Skip to content

feat(rewrite): isolate future root and harden database runtime - #393

Open
mira-2026 wants to merge 6 commits into
mira/greenfield-rewrite-platform-boundaries-configfrom
mira/greenfield-root-isolation
Open

feat(rewrite): isolate future root and harden database runtime#393
mira-2026 wants to merge 6 commits into
mira/greenfield-rewrite-platform-boundaries-configfrom
mira/greenfield-root-isolation

Conversation

@mira-2026

@mira-2026 mira-2026 commented Aug 6, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • isolate the complete rewrite in a self-contained greenfield/ future repository root with its own package graph, lockfile, strict Bun/browser TypeScript projects, lint/format rules, CI, coverage, documentation, migrations, scripts, tests, and source-boundary policy
  • remove active rewrite dependencies on legacy backend/frontend/script trees while retaining only reviewed historical parity fixtures; cutover promotes the contents of greenfield/ without path rewrites
  • add the process-owned Bun SQLite/Drizzle runtime, verified migration graph, private-path and ancestor policy, bounded cross-process write admission, realtime ownership, ordered shutdown, and redacted temporary-write-unavailability transport behavior
  • close startup, schema-prefix, authentication settlement, timeout/abort, and runtime-disposal races with deterministic regression tests and independent adversarial review

Behavior and regression coverage

  • the rewrite can install and run all gates from an isolated copy without reading the coexisting application or its node_modules
  • exactly three TypeScript configs remain: a shared root project map plus strict Bun and browser graphs; non-browser code has no DOM authority
  • source boundaries fail closed for cross-root imports, unknown executable roots, aliases, loader escapes, symlinks, unreviewed packages, and misplaced browser/runtime authority
  • database startup pins and revalidates the private state-directory and database identities, rejects unsafe sidecars or replaceable ancestors, validates the canonical migration ledger/schema/integrity, and never repairs host permissions
  • busy_timeout=0 never blocks Bun synchronously; bounded async admission retries only before BEGIN IMMEDIATE, never replays a started transaction callback, and maps exhausted declared mutations to a fixed redacted SERVICE_UNAVAILABLE
  • result, failure, timeout, cancellation, and runtime disposal share one exclusive authentication settlement claim; the verifier deadline ends before durable settlement and permits remain held until settlement finishes
  • persistent state, logs, backups, job output, runtimes, releases, and checkouts remain beneath <project-root>/production or <project-root>/development; only installed systemd unit-file copies may live outside that tree

Verification

  • Greenfield lint: bun run lint
  • Greenfield formatting: bun run format:check
  • Greenfield typecheck: bun run typecheck
  • Source boundaries: bun run check:boundaries
  • Generated documentation: bun run docs:check
  • Drizzle/schema drift: bun run db:check
  • Full greenfield tests: bun run test / coverage runner — 1192 passed, 0 failed
  • Total executable src/ line coverage: 91.60% (22125/24153), above the exact 85% gate
  • Fresh isolated Daytona/Crabbox verification: Bun canary bootstrap, frozen install, typecheck, lint, format, boundaries, docs, DB drift, and full tests all passed; sandbox removed after the run
  • Focused race/stress verification and independent adversarial reviews found no remaining P1/P2/P3 issue
  • Frontend production build/manual UI smoke — not applicable yet; the browser executable and operator UI remain later stack layers

Risk checklist

  • No secrets, tokens, .env files, database dumps, runtime state, or generated coverage artifacts committed
  • Authentication, SQLite, migration, filesystem, concurrency, shutdown, and error-redaction boundaries were reviewed independently
  • Contract and runtime error policies match exactly; undeclared/query failures remain fail-closed internal errors
  • The migration baseline is still unpublished and no production database or host permission was changed
  • No production UI behavior changes; this PR establishes the isolated future root and server/database foundation

Deployment / operations

  • No deploy or restart now — the greenfield executable web/worker roots are intentionally not active
  • No config or secret change now
  • Rollback is a branch/PR revert; no production data or external state was mutated
  • Before the first eventual cutover, the supervised host precondition is chmod go-w /home/ubuntu/projects (0775 to 0755) without moving data
  • Later delivery layers must add project-local log routing, executable web/worker roots, replacement systemd units, snapshot/promotion, release/database-pair rollback, and cutover runbooks before activation

Notes for reviewers

  • Review this as one intentionally large transition PR: the root move and its package/config/test graph must land together so the future root is independently valid at every commit boundary above this PR.
  • Please focus on future-root isolation, SQLite filesystem/migration invariants, write admission with no callback replay, exclusive authentication settlement, and application-before-database shutdown ordering.
  • This PR is the top of GitHub stack #380 and is based on PR feat(platform): establish greenfield process boundaries #392.

@mira-2026
mira-2026 requested a review from rajohan as a code owner August 6, 2026 19:14
@coderabbitai

coderabbitai Bot commented Aug 6, 2026

Copy link
Copy Markdown

Important

Review skipped

Too many files!

This PR contains 625 files, which is 525 over the limit of 100.

To get a review, reduce the PR to 100 files or fewer by splitting it into smaller PRs or changing its base branch.

Upgrade to a paid plan to raise the limit.

Usage-priced reviews support at most 300 files.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: d794965b-3581-4f27-9563-e626c79b42d9

📥 Commits

Reviewing files that changed from the base of the PR and between ba76c1f and c0ce6a5.

