Skip to content

v2.0.1 - V2 Readiness Baseline & QA

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Jun 19:09
· 17 commits to main since this release
v2.0.1
d5a6bdc

Rosmarium v2.0.1: V2 Readiness Baseline & QA

This patch release serves as the final stability benchmark before officially kicking off the V2 Phase 1 (Structured Rich Text Engine) development. It resolves a large suite of edge-case bugs, elevates test coverage, implements robust structured logging, and strict-types all core API schemas.

🚀 Key Improvements

🛡️ Core Infrastructure & Server

  • Strict Server Type Safety: Eradicated any types across the TypeScript API boundaries (specifically targeting OAuth/SSO configurations) and successfully achieved 0 warnings/errors during pnpm typecheck.
  • Protected Endpoints: Secured all internal generation API endpoints (/generate, /rewrite, /seo-optimize, /alt-text) behind the requireAuth() middleware.
  • Log Monitoring & Runtime Health: Enforced 100% structured JSON logging across the orchestrator. Switched Drizzle ORM to pipe SQL traces directly to Pino, and explicitly disabled pino-pretty in production.
  • Data Redaction: Implemented custom serializers in the server and a redact_sensitive_data processor in the AI worker (structlog) to filter out credentials, JWTs, API keys, query prompts, and massive vector payload dumps.

🧠 AI Worker Quality Audit

  • BullMQ Consumer: Fixed critical key schema typos preventing the consumer from cleanly fetching jobs from the wait queue (bull:{queue}:waiting).
  • RBAC Security Patch: Rectified a python-side vulnerability in rag/pipeline.py where passing an empty tenant authorization array [] would maliciously cast to None, effectively bypassing the SQL-level pgvector filter entirely.
  • Vector Index Integrity: Added strict ValueError assertions guaranteeing ingested embeddings strictly map to the settings.embedding_dimensions.

🧪 API Functional & UI Fixes

  • Functional API Edge Cases: Diagnosed and remediated 16 edge-cases across 76 exhaustive functional workflows (fixing 400s erroneously returned instead of 401/403s on unauthorized mutations, correcting graph traversal logic, repairing RAG streaming constraints).
  • Admin UI Console Polish: Mapped React application routes correctly (e.g. sso/providers) and intercepted expected initial-load unauthenticated pings (/api/auth/me) from polluting the browser console. The Playwright trace now registers zero initial-load errors or warnings.

📊 Coverage Baseline Achieved

  • TypeScript Server Tests: 277 Passing tests (~65.3% Core Code Coverage)
  • Python Worker Tests: 133 Passing tests (~77% Core Code Coverage)
  • Total Suite: 410 Unit/Integration Tests. The system is extremely thoroughly verified against regression heading into V2.
Assets 5
Loading