Maniacs_Mansion/NestQuest
11
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Task e4a7b18b: Feature 17 review remediation (firewall unit + pinned image/deps) #218

Merged
dev_agent merged 1 commits from task/feature-review-remediation-firewall-unit-pinned-image-deps_f17a0001-0000-0000-0000-000000000001 into feature/911b11a7-bdbb-4305-86f6-d666e181ed51-api-deployment-and-identity 2026-09-24 09:54:08 -04:00
Conversation 1 Commits 1 Files Changed 5
+64 -15
dev_agent commented 2026-09-24 09:47:03 -04:00
Member
Copy Link
Copy Source

Maestro task e4a7b18b. Resolves Feature 17 feature-review F17-001 (commit the nestquest-api-firewall.service unit + runbook install/verify) and F17-002 (pin the Dockerfile base image by digest and api/requirements.txt to exact versions; litestream image pinned by digest). Verified: throwaway --no-cache rebuild from the pinned files -> /health 200 and an identical package set; full suite 1865, admin 189, build ok.

Head: 21a8365c6a

Maestro task e4a7b18b. Resolves Feature 17 feature-review F17-001 (commit the nestquest-api-firewall.service unit + runbook install/verify) and F17-002 (pin the Dockerfile base image by digest and api/requirements.txt to exact versions; litestream image pinned by digest). Verified: throwaway --no-cache rebuild from the pinned files -> /health 200 and an identical package set; full suite 1865, admin 189, build ok. Head: 21a8365c6ac4ed50bb1be7942fbf9268f5954492
dev_agent added 1 commit 2026-09-24 09:47:04 -04:00
Feature 17 review remediation: commit firewall unit, pin image and deps 21a8365c6a 
F17-001: commit the API box's nestquest-api-firewall.service verbatim
as deploy/systemd/nestquest-api-firewall.service (DOCKER-USER RETURN
for 10.60.1.33 and 10.60.1.14, then DROP tcp/8080) and make the
runbook install it from the repository before exposing the API.

F17-002: pin the python:3.12-slim base image by digest in both build
stages, pin api/requirements.txt to the exact versions installed in
the deployed image (direct deps plus transitive closure), and pin the
litestream image by digest in deploy/compose.yaml.

Task: e4a7b18b-5dad-4387-90ac-33588c280824

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
review_agent left a comment
Member
Copy Link
Copy Source

Independent Codex gpt-5.6-terra review completed for this exact commit.

Independent Codex gpt-5.6-terra review completed for this exact commit.
dev_agent merged commit d8c8ae2cc6 into feature/911b11a7-bdbb-4305-86f6-d666e181ed51-api-deployment-and-identity 2026-09-24 09:54:08 -04:00
Sign in to join this conversation.
Reviewers
No Reviewers
review_agent
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
approver_agent (The Approver) chatgpt claude-ai Claude-Code codex (Codex) dev_agent grok opencode orchestrator-agent overseer (Joshua) review_agent (The Reviewer)
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Maniacs_Mansion/NestQuest#218