KYRBOT/OmniOilPersonal
1
0
Fork 0
Code Issues Pull Requests 1 Actions 1 Packages Projects Releases Wiki Activity
508 Commits 8 Branches 0 Tags
eb2dcbe4f8cc6f9e294851c8adf9788d074d0d60
Commit Graph

52 Commits

Author SHA1 Message Date
Wilman Yesid Farfan Diaz
d3d1a6df01 feat: implement core backend-api, events-relay, telemetry-ingestor, and build-orchestrator services with prometheus monitoring infrastructure 2026-07-07 23:06:27 -05:00
Yesid Farfan
acf1a72d71 feat: implement granular RLS policies for operations_downtime table instead of generic helper call 2026-07-06 00:51:46 -05:00
Yesid Farfan
0228005590 refactor: migrate asset-dependent tables to custom RLS policies based on asset_id mapping 2026-07-06 00:41:10 -05:00
Yesid Farfan
ce85c67022 refactor: remove RLS configuration for telemetry_alarms table in multi-tenancy migration 2026-07-06 00:33:41 -05:00
Yesid Farfan
7883c5e58e chore: remove row level security policies from telemetry_raw table 2026-07-06 00:26:17 -05:00
Yesid Farfan
7cdc8ace05 feat: add crash reporting via MQTT, implement periodic data store-and-forward drainage, and enforce periodic signal publication in deadband filter to comply with ANH 0651 regulations. 2026-07-05 23:12:35 -05:00
henryor
ac95b628c4 feat(pwa): add well-scoped operator access 2026-07-01 11:02:39 -05:00
henryor
7243bffb09 feat(billing): add commercial profile rules foundation 2026-06-29 21:29:18 -05:00
henryor
f5eb8335e5 fix(api): dedupe movement retries by client id 2026-06-27 11:45:34 -05:00
henryor
bafd0eeaee fix(telemetry): handle compressed chunks in migration 2026-06-27 10:23:53 -05:00
henryor
1f940e8164 feat(telemetry): add source contract schema 2026-06-27 08:45:37 -05:00
henryor
9cccb8ba0e fix(security): replace telemetry websocket JWT query 2026-06-20 20:19:45 -05:00
henryor
1617c89f8f fix(api): support alarm acknowledgement migration on hypertables 2026-06-19 09:14:21 -05:00
henryor
ea1cd59f33 feat(admin): acknowledge grouped alerts 2026-06-19 08:16:07 -05:00
henryor
42cda1ce70 feat(anh): add report correction workflow 2026-06-18 21:26:08 -05:00
henryor
b799cb3109 fix(anh): exclude unconfirmed report scopes 2026-06-18 06:11:14 -05:00
henryor
a6fc71bcc9 feat(anh): add report schedule configuration 2026-06-16 10:48:25 -05:00
henryor
fceb8fe1a5 feat(anh): add sealed report metadata foundation 2026-06-16 05:39:12 -05:00
Wilman Yesid Farfan Diaz
4801101d4f feat: add agent download token management and implement edge project CRUD handlers 2026-06-15 20:07:40 -05:00
henryor
7ca59a43cc fix(auth): dedupe access requests before unique index 2026-06-15 07:00:45 -05:00
henryor
0093839b5e feat(auth): automate trial access approval 2026-06-14 22:19:19 -05:00
Wilman Yesid Farfan Diaz
be7f0a8da4 feat: implement modular multi-protocol data collector agent with support for Modbus, S7, OPC-UA, MQTT Sparkplug B, and SQL drivers. 2026-06-14 19:37:42 -05:00
henryor
1854b14f50 feat(console): manage platform clients and operators 2026-05-14 08:56:48 -05:00
henryor
09c29152e4 feat(auth): provision approved access requests 2026-05-14 08:56:46 -05:00
Wilman Yesid Farfan Diaz
1346e1ab0a feat(edge): OPC UA node scanner (v0.3.0) 
- shared-lib: Add OpcUaScannedNode and OpcUaScanResult types to mqtt_messages
- edge-agent: Bump version 0.2.0 → 0.3.0
- edge-agent: Add optional opcua dep + opcua-support feature flag
- edge-agent/drivers/opc_ua: Add browse_nodes() with cfg-gated real impl
- edge-agent/mqtt_listener: Add ScanOpcUa command variant and MQTT handler
- edge-agent/main: Handle AgentCommand::ScanOpcUa, publish results to MQTT
- backend-api: Migration 20260511000000_opcua_scan_results.sql
- backend-api/handlers/edge_devices: trigger_opcua_scan + get_opcua_scan_result
- backend-api/main: MQTT handler for omnioil/opcua-scan/+, add API routes
- build-orchestrator: Enable opcua-support feature when building agent
- frontend-admin/variables-api: OPC UA scanner API types and functions
- frontend-admin/DeviceConfigModal: OPC UA node browser UI with polling
- .env.example.*: AGENT_LATEST_VERSION 0.2.0 → 0.3.0