⛔ Files ignored due to path filters (82)
  • bun.lock is excluded by !**/*.lock and included by **/*
  • greenfield/bun.lock is excluded by !**/*.lock and included by **/*
  • greenfield/docs/generated/README.md is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/configuration.md is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/packages-and-runtime.md is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/procedures.md is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/raw-http.md is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/realtime-events.md is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.beginTotpEnrollment.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.beginTotpEnrollment.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.beginWebAuthnEnrollment.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.beginWebAuthnEnrollment.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.beginWebAuthnStepUp.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.beginWebAuthnStepUp.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.confirmTotpEnrollment.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.confirmTotpEnrollment.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.confirmWebAuthnEnrollment.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.confirmWebAuthnEnrollment.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.disableMfa.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.disableMfa.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.reauthenticatePassword.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.reauthenticatePassword.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.removeTotpFactor.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.removeTotpFactor.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.removeWebAuthnCredential.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.removeWebAuthnCredential.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.rotateRecoveryCodes.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.rotateRecoveryCodes.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.stepUpRecovery.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.stepUpRecovery.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.stepUpTotp.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.stepUpTotp.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.stepUpWebAuthn.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.stepUpWebAuthn.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.summary.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/accountSecurity.summary.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.beginWebAuthnLogin.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.beginWebAuthnLogin.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.bootstrap.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.bootstrap.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.changePassword.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.changePassword.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.login.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.login.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.loginRecovery.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.loginRecovery.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.loginTotp.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.loginTotp.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.loginWebAuthn.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.loginWebAuthn.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.logout.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.logout.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.revokeSession.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.revokeSession.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.sessions.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.sessions.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.status.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.status.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.touch.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/auth.touch.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/automationSecurity.createCredential.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/automationSecurity.createCredential.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/automationSecurity.createPrincipal.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/automationSecurity.createPrincipal.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/automationSecurity.disablePrincipal.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/automationSecurity.disablePrincipal.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/automationSecurity.listCredentials.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/automationSecurity.listCredentials.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/automationSecurity.listPrincipals.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/automationSecurity.listPrincipals.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/automationSecurity.replaceCapabilities.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/automationSecurity.replaceCapabilities.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/automationSecurity.revokeCredential.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/automationSecurity.revokeCredential.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/automationSecurity.rotateCredential.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/automationSecurity.rotateCredential.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/events.stream.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/events.stream.output.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/health.liveness.response.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/health.readiness.response.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/system.runtimeIdentity.input.schema.json is excluded by !**/generated/** and included by **/*
  • greenfield/docs/generated/schemas/system.runtimeIdentity.output.schema.json is excluded by !**/generated/** and included by **/*
📒 Files selected for processing (625)
  • .github/workflows/dashboard-checks.yml
  • .oxfmtrc.json
  • .oxlintrc.json
  • backend/src/requestPolicy/evaluator.ts
  • backend/test/utilityBehavior.test.ts
  • codecov.yml
  • docs/development/testing-and-prs.md
  • docs/index.md
  • docs/security/auth-and-trust-boundaries.md
  • greenfield/.bun-version
  • greenfield/.editorconfig
  • greenfield/.gitattributes
  • greenfield/.github/CODEOWNERS
  • greenfield/.github/CONTRIBUTING.md
  • greenfield/.github/ISSUE_TEMPLATE/bug_report.yml
  • greenfield/.github/ISSUE_TEMPLATE/config.yml
  • greenfield/.github/ISSUE_TEMPLATE/feature_task.yml
  • greenfield/.github/ISSUE_TEMPLATE/ops_deploy.yml
  • greenfield/.github/codeql/codeql-config.yml
  • greenfield/.github/dependabot.yml
  • greenfield/.github/pull_request_template.md
  • greenfield/.github/workflows/codeql.yml
  • greenfield/.github/workflows/dashboard-checks.yml
  • greenfield/.gitignore
  • greenfield/.oxfmtrc.json
  • greenfield/.oxlintrc.json
  • greenfield/CODE_OF_CONDUCT.md
  • greenfield/LICENSE
  • greenfield/README.md
  • greenfield/SECURITY.md
  • greenfield/bunfig.toml
  • greenfield/codecov.yml
  • greenfield/docs/architecture/greenfield-rewrite.md
  • greenfield/docs/architecture/greenfield-rewrite/application-architecture.md
  • greenfield/docs/architecture/greenfield-rewrite/data-and-security.md
  • greenfield/docs/architecture/greenfield-rewrite/implementation-plan.md
