agri-stack

Published automatically.

Repository: github.com/OpenG2P/agri-stack · Container images: Container Registry

Develop builds

agri-stack — develop 0.0.0-develop.54 (2026-10-13)

commit aa2dfdc · changes since 0.0.0-develop.53

Chart: openg2p-agri-composite 0.0.0-develop.54

Changes

• G2P-5719 composite and setup script: "consent token" for the exchange CM's per-registry token in comments, chart descriptions and script messages (aa2dfdc)

agri-stack — develop 0.0.0-develop.53 (2026-10-13)

commit 2584627 · changes since 0.0.0-develop.50

Chart: openg2p-agri-composite 0.0.0-develop.53

Summary

• Major: Removal of the helmfile-based Agri Exchange bundle; manual installation in Rancher is now required.
• New features: Default consent mode set to "exchange" in the composite chart, with updated README for clarity on the Agri Stack use case.
• Testing enhancements: Introduction of setup_exchange.py for idempotent setup, along with new options in partner_test.py for automated testing and setup configurations.

Changes

• G2P-5719 composite chart comment: exchange is the default consent mode; README title "Agri Stack use-case composite" (2584627)
• G2P-5719 scripts/exchange_test.sh: one shot after installing an exchange — setup_exchange.py (idempotent), PM/CM admin secrets from the cluster, partner_test.py --auto-approve; --dry-run, --setup-only, --test-only, --consent-id (7d125b9)
• G2P-5719 remove the helmfile-based Agri Exchange bundle (deploy/); the exchange is installed by hand in Rancher for now (caadf5d)

agri-stack — develop 0.0.0-develop.50 (2026-10-12)

commit efff75d · changes since 0.0.0-develop.46

Chart: openg2p-agri-composite 0.0.0-develop.50

Summary

• Composite chart updates: introduced consent mode exchange with passthrough opt-in, and enhanced CORS configuration to render as a JSON list, addressing API startup issues with empty or plain-URL values.
• Dependency management: pinned commons-base/services to version 0.0.0-develop.309 and composite to 0.0.0-develop.46 to ensure compatibility with the CM partner portal and consent_id.
• Documentation improvements: updated README to include details about the CM partner portal integration in commons-services.

Changes

• G2P-5719 composite chart defaults for the exchange: consent mode exchange (passthrough opt-in), exchange CM URL http://commons-services-cm-partner-api, CORS origin the CM partner portal (new Rancher field); CORS rendered as a JSON list (efff75d)
• G2P-5719 composite chart: AGRI_COMPOSITE_CORS_ALLOW_ORIGINS rendered as a JSON list (agriComposite.corsOriginsJson) — the setting is a list, so an empty or plain-URL value stopped the API at start (d5e9710)
• G2P-5719 agri-exchange: bundle pins commons-base/services 0.0.0-develop.309 (CM develop.65: partner portal, consent_id) and composite 0.0.0-develop.46; README: CM partner portal (1f61a14)
• G2P-5719 agri-exchange README: CM partner portal in commons-services (ea15439)

agri-stack — develop 0.0.0-develop.46 (2026-10-10)

commit 9cc27d3 · changes since 0.0.0-develop.43

Chart: openg2p-agri-composite 0.0.0-develop.46

Summary

• Major: Retirement of e2e.py in favor of setup_exchange.py, which introduces a composite signing key, PM entries, and department CM policies based on published use cases, along with a receipt-trust check.
• Composite enhancements: Queries now support message.consent_id in exchange mode with applied scope rules; the Agri Exchange bundle activates the CM partner portal for reading composite use cases.
• Console improvements: Detail pages in the composite console now decode their route segments only once, resolving double-encoding issues for API calls.
• Test suite updates: Renamed tests to test_scripts.py to align with new helper structure.

