anchorage

alphacentri/anchorage

Fork 0

Commit Graph

Author	SHA1	Message	Date
William Gill	90ac4b169c	ci: fix first CI run — tidy, gofmt, ordering test, govulncheck pin Some checks failed Security / Vulnerability Check (push) Successful in 1m47s Details Test / Build & Unit Tests (push) Successful in 5m4s Details Test / Lint (push) Successful in 27s Details Test / Integration Tests (push) Failing after 1m58s Details - ids: TestIDsAreTimeOrdered asserted strict lexicographic ordering of back-to-back UUIDv7s, but the sub-ms tail is random and not required to be monotonic. Sleep between samples so each ID lands in a distinct millisecond — the property that actually gives Postgres index locality on (org_id, id desc). - go.mod/go.sum: run go mod tidy. keyfunc/v3, prometheus/client_golang and testcontainers-go/modules/postgres are imported directly and should not be marked // indirect; also drops stale sum entries. - gofmt -w across 12 files flagged by the lint job. - security.yml: pin govulncheck to v1.2.0. @latest triggers a proxy lookup every run, which is the step that hung for 16m on the Gitea runner. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-17 09:18:49 -05:00
William Gill	12bf35caf8	anchorage v1.0 initial tree Greenfield Go multi-tenant IPFS Pinning Service wire-compatible with the IPFS Pinning Services API spec. Paired 1:1 with Kubo over localhost RPC, clustered via embedded NATS JetStream, Postgres source-of-truth with RLS-enforced tenancy, Fiber + huma v2 for the HTTP surface, Authentik OIDC for session login with kid-rotated HS256 JWT API tokens. Feature-complete against the 22-milestone build plan, including the ship-it v1.0 gap items: * admin CLIs: drain/uncordon, maintenance, mint-token, rotate-key, prune-denylist, rebalance --dry-run, cache-stats, cluster-presences * TTL leader election via NATS KV, fence tokens, JetStream dedup * rebalancer (plan/apply split), reconciler, requeue sweeper * ristretto caches with NATS-backed cross-node invalidation (placements live-nodes + token denylist) * maintenance watchdog for stuck cluster-pause flag * Prometheus /metrics with CIDR ACL, HTTP/pin/scheduler/cache gauges * rate limiting: session (10/min) + anonymous global (120/min) * integration tests: rebalance, refcount multi-org, RLS belt * goreleaser (tar + deb/rpm/apk + Alpine Docker) targeting Gitea Stack: Cobra/Viper, Fiber v2 + huma v2, embedded NATS JetStream, pgx/sqlc/golang-migrate, ristretto, TypeID, prometheus/client_golang, testcontainers-go.	2026-04-16 18:13:36 -05:00

Author

SHA1

Message

Date

William Gill

90ac4b169c

ci: fix first CI run — tidy, gofmt, ordering test, govulncheck pin

Security / Vulnerability Check (push) Successful in 1m47s

Details

Test / Build & Unit Tests (push) Successful in 5m4s

Details

Test / Lint (push) Successful in 27s

Details

Test / Integration Tests (push) Failing after 1m58s

Details

- ids: TestIDsAreTimeOrdered asserted strict lexicographic ordering of
  back-to-back UUIDv7s, but the sub-ms tail is random and not required
  to be monotonic. Sleep between samples so each ID lands in a distinct
  millisecond — the property that actually gives Postgres index
  locality on (org_id, id desc).
- go.mod/go.sum: run go mod tidy. keyfunc/v3, prometheus/client_golang
  and testcontainers-go/modules/postgres are imported directly and
  should not be marked // indirect; also drops stale sum entries.
- gofmt -w across 12 files flagged by the lint job.
- security.yml: pin govulncheck to v1.2.0. @latest triggers a proxy
  lookup every run, which is the step that hung for 16m on the Gitea
  runner.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-17 09:18:49 -05:00

William Gill

12bf35caf8

anchorage v1.0 initial tree

Greenfield Go multi-tenant IPFS Pinning Service wire-compatible with the
IPFS Pinning Services API spec. Paired 1:1 with Kubo over localhost RPC,
clustered via embedded NATS JetStream, Postgres source-of-truth with
RLS-enforced tenancy, Fiber + huma v2 for the HTTP surface, Authentik
OIDC for session login with kid-rotated HS256 JWT API tokens.

Feature-complete against the 22-milestone build plan, including the
ship-it v1.0 gap items:

  * admin CLIs: drain/uncordon, maintenance, mint-token, rotate-key,
    prune-denylist, rebalance --dry-run, cache-stats, cluster-presences
  * TTL leader election via NATS KV, fence tokens, JetStream dedup
  * rebalancer (plan/apply split), reconciler, requeue sweeper
  * ristretto caches with NATS-backed cross-node invalidation
    (placements live-nodes + token denylist)
  * maintenance watchdog for stuck cluster-pause flag
  * Prometheus /metrics with CIDR ACL, HTTP/pin/scheduler/cache gauges
  * rate limiting: session (10/min) + anonymous global (120/min)
  * integration tests: rebalance, refcount multi-org, RLS belt
  * goreleaser (tar + deb/rpm/apk + Alpine Docker) targeting Gitea

Stack: Cobra/Viper, Fiber v2 + huma v2, embedded NATS JetStream,
pgx/sqlc/golang-migrate, ristretto, TypeID, prometheus/client_golang,
testcontainers-go.

2026-04-16 18:13:36 -05:00

2 Commits