  • greenfield/docs/architecture/greenfield-rewrite/progress.md
  • greenfield/docs/architecture/greenfield-rewrite/runtime-and-delivery.md
  • greenfield/docs/development/testing-and-prs.md
  • greenfield/docs/index.md
  • greenfield/docs/security/greenfield-phase-two-threat-model.md
  • greenfield/drizzle.config.ts
  • greenfield/migrations/20260804022252_dashboard-foundation/migration.sql
  • greenfield/migrations/20260804022252_dashboard-foundation/snapshot.json
  • greenfield/package.json
  • greenfield/scripts/audits/openclaw/fixtures/2026.7.2-beta.7/agents.json
  • greenfield/scripts/audits/openclaw/fixtures/2026.7.2-beta.7/chat.json
  • greenfield/scripts/audits/openclaw/fixtures/2026.7.2-beta.7/cron.json
  • greenfield/scripts/audits/openclaw/fixtures/2026.7.2-beta.7/gateway.json
  • greenfield/scripts/audits/openclaw/fixtures/2026.7.2-beta.7/manifest.json
  • greenfield/scripts/audits/openclaw/fixtures/2026.7.2-beta.7/sessions.json
  • greenfield/scripts/audits/openclaw/fixtures/2026.7.2-beta.7/tasks.json
  • greenfield/scripts/audits/openclaw/reviewedFixtures.ts
  • greenfield/scripts/audits/openclaw/runSourceAudit.ts
  • greenfield/scripts/audits/openclaw/sourceAudit.ts
  • greenfield/scripts/audits/openclaw/sourceAuditSchemas.ts
  • greenfield/scripts/buildSourceIdentity.test.ts
  • greenfield/scripts/buildSourceIdentity.ts
  • greenfield/scripts/checkCoverage.test.ts
  • greenfield/scripts/checkCoverage.ts
  • greenfield/scripts/checkDatabaseSchema.test.ts
  • greenfield/scripts/checkDatabaseSchema.ts
  • greenfield/scripts/checkSourceBoundaries.ts
  • greenfield/scripts/documentation/artifacts.test.ts
  • greenfield/scripts/documentation/artifacts.ts
  • greenfield/scripts/documentation/bunLock.test.ts
  • greenfield/scripts/documentation/bunLock.ts
  • greenfield/scripts/documentation/configurationMarkdown.test.ts
  • greenfield/scripts/documentation/files.ts
  • greenfield/scripts/documentation/jsonSchema.test.ts
  • greenfield/scripts/documentation/jsonSchema.ts
  • greenfield/scripts/documentation/markdown.ts
  • greenfield/scripts/files/boundedFile.ts
  • greenfield/scripts/frontendBuildArtifacts.ts
  • greenfield/scripts/generateDocs.ts
  • greenfield/scripts/reactCompilerPlugin.ts
  • greenfield/scripts/runCoverage.ts
  • greenfield/scripts/runTestSuite.test.ts
  • greenfield/scripts/runTestSuite.ts
  • greenfield/scripts/sourceBoundaries/boundaryConfiguration.test.ts
  • greenfield/scripts/sourceBoundaries/boundaryConfiguration.ts
  • greenfield/scripts/sourceBoundaries/checkerIntegration.test.ts
  • greenfield/scripts/sourceBoundaries/externalAuthorityPolicy.ts
  • greenfield/scripts/sourceBoundaries/importGraph.test.ts
  • greenfield/scripts/sourceBoundaries/importGraph.ts
  • greenfield/scripts/sourceBoundaries/importTargetValidation.test.ts
  • greenfield/scripts/sourceBoundaries/importTargetValidation.ts
  • greenfield/scripts/sourceBoundaries/lintConfiguration.test.ts
  • greenfield/scripts/sourceBoundaries/policy.test.ts
  • greenfield/scripts/sourceBoundaries/policy.ts
  • greenfield/scripts/sourceBoundaries/policyTypes.ts
  • greenfield/scripts/sourceBoundaries/runtimeAuthorityAnalysis.ts
  • greenfield/scripts/sourceBoundaries/runtimeCodeAuthorityAnalysis.ts
  • greenfield/scripts/sourceBoundaries/runtimeOwnerAnalysis.ts
  • greenfield/scripts/sourceBoundaries/sourceAst.ts
  • greenfield/scripts/sourceBoundaries/sourceBoundaryPaths.ts
  • greenfield/scripts/sourceBoundaries/sourceDirectives.ts
  • greenfield/scripts/sourceBoundaries/sourceDiscovery.test.ts
  • greenfield/scripts/sourceBoundaries/sourceDiscovery.ts
  • greenfield/scripts/sourceBoundaries/sourceTopologyPolicy.ts
  • greenfield/scripts/sourceBoundaries/testSupport.ts
  • greenfield/scripts/testOutputPolicy.test.ts
  • greenfield/scripts/testOutputPolicy.ts
  • greenfield/src/app/dashboardServer.test.ts
  • greenfield/src/app/dashboardServer.ts
  • greenfield/src/app/environmentSource.ts
  • greenfield/src/app/server.ts
  • greenfield/src/app/trpcHttpHandler.test.ts
  • greenfield/src/app/trpcHttpHandler.ts
  • greenfield/src/app/trpcRequestPolicy.test.ts
  • greenfield/src/app/trpcRequestPolicy.ts
  • greenfield/src/browser/testSupport/frontendBuildFixture/index.html
  • greenfield/src/browser/testSupport/frontendBuildFixture/src/FixtureApp.tsx
  • greenfield/src/browser/testSupport/frontendBuildFixture/src/LazyPanel.tsx
  • greenfield/src/browser/testSupport/frontendBuildFixture/src/index.css
  • greenfield/src/browser/testSupport/frontendBuildFixture/src/main.tsx
  • greenfield/src/contracts/accountSecurity.test.ts
  • greenfield/src/contracts/accountSecurity.ts
  • greenfield/src/contracts/auth.test.ts
  • greenfield/src/contracts/auth.ts
  • greenfield/src/contracts/automationSecurity.test.ts
  • greenfield/src/contracts/automationSecurity.ts
  • greenfield/src/contracts/contractRegistry.test.ts
  • greenfield/src/contracts/contractRegistry.ts
  • greenfield/src/contracts/events.test.ts
  • greenfield/src/contracts/events.ts
  • greenfield/src/contracts/monitoring.ts
  • greenfield/src/contracts/monitoringRealtime.ts
  • greenfield/src/contracts/realtime.ts
  • greenfield/src/contracts/registry.ts
  • greenfield/src/contracts/security.test.ts
  • greenfield/src/contracts/security.ts
  • greenfield/src/contracts/system.ts
  • greenfield/src/contracts/webauthn.test.ts
  • greenfield/src/contracts/webauthn.ts
  • greenfield/src/server/database/immediateWriteAdmission.ts
  • greenfield/src/server/database/migrations/applyVerifiedMigrations.ts
  • greenfield/src/server/database/migrations/auditEventsSchema.test.ts
  • greenfield/src/server/database/migrations/authenticationRateLimitSchema.test.ts
  • greenfield/src/server/database/migrations/jsonObjectConstraints.test.ts
  • greenfield/src/server/database/migrations/loadVerifiedMigrations.test.ts
  • greenfield/src/server/database/migrations/loadVerifiedMigrations.ts
  • greenfield/src/server/database/migrations/manifest.ts
  • greenfield/src/server/database/migrations/mfaLifecycleSchema.test.ts
  • greenfield/src/server/database/migrations/migrationApplicationTime.test.ts
  • greenfield/src/server/database/migrations/migrationArtifactFilesystem.ts
  • greenfield/src/server/database/migrations/migrationGraph.test.ts
  • greenfield/src/server/database/migrations/migrationLedgerValidation.test.ts
  • greenfield/src/server/database/migrations/monitoringSchema.test.ts
  • greenfield/src/server/database/migrations/realtimeSchema.test.ts
  • greenfield/src/server/database/migrations/securityIdentitySchema.automation.test.ts
  • greenfield/src/server/database/migrations/securityIdentitySchema.baseline.test.ts
  • greenfield/src/server/database/migrations/securityIdentitySchema.browser.test.ts
  • greenfield/src/server/database/migrations/testSupport/securityIdentitySchema.ts
  • greenfield/src/server/database/migrations/validation.ts
  • greenfield/src/server/database/migrations/verifyDatabaseIntegrity.test.ts
  • greenfield/src/server/database/migrations/verifyDatabaseIntegrity.ts
  • greenfield/src/server/database/migrations/webauthnLifecycleSchema.test.ts
  • greenfield/src/server/database/runtime/databaseErrors.ts
  • greenfield/src/server/database/runtime/databasePath.test.ts
  • greenfield/src/server/database/runtime/databasePath.ts
  • greenfield/src/server/database/runtime/databasePolicy.ts
  • greenfield/src/server/database/runtime/databaseService.test.ts
  • greenfield/src/server/database/runtime/databaseService.ts
  • greenfield/src/server/database/runtime/databaseStartup.ts
