Commit Graph

32 Commits

Author SHA1 Message Date
Émile Ré
2040931405 Move Firecrawl API key from top-level config into Agents.Tools
Firecrawl is a tool used by agents (tracker mapping, third-party
assessor), so its configuration belongs under AgentsConfig rather than
as a standalone Config field. Adds AgentToolsConfig to hold agent tool
credentials and updates all config propagation consumers.

Signed-off-by: Émile Ré <emile@probo.com>
2026-05-19 12:32:41 +04:00
Émile Ré
76d42ef2db Hardcode Firecrawl API endpoint, drop FIRECRAWL_ENDPOINT config
Firecrawl has a single public API at https://api.firecrawl.dev/v2.
The endpoint was configurable but never varied across environments,
so hardcode it as a package-level const and remove the Endpoint
field from FirecrawlConfig and all downstream wiring (bootstrap,
Helm chart, probod, vetting, cookiebanner).

Signed-off-by: Émile Ré <emile@probo.com>
2026-05-19 10:28:05 +04:00
Émile Ré
a67ac462d7 Remove SearXNG search backend, use Firecrawl exclusively
SearXNG was a fallback search backend that added complexity without
being used in practice. All search-dependent features (web search,
government DB checks, vetting orchestrator, tracker mapping) now use
Firecrawl exclusively. Removes the SEARCH_ENDPOINT config plumbing
from probodconfig, bootstrap, Helm charts, and all callers.

Signed-off-by: Émile Ré <emile@probo.com>
2026-05-19 10:01:01 +04:00
Émile Ré
e87b426801 Propagate firecrawl and tracker-mapping config to bootstrap and Helm
Group firecrawl-endpoint and firecrawl-api-key under a nested firecrawl
config key. Add env var mappings (FIRECRAWL_ENDPOINT, FIRECRAWL_API_KEY,
SEARCH_ENDPOINT, AGENT_TRACKER_MAPPING_*) to the bootstrap builder with
test coverage. Wire the new values through the Helm chart (values,
deployment, secret, production example).

Signed-off-by: Émile Ré <emile@probo.com>
2026-05-18 19:05:14 +04:00
Aurélien Sibiril
0d6484a0ef Drop Helm wiring for the 9 new access-review connectors → Drop e2e TODO about access-review connector coverage gap
- Drop Helm wiring for the 9 new access-review connectors
- Drop e2e TODO about access-review connector coverage gap

Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>
2026-05-17 17:22:51 +02:00
Aurélien Sibiril
7d0dec82f6 Guard Helm connector env vars on clientId / clientSecret → Address review feedback on access-review drivers
- Guard Helm connector env vars on clientId / clientSecret
- Decode Vercel pagination cursor as *int64
- Drop Monday probe URL — no valid GET endpoint
- Address review feedback on access-review drivers

Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>
2026-05-17 17:22:51 +02:00
Aurélien Sibiril
c2db47e698 Require CLIENT_SECRET for new access-review connectors → Drop Snyk, Ramp, Lever, Deel access-review providers
- Require CLIENT_SECRET for new access-review connectors
- Use Heroku account UUID as ExternalID
- Bump GitHub orgs picker to per_page=100
- Drop Snyk, Ramp, Lever, Deel access-review providers

Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>
2026-05-17 17:22:50 +02:00
Aurélien Sibiril
7504099507 Strip email local-part from cassette guard failure → Wire 13 access-review connectors in Helm chart
- Strip email local-part from cassette guard failure
- Drop dead src/components/connectors vite include
- Cover all 13 access-review providers in builder test
- Wire 13 access-review connectors in Helm chart

Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>
2026-05-17 17:22:48 +02:00
Aurélien Sibiril
8f6ecd9f81 Wire post-OAuth pickers and 2-auto callback handling → Track e2e gap for new access-review connectors
- Wire post-OAuth pickers and 2-auto callback handling
- Add 13 vendor logo components for new connectors
- Wire access-review connectors into bootstrap config
- Track e2e gap for new access-review connectors

Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>
2026-05-17 17:22:48 +02:00
Sacha Al Himdani
d88ae3288b Add pg pool tuning options from kit v0.10.0
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-05-12 10:04:13 +02:00
Bryan Frimin
990dfa8438 Update kit with new pg config
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-04-22 22:30:23 +02:00
Émile Ré
c70ca719dc Branding config will be used for compliance page and other products in the future
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-22 15:55:02 +04:00
Émile Ré
4313930ae9 Add global branding config field to control cookie banner default
Introduces a BRANDING boolean config (default true) propagated through
the standard config pipeline. Cookie banners now initialize their
show_branding column from this config instead of hardcoding true.

Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-22 15:41:11 +04:00
Bryan Frimin
53edc5ba26 Fix compose config
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-04-15 16:42:56 +02:00
Bryan Frimin
7c77c217c7 Fix Anthropic requests failing due to missing MaxTokens in agent configuration
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-03-13 18:24:02 +01:00
Sacha Al Himdani
afd92fd938 Migrate from MinIO to SeaweedFS
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-02-19 11:47:04 +01:00
Sacha Al Himdani
d6abaec786 Fix azure storage
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2025-12-17 16:55:30 +01:00
Bryan Frimin
0b2420b6b8 Fix support PostgreSQL CA bundle in Helm charts with file path option
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2025-11-14 11:12:15 +01:00
Thomas Stocker
eb461d5c29 feat: update charts README.md and values to remove sensitive values
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-13 21:24:13 +01:00
Thomas Stocker
6ae6c6875b fix: ingress issue that didn't discover the right service
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:38 +01:00
Thomas Stocker
566a8e6c6d feat: always pull latest image
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:38 +01:00
Thomas Stocker
798c5a6baf fix: use secret instead of simple env vars
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:37 +01:00
Thomas Stocker
f28095d8a0 fix: ingress port issue and cubic review
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:37 +01:00
Thomas Stocker
eda00d0d65 fix: replace hostname with baseUrl param and add SAML config
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:37 +01:00
Thomas Stocker
3f3e06d85b fix: use env vars and secret on container, config file is now generated on container launch
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:37 +01:00
Thomas Stocker
c1f5b01541 chore: update NOTES.txt with current template
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:36 +01:00
Thomas Stocker
ec67ac3991 fix: remove testing instructions
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:36 +01:00
Thomas Stocker
47c4efb8c8 fix: cubic issues
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:36 +01:00
Thomas Stocker
fa19f3a17c chore: remove echo sensitive data
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:35 +01:00
Thomas Stocker
bb2d410a6d chore: remove test values in smtp config
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:35 +01:00
Thomas Stocker
d9ab8e8af7 feat: update hostnam param with base-url
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:35 +01:00
Thomas Stocker
4a96bd796a feat: add helm charts
Signed-off-by: Thomas Stocker <thomas.stocker.pro@gmail.com>
2025-11-12 12:09:35 +01:00