Changes

• G2P-5719 scripts: retire e2e.py — shared helpers in partner_kit, new setup_exchange.py (composite signing key, its PM entries, department CM policies from the published use cases, receipt-trust check), tests renamed to test_scripts.py (9cc27d3)
• G2P-5719 composite: queries may carry message.consent_id (exchange mode; scope rules applied to what the exchange CM grants); chart corsAllowOrigins; Agri Exchange bundle turns on the CM partner portal and lets it read the composite's use cases (0cbdf0a)
• G2P-5719 composite console: detail pages decode their route segment once (useParams returns it encoded; "loan-profile@1" reached the API double-encoded as "loan-profile%401") (310043e)

agri-stack — develop 0.0.0-develop.43 (2026-10-09)

commit 1570399 · changes since 0.0.0-develop.42

Chart: openg2p-agri-composite 0.0.0-develop.43

Changes

• G2P-5719 composite console: login redirect is an absolute URL on the console's public origin (forwarded host/proto) — a relative "/" sent users to IAM's own host (404) (1570399)

agri-stack — develop 0.0.0-develop.42 (2026-10-09)

commit 09a540f · changes since 0.0.0-develop.39

Chart: openg2p-agri-composite 0.0.0-develop.42

Summary

• Major: Backend enhancements for composite review, including signature verification for call logs, batched writer implementation, and improved indexing for use-case names.
• Security improvements: Rejection of untraceable JSONPath at load, and enforcement of full grant for undeclared sources in requested_scopes.
• API stability: Updated iam-core to align with openg2p-fastapi-common, resolving startup crashes related to crypto imports.
• CI/build adjustments: Autoscaling disabled by default for the composite chart, now set to 1 replica, and various audit fixes applied.
• Console updates: Safe login redirect implemented, elimination of login loops, and enhancements to error screens and nullable activity fields.

Changes

• G2P-5719 composite review fixes — backend: call log only for signature-verified calls, batched writer, capped counts, indexed use-case name, maintenance loop (advisory-locked create + daily purge, retried), untraceable JSONPath rejected at load, exchange requested_scopes keep the full grant for undeclared sources, subject-less queries not sent, full pages flagged, single-flight catalogue fetch, tests; console: next 16.4.0 + audit fixes, safe login redirect, no login loop, error screens, nullable activity fields, total_capped; chart: service-name helpers, iam-register hook cleanup and keycloakInit gate, postgres-init wait image, no tag defaults in questions; agri-exchange: portal links from baseDomain (09a540f)
• G2P-5719 composite API image: iam-core from its develop line (CI-pinned SHA) to match openg2p-fastapi-common develop — iam-core 1.4.x imports openg2p_fastapi_common.crypto, which develop moved to utils.crypto (API crashed at start with the console on) (3c3b0d1)
• G2P-5719 composite chart: autoscaling off by default (1 replica) (e0092a4)

agri-stack — develop 0.0.0-develop.39 (2026-10-09)

commit 2840c08 · changes since 0.0.0-develop.36

Chart: openg2p-agri-composite 0.0.0-develop.39

Summary

• Consolidation of scripts: Top-level scripts directory now includes e2e, partner test, partner kit, tests, and composite uninstall scripts, with a root .gitignore for their outputs.
• Major: Composite uninstall script enhancements: now includes console coverage, dropping the database and role, deleting IAM application rows while retaining Secrets, and implementing a late-hook sweep and in-progress Helm guard.
• Documentation updates: README now lists key directories (composite/, deploy/, scripts/) and clarifies the project name as "Agri Stack"; chart .helmignore prevents local overrides.yaml from being included in the package.

Changes

• https://github.com/OpenG2P/agri-stack/actions/runs/37883991411 (2840c08)
• G2P-5719 scripts consolidated in top-level scripts/ (e2e, partner test, partner kit, tests, composite uninstall); root .gitignore for their outputs; README lists composite/, deploy/, scripts/ and says "Agri Stack"; chart .helmignore keeps the local overrides.yaml out of the package (d302be5)
• G2P-5719 composite: uninstall script covers the console — drops its DB and role, deletes its IAM application rows and kept Secrets, late-hook sweep and in-progress Helm guard (as the registry scripts); --keep-db / --keep-iam / --force (99bd006)

agri-stack — develop 0.0.0-develop.36 (2026-10-09)

commit 126cd27 · changes since 0.0.0-develop.30

Chart: openg2p-agri-composite 0.0.0-develop.36

Summary

• Major: Composite chart enhancements: console enabled by default, IAM registration as a Job, and derived hostnames/cookie domains from baseDomain.
• Composite data handling improvements: refined data scopes for use cases, ensuring consent grants required scopes, and registry scope catalogues are now signed.
• UI and API updates: read-only staff console with IAM login, Next.js UI integration, and partner_test.py now limited to public APIs with sample defaults.
• Enhanced error handling: fields from failed sources now return null instead of empty arrays or zeros, clarifying registry responses.
• CI and testing improvements: integration of agri-composite-ui in CI builds, and comprehensive end-to-end tests for registries across namespaces.
• Agri Exchange installation streamlined: helmfile now installs commons and agri-composite with pinned versions, and includes templated overrides for configuration.