  • greenfield/src/server/database/schema/auditEvents.ts
  • greenfield/src/server/database/schema/authChallenges.ts
  • greenfield/src/server/database/schema/authPendingLogins.ts
  • greenfield/src/server/database/schema/authRateLimitBuckets.ts
  • greenfield/src/server/database/schema/authSessions.ts
  • greenfield/src/server/database/schema/automationCredentials.ts
  • greenfield/src/server/database/schema/automationPersistence.test.ts
  • greenfield/src/server/database/schema/automationPrincipalCapabilities.ts
  • greenfield/src/server/database/schema/automationPrincipals.ts
  • greenfield/src/server/database/schema/checks.ts
  • greenfield/src/server/database/schema/drizzleSchema.ts
  • greenfield/src/server/database/schema/incidentObservations.ts
  • greenfield/src/server/database/schema/incidents.ts
  • greenfield/src/server/database/schema/mfaFormats.ts
  • greenfield/src/server/database/schema/monitorRuns.ts
  • greenfield/src/server/database/schema/notifications.ts
  • greenfield/src/server/database/schema/passwordHashCheck.ts
  • greenfield/src/server/database/schema/realtime.ts
  • greenfield/src/server/database/schema/reports.ts
  • greenfield/src/server/database/schema/schemaMigrations.ts
  • greenfield/src/server/database/schema/userRecoveryCodes.ts
  • greenfield/src/server/database/schema/userTotpFactors.ts
  • greenfield/src/server/database/schema/userWebAuthnCredentials.ts
  • greenfield/src/server/database/schema/users.ts
  • greenfield/src/server/database/schema/webauthnPersistence.test.ts
  • greenfield/src/server/database/validation/auditEvents.test.ts
  • greenfield/src/server/database/validation/auditEvents.ts
  • greenfield/src/server/database/validation/authChallenges.test.ts
  • greenfield/src/server/database/validation/authChallenges.ts
  • greenfield/src/server/database/validation/authPendingLogins.test.ts
  • greenfield/src/server/database/validation/authPendingLogins.ts
  • greenfield/src/server/database/validation/authRateLimitBuckets.test.ts
  • greenfield/src/server/database/validation/authRateLimitBuckets.ts
  • greenfield/src/server/database/validation/authSessions.test.ts
  • greenfield/src/server/database/validation/authSessions.ts
  • greenfield/src/server/database/validation/automationCredentials.test.ts
  • greenfield/src/server/database/validation/automationCredentials.ts
  • greenfield/src/server/database/validation/automationPrincipalCapabilities.test.ts
  • greenfield/src/server/database/validation/automationPrincipalCapabilities.ts
  • greenfield/src/server/database/validation/automationPrincipals.test.ts
  • greenfield/src/server/database/validation/automationPrincipals.ts
  • greenfield/src/server/database/validation/incidentObservations.test.ts
  • greenfield/src/server/database/validation/incidentObservations.ts
  • greenfield/src/server/database/validation/incidents.test.ts
  • greenfield/src/server/database/validation/incidents.ts
  • greenfield/src/server/database/validation/monitorRuns.test.ts
  • greenfield/src/server/database/validation/monitorRuns.ts
  • greenfield/src/server/database/validation/notifications.test.ts
  • greenfield/src/server/database/validation/notifications.ts
  • greenfield/src/server/database/validation/realtimeEvents.test.ts
  • greenfield/src/server/database/validation/realtimeEvents.ts
  • greenfield/src/server/database/validation/reports.test.ts
  • greenfield/src/server/database/validation/reports.ts
  • greenfield/src/server/database/validation/rowSchemaIntegration.test.ts
  • greenfield/src/server/database/validation/rowSchemas.test.ts
  • greenfield/src/server/database/validation/scalars.ts
  • greenfield/src/server/database/validation/schemaMigrations.ts
  • greenfield/src/server/database/validation/securityScalars.ts
  • greenfield/src/server/database/validation/testSupport/rows.ts
  • greenfield/src/server/database/validation/testSupport/securityRows.ts
  • greenfield/src/server/database/validation/userRecoveryCodes.test.ts
  • greenfield/src/server/database/validation/userRecoveryCodes.ts
  • greenfield/src/server/database/validation/userTotpFactors.test.ts
  • greenfield/src/server/database/validation/userTotpFactors.ts
  • greenfield/src/server/database/validation/userWebAuthnCredentials.test.ts
  • greenfield/src/server/database/validation/userWebAuthnCredentials.ts
  • greenfield/src/server/database/validation/users.test.ts
  • greenfield/src/server/database/validation/users.ts
  • greenfield/src/server/database/validation/webauthnScalars.ts
  • greenfield/src/server/domains/monitoring/normalization.test.ts
  • greenfield/src/server/domains/monitoring/normalization.ts
  • greenfield/src/server/domains/monitoring/realtimeEvents.ts
  • greenfield/src/server/domains/monitoring/repository.ts
  • greenfield/src/server/domains/monitoring/serialization.ts
  • greenfield/src/server/domains/monitoring/service.ts
  • greenfield/src/server/domains/monitoring/serviceBoundary.test.ts
  • greenfield/src/server/domains/monitoring/serviceLifecycle.test.ts
  • greenfield/src/server/domains/monitoring/serviceOrdering.test.ts
  • greenfield/src/server/domains/monitoring/snapshotLifecycle.ts
  • greenfield/src/server/domains/monitoring/testSupport/monitoringService.ts
  • greenfield/src/server/domains/realtime/authenticationLeaseStream.test.ts
  • greenfield/src/server/domains/realtime/authenticationLeaseStream.ts
  • greenfield/src/server/domains/realtime/errors.test.ts
  • greenfield/src/server/domains/realtime/errors.ts
  • greenfield/src/server/domains/realtime/procedures.test.ts
  • greenfield/src/server/domains/realtime/procedures.ts
  • greenfield/src/server/domains/realtime/transport.test.ts
  • greenfield/src/server/domains/realtime/transport.ts
  • greenfield/src/server/domains/security/audit.test.ts
  • greenfield/src/server/domains/security/audit.ts
  • greenfield/src/server/domains/security/authPendingMfaRoutes.ts
  • greenfield/src/server/domains/security/authPendingMfaRoutes.webAuthn.test.ts
  • greenfield/src/server/domains/security/authPublicRoutes.ts
  • greenfield/src/server/domains/security/authSessionRoutes.ts
  • greenfield/src/server/domains/security/authenticationLifecycle.bootstrap.test.ts
  • greenfield/src/server/domains/security/authenticationLifecycle.login.test.ts
  • greenfield/src/server/domains/security/authenticationLifecycle.password.test.ts
  • greenfield/src/server/domains/security/authenticationLifecycle.rateLimit.test.ts
  • greenfield/src/server/domains/security/authenticationLifecycle.sessions.test.ts
  • greenfield/src/server/domains/security/authenticationLifecycle.ts
  • greenfield/src/server/domains/security/authenticationLifecycleBootstrap.ts
  • greenfield/src/server/domains/security/authenticationLifecycleContext.ts
  • greenfield/src/server/domains/security/authenticationLifecycleLogin.ts
  • greenfield/src/server/domains/security/authenticationLifecyclePassword.ts
  • greenfield/src/server/domains/security/authenticationLifecycleRepository.test.ts
  • greenfield/src/server/domains/security/authenticationLifecycleRepository.ts
  • greenfield/src/server/domains/security/authenticationLifecycleSessions.ts
  • greenfield/src/server/domains/security/authenticationLifecycleTypes.ts
  • greenfield/src/server/domains/security/authenticationPolicy.test.ts
  • greenfield/src/server/domains/security/authenticationPolicy.ts
  • greenfield/src/server/domains/security/authenticationRateLimit.ts
  • greenfield/src/server/domains/security/authenticationRateLimitStore.ts
  • greenfield/src/server/domains/security/authenticationResolution.test.ts
  • greenfield/src/server/domains/security/authenticationResolution.ts
  • greenfield/src/server/domains/security/authenticationSession.test.ts
  • greenfield/src/server/domains/security/authenticationSession.ts
  • greenfield/src/server/domains/security/authenticationWorkBudget.test.ts
  • greenfield/src/server/domains/security/authenticationWorkBudget.ts
  • greenfield/src/server/domains/security/authenticationWorkGate.test.ts
  • greenfield/src/server/domains/security/authenticationWorkGate.ts
  • greenfield/src/server/domains/security/authenticationWorkGate.webAuthn.test.ts
  • greenfield/src/server/domains/security/automation/credentialOperations.ts
  • greenfield/src/server/domains/security/automation/lifecycle.ts
  • greenfield/src/server/domains/security/automation/lifecycleContext.ts
  • greenfield/src/server/domains/security/automation/lifecycleCredential.test.ts
  • greenfield/src/server/domains/security/automation/lifecycleCredentials.ts
  • greenfield/src/server/domains/security/automation/lifecyclePolicy.ts
  • greenfield/src/server/domains/security/automation/lifecyclePrincipal.test.ts
  • greenfield/src/server/domains/security/automation/lifecycleRepository.test.ts
  • greenfield/src/server/domains/security/automation/lifecycleRepository.ts
  • greenfield/src/server/domains/security/automation/lifecycleRepositoryReader.ts
  • greenfield/src/server/domains/security/automation/lifecycleRepositoryRecords.ts
  • greenfield/src/server/domains/security/automation/lifecycleRepositoryTypes.ts
  • greenfield/src/server/domains/security/automation/lifecycleRepositoryUnitOfWork.ts
  • greenfield/src/server/domains/security/automation/lifecycleSummaries.ts
  • greenfield/src/server/domains/security/automation/lifecycleTypes.ts
  • greenfield/src/server/domains/security/automation/principalOperations.ts
  • greenfield/src/server/domains/security/automation/procedures.test.ts
  • greenfield/src/server/domains/security/automation/procedures.ts
  • greenfield/src/server/domains/security/automation/routes.ts
  • greenfield/src/server/domains/security/automation/testSupport/lifecycle.ts
  • greenfield/src/server/domains/security/browserSessionStore.ts
  • greenfield/src/server/domains/security/mfa/accountFactorRoutes.ts
  • greenfield/src/server/domains/security/mfa/accountLifecycle.factors.test.ts
  • greenfield/src/server/domains/security/mfa/accountLifecycle.maintenance.test.ts
  • greenfield/src/server/domains/security/mfa/accountLifecycle.proofs.test.ts
  • greenfield/src/server/domains/security/mfa/accountLifecycle.ts
  • greenfield/src/server/domains/security/mfa/accountLifecycle.webAuthn.test.ts
  • greenfield/src/server/domains/security/mfa/accountLifecycleContext.ts
  • greenfield/src/server/domains/security/mfa/accountLifecycleCrypto.ts
  • greenfield/src/server/domains/security/mfa/accountLifecycleFactors.ts
  • greenfield/src/server/domains/security/mfa/accountLifecycleState.ts
  • greenfield/src/server/domains/security/mfa/accountLifecycleTypes.ts
  • greenfield/src/server/domains/security/mfa/accountMaintenanceRoutes.ts
  • greenfield/src/server/domains/security/mfa/accountMfaDisable.ts
  • greenfield/src/server/domains/security/mfa/accountPasswordReauthentication.ts
  • greenfield/src/server/domains/security/mfa/accountProcedureResponses.ts
  • greenfield/src/server/domains/security/mfa/accountProofRoutes.ts
  • greenfield/src/server/domains/security/mfa/accountRecoveryCodeRotation.ts
  • greenfield/src/server/domains/security/mfa/accountRecoveryStepUp.ts
  • greenfield/src/server/domains/security/mfa/accountSecuritySummary.ts
  • greenfield/src/server/domains/security/mfa/accountTotpEnrollmentBegin.ts
  • greenfield/src/server/domains/security/mfa/accountTotpEnrollmentConfirmation.ts
  • greenfield/src/server/domains/security/mfa/accountTotpFactorRemoval.ts
  • greenfield/src/server/domains/security/mfa/accountTotpStepUp.ts
  • greenfield/src/server/domains/security/mfa/accountWebAuthnCredentialRemoval.ts
  • greenfield/src/server/domains/security/mfa/accountWebAuthnEnrollmentBegin.ts
  • greenfield/src/server/domains/security/mfa/accountWebAuthnEnrollmentConfirmation.ts
  • greenfield/src/server/domains/security/mfa/accountWebAuthnEnrollmentSettlement.ts
  • greenfield/src/server/domains/security/mfa/accountWebAuthnOperations.ts
  • greenfield/src/server/domains/security/mfa/accountWebAuthnRoutes.ts
  • greenfield/src/server/domains/security/mfa/accountWebAuthnState.ts
  • greenfield/src/server/domains/security/mfa/accountWebAuthnStepUp.ts
  • greenfield/src/server/domains/security/mfa/accountWebAuthnStepUpBegin.ts
  • greenfield/src/server/domains/security/mfa/accountWebAuthnStepUpSettlement.ts
  • greenfield/src/server/domains/security/mfa/lifecycleRepository.test.ts
  • greenfield/src/server/domains/security/mfa/lifecycleRepository.ts
  • greenfield/src/server/domains/security/mfa/lifecycleRepository.webAuthn.test.ts
  • greenfield/src/server/domains/security/mfa/lifecycleRepositoryReader.ts
  • greenfield/src/server/domains/security/mfa/lifecycleRepositoryRecords.ts
  • greenfield/src/server/domains/security/mfa/lifecycleRepositoryTypes.ts
  • greenfield/src/server/domains/security/mfa/lifecycleRepositoryUnitOfWork.ts
  • greenfield/src/server/domains/security/mfa/loginCoordinator.ts
  • greenfield/src/server/domains/security/mfa/loginLifecycle.pending.test.ts
  • greenfield/src/server/domains/security/mfa/loginLifecycle.recovery.test.ts
  • greenfield/src/server/domains/security/mfa/loginLifecycle.totp.test.ts
  • greenfield/src/server/domains/security/mfa/loginLifecycle.ts
  • greenfield/src/server/domains/security/mfa/loginLifecycle.webAuthn.test.ts
  • greenfield/src/server/domains/security/mfa/loginLifecycleContext.ts
  • greenfield/src/server/domains/security/mfa/loginLifecycleTypes.ts
  • greenfield/src/server/domains/security/mfa/loginPendingLifecycle.ts
  • greenfield/src/server/domains/security/mfa/loginRecoveryProof.ts
  • greenfield/src/server/domains/security/mfa/loginTotpProof.ts
  • greenfield/src/server/domains/security/mfa/loginWebAuthnChallenge.ts
  • greenfield/src/server/domains/security/mfa/loginWebAuthnProof.ts
  • greenfield/src/server/domains/security/mfa/procedures.test.ts
  • greenfield/src/server/domains/security/mfa/procedures.ts
  • greenfield/src/server/domains/security/mfa/recoveryCodes.test.ts
  • greenfield/src/server/domains/security/mfa/recoveryCodes.ts
  • greenfield/src/server/domains/security/mfa/testSupport/accountLifecycle.ts
  • greenfield/src/server/domains/security/mfa/testSupport/loginLifecycle.ts
  • greenfield/src/server/domains/security/mfa/totp.test.ts
  • greenfield/src/server/domains/security/mfa/totp.ts
  • greenfield/src/server/domains/security/mfa/totpSecretCipher.test.ts
  • greenfield/src/server/domains/security/mfa/totpSecretCipher.ts
  • greenfield/src/server/domains/security/mfa/webauthn/adapter.test.ts
  • greenfield/src/server/domains/security/mfa/webauthn/adapter.ts
  • greenfield/src/server/domains/security/mfa/webauthn/boundaryValidation.ts
  • greenfield/src/server/domains/security/mfa/webauthn/credentialState.test.ts
  • greenfield/src/server/domains/security/mfa/webauthn/credentialState.ts
  • greenfield/src/server/domains/security/mfa/webauthn/relyingPartyConfiguration.test.ts
  • greenfield/src/server/domains/security/mfa/webauthn/relyingPartyConfiguration.ts
  • greenfield/src/server/domains/security/mfa/webauthn/testSupport/ceremonyFixture.ts
  • greenfield/src/server/domains/security/password.test.ts
  • greenfield/src/server/domains/security/password.ts
  • greenfield/src/server/domains/security/procedureSupport.ts
  • greenfield/src/server/domains/security/procedures.test.ts
  • greenfield/src/server/domains/security/procedures.ts
  • greenfield/src/server/domains/security/recentAuthentication.test.ts
  • greenfield/src/server/domains/security/recentAuthentication.ts
  • greenfield/src/server/domains/security/requestAuthentication.ts
  • greenfield/src/server/domains/security/requestAuthenticationAutomation.test.ts
  • greenfield/src/server/domains/security/requestAuthenticationRepository.test.ts
  • greenfield/src/server/domains/security/requestAuthenticationRepository.ts
  • greenfield/src/server/domains/security/requestAuthenticationSession.test.ts
  • greenfield/src/server/domains/security/securityAuditStore.ts
  • greenfield/src/server/domains/security/securityPersistenceTypes.ts
  • greenfield/src/server/domains/security/securityUserStore.ts
  • greenfield/src/server/domains/security/testSupport/authentication.ts
  • greenfield/src/server/domains/security/testSupport/authenticationLifecycle.ts
  • greenfield/src/server/domains/system/procedures.ts
  • greenfield/src/server/platform/configuration/applicationConfigurationError.ts
  • greenfield/src/server/platform/configuration/configurationRegistry.test.ts
  • greenfield/src/server/platform/configuration/webConfiguration.test.ts
  • greenfield/src/server/platform/configuration/webConfiguration.ts
  • greenfield/src/server/platform/errors/safeFailure.test.ts
  • greenfield/src/server/platform/errors/safeFailure.ts
  • greenfield/src/server/platform/gateway/gatewayCredentialProtocol.test.ts
  • greenfield/src/server/platform/gateway/gatewayCredentialProtocol.ts
  • greenfield/src/server/platform/gateway/gatewayCredentialVerifier.test.ts
  • greenfield/src/server/platform/gateway/gatewayCredentialVerifier.ts
  • greenfield/src/server/platform/observability/effectLogger.test.ts
  • greenfield/src/server/platform/observability/effectLogger.ts
  • greenfield/src/server/platform/observability/structuredLogger.test.ts
  • greenfield/src/server/platform/observability/structuredLogger.ts
  • greenfield/src/server/platform/readiness/readinessState.ts
  • greenfield/src/server/platform/realtime/boundedAsyncQueue.test.ts
  • greenfield/src/server/platform/realtime/boundedAsyncQueue.ts
  • greenfield/src/server/platform/realtime/eventPump.ts
  • greenfield/src/server/platform/realtime/eventPumpContract.test.ts
  • greenfield/src/server/platform/realtime/eventPumpContract.ts
  • greenfield/src/server/platform/realtime/eventPumpPolling.test.ts
  • greenfield/src/server/platform/realtime/eventPumpPolling.ts
  • greenfield/src/server/platform/realtime/eventPumpService.ts
  • greenfield/src/server/platform/realtime/eventPumpServiceFairness.test.ts
  • greenfield/src/server/platform/realtime/eventPumpServiceLifecycle.test.ts
  • greenfield/src/server/platform/realtime/eventPumpServicePolling.test.ts
  • greenfield/src/server/platform/realtime/eventPumpServiceSubscription.test.ts
  • greenfield/src/server/platform/realtime/eventPumpState.ts
  • greenfield/src/server/platform/realtime/eventPumpStreamErrors.ts
  • greenfield/src/server/platform/realtime/eventPumpSubscription.ts
  • greenfield/src/server/platform/realtime/eventPumpSubscriptionBackpressure.test.ts
  • greenfield/src/server/platform/realtime/eventPumpSubscriptionCancellation.test.ts
  • greenfield/src/server/platform/realtime/eventPumpSubscriptionReplay.test.ts
  • greenfield/src/server/platform/realtime/eventPumpSubscriptionRetention.test.ts
  • greenfield/src/server/platform/realtime/eventStore.test.ts
  • greenfield/src/server/platform/realtime/eventStore.ts
  • greenfield/src/server/platform/realtime/eventStoreEffect.ts
  • greenfield/src/server/platform/realtime/renewableStreamLease.test.ts
  • greenfield/src/server/platform/realtime/renewableStreamLease.ts
  • greenfield/src/server/platform/realtime/testSupport/eventPump.ts
  • greenfield/src/server/platform/realtime/testSupport/eventPumpService.ts
  • greenfield/src/server/platform/runtime/applicationRuntime.test.ts
  • greenfield/src/server/platform/runtime/applicationRuntime.ts
  • greenfield/src/server/platform/runtime/dashboardApplicationRuntime.test.ts
  • greenfield/src/server/platform/runtime/readRuntimeIdentity.test.ts
  • greenfield/src/server/platform/runtime/readRuntimeIdentity.ts
  • greenfield/src/server/rawHttp/authenticationClientSource.test.ts
  • greenfield/src/server/rawHttp/authenticationClientSource.ts
  • greenfield/src/server/rawHttp/authenticationCredentials.test.ts
  • greenfield/src/server/rawHttp/authenticationCredentials.ts
  • greenfield/src/server/rawHttp/health.ts
  • greenfield/src/server/rawHttp/pendingLoginCookie.test.ts
  • greenfield/src/server/rawHttp/pendingLoginCookie.ts
  • greenfield/src/server/rawHttp/requestSecurity.test.ts
  • greenfield/src/server/rawHttp/requestSecurity.ts
  • greenfield/src/server/rawHttp/sessionCookie.test.ts
  • greenfield/src/server/rawHttp/sessionCookie.ts
  • greenfield/src/server/shared/crypto.test.ts
  • greenfield/src/server/shared/crypto.ts
  • greenfield/src/server/shared/opaqueToken.test.ts
  • greenfield/src/server/shared/opaqueToken.ts
  • greenfield/src/server/shared/passwordHash.ts
  • greenfield/src/server/shared/pendingLoginPolicy.ts
  • greenfield/src/server/shared/totpSecretFormat.ts
  • greenfield/src/server/test/contracts/superjsonTransport.test.ts
  • greenfield/src/server/test/contracts/trpcErrors.test.ts
  • greenfield/src/server/test/support/authenticationWorkGate.ts
  • greenfield/src/server/test/support/automationHttpSystem.ts
  • greenfield/src/server/test/support/databaseWriteAdmission.ts
  • greenfield/src/server/test/support/freshDatabase.ts
  • greenfield/src/server/test/support/gatewayCredentialVerifier.ts
  • greenfield/src/server/test/support/mfaHttpSystem.ts
  • greenfield/src/server/test/support/promise.ts
  • greenfield/src/server/test/support/requestContext.ts
  • greenfield/src/server/test/support/securityPassword.ts
  • greenfield/src/server/test/system/serverAuthenticationResponses.test.ts
  • greenfield/src/server/test/system/serverAuthenticationTransport.test.ts
  • greenfield/src/server/test/system/serverAutomationSecurity.test.ts
  • greenfield/src/server/test/system/serverAutomationSecurityLeaseInvalidation.test.ts
  • greenfield/src/server/test/system/serverAutomationSecurityLostResponse.test.ts
  • greenfield/src/server/test/system/serverFoundation.test.ts
  • greenfield/src/server/test/system/serverGatewayCredentialVerification.test.ts
  • greenfield/src/server/test/system/serverMfaAuthentication.test.ts
  • greenfield/src/server/test/system/serverRealtime.test.ts
  • greenfield/src/server/test/system/serverShutdown.test.ts
  • greenfield/src/server/test/system/serverWebAuthnAuthentication.test.ts
  • greenfield/src/server/trpc/appRouter.test.ts
  • greenfield/src/server/trpc/appRouter.ts
  • greenfield/src/server/trpc/context.test.ts
  • greenfield/src/server/trpc/context.ts
  • greenfield/src/server/trpc/procedureErrorPolicy.test.ts
  • greenfield/src/server/trpc/procedureErrorPolicy.ts
  • greenfield/src/server/trpc/trpc.test.ts
  • greenfield/src/server/trpc/trpc.ts
  • greenfield/src/shared/bunRuntimePolicy.ts
  • greenfield/src/shared/configuration/applicationConfigurationRegistry.ts
  • greenfield/src/shared/dateTime.test.ts
  • greenfield/src/shared/dateTime.ts
  • greenfield/src/shared/encoding.test.ts
  • greenfield/src/shared/encoding.ts
  • greenfield/src/shared/json.test.ts
  • greenfield/src/shared/json.ts
  • greenfield/src/shared/recoveryCodePolicy.ts
  • greenfield/src/shared/validation.test.ts
  • greenfield/src/shared/validation.ts
