Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
72 commits
Select commit Hold shift + click to select a range
78377a7
fix: add nosemgrep comments for false positive SQLAlchemy warnings
slayoffer Jan 15, 2026
4c06b07
Merge remote-tracking branch 'upstream/main' into merge/upstream-sync
slayoffer Jan 27, 2026
a4e3250
Merge upstream/main (27 commits): mental models, worker service, lite…
slayoffer Jan 27, 2026
b9ea24e
fix: add nosemgrep comments for false positive warnings in upstream code
slayoffer Jan 27, 2026
18c6603
feat(mcp): add Bearer token authentication support
slayoffer Jan 28, 2026
dbd27df
feat(ci): add GCP Artifact Registry deployment workflow
slayoffer Jan 28, 2026
b14fb37
Merge branch 'fix/mcp-auth' into feat/gcp-deploy-workflow
slayoffer Jan 28, 2026
137c986
Merge pull request #1 from xsolla/feat/gcp-deploy-workflow
slayoffer Jan 28, 2026
9c68f69
fix(ci): use docker/login-action for GCP auth (gcloud not installed)
slayoffer Jan 28, 2026
6583890
fix: sanitize null bytes from text fields before PostgreSQL insertion
slayoffer Jan 28, 2026
832941d
fix: propagate Bearer token from MCP middleware to tools for tenant auth
slayoffer Jan 28, 2026
c957276
Merge pull request #2 from xsolla/fix/mcp-tenant-auth
slayoffer Jan 28, 2026
f04e400
feat(ci): auto-deploy to GKE after Docker image push
slayoffer Jan 28, 2026
85be24f
Merge remote-tracking branch 'upstream/main' into merge/upstream-sync
slayoffer Jan 28, 2026
5c8a259
Merge branch 'feat/gke-auto-deploy' into merge/upstream-sync
slayoffer Jan 28, 2026
9a675a4
Merge pull request #4 from xsolla/merge/upstream-sync
slayoffer Jan 28, 2026
5634e03
fix(ci): make GKE deploy a manual approval step
slayoffer Jan 28, 2026
3a75e75
fix(auth): skip tenant auth for all internal background tasks
slayoffer Jan 28, 2026
b1371a4
fix(control-plane): handle undefined response.data in graph route
slayoffer Jan 28, 2026
5646be9
fix(control-plane): pass API key to dataplane for tenant auth
slayoffer Jan 28, 2026
1e896d7
feat(ci): add GHA workflow for dev environment deployment
slayoffer Jan 29, 2026
291e8e1
changes
slayoffer Jan 29, 2026
f354cc4
feat(ci): migrate Docker builds to Cloud Build
slayoffer Jan 29, 2026
27351ca
fix(ci): use --no-source with git clone in Cloud Build
slayoffer Jan 29, 2026
16ac941
fix(ci): write cloudbuild config to temp file instead of stdin
slayoffer Jan 29, 2026
bc47f6c
fix(ci): use full resource path for Cloud Build serviceAccount
slayoffer Jan 29, 2026
a120a93
fix(ci): remove machineType (not allowed with worker pools)
slayoffer Jan 29, 2026
8ebf8ea
fix(ci): use source upload instead of git clone for private repo
slayoffer Jan 29, 2026
5f4c776
Merge remote-tracking branch 'upstream/main' into merge/upstream-main…
slayoffer Jan 29, 2026
371146a
fix(ci): split build and deploy, use default pool for GKE deploy
slayoffer Jan 29, 2026
cf0fc9a
feat: use Connect Gateway for GKE deploy access
slayoffer Jan 30, 2026
f8cb663
"Claude PR Assistant workflow"
slayoffer Jan 30, 2026
86522ed
"Claude Code Review workflow"
slayoffer Jan 30, 2026
8eb9787
Merge pull request #5 from xsolla/add-claude-github-actions-176973558…
slayoffer Jan 30, 2026
7cd8d20
Merge remote-tracking branch 'upstream/main' into merge/upstream-v0.4.2
slayoffer Jan 30, 2026
