0 Fork 0

T

MarioGLealPandClaude Opus 5.5 93f648affa

CI / test (push) Successful in 16s

Details

deps: certifi 2026.7.22 -> 2026.10.23

GHSA-6q48-6c7w-9gw2: the older bundle still trusts emSign intermediates
whose keys were compromised (Trivy critical, 2026-10-23 sweep). The
no-cache release build also picks up the base image's Debian fixes.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01AmGMkB5pQHziini41J7rbQ

2026-10-23 22:57:21 +01:00

.gitea/workflows

feat: optional mTLS - only felt-core's Felt cert gets in (WP-62 M2b B5.2, D10.2)

2026-10-07 18:00:57 +01:00

server

fix(mtls): a refused peer logs one warning, not an asyncio traceback

2026-10-07 21:22:16 +01:00

tests

fix(mtls): a refused peer logs one warning, not an asyncio traceback

2026-10-07 21:22:16 +01:00

.gitignore

import from clockmost-infra projects/drive-rag/app (WP-53 phase 2)

2026-10-02 14:15:41 +01:00

Dockerfile

feat: optional mTLS - only felt-core's Felt cert gets in (WP-62 M2b B5.2, D10.2)

2026-10-07 18:00:57 +01:00

pyproject.toml

import from clockmost-infra projects/drive-rag/app (WP-53 phase 2)

2026-10-02 14:15:41 +01:00

README.md

import from clockmost-infra projects/drive-rag/app (WP-53 phase 2)

2026-10-02 14:15:41 +01:00

uv.lock

deps: certifi 2026.7.22 -> 2026.10.23

2026-10-23 22:57:21 +01:00

README.md

drive-rag

RAG over Mario's local Google Drive sync (docs, PDFs, the Obsidian vault). felt-core's search_documents skill is the only caller; answers via felt-llm (local).

Deployed on clockmost: push to main -> CI builds git.clockmost.com/benylin/drive-rag:<sha> and bumps its tag in the infra repo; the deploy loop health-checks it and auto-reverts on failure (Felt WP-53). The index (/data) is mounted on the server, not in this repo.

Until 2026-10-02 this code lived vendored inside the infra repo (projects/drive-rag/app).