  • greenfield/src/test/integration/build/frontendBuildScenario.test.ts
  • greenfield/src/test/integration/build/frontendBuildScenario.ts
  • greenfield/src/test/integration/build/runFrontendBuildEvidence.ts
  • greenfield/src/test/integration/files/boundedFile.test.ts
  • greenfield/src/test/integration/openclaw/sourceAudit.test.ts
  • greenfield/src/test/integration/outbox/runSqliteOutboxEvidence.ts
  • greenfield/src/test/integration/outbox/sqliteOutboxChild.ts
  • greenfield/src/test/integration/outbox/sqliteOutboxProtocol.ts
  • greenfield/src/test/integration/outbox/sqliteOutboxScenario.test.ts
  • greenfield/src/test/integration/outbox/sqliteOutboxScenario.ts
  • greenfield/src/test/integration/outbox/sqliteOutboxStore.ts
  • greenfield/src/test/integration/resourceBudgets/resourceBudgetCommand.ts
  • greenfield/src/test/integration/resourceBudgets/resourceBudgetOrchestration.test.ts
  • greenfield/src/test/integration/resourceBudgets/resourceBudgetOrchestration.ts
  • greenfield/src/test/integration/resourceBudgets/resourceBudgetPolicy.test.ts
  • greenfield/src/test/integration/resourceBudgets/resourceBudgetPolicy.ts
  • greenfield/src/test/integration/resourceBudgets/resourceBudgetUnit.ts
  • greenfield/src/test/integration/resourceBudgets/runResourceBudgetEvidence.ts
  • greenfield/src/test/integration/resourceBudgets/runSafeChildCancellationEvidence.ts
  • greenfield/src/test/integration/resources/cgroupV2.test.ts
  • greenfield/src/test/integration/resources/cgroupV2.ts
  • greenfield/src/test/integration/resources/cgroupV2Hierarchy.test.ts
  • greenfield/src/test/integration/resources/cgroupV2Hierarchy.ts
  • greenfield/src/test/integration/resources/pausedTlsSseClient.test.ts
  • greenfield/src/test/integration/resources/pausedTlsSseClient.ts
  • greenfield/src/test/integration/resources/pausedTlsSseHandshake.test.ts
  • greenfield/src/test/integration/resources/pausedTlsSseHandshake.ts
  • greenfield/src/test/integration/resources/processMemory.test.ts
  • greenfield/src/test/integration/resources/processMemory.ts
  • greenfield/src/test/integration/resources/resourcePolicy.test.ts
  • greenfield/src/test/integration/resources/resourcePolicy.ts
  • greenfield/src/test/integration/resources/runSseMemoryEvidence.test.ts
  • greenfield/src/test/integration/resources/runSseMemoryEvidence.ts
  • greenfield/src/test/integration/resources/sseMemoryEvidence.test.ts
  • greenfield/src/test/integration/resources/sseMemoryEvidence.ts
  • greenfield/src/test/integration/resources/sseMemoryEvidencePolicy.ts
  • greenfield/src/test/integration/resources/sseMemoryEvidenceSchema.ts
  • greenfield/src/test/integration/resources/sseMemoryScenario.ts
  • greenfield/src/test/integration/resources/systemdLauncher.test.ts
  • greenfield/src/test/integration/resources/systemdLauncher.ts
  • greenfield/src/test/integration/resources/systemdLauncherCommand.ts
  • greenfield/src/test/integration/resources/systemdLauncherDeadline.ts
  • greenfield/src/test/integration/resources/systemdLauncherOrchestration.ts
  • greenfield/src/test/integration/resources/systemdUnitControl.ts
  • greenfield/src/test/integration/resources/unitIdentity.test.ts
  • greenfield/src/test/integration/resources/unitIdentity.ts
  • greenfield/src/test/integration/runtime/runtimeCandidate.test.ts
  • greenfield/src/test/integration/runtime/runtimeCandidate.ts
  • greenfield/src/test/integration/shutdown/completeShutdownScenario.test.ts
  • greenfield/src/test/integration/shutdown/completeShutdownScenario.ts
  • greenfield/src/test/integration/shutdown/runCompleteShutdownEvidence.ts
  • greenfield/src/test/integration/shutdown/shutdownDatabase.ts
  • greenfield/src/test/integration/shutdown/shutdownGrandchild.ts
  • greenfield/src/test/integration/shutdown/shutdownIdleHttpConnection.ts
  • greenfield/src/test/integration/shutdown/shutdownProtocol.ts
  • greenfield/src/test/integration/shutdown/shutdownService.ts
  • greenfield/src/test/integration/shutdown/shutdownServiceResources.test.ts
  • greenfield/src/test/integration/shutdown/shutdownServiceResources.ts
  • greenfield/src/test/integration/transport/realtime/eventFeed.test.ts
  • greenfield/src/test/integration/transport/realtime/eventFeed.ts
  • greenfield/src/test/integration/transport/topology/httpsReverseProxy.test.ts
  • greenfield/src/test/integration/transport/topology/httpsReverseProxy.ts
  • greenfield/src/test/integration/transport/topology/proxyTransport.test.ts
  • greenfield/src/test/integration/transport/topology/proxyTransport.ts
  • greenfield/src/test/integration/transport/topology/releaseReadiness.ts
  • greenfield/src/test/integration/transport/topology/rollingReleaseSse.test.ts
  • greenfield/src/test/integration/transport/topology/testTlsIdentity.ts
  • greenfield/src/test/integration/transport/topology/trustedFetch.ts
  • greenfield/src/test/integration/transport/trpc/client.ts
  • greenfield/src/test/integration/transport/trpc/router.ts
  • greenfield/src/test/integration/transport/trpc/server.ts
  • greenfield/src/test/integration/transport/trpc/trpcFetchSse.test.ts
  • greenfield/src/test/integration/websocket/nativeWebSocketTransport.test.ts
  • greenfield/src/test/integration/websocket/nativeWebSocketTransport.ts
  • greenfield/src/test/integration/websocket/rawWebSocketFixture.ts
  • greenfield/src/test/integration/websocket/rawWebSocketProtocol.ts
  • greenfield/src/test/parity/fixtures/frontend-routes.json
  • greenfield/src/test/parity/fixtures/greenfield-contracts.json
  • greenfield/src/test/parity/fixtures/legacy-endpoints.json
  • greenfield/src/test/parity/parityFixtureCandidate.ts
  • greenfield/src/test/parity/parityInventory.test.ts
  • greenfield/src/test/parity/parityInventorySchemas.ts
  • greenfield/src/test/parity/reviewedParityInventory.ts
  • greenfield/src/test/support/asyncCleanupStack.test.ts
  • greenfield/src/test/support/asyncCleanupStack.ts
  • greenfield/src/test/support/waitFor.ts
  • greenfield/src/test/types/bunCanaryMatchers.d.ts
  • greenfield/tailwind.config.ts
  • greenfield/tsconfig.browser.json
  • greenfield/tsconfig.bun.json
  • greenfield/tsconfig.json
  • package.json
  • qualification/browser/queryCollectionAdapter.test.ts
  • qualification/browser/queryCollectionAdapter.ts
  • qualification/build/runFrontendBuildQualification.ts
  • qualification/chat/chatBatching.test.ts
  • qualification/chat/chatBatchingModel.ts
  • qualification/chat/chatBatchingQualification.ts
  • qualification/chat/runChatBatchingQualification.ts
  • qualification/database/database.test.ts
  • qualification/database/database.ts
  • qualification/database/schema.ts
  • qualification/parity/legacyBackendRouteInventory.ts
  • qualification/parity/parityInventory.test.ts
  • qualification/parity/sourceParityInventory.test.ts
  • qualification/parity/sourceParityInventory.ts
  • qualification/shutdown/runCompleteShutdownEvidence.ts
  • qualification/trpc/client.ts
  • scripts/qualification/legacyBackendRouteProbe.ts
  • src/app/dashboardServer.test.ts
  • src/app/dashboardServer.ts
  • src/server/database/migrations/loadVerifiedMigrations.test.ts
  • src/server/database/migrations/migrationApplicationTime.test.ts
  • src/server/database/migrations/migrationLedgerValidation.test.ts
  • src/server/database/schema/schemaMigrations.ts
  • src/server/domains/security/authenticationWorkGate.webAuthn.test.ts
  • src/server/domains/security/testSupport/authentication.ts
  • tsconfig.browser.json
  • tsconfig.contracts.json
  • tsconfig.json
  • tsconfig.node.json
  • tsconfig.qualification.json
  • tsconfig.server.json
  • tsconfig.worker.json