4e9e26e
feat(cli): add --wait flag for consolidate and --date filter for docu…
slayoffer Jan 30, 2026
1c9b7b0
docs: update changelog and session context for upstream sync
slayoffer Jan 30, 2026
8803f3f
Merge pull request #6 from xsolla/develop
slayoffer Jan 30, 2026
ca0252f
fix(ci): remove environment from build job to skip approval gate
slayoffer Jan 30, 2026
c0283ca
fix(docker): add retry logic for ML model downloads
slayoffer Jan 30, 2026
8741463
refactor: consolidate _sanitize_text into fact_extraction module
slayoffer Jan 30, 2026
fc947f5
feat: sync with upstream v0.4.6
slayoffer Feb 2, 2026
e98a584
Merge branch 'merge/upstream-v0.4.6' into develop
slayoffer Feb 2, 2026
48f173a
docs: update changelog for v0.4.6 upstream sync
slayoffer Feb 2, 2026
9c05c28
Merge pull request #7 from xsolla/develop
slayoffer Feb 2, 2026
5744e04
Merge remote-tracking branch 'upstream/main' into merge/upstream-v0.4.7
slayoffer Feb 2, 2026
d62c281
feat: sync with upstream v0.4.7
slayoffer Feb 2, 2026
6674616
Merge branch 'merge/upstream-v0.4.7' into develop
slayoffer Feb 2, 2026
06beaa8
Merge pull request #8 from xsolla/develop
slayoffer Feb 2, 2026
4473396
docs: add extensions module documentation
slayoffer Feb 2, 2026
954e783
feat: add retry logic for ML model downloads at startup
slayoffer Feb 2, 2026
1721a8e
Merge pull request #9 from xsolla/develop
slayoffer Feb 2, 2026
3b198fe
ci: add image tag visibility to GHA workflow logs
slayoffer Feb 3, 2026
ab83633
ci: add deployment verification showing running pod image
slayoffer Feb 3, 2026
7e056f3
Merge remote-tracking branch 'upstream/main' into merge/upstream-v0.4…
slayoffer Feb 3, 2026
d048959
feat: sync with upstream main (pre-v0.4.8)
slayoffer Feb 3, 2026
7a8c9f6
ci: fix Cloud Build substitution format
slayoffer Feb 3, 2026
77cf88e
feat(openclaw): add external Hindsight API support
slayoffer Feb 3, 2026
94d9f18
fix(openclaw): improve shell argument escaping
slayoffer Feb 3, 2026
d5de765
chore(openclaw): update package-lock.json
slayoffer Feb 3, 2026
aae9e20
feat(openclaw): add dynamic per-channel memory banks
slayoffer Feb 3, 2026
eeea311
ci: restore CLOUD_LOGGING_ONLY and add GHA deploy info steps
slayoffer Feb 3, 2026
2536d01
ci: restore CLOUD_LOGGING_ONLY and add GHA deploy info steps
slayoffer Feb 3, 2026
33407f6
Merge branch 'feat/openclaw-external-api' into develop
slayoffer Feb 3, 2026
e5900c7
feat: sync with upstream v0.4.8
slayoffer Feb 3, 2026
0442d70
Merge upstream v0.4.8 sync
slayoffer Feb 3, 2026
f3a65eb
Merge pull request #10 from xsolla/develop
slayoffer Feb 4, 2026
2414e86
Merge remote-tracking branch 'upstream/main' into merge/upstream-v0.4.9
slayoffer Feb 4, 2026
3e3b9a7
feat(docker): add Claude CLI for claude-code LLM provider
slayoffer Feb 5, 2026
466d66e
fix(openclaw): use pre-installed hindsight-embed instead of uvx
slayoffer Feb 5, 2026
7dc8409
Revert "fix(openclaw): use pre-installed hindsight-embed instead of uvx"
slayoffer Feb 5, 2026
b7ae589
docs: add changelog entry for Docker Claude CLI
slayoffer Feb 5, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
44 changes: 44 additions & 0 deletions .github/workflows/claude-code-review.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,44 @@
name: Claude Code Review

