Repository navigation
Mirror sync a2bbbec2 - #301
Merged
Merged
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| ]) { | ||
| template.hasResourceProperties("AWS::ApiGateway::Stage", { | ||
| AccessLogSetting: Match.objectLike({ | ||
| Format: Match.stringLikeRegexp(token.replace(/[.$]/g, "\\$&")), |
Collaborator
Author
There was a problem hiding this comment.
code changes only come from gitlab
Collaborator
Author
|
🚢 |
quixoticmonk
added a commit
to quixoticmonk/context-ontology-accelerator
that referenced
this pull request
Oct 23, 2026
…s#302) Bundle libs/common into the aoss-proxy Lambda zip so the handler's coa_common import resolves at cold start. ## Ported - serve/lambdas/aoss-proxy/Makefile: copy libs/common/src into the zip and install the CDK serve-stack.ts pipDeps (opensearch-py, requests-aws4auth, cedarpy, cryptography, pydantic-settings, PyJWT, requests, structlog). Pre-existing bug, not introduced by v0.3.7: the zip previously failed with "No module named 'coa_common'". - Same file carries certifi>=2026.10.19 (see CR-E); kept here so the Makefile lands in one commit. ## Hand-merged - None ## Skipped - infra/* (NG.1) ## Verified - terraform fmt: no drift; terraform validate: 10/10 stacks - pytest across 9 Python packages: 12,535 passed, 0 failed - root tests/unit: 4 failures, identical on pre-sync HEAD 4b5fd11 (read infra/ and scripts/preflight-deploy.sh, removed on this branch) - web-app vitest 1,508/1,508 + build OK; mcp-proxy 50/50 - rebuilt aoss-proxy.zip: contains coa_common and certifi>=2026.10.19 ## Follow-up - None Upstream-Release: v0.3.7
quixoticmonk
added a commit
to quixoticmonk/context-ontology-accelerator
that referenced
this pull request
Oct 23, 2026
Import upstream libs/common, Smithy models and packages/sources, and regenerate the merged OpenAPI spec. ## Ported - libs/common: idempotency, pagination and testing helpers - models/: Smithy model changes (clientToken, contract bounds) - packages/sources: contract bounds, client-safe errors, CreateSource idempotency - infra-tf/artifacts/openapi/merged.json: regenerated (77 paths) per step 4A ## Hand-merged - None (CLEAN/NEW imports, step 4) ## Skipped - infra/* (NG.1) ## Verified - terraform fmt: no drift; terraform validate: 10/10 stacks - pytest across 9 Python packages: 12,535 passed, 0 failed - root tests/unit: 4 failures, identical on pre-sync HEAD 4b5fd11 (read infra/ and scripts/preflight-deploy.sh, removed on this branch) - web-app vitest 1,508/1,508 + build OK; mcp-proxy 50/50 - Smithy/API/web-app parity walked per step 4A: all operations wired except the 2 paths already left unrouted intentionally ## Follow-up - None Upstream-Release: v0.3.7
quixoticmonk
added a commit
to quixoticmonk/context-ontology-accelerator
that referenced
this pull request
Oct 23, 2026
…art 2/2) Import upstream changes to the remaining backend Python packages. ## Ported - packages/context-manager, control-plane, data-layer, mcp-server, metric-service, ontology-engine, vkg: API contract conformance, contract bounds, idempotent creates, pagination, error-message hardening ## Hand-merged - None (CLEAN/NEW imports, step 4) ## Skipped - infra/* (NG.1) ## Verified - terraform fmt: no drift; terraform validate: 10/10 stacks - pytest across 9 Python packages: 12,535 passed, 0 failed - root tests/unit: 4 failures, identical on pre-sync HEAD 4b5fd11 (read infra/ and scripts/preflight-deploy.sh, removed on this branch) - web-app vitest 1,508/1,508 + build OK; mcp-proxy 50/50 ## Follow-up - None Upstream-Release: v0.3.7
quixoticmonk
added a commit
to quixoticmonk/context-ontology-accelerator
that referenced
this pull request
Oct 23, 2026
Import upstream web-app and mcp-proxy changes. ## Ported - packages/web-app: i18n, language menu, breadcrumb trail, pagination utils, settings e2e specs - packages/mcp-proxy: package.json bump ## Hand-merged - None (CLEAN/NEW imports, step 4) ## Skipped - infra/* (NG.1) ## Verified - terraform fmt: no drift; terraform validate: 10/10 stacks - pytest across 9 Python packages: 12,535 passed, 0 failed - root tests/unit: 4 failures, identical on pre-sync HEAD 4b5fd11 (read infra/ and scripts/preflight-deploy.sh, removed on this branch) - web-app vitest 1,508/1,508 + build OK; mcp-proxy 50/50 ## Follow-up - None Upstream-Release: v0.3.7
quixoticmonk
added a commit
to quixoticmonk/context-ontology-accelerator
that referenced
this pull request
Oct 23, 2026
…#301 aws#302) Add the clientToken idempotency-record table and wire it to the five create-serving Lambdas. Without it, create calls carrying a clientToken return 503. ## Ported - foundation/authnz: DynamoDB idempotency table; name and ARN outputs, name published to SSM by the module - stacks/10-foundation: SSM /authnz/idempotency-table-arn - stacks/20-namespace, 30-services, 40-sources: SSM data sources and module wiring - namespace, metric-service, ontology (api-proxy), sources modules: IDEMPOTENCY_TABLE env var plus idempotency.tf granting Get/Put/Update/ DeleteItem scoped to that table only (namespace covers namespace and grants Lambdas) ## Hand-merged - None ## Skipped - infra/* (NG.1) ## Verified - terraform fmt: no drift; terraform validate: 10/10 stacks - pytest across 9 Python packages: 12,535 passed, 0 failed - root tests/unit: 4 failures, identical on pre-sync HEAD 4b5fd11 (read infra/ and scripts/preflight-deploy.sh, removed on this branch) - web-app vitest 1,508/1,508 + build OK; mcp-proxy 50/50 ## Follow-up - None Upstream-Release: v0.3.7
quixoticmonk
added a commit
to quixoticmonk/context-ontology-accelerator
that referenced
this pull request
Oct 23, 2026
aws#301 aws#302) Pin certifi past the compromised emSign roots and add an optional Lambda@Edge login gate for the web distribution. ## Ported - data-layer and ontology-api Lambda Makefiles: certifi>=2026.10.19, each spec quoted so >= is not read as a shell redirect (aoss-proxy pin landed with CR-A) - foundation/web: edge_auth_version_arn (default null) attaches a viewer-request Lambda@Edge association to every cache behavior - stacks/60-api-edge: edge_auth_version_arn variable passed to web. Default off, so existing deployments are unchanged ## Hand-merged - None ## Skipped - infra/* (NG.1) ## Verified - terraform fmt: no drift; terraform validate: 10/10 stacks - pytest across 9 Python packages: 12,535 passed, 0 failed - root tests/unit: 4 failures, identical on pre-sync HEAD 4b5fd11 (read infra/ and scripts/preflight-deploy.sh, removed on this branch) - web-app vitest 1,508/1,508 + build OK; mcp-proxy 50/50 - rebuilt data-layer and ontology-api zips: certifi>=2026.10.19 present ## Follow-up - None Upstream-Release: v0.3.7
quixoticmonk
added a commit
to quixoticmonk/context-ontology-accelerator
that referenced
this pull request
Oct 23, 2026
…ode drift, aws#301 aws#302) Record the custom-authorizer caller in API access logs and bring over upstream workspace, CI, script and doc drift. ## Ported - services/api: access-log format adds principalId = $context.authorizer.principalId (identity.caller/user are always "-" behind a custom authorizer) - .github workflows/actions, nx.json, package.json, pyproject.toml, uv.lock, VERSION, NOTICE, README.md - scripts/setup-dev.sh, scripts/smithy-generate.sh, tests/unit - connectors/databricks/cdk (connector code, not infra/) - external-docs package.json and content pages (except deploying.md) ## Hand-merged - DRIFT files merged keeping Terraform wording (step 5); pnpm-workspace .yaml and retired destroy-dev target kept ours (step 5A) ## Skipped - infra/* (NG.1) - 13 CDK deploy/destroy helper scripts and their tests (NG.1) - AgentCore SG retain-on-destroy and (SO0376) stack description: CloudFormation-only, no Terraform equivalent ## Verified - terraform fmt: no drift; terraform validate: 10/10 stacks - pytest across 9 Python packages: 12,535 passed, 0 failed - root tests/unit: 4 failures, identical on pre-sync HEAD 4b5fd11 (read infra/ and scripts/preflight-deploy.sh, removed on this branch) - web-app vitest 1,508/1,508 + build OK; mcp-proxy 50/50 - pyproject.toml requires uv>=0.13.4; local uv upgraded 0.9.28 -> 0.13.5 ## Follow-up - None Upstream-Release: v0.3.7
quixoticmonk
added a commit
to quixoticmonk/context-ontology-accelerator
that referenced
this pull request
Oct 23, 2026
…ws#302) Add upstream's control-plane agent skill, missed by the bulk import; the README.md tree committed in 68702ef already lists coa-skills/. ## Ported - coa-skills/control-plane/SKILL.md: control-plane lifecycle guide for agents (sources, induction, proposals, ontologies, grants) - coa-skills/control-plane/scripts/coa_login.py: PKCE sign-in and token-cache helper for the web and mcp Cognito clients ## Hand-merged - None (NEW files, byte-identical to v0.3.7, step 4) ## Skipped - infra/* (NG.1) ## Verified - Both files byte-identical to v0.3.7 (cmp) - Not run against the TF deployment: Quick Start SSM names (/<prefix>/cognito-domain-prefix, userpool-client-id, mcp-client-id) are the CDK names and are unchecked against what the Terraform stacks publish ## Follow-up - Adapt SKILL.md Quick Start to the Terraform SSM parameter names Upstream-Release: v0.3.7
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automated mirror sync from the internal repository. Generated by the github-sync CI job; review the diff before merging.