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-05-11 21:14:37 -05:00
henryor
fe55bf720f feat(console): implementa 2FA TOTP 2026-05-08 05:37:24 -05:00
henryor
ea94722133 fix(db): corrige historial de migraciones 2026-05-07 10:27:37 -05:00
henryor
4aa27f0117 feat(platform): add provider control plane 2026-05-06 21:31:30 -05:00
henryor
afc4a7397c feat(admin): add B2B access request flow 2026-05-04 19:48:47 -05:00
Wilman Yesid Farfan Diaz
94fce47882 feat: implement full-stack platform architecture including backend services, edge agents, frontend dashboard, and monitoring infrastructure 2026-05-03 16:04:51 -05:00
Wilman Yesid Farfan Diaz
19de03c4e8 feat: implement edge agent, build orchestrator, and backend telemetry services with multi-region MQTT support 2026-05-03 10:51:38 -05:00
Wilman Yesid Farfan Diaz
7caccf7e21 feat: introduce EdgeDevice model and update database schema to support additional industrial protocols including S7 2026-05-02 20:18:20 -05:00
Wilman Yesid Farfan Diaz
5067b5730f feat: implement native Edge Agent service with MQTT, SQLite storage, and remote configuration management 2026-05-02 20:03:30 -05:00
Wilman Yesid Farfan Diaz
2f5f9af3c8 security: HIGH-5/6/8, MED-1/5 — rate limiting, HSTS, HttpOnly cookies, Argon2id 
HIGH-5: Rate limiting por IP con governor (Docker-compatible via X-Real-IP)
  - Login/refresh: 10 req/min; Register: 5 req/min
  - services/backend-api/src/rate_limiter.rs (nuevo módulo)

HIGH-6: HSTS + X-Forwarded-Proto en Nginx; TLS terminado por Dokploy
  - infrastructure/nginx/gateway.conf

HIGH-8: Refresh token movido a cookie HttpOnly; access token solo en memoria
  - Backend: login emite cookie, refresh rota cookie, logout la borra
  - Frontend: Zustand v3 sin tokens en localStorage; credentials: include

MED-1: Eliminado PBKDF2 legacy; Argon2id m=65536 t=3 p=1 en todos los hashes
  - services/shared-lib/src/overlay.rs (imports limpiados)
  - services/backend-api/src/handlers/auth.rs (hash_password helper)

MED-5: Rotación atómica de refresh tokens con detección de replay

SECURITY_AUDIT_REPORT.md: riesgo reducido a 🟡 MEDIO

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-05-02 12:42:58 -05:00
Wilman Yesid Farfan Diaz
3bdd7b7594 feat: implement edge agent, build orchestrator, ANH reporting service, and Node-RED E2E test infrastructure 2026-05-01 19:09:20 -05:00
Wilman Yesid Farfan Diaz
546b82e560 feat: initialize core services, MQTT infrastructure, and backend API with telemetry processing and watchdog monitoring 2026-04-25 19:18:07 -05:00
Wilman Yesid Farfan Diaz
790b1213c3 Actualizaci[on de agente con la configuraci[on para despliegue. 2026-04-20 20:47:32 -05:00
Wilman Yesid Farfan Diaz
77f1bf07cb Despliegue completo. 
Funcionalidad de despliegue por agente funcionando.
Hay que validar URL.
 2026-04-19 22:33:37 -05:00
Wilman Yesid Farfan Diaz
a2152e4bce Actualizaci[on de los logs del sistema. 
Validaci[on de los puntos de base de datos.
 2026-04-19 16:59:39 -05:00
Wilman Yesid Farfan Diaz
f051555569 Inicializaci[on de datos 2026-04-19 14:18:20 -05:00
Wilman Yesid Farfan Diaz
34e9e0a2ba Actualizado sistema a inicializaci[on. 2026-04-19 14:17:00 -05:00
henryor
5f2c5a8e11 feat(admin): gestión de usuarios con CRUD, roles, proyectos y QR 
- Backend: 7 endpoints admin (CRUD usuarios, roles, proyectos por usuario)
- AdminClaims extractor con validación de rol admin (403)
- Frontend admin: página de usuarios con filtros, modal crear/editar
- QR con deep link a PWA para compartir credenciales en campo
- PWA: prefill de email desde query params del QR
- Fix: Redis restart loop (command como array en docker-compose)
- Fix: crash ProjectDetailsPage por stage undefined
- Fix: migración audit_trail compatible con schema existente
- Cleanup: eliminado RegisterPage y ruta /register del admin
 2026-04-19 07:31:00 -05:00
Wilman Yesid Farfan Diaz
7cc7460220 Listo para pruebas de flujo. 2026-04-17 22:43:54 -05:00
Wilman Yesid Farfan Diaz
bc09dc1f80 Cambias actualizando el sistema 2026-04-17 21:44:13 -05:00
Wilman Yesid Farfan Diaz
66dfedaf20 Actualizaci[on del contrato y nombre del contrato con el operador 2026-04-11 10:34:01 -05:00
Wilman Yesid Farfan Diaz
cde41d0c8e Actualizaci[on de informacion adicional 2026-04-09 23:07:03 -05:00
Wilman Yesid Farfan Diaz
9135c9db7e Listo el depliegue 2026-04-09 22:39:02 -05:00
Wilman Yesid Farfan Diaz
055d036ecd Actualizaci[on completa sobre seguridad y comunicaci[on segura. 2026-04-08 19:55:51 -05:00
Wilman Yesid Farfan Diaz
75bd4b3482 Actualizado todo el sistema con las mejoras en seguridad encontradas, despliegue sin migraciones, solo la inicial. 2026-04-07 22:49:23 -05:00
Wilman Yesid Farfan Diaz
ac2fa56a22 Soluci[on de seguridad de los puntos realizada 2026-04-07 19:18:40 -05:00