main
Harden Excellence Program waves 2-3 toward 10/10 (BL-140..190). Wave 2: TOTP MFA, MQTT eventToVariable, OPC UA interop, store-forward agent, analytics API, BPMN message catch, 30 agent scenarios, 94 P&ID symbols, MES bundle. Wave 3: Docker interop fixtures, CWMP production, disk store-forward, historian tier routing, marketplace install, agent e2e deploy, 134 symbols, hard tenancy, BPMN throw, event filters, mes-platform-production bundle, Helm configmap. Co-authored-by: Cursor <cursoragent@cursor.com>
Add Phase 33 AF-capable analytics platform (BL-200–210). Deliver calculation engine, historian tiers, multi-tag query API, analytics replica profile, event frames, tag catalog/lineage UI, and enterprise scale gates with lab scripts and JVM load tests. Co-authored-by: Cursor <cursoragent@cursor.com>
feat(platform,web-console): first-party self-diagnostics dashboards over Grafana.
fix(security): remediate audit findings across backend, web console, deploy and CI
Reduce architectural risk with modular AI/OM seams and BPMN subset freeze.
Add developer role, data-source SQL, and relational DB portability. Introduce configurator RBAC for solution developers, restrict direct operator invoke of script-only functions like executeQuery, split Flyway per dialect (ADR 0037), and add external JDBC data sources with SQL console UI and AI Studio for developers. Co-authored-by: Cursor <cursoragent@cursor.com>
docs(lab): I-03 event journal ingress runbook and operator-apps deploy.
feat(platform-ref): canonical slash grammar across full stack
Merge branch 'try/antd-security-users'
fix(security): harden BL-100/127/128 per security review BL-100: - verifyForValidation respects require-signed-bundles - RBAC tests via X-ISPF-Role (admin/operator/unauthenticated) - Cover applications/{appId}/deploy endpoint BL-127/128: - Pin images in deploy/air-gap-images.env - Bind ports to 127.0.0.1; fixtures=false in prod-stack - Remove /actuator/ from nginx proxy - air-gap: safe tar extract, MANIFEST kind check, clickhouse profile - Record image digests in MANIFEST.json at pack time Docs: lab-only warnings for quick start; out-of-band SHA256 note. Co-authored-by: Michael Sviridov <michaael@narod.ru>
Reorganize docs into en/ru trees with proofread bilingual content. Move canonical English to docs/en/, Russian editions to docs/ru/, remove legacy UPPER_CASE redirect stubs, update README and repo links, and add docs-audit tooling plus refreshed context pack. Co-authored-by: Cursor <cursoragent@cursor.com>
feat(erp-mes): ship core 2.0.1 / overlays 1.4.2 with demo guide
Fix ClickHouse localhost auth and VPS compose user config (0.9.21). Co-authored-by: Cursor <cursoragent@cursor.com>
Fix lab soak paths and record 5m REAL journal row.
feat(cluster): replica profiles, platform jobs, and elastic runtime settings. Add cluster diagnostics UI, tabbed Runtime settings with an Elastic pools section, elastic worker pools across ingress tiers, and ADR-0030-0032 replica profiles with platform_jobs scheduling. Co-authored-by: Cursor <cursoragent@cursor.com>
Land Phase 25-32 Excellence Program wave 1 foundations (BL-140..190). Add OT driver promotions and interop lab, driver DDK, HMI debugger and mimic undo, MFA and per-variable ACL, MES platform catalog, queries/event filters, agent playbooks and regression suite, plus roadmap and ecosystem docs. Co-authored-by: Cursor <cursoragent@cursor.com>
Speed up automation pipeline and add observability tooling (0.9.17). In-memory alert runtime, JDBC batch journal, CEL cache, telemetry publish modes, elastic workers by default, driver tree status colors, load-test cleanup/MQTT scripts, and Grafana dashboard. Co-authored-by: Cursor <cursoragent@cursor.com>
Ship v0.9.3: optional Redis cache and ordered object-change event bus. Replace Spring @Async listeners with a dedicated event bus (coalescing, metrics, ordered handlers) and add local/Redis-backed caching for context pack, platform briefing, and object ACL. Co-authored-by: Cursor <cursoragent@cursor.com>
feat(server): elastic telemetry ingress, Scylla historian, and fast path Co-authored-by: Cursor <cursoragent@cursor.com>
feat(BL-100, BL-127): require signed bundles + prod quick start BL-100: Add ispf.license.require-signed-bundles (ISPF_LICENSE_REQUIRE_SIGNED_BUNDLES) to reject unsigned or invalid bundle manifests on import when enabled. CommercialBundleLicenseVerifier enforces signature when flag is set; unit and API tests. BL-127: Add deploy/prod-quickstart.sh with docker-compose prod stack (postgres, redis, ispf-server, nginx), health-check.sh, and DEPLOYMENT.md quick start guide. Docs: EX-14 sprint sync across EXCELLENCE, CODE_AUDIT, ROADMAP, GAP_REGISTRY. Co-authored-by: Michael Sviridov <michaael@narod.ru>
Add OTLP tracing for automation pipeline handlers (0.9.10). Micrometer observations on object-change bus; optional OTel export with collector config. Co-authored-by: Cursor <cursoragent@cursor.com>
Add manufacturing patterns catalog and harden MES/tenant deploy.
fix(drivers): reduce SNMP poll load and add ingress driver packs for platform dogfooding.