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@mira-2026 mira-2026 changed the title mira/greenfield root isolation feat(rewrite): isolate future root and harden database runtime Aug 6, 2026
@mira-2026 mira-2026 added status: needs-review Ready for human or agent review type: security Security, auth, secrets, or trust-boundary work area: backend Backend API, server routes, services, and integrations area: database Database dashboard, Postgres, PgBouncer, or query views area: ci CI, test runners, workflow checks, and release gates area: ops Operational actions, deploys, services, backups, and health labels Aug 6, 2026

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: c15c27adbd

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread .github/workflows/dashboard-checks.yml
Comment thread .oxlintrc.json
Comment thread scripts/frontendBuild.ts Outdated
Comment thread greenfield/.bun-version
@mira-2026

Copy link
Copy Markdown
Collaborator Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Chef's kiss.

Reviewed commit: c0ce6a51ca

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

@mira-2026 mira-2026 closed this Aug 7, 2026
@mira-2026 mira-2026 reopened this Aug 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: backend Backend API, server routes, services, and integrations area: ci CI, test runners, workflow checks, and release gates area: database Database dashboard, Postgres, PgBouncer, or query views area: ops Operational actions, deploys, services, backups, and health status: needs-review Ready for human or agent review type: security Security, auth, secrets, or trust-boundary work

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant