allaun/Research-Stack
1
0
Fork 0
mirror of https://github.com/allaunthefox/Research-Stack.git synced 2026-07-31 03:05:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
805 commits 18 branches 0 tags 425 MiB
Commit graph

6 commits

Author SHA1 Message Date
allaun
e6e241746c fix(deps): audit-driven updates across npm, pnpm, cargo, pip 
JavaScript lockfiles:
- bezier-kit: vitest 3.2.4→3.2.6, @babel/core 7.29.0→7.29.7,
  esbuild 0.27.7→0.27.2, vite 6.4.2→6.4.3
- parametric-learn: vite 8.0.10→8.0.16, form-data 4.0.5→4.0.6
- lytenyte-storage + cluster-dashboard/frontend: vite 6.4.2→6.4.3

Cargo lockfiles:
- leechy-py: pyo3 0.28.3→0.29.0 (RUSTSEC-2026-0176/0177)
- stract: rkyv 0.7.45→0.7.46 (RUSTSEC-2026-0001)
- rs-surface, ene-rds, ene-session-sync: postgres updates
- shared-data/namidb: aws-lc-sys 0.37.1→0.41.0

Python:
- whoogle-search: cryptography 46.0.7→48.0.1 (GHSA-537c-gmf6-5ccf)

Remaining blocked advisories documented in commit body metadata;
require upstream releases or source-level migrations.
 2026-06-20 19:00:38 -05:00
allaun
e6bbb612d0 fix(infra): point default RDS host to neon server Tailscale IP 
- Redirected the default RDS_HOST/PGHOST database connection default
  to neon-64gb (100.92.88.64) across all Python shims, shell wrappers,
  and Rust probes.
- Cleaned up local defaults in rds_connect.py, sync_wiki_to_rds.py,
  dataset_ingest_rds.py, batch_embed_artifacts.py, db.rs, cache-offload.sh,
  db-consolidate.sh, backup.sh, and ene-api-wrapper.sh.

Build: 0 jobs, 0 errors (lake build)
 2026-06-18 23:28:46 -05:00
allaun
ab6fe3e69b fix(infra): purge all default AWS RDS hosts and IAM credentials 
- Replaced database-1-instance-1.cghu8yqogqwo.us-east-1.rds.amazonaws.com
  with 'localhost' as default.
- Removed AWS IAM generate-db-auth-token CLI subprocessing and boto3
  token generation blocks from rds_connect.py, ingest_flexure_joints.py,
  pist_route_repair.py, and ene-api-wrapper.sh.
- Purged AWS DEFAULT_REGION and AWS_REGION configurations where applicable.
- Updated Rust rds_probe to use standard PG environment variables.

Build: 0 jobs, 0 errors (lake build)
 2026-06-18 23:26:56 -05:00
Brandon Schneider
8e5efbe11f Fix Dependabot vulns: update sqlx 0.7->0.8.6, add ene-rds Cargo.lock 
Security fixes:
- rds_probe: bump sqlx 0.7.4 -> 0.8.6 (GHSA-xmrp-424f-vfpx MEDIUM)
  Also removes transitive rustls-webpki 0.101.7 dependency chain,
  fixing GHSA-82j2-j2ch-gfr8 (HIGH), GHSA-xgp8-3hg3-c2mh,
  GHSA-965h-392x-2mh5 (LOW) in this workspace.
- ene-rds already has rustls-webpki 0.103.13 (patched); commit its
  Cargo.lock for reproducible builds.

Generated with [Devin](https://cli.devin.ai/docs)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-05-19 08:09:34 +00:00
Brandon Schneider
edab29b0d5 Fix Porkbun DNS, automate postgres backups, fix rds_probe vulns 
- Porkbun API keys verified working (SUCCESS ping)
- Automated daily AppFlowy postgres backups via systemd timer
- rds_probe: switch from rustls to native-tls (fixes 3 Dependabot alerts)
- ec2-config.nix: add appflowy-backup service and timer
 2026-05-18 11:52:01 -05:00
Brandon Schneider
c5b6a31a8b feat: add RDS probe tool, credential server, and Notion/Linear ingestion pipeline 
New infrastructure components:
- rds_probe: Rust database inspection tool with IAM auth
- credential_server.py: REST credential provider server
- credential_provider.py: credential resolution chain
- ene_rds_fractal_fold.py / ene_rds_wiki_layer.py: RDS-backed ENE layers
- import_dumps_to_rds.py / export_linear_from_rds.py: ingestion pipeline
- recover_credential_server.sh: deployment script (sanitized)

Sanitize hardcoded secrets across codebase:
- Strip API keys from recover_credential_server.sh → env var lookups
- Replace hardcoded Wolfram appid (HYJE3R3R63) → env var in 5 scripts
- Strip fallback key values from config/index.js
- Add .claude/ and optimized_basis_v3.bin to .gitignore

Ingested 2,685 records into RDS: 2,421 Linear issues + 264 wiki pages
 2026-05-18 00:31:44 -05:00