Build OpsPilot’s secure incident-to-FIX-PR platform

[pranav8764]

What changed

• Added GitHub App repository ingestion and draft FIX PR creation on isolated opspilot/fix-* branches.
• Added Vercel, Railway, and manual log collection with normalization, redaction, fingerprints, and durable ingestion workflows.
• Added tenant-scoped RAG, incident diagnosis, evidence retrieval, fix proposals, and usage/retention controls.
• Added approval records bound to the exact diff, base commit, file hashes, expiry, and intended action.
• Added a hardened sandbox runner for baseline/patched verification with no network during tests, non-root execution, read-only filesystem, dropped capabilities, and bounded resources.
• Added authenticated Next.js operations UI, public docs/privacy/terms pages, and Dockerized frontend deployment.
• Added PostgreSQL/pgvector migrations, observability, rate limits, CORS controls, health checks, JSON logs, and CI.
• Converted the frontend from a Git submodule-style entry into a normal monorepo directory.

Security guarantees

• Models do not receive generic shell, deployment, merge, database-write, or secret-reading access.
• External GitHub writes require an owner/admin approval and only create a new branch plus draft PR.
• Default branches are never modified.
• Logs are redacted before storage or model use.
• Unsafe paths, secrets, binaries, generated files, oversized diffs, and stale repository state are blocked.

Validation

• Go tests and go vet passed.
• AI worker: 30 tests passed.
• Sandbox runner: 6 tests passed.
• Frontend: tests, lint, production build, and npm audit passed.
• PostgreSQL/pgvector migrations applied twice successfully.
• Protobuf generation reproducibility verified.
• All eight application images built.
• Full 11-service Compose stack became healthy.
• Frontend, gateway, AI worker, and sandbox smoke checks passed.
• Final release artifact passed Gitleaks with no leaks.

Notes

Real GitHub, Clerk, Vercel/Railway, and AI-provider canary testing still requires project credentials and a disposable test repository. This release intentionally creates draft PRs only; merge, deploy, rollback, and arbitrary infrastructure changes remain out of scope.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.