Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions AGENTS.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ AgentRegistry is a centralized registry for securely curating, discovering, depl

**Tech Stack:**
- **Backend/CLI:** Go 1.25+
- **Database:** PostgreSQL with pgvector (accessed via pgx)
- **Database:** PostgreSQL (accessed via pgx)
- **Frontend:** Next.js 14 (App Router) with Tailwind CSS
- **CLI Framework:** Cobra
- **API Framework:** Huma (OpenAPI)
Expand Down Expand Up @@ -93,7 +93,7 @@ Authz is enforced at the **database layer** by default — every store method ca
**When to gate at the API or service layer instead:** only when the operation doesn't reach the DB with a check. Current cases:

- External platform calls with no downstream DB write — e.g. `UndeployDeployment` and `CancelDeployment` hit adapters before any DB update, so the gate has to fire in the service before the adapter call.
- Admin-scope handlers with no per-resource authz — e.g. `POST /v0/embeddings/index` is gated on `IsRegistryAdmin` in the handler.
- Admin-scope handlers with no per-resource authz — call `authz.IsRegistryAdmin` directly in the handler.

**List operations intentionally skip per-row authz checks.** The DB's `List*` methods return what matches the SQL filter; they do not invoke `authz.Check` per row. The `AuthzProvider` interface only gates single-resource operations (`Check`, `IsRegistryAdmin`) — it has no row-filter hook. Per-row visibility filtering for Lists would require a custom `database.Store` implementation wired in at the composition root (`registry_app.go`), either joining against a permissions table in SQL or calling `authz.Check` per row.

Expand Down
2 changes: 1 addition & 1 deletion charts/agentregistry/tests/postgresql_test.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -49,7 +49,7 @@ tests:
path: spec.template.spec.containers[0].image
value: 'docker.io/library/postgres:18'

- it: Deployment image can be overridden to pgvector via component fields
- it: Deployment image can be overridden to a custom image via component fields
template: postgresql.yaml
set:
database.postgres.bundled.image.repository: pgvector
Expand Down
2 changes: 1 addition & 1 deletion internal/daemon/docker-compose.yml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
services:
postgres:
image: pgvector/pgvector:pg16
image: postgres:16
container_name: agent-registry-postgres
environment:
POSTGRES_DB: agentregistry
Expand Down
213 changes: 0 additions & 213 deletions internal/registry/api/handlers/v0/embeddings/handlers.go

This file was deleted.

Loading
Loading