Changes

• G2P-5719 composite chart: console on by default (values + Rancher form); Agri Exchange bundle runs its IAM registration as a regular Job and derives console/IAM hostnames and cookie domain from baseDomain (126cd27)
• G2P-5719 composite: use cases fix their data scopes (required/optional per source; consent must grant required ones; exchange receipts carry only these); registry scope catalogues (signed); read-only staff console — admin API with IAM login (composite:view), call log in its own DB, Next.js UI on the MDS shell; chart console.enabled (UI, DB init, Keycloak client, IAM registration); CI builds agri-composite-ui; partner_test uses the use case's scopes; tests (bc7a2bc)
• G2P-5719 composite: fields built from a failed source (denied/unavailable/error) are null, not [] / 0 — empty values now mean the registry answered "no record"; tests (93d48c7)
• G2P-5719 composite: partner_test.py — public APIs only; defaults to sample farmer FR-0007 (FAN 946053125409, openg2p-data ETH-IND-0007); PM admin API at pm-staff-portal.<domain>; CM AWE wait only when CM's AWE approval is on (c5bc3cf)
• G2P-5719 composite e2e: registries in other namespaces (--fr-namespace/--csr-namespace) — set up each registry's own PM/CM (exchange: composite key + agri-composite binding; passthrough: both keys + partner binding), check receipt trust, read each registry's DB in its namespace (272209a)
• G2P-5719 Agri Exchange install bundle (deploy/agri-exchange): helmfile installing commons, commons-services and agri-composite in order into one namespace with pinned chart versions; exchange overrides (Novu/Kafka UI off, slim commons-services with WebSub/AWE off, CM exchange role with the operator's signing key Secret, composite consent mode exchange and registry URLs) templated from a small operator values.yaml; README with helmfile and Rancher steps (4950eca)

agri-stack — develop 0.0.0-develop.30 (2026-10-07)

commit 77a4a19 · changes since 0.0.0-develop.29

Chart: openg2p-agri-composite 0.0.0-develop.30

Changes

• G2P-5719 composite: consent exchange mode (opt-in, default passthrough) — validate the partner consent at the exchange CM with issue_receipts and send each registry its own receipt; chart consent.mode/exchangeCmUrl with Rancher "Agri Stack exchange" group; tests (77a4a19)

agri-stack — develop 0.0.0-develop.29 (2026-10-07)

commit ba31974 · changes since 0.0.0-develop.28

Chart: openg2p-agri-composite 0.0.0-develop.29

Changes

• G2P-5719 composite: data scope catalogue is read with the signed POST /partner/data_scopes (comments) (ba31974)

agri-stack — develop 0.0.0-develop.28 (2026-10-05)

commit 5aa87ad · changes since 0.0.0-develop.27

Chart: openg2p-agri-composite 0.0.0-develop.28

Changes

• G2P-5719 loan-profile: per-source timeout 10 s with no retry (a slow registry search was retried into a timeout), overall 25 s for farmer then crop sources; chart's embedded use case and engine test updated (5aa87ad)

agri-stack — develop 0.0.0-develop.27 (2026-10-05)

commit 297d36a · changes since 0.0.0-develop.26

Chart: openg2p-agri-composite 0.0.0-develop.27

Changes

• G2P-5719 Composite: partner kit grants and loan-profile consent notes use registry data scope IDs (farmer-registry.farmer_identifiers carries the farmer ID the crop sources query by); tests (297d36a)

agri-stack — develop 0.0.0-develop.26 (2026-10-02)

commit 3824d2d · changes since 0.0.0-develop.23

Chart: openg2p-agri-composite 0.0.0-develop.26

Summary

• Documentation overhaul: moved to docs.openg2p.org, removing local docs and READMEs, with chart readme pointing to the new location.
• Testing enhancements: composite end-to-end tests now save full run logs alongside response JSON in git-ignored scripts/out.
• Feature updates: added a TODO for geo dropdowns on registration forms, planning to default sync on and read levels from Master Data at runtime.

Changes

• G2P-5719 Docs moved to docs.openg2p.org (Open Agri Stack); remove docs/, READMEs and chart readme point there (3824d2d)
• G2P-5719 composite e2e: save the full run log next to the response JSON in git-ignored scripts/out/ (19e2868)
• G2P-5719 docs: TODO for geo dropdowns on register forms (default the sync on, later read levels from Master Data at run time) (223a3d2)

agri-stack — develop 0.0.0-develop.23 (2026-10-02)

commit a27df2b · changes since 0.0.0-develop.22

Chart: openg2p-agri-composite 0.0.0-develop.23

Changes

• G2P-5719 CI: build and publish only when composite/ changes, not on docs-only pushes (a27df2b)

agri-stack — develop 0.0.0-develop.22 (2026-10-01)

commit 3b23fae · changes since the start (showing the latest 20 commits)

Chart: openg2p-agri-composite 0.0.0-develop.22

Summary

• Major: Composite service implementation with signed partner API, single consent model, and comprehensive documentation on the composite and consent model.
• Documentation enhancements: detailed design reviews, trust verification configurations, and clarifications on participant roles and certificate issuance as verifiable credentials.
• Register model updates: completion of phase 1 with participant and entity definitions, and decisions on trust status vocabulary and temporary ID management.
• New features: activity registers integrated into the staff UI, crop sown registry added, and alignment of Observations with registries for improved data sharing.
• Documentation restructuring: removal of implementation phasing details, retitling to Agri Stack architecture, and improved organization of design documents.

Changes

• G2P-5719 Composite service (use cases as config, signed partner API, single consent, DAG fan-out to FR/CSR, mapping, audit), Helm chart, CI, partner test kit; docs: composite and consent model as built; service-guide notes (3b23fae)
• G2P-5719 docs: design review — derived values common to both kinds; verification by an activity (site visit as evidence); one form definition for both kinds; participants explained; certificates are VCs (issuance log, Certify credential ID); open item on credentials after a record change (8344158)
• G2P-5719 docs: phase 2 trust = verification only (configurable per field, section, record or activity type; one model for both kinds); terms defined (validation, change, correction, void, approval of changes, verification, dispute); programme approval and certificates left to PBMS (c84890f)
• G2P-5719 docs: final figures on period lock; aggregate search across subjects (allow-listed partners); open item on PM policy for bulk access (b74df56)
• Updated (ad8bad0)
• G2P-5719 docs: register model phase 1 as built (participants, entities first, partner corrections, cluster register, crop-change link, shared sample data); phase 2 scope; temporary IDs withdrawn (d37accb)
• G2P-5719 docs: register model decisions (trust per section, no plan certificates, typed participants, entities first, trust status vocabulary); temporary IDs open (a650dde)
• Fresh design thoughts (5770d19)
• G2P-5719 docs: register vs activity register comparison; link from index, activity register and registry model (aaf5e96)
• G2P-5719 docs: geography and roll-ups, DCI crop-season and aggregate records, season windows, Observations alignment (831790d)
• G2P-5719 docs: activity registers listed with the other registers in the staff UI (281f676)
• G2P-5719 docs: Observations alignment built; registries share data not code; farmer season summary (fa01fba)
• G2P-5719 docs: compare with the Observations design; crop sown as its own registry or inside the Farmer Registry; keep "activity" (0419f30)
• G2P-5719 docs: Crop Sown code lists come from Master Data; update open items (d9258f5)
• G2P-5719 docs: note extension migration race in open items (575a301)
• G2P-5719 docs: activity register as built; add Crop Sown Registry page; update open items (c968a77)
• docs: remove implementation phasing and pilot order; keep to architecture and design (14b07b4)
• docs: retitle as Agri Stack architecture; move docs out of data-sharing/ (029f6eb)
• Updated. (45eda2d)
• Updated (b0f22cd)

What's shown here. This catalogue lists every stable release, plus the latest 20 develop builds and the latest 10 release candidates per release line -- candidates are KEPT after their release ships, as the audit trail of the release run. Older develop builds and release candidates are pruned as they are superseded. Those versions still exist in the container and Helm registries — they are simply not listed here. This page is generated automatically from commit history; do not edit it by hand.