on:
pull_request:
types: [opened, synchronize, ready_for_review, reopened]
# Optional: Only run on specific file changes
# paths:
# - "src/**/*.ts"
# - "src/**/*.tsx"
# - "src/**/*.js"
# - "src/**/*.jsx"

jobs:
claude-review:
# Optional: Filter by PR author
# if: |
# github.event.pull_request.user.login == 'external-contributor' ||
# github.event.pull_request.user.login == 'new-developer' ||
# github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'

runs-on: ubuntu-latest
permissions:
contents: read
pull-requests: read
issues: read
id-token: write

steps:
- name: Checkout repository
uses: actions/checkout@v4
with:
fetch-depth: 1

- name: Run Claude Code Review
id: claude-review
uses: anthropics/claude-code-action@v1
with:
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
plugins: 'code-review@claude-code-plugins'
prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
# See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
# or https://code.claude.com/docs/en/cli-reference for available options

50 changes: 50 additions & 0 deletions .github/workflows/claude.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,50 @@
name: Claude Code

on:
issue_comment:
types: [created]
pull_request_review_comment:
types: [created]
issues:
types: [opened, assigned]
pull_request_review:
types: [submitted]

jobs:
claude:
if: |
(github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
(github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
(github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
(github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
runs-on: ubuntu-latest
permissions:
contents: read
pull-requests: read
issues: read
id-token: write
actions: read # Required for Claude to read CI results on PRs
steps:
- name: Checkout repository
uses: actions/checkout@v4
with:
fetch-depth: 1

- name: Run Claude Code
id: claude
uses: anthropics/claude-code-action@v1
with:
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}

# This is an optional setting that allows Claude to read CI results on PRs
additional_permissions: |
actions: read
# Optional: Give a custom prompt to Claude. If this is not specified, Claude will perform the instructions specified in the comment that tagged it.
# prompt: 'Update the pull request description to include a summary of changes.'

# Optional: Add claude_args to customize behavior and configuration
# See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
# or https://code.claude.com/docs/en/cli-reference for available options
# claude_args: '--allowed-tools Bash(gh pr:*)'

190 changes: 190 additions & 0 deletions .github/workflows/deploy-gcp-dev.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,190 @@
# Build and Deploy Hindsight to GCP via Cloud Build (DEV)
# Triggers on push to develop branch or manual workflow dispatch
#
# Pipeline:
# 1. GHA uploads source to Cloud Build (private pool) for build
# 2. Cloud Build pushes to Artifact Registry (internal network)
# 3. Cloud Build deploys to GKE via Connect Gateway (Fleet)
#
# Required secrets:
# GCP_SA_KEY - Service account JSON key with Cloud Build + GKE permissions
#
# Target registry: us-docker.pkg.dev/xsolla-n8n-prod/hindsight/hindsight
# Target cluster: gcp-k8s-xsolla-n8n-prod (us-west2) / namespace: hindsight-dev

name: Build and Deploy to GCP (Dev)

on:
push:
branches: [develop]
workflow_dispatch:

concurrency:
group: deploy-gcp-dev-${{ github.ref }}
cancel-in-progress: true

jobs:
build:
runs-on: ubuntu-latest
timeout-minutes: 60

permissions:
contents: read

steps:
- uses: actions/checkout@v4

- name: Authenticate to Google Cloud
uses: google-github-actions/auth@v2
with:
credentials_json: ${{ secrets.GCP_SA_KEY }}

- name: Set up Cloud SDK
uses: google-github-actions/setup-gcloud@v2

- name: Display Build Info
run: |
echo "============================================="
echo "Building Hindsight Docker Image (DEV)"
echo "============================================="
echo "Commit: ${{ github.sha }}"
echo "Branch: ${{ github.ref_name }}"
echo "Registry: us-docker.pkg.dev/xsolla-n8n-prod/hindsight/hindsight"
echo ""
echo "Image tags to be built:"
echo " - us-docker.pkg.dev/xsolla-n8n-prod/hindsight/hindsight:beta"
echo " - us-docker.pkg.dev/xsolla-n8n-prod/hindsight/hindsight:${{ github.sha }}"
echo "============================================="

- name: Build and Push via Cloud Build
run: |
cat > /tmp/cloudbuild.yaml <<'EOF'
steps:
- name: 'gcr.io/cloud-builders/docker'
args:
- 'build'
- '-t'
- 'us-docker.pkg.dev/xsolla-n8n-prod/hindsight/hindsight:beta'
- '-t'
- 'us-docker.pkg.dev/xsolla-n8n-prod/hindsight/hindsight:$COMMIT_SHA'
- '-f'
- 'docker/standalone/Dockerfile'
- '--build-arg'
- 'INCLUDE_API=true'
- '--build-arg'
- 'INCLUDE_CP=true'
- '--build-arg'
- 'INCLUDE_LOCAL_MODELS=true'
- '--build-arg'
- 'PRELOAD_ML_MODELS=true'
- '.'
- name: 'gcr.io/cloud-builders/docker'
args: ['push', '--all-tags', 'us-docker.pkg.dev/xsolla-n8n-prod/hindsight/hindsight']
serviceAccount: 'projects/xsolla-n8n-prod/serviceAccounts/hindsight-github-actions@xsolla-n8n-prod.iam.gserviceaccount.com'
options:
logging: CLOUD_LOGGING_ONLY
timeout: '3600s'
EOF

gcloud builds submit \
--project=xsolla-n8n-prod \
--region=us-west2 \
--worker-pool=projects/xsolla-n8n-prod/locations/us-west2/workerPools/hindsight-deploy \
--config=/tmp/cloudbuild.yaml \
--substitutions=COMMIT_SHA=${{ github.sha }}

- name: Verify Pushed Images
run: |
echo "============================================="
echo "Verifying pushed images in Artifact Registry"
echo "============================================="
echo ""
echo "Latest tags for hindsight:"
gcloud artifacts docker images list \
us-docker.pkg.dev/xsolla-n8n-prod/hindsight/hindsight \
--include-tags \
--sort-by=~UPDATE_TIME \
--limit=5 \
--format="table(package,tags,createTime.date('%Y-%m-%d %H:%M:%S'))"
echo ""
echo "Image digest for commit ${{ github.sha }}:"
gcloud artifacts docker images describe \
us-docker.pkg.dev/xsolla-n8n-prod/hindsight/hindsight:${{ github.sha }} \
--format="value(image_summary.digest)" 2>/dev/null || echo "Tag verification pending..."
echo "============================================="

deploy:
needs: build
runs-on: ubuntu-latest
timeout-minutes: 10

permissions:
contents: read

steps:
- name: Authenticate to Google Cloud
uses: google-github-actions/auth@v2
with:
credentials_json: ${{ secrets.GCP_SA_KEY }}

- name: Set up Cloud SDK
uses: google-github-actions/setup-gcloud@v2

- name: Display Deploy Info
run: |
echo "============================================="
echo "Deploying Hindsight to GKE (DEV)"
echo "============================================="
echo "Commit: ${{ github.sha }}"
echo "Namespace: hindsight-dev"
echo "Image tag: beta"
echo ""
echo "Expected image digest:"
gcloud artifacts docker images describe \
us-docker.pkg.dev/xsolla-n8n-prod/hindsight/hindsight:beta \
--format="value(image_summary.fully_qualified_digest)" || echo "Could not fetch digest"
echo "============================================="

- name: Deploy to GKE via Cloud Build (Connect Gateway)
run: |
cat > /tmp/deploy.yaml <<EOF
steps:
- name: 'gcr.io/cloud-builders/gcloud'
entrypoint: 'bash'
args:
- '-c'
- |
set -e
echo "============================================="
echo "Deploying Hindsight to GKE (DEV)"
echo "============================================="
echo "Commit: $_COMMIT_SHA"
echo "Expected image tag: us-docker.pkg.dev/xsolla-n8n-prod/hindsight/hindsight:\$_COMMIT_SHA"
echo ""

# Use Connect Gateway (Fleet) to access private GKE cluster
gcloud container fleet memberships get-credentials gcp-k8s-xsolla-n8n-prod --project=xsolla-n8n-prod

echo "Restarting deployment..."
kubectl rollout restart deployment/hindsight-current -n hindsight-dev
kubectl rollout status deployment/hindsight-current -n hindsight-dev --timeout=300s

echo ""
echo "============================================="
echo "Deployment Verification"
echo "============================================="
echo "Running pod image:"
kubectl get pods -n hindsight-dev -l app=hindsight-current -o jsonpath='{range .items[*]}Pod: {.metadata.name}{"\n"}Image: {.status.containerStatuses[0].image}{"\n"}ImageID: {.status.containerStatuses[0].imageID}{"\n"}{end}'
echo ""
echo "============================================="
serviceAccount: 'projects/xsolla-n8n-prod/serviceAccounts/hindsight-github-actions@xsolla-n8n-prod.iam.gserviceaccount.com'
options:
logging: CLOUD_LOGGING_ONLY
substitutions:
_COMMIT_SHA: ${{ github.sha }}
EOF

gcloud builds submit --no-source \
--project=xsolla-n8n-prod \
--region=us-west2 \
--config=/tmp/deploy.yaml
Loading
Loading