Skip to content

v0.2.0 - Enterprise Git Forge & Autonomous Agent Runtime

Choose a tag to compare

View all tags
@RavaniRoshan RavaniRoshan released this 15 Oct 05:30
· 44 commits to main since this release
v0.2.0
849692a

exist.io v0.2.0 — Enterprise Git Forge & Autonomous Agent Runtime

v0.2.0 is the inaugural enterprise release of exist.io, transforming the standalone pure-Go forge into an enterprise-ready, self-hosted Git platform with dual transports, Git LFS, cryptographic signature verification, SSO/SCIM federation, and official Infrastructure as Code (IaC).

What's New in v0.2.0

1. Embedded Pure-Go SSH Server (:2222)

  • Dedicated, zero-cgo SSH daemon embedded into the single binary on port 2222 (git clone ssh://git@<host>:2222/<owner>/<repo>.git).
  • Eliminates dependencies on host OpenSSH daemons or system user accounts.
  • Authenticates Git clients using enrolled user public keys and organization-wide SSH Certificate Authorities.
  • Enforces pre-receive secret scanning push protection hooks before accepting commits.

2. Git Large File Storage (LFS) v1 Engine & CAS

  • Full RFC-compliant Git LFS v1 Batch HTTP protocol (/info/lfs/objects/batch).
  • Streaming chunked upload and download with SHA-256 Content-Addressable Storage (CAS) on disk.
  • Binary file locking protocol (/info/lfs/locks) preventing unmergeable asset collisions.

3. Cryptographic Commit Signature Verification

  • Real-time parsing of OpenSSH SIGSPEC binary signatures and GPG (OpenPGP RFC 4880) ASCII armor.
  • Interactive verification audit popover in the Web UI displaying signature format, committer identity, and public key fingerprint matching.
  • Branch ruleset policy gate requiring signed commits prior to merge.

4. Enterprise Identity Federation & SCIM 2.0 User Sync

  • Automated employee provisioning and offboarding revocation via RFC 7643 / RFC 7644 SCIM 2.0 (/scim/v2/Users).
  • Single Sign-On (SSO) support for OpenID Connect (OIDC) and SAML 2.0 identity providers (Microsoft Entra ID, Okta, Keycloak).
  • Domain enforcement blocking local password authentication for corporate email domains.

5. Official Infrastructure as Code (Terraform & Helm)

  • Dedicated Terraform / OpenTofu Provider (deploy/terraform-provider-exist) managing namespaces, repositories, branch rulesets, CIDR allowlists, and SSH CAs.
  • Production Kubernetes Helm Chart (deploy/helm/exist-enterprise) with dual-port Service (HTTP 8080, SSH 2222), PersistentVolumeClaim, Prometheus Operator ServiceMonitor, and non-root security contexts.

6. Craft-First Space UI Dashboard

  • Strict separation between Production Mode (live backend APIs with authentic empty states) and Sandbox Demo Mode (isolated fixtures in mockData.ts).
  • Operator telemetry dashboard answering key questions: system health, Pure-Go SSH active streams, Git LFS store, SQLite WAL sync, and MCP tools status.
  • Dispatched webhook delivery audit logs with HMAC-SHA256 signature payloads and test ping triggers.

7. Model Context Protocol (MCP) First-Class Integration

  • First-class MCP server exposing 34 tools over JSON-RPC 2.0 at POST /mcp for Claude Code, Cursor, and Cline.
  • Capability-restricted read-only sandbox at POST /mcp/readonly.

Verification & Quality Assurance

  • Backend Test Suite: 100% pass across all 20 Go packages (go test -count=1 ./...).
  • Web Frontend Build: Passing Vite + TypeScript typecheck (npm --prefix web run build).
  • Documentation Site: Passing Blume link validation and static build (blume validate + blume build, 18 pages).
Assets 2
Loading