issue-154-hosted-auth-stability at mark/thearchive

2026-03-14 15:31:54 +00:00

bc715564a2 docs: standardize keycloak audit secret location

codex_b commented on pull request mark/thearchive#156

2026-03-14 15:19:18 +00:00

Fix hosted Keycloak auth stability regressions

Addressed the review feedback in 9b54cde.

What changed:

updated docs/deployment.md so the Keycloak admin password is no longer interpolated into curl argv
switched the example to a…

codex_b pushed to fix/issue-154-hosted-auth-stability at mark/thearchive

2026-03-14 15:19:03 +00:00

9b54cdef20 docs: keep keycloak audit password off argv

codex_b opened issue mark/thearchive#157

2026-03-14 14:50:31 +00:00

Audit and resolve hosted Keycloak client drift for default client scopes

codex_b commented on issue mark/thearchive#154

2026-03-14 14:37:59 +00:00

Stabilize hosted Keycloak auth: fix silent renew CSP, dedupe sign-in redirects, and clarify session UX

Implementation is up in PR #156 (fix/issue-154-hosted-auth-stability) with local verification, preview deploy verification, manual hosted QA, and the live Keycloak session-settings audit…

codex_b commented on issue mark/thearchive#126

2026-03-14 14:37:58 +00:00

Fix: weird auth issues

Execution is now tracked in PR #156 (fix/issue-154-hosted-auth-stability). This splits the hosted auth-flow regressions out into issue #154 and carries the preview QA + Keycloak audit details…

codex_b created pull request mark/thearchive#156

2026-03-14 14:37:42 +00:00

Fix hosted Keycloak auth stability regressions

codex_b pushed to fix/issue-154-hosted-auth-stability at mark/thearchive

2026-03-14 14:34:18 +00:00

232787c21d fix: preserve signed-out state after logout