Conversation
…nc 12) Bring repository-level assets up to date. - Documentation: README, CLAUDE.md, CHANGELOG; the docs/ tree (developers, operators, users) including the DB migration mechanics architecture, which now documents that schema-extras.sql applies all-or-nothing and must fail loudly - Build & lint config: docker-compose.yml, .gitignore, .env.example - Developer tooling: scripts/, tools/, examples/, .githooks, .cursor rules, .claude/skills; tools/db-migrate gains a precondition script that clears superseded duplicate agent fingerprints before the extras apply - CI: .github/workflows The README CI badges now point at this repository's own Actions runs rather than a repository the public audience cannot see. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
…ain (sync 12) Backend service implementations and shared Go libraries: - packages/ai-gateway: ingress proxy, provider adapters, canonical bridge, cache, normalize - packages/shared: Go shared libraries (transport, traffic, policy, storage, schemas, identity, audit, core) - packages/control-plane: admin API, analytics store, fleet and agent audit, identity provider surface - packages/nexus-hub: hub service, jobs, alerts, observability consumers - packages/compliance-proxy: compliance pipeline - packages/agent: endpoint agent (darwin/linux/windows) - go.work: workspace member set Runtime artifacts (logs/, dev-certs/) intentionally excluded. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
…c 12) Frontend code, JS dependencies, and repository-level test suites: - packages/control-plane-ui: React control plane - packages/ui-shared: shared UI primitives and theme/chart utilities - package.json + package-lock.json refresh - tests/: integration-go, e2e-python, e2e-ui, smoke, agent, scenarios, manual, lib, scripts (package-internal tests ship with the backend PR) Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Container build and self-hosted deployment assets, new to this repository: - docker/: per-service Dockerfiles, a shared build base, the control-plane-ui image, and the db-migrator image whose entrypoint applies the schema, the PostgreSQL-native schema extras and the seed in order, failing the run if any step fails - deploy/: compose stack, nginx site config, prometheus scrape config, systemd units for the four services, secrets bootstrap script and .env.example Every service in the compose stack gates on the db-migrator completing successfully, so a database that is not fully migrated cannot serve traffic. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
- packages/nexus-agent-core: the resource catalog engine (catalog, search, distill, cards) plus the embedded control-plane OpenAPI specs it resolves against, and the core auth/client seam - packages/nexus-cli: local HTTP logging, the OpenAPI kind generator and the TUI shell bridge The embedded OpenAPI copies move with their canonical sources, so a card can never advertise a field or endpoint the admin API no longer accepts. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
chore(repo): sync docs, tooling, and CI config from internal main (sync 12)
feat(services): sync backend services and shared libs from internal main (sync 12)
feat(ui): sync control-plane UI, shared UI components, and tests (sync 12)
feat(deploy): sync container images and deployment manifests (sync 12)
feat(agent-core): sync the operator toolkit core and CLI (sync 12)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this change does
Why
Pre-edit reading (3-doc rule)
docs/developers/architecture/README.mdfor the area I changed — which doc(s)?:docs/users/features/if this change touches a user-visible surface — which doc?:docs/developers/workflow/conventions.md(code style).If a row for your edit area didn't exist in the trigger map, that itself is a signal — either an undocumented subsystem or a new one that needs its own arch doc.
Workflow
TodoWriteor Claude CodeTaskCreate).TODO/FIXME/XXX/unimplemented/not implemented/stub/mockstrings in production code (test mocks are fine).High-blast-radius surfaces — check if your change touches any
packages/agent/platform/darwin/NexusAgent/NexusAgentExtension/**) — I respected the fail-open invariants listed in CLAUDE.md.seed.ts+iam/managed.goif I introduced a new resource.docs/developers/architecture/services/ai-gateway/provider-adapter-architecture.md§3a (run/adapter-conformance-checkif uncertain).packages/shared/**— additive-only public API change.YYYYMMDDHHMMSS).Tests + CI
go test -race -count=1passes for every module I touched.scripts/.coverage-allowlistwith a category rationale).npm run check:allpasses (i18n parity + design tokens + arch-doc triggers + jobs-catalogue lockstep + …).docs/developers/architecture/README.md(pre-commit lockstep guard checks).Commit hygiene
<type>(<scope>): <summary>pattern (feat/fix/refactor/docs/chore/test).