Skip to content
This repository was archived by the owner on Sep 13, 2026. It is now read-only.

chore(maintenance): audit fixes, screenshots - #30

Merged
OneByJorah merged 13 commits into
masterfrom
chore/maintenance-audit-fixes
Aug 25, 2026
Merged

OneByJorah merged 13 commits into
masterfrom
chore/maintenance-audit-fixes

Conversation

@OneByJorah

Copy link
Copy Markdown
Owner

Maintenance audit fixes

  • Honcho health path truth-up: aligned gateway registry + healthcheck.sh on /api/v1/health (was /health//healthz, contradicted docs)
  • Gateway auth: constant-time credential comparison (secrets.compare_digest)
  • Discover endpoint doc truth: read-only/no-auth behavior now matches README + docstring
  • smoke.sh: dropped brittle Obsidian v1.7.7 version pin
  • HONCHO_SETUP.md: correct volume names, fixed down command to include base compose file
  • Includes earlier unpushed audit work: StackDeploy→ForgeDash rename, searxng secret autogen, compose cleanup, screenshots

Verified: py_compile + bash -n; screenshot artifact committed at docs/screenshots/dashboard.png

- StackDeploy -> ForgeDash identity rename across scripts, docs, CI, skill
- docker-compose.honcho.yml now overrides the honcho service (was a second
  honcho-api service -> host port 8081 clash when combined per docs)
- SearXNG secret_key placeholder + auto-generation in scripts/bootstrap.sh
- removed unused camofox-data/obsidian-vault volumes
- tests/smoke.sh: no hardcoded repo path
- gateway: drop nonexistent /api/v1/config doc claim; DOM-built service
  cards instead of innerHTML interpolation
- pin action-shellcheck@v2.0.0, bump ssh-action@v1.2.2
- delete stale test_results.txt artifact (old paths, placeholder creds)
- README truth-up: real quick start, honcho 8081, host-port table, master
- screenshot: dashboard UI rendered locally with stubbed discover payload
  (fastapi not installable on maintenance host); exercises the new DOM path
@OneByJorah
OneByJorah merged commit c66db7f into master Aug 25, 2026
10 checks passed
@OneByJorah
OneByJorah deleted the chore/maintenance-audit-fixes branch August 25, 2026 09:46
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant