GustavoNogueira/A-Team-Security-Infra-Agent-Engineer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: Terraform Agent, expanded OCI Explorer (40+ resources), and MCP improvements

Browse Source 
Add Terraform Agent tab with AI-powered IaC generation (plan/apply/destroy lifecycle,
workspace management, compartment selection, Terraform CLI v1.7.5 in container).
Expand OCI Explorer from 6 to 40+ resource types across 8 categories with tree-view
navigation and resizable panels. Add compartment filtering and error tracking to MCP
CIS server, increase tool timeout to 30min with auto-retry. Add chat sidebar, chat
audit logs, and tune memory compaction (6K threshold, 20 recent messages). Trim model
catalog from 69 to 15 curated models. Update README for v2.1.
This commit is contained in:
nogueiraguh
2026-03-07 12:39:20 -03:00
parent 3e13cf4677
commit c7c4ca1f1b
5 changed files with 2032 additions and 197 deletions
Download Patch File Download Diff File Expand all files Collapse all files

175
README.md
View File

@@ -9,7 +9,7 @@
</p>
<p align="center">
<img src="https://img.shields.io/badge/version-2.0-C74634?style=flat-square" alt="Version">
<img src="https://img.shields.io/badge/version-2.1-C74634?style=flat-square" alt="Version">
<img src="https://img.shields.io/badge/python-3.12-3776AB?style=flat-square" alt="Python">
<img src="https://img.shields.io/badge/FastAPI-0.115-009688?style=flat-square" alt="FastAPI">
<img src="https://img.shields.io/badge/OCI-GenAI-C74634?style=flat-square" alt="OCI">
@@ -33,11 +33,12 @@ The platform combines security compliance scanning, AI-powered chat with **RAG (
- **OCI Generative AI** integration via official SDK (`oci.generative_ai_inference`)
- **RAG (Retrieval-Augmented Generation)**: automatically queries ADB vector store for relevant context before generating responses
- **MCP Tool Use (Function Calling)**: GenAI models can call tools from registered MCP servers during chat — supports both Cohere and Generic (OpenAI-style) function calling formats with automatic tool execution loop (max 5 iterations)
- **Chat Memory Compaction**: automatic summarization of older messages when conversation exceeds ~8000 tokens — keeps 6 recent messages intact and generates an LLM-based summary of older context, similar to Claude Code's context compression
- **Chat Memory Compaction**: automatic summarization of older messages when conversation exceeds ~6000 tokens — keeps 20 recent messages (10 interactions) intact and generates an LLM-based summary of older context, similar to Claude Code's context compression
- **Chat Sidebar**: collapsible right-side panel with model parameters (temperature, max_tokens, top_p, top_k, penalties) for quick adjustment during conversation
- **Multimodal Chat**: upload images (PNG/JPG/GIF/WebP), PDFs, and text files directly in the chat for AI analysis — supports up to 5 files per message via OCI GenAI `ImageContent` and `DocumentContent`
- **Async Background Processing**: chat requests return immediately, GenAI + MCP tools process in background via dedicated thread pool (16 threads), frontend polls for results — eliminates 504 timeouts on long-running scans
- **Thinking Indicator**: button disables and shows spinner + "Pensando..." while waiting for GenAI response, with message timestamps
- 69 chat models + 11 embedding models across 6 providers: **Cohere**, **Meta**, **Google**, **OpenAI** (GPT-5.3/5.2/5.1/5/4.1/4o, Codex, Image, Audio, o1/o3/o4-mini, GPT-oss), **xAI** (Grok 4.1/4/3), **ProtectAI**
- 15 chat models + 3 embedding models across 5 providers: **Meta** (Llama 4), **Google** (Gemini 2.5), **OpenAI** (GPT-5.2/5.1/5 Mini/4.1/4o, o3/o4-mini), **xAI** (Grok 4/3)
- OCID-based model resolution: catalog maps model IDs to OCI resource IDs per region for reliable API calls
- 16 OCI regions supported with auto-generated endpoints
- Full parameter control: temperature, max_tokens, top_p, top_k, frequency/presence penalty
@@ -45,9 +46,32 @@ The platform combines security compliance scanning, AI-powered chat with **RAG (
- Conversation history with session management
- On-Demand and Dedicated serving modes
### 🏗️ Terraform Agent (IaC)
- **AI-powered Terraform code generation** for OCI infrastructure provisioning
- Dedicated chat interface with OCI Terraform provider context
- **Workspace management**: create, plan, apply, destroy Terraform workspaces
- **Compartment-aware**: browse and select target compartment for provisioning, with existing OCI resources injected as context
- **Plan/Apply/Destroy lifecycle**: full Terraform workflow with real-time output tracking
- **File management**: view generated `.tf` files, copy, download individually or as bundle
- **Confirmation modal**: type "DESTROY" to confirm resource destruction
- **Resizable split view**: chat on top, files/plan/resources/output tabs on bottom with drag-to-resize
- Terraform CLI installed in container (v1.7.5)
- Dedicated system prompt optimized for OCI Terraform provider best practices
### 🔍 OCI Account Explorer
- Browse tenancy resources directly from the UI
- Explore: Compartments, Regions, VCNs, Compute Instances, Autonomous Databases, Object Storage Buckets
- **Tree-view navigation** with resizable side panel and drag handle
- **40+ resource types** across 8 categories:
- **IAM**: Users, Groups, Policies, Dynamic Groups
- **Compute**: Instances, Instance Pools, Container Instances
- **Networking**: VCNs, Subnets, Security Lists, NSGs, Route Tables, NAT/Internet/Service Gateways, Public IPs, Network Firewalls, Firewall Policies
- **Storage**: Block Volumes, Boot Volumes, Object Storage Buckets, File Systems, Mount Targets
- **Database**: Autonomous Databases, DB Systems, MySQL DB Systems
- **Kubernetes**: OKE Clusters
- **Observability**: Alarms, Log Groups, Events Rules, Notification Topics
- **Security**: Vaults, DNS Zones, API Gateways
- **Multi-region support**: select and filter by multiple OCI regions with checkbox selection
- **Compartment tree**: hierarchical compartment browser with full OCID visibility
- **Security list detail**: view ingress/egress rules directly in the explorer
- Select which OCI connection to explore
- Real-time API calls via OCI Python SDK
@@ -78,7 +102,9 @@ The platform combines security compliance scanning, AI-powered chat with **RAG (
- **Per-section data collection**: each scan tool collects only the OCI data needed for that section, avoiding unnecessary API calls
- **Region-specific scanning**: all scan tools accept optional `regions` parameter to target specific OCI regions (e.g., `["us-ashburn-1"]`) instead of scanning the entire tenancy
- **Session caching**: collected data is cached per config+regions scope (2-hour TTL), so subsequent scans on different sections reuse shared prerequisites (compartments, identity domains)
- **Parallelized data collection**: base collectors and regional collectors run in parallel thread pools (up to 8 workers), with 5-minute timeout per tool call
- **Compartment filtering**: scan results can be filtered by specific compartment, showing only relevant findings
- **Collection error tracking**: errors during data collection are captured per section and reported to the caller
- **Parallelized data collection**: base collectors and regional collectors run in parallel thread pools (up to 8 workers), with 30-minute timeout per tool call and 1 automatic retry on failure
- Based on Oracle's official `cis_reports.py` (6660 lines, 48 CIS + 11 OBP checks)
### 🔌 MCP Server Registry + Tool Discovery
@@ -110,8 +136,9 @@ The platform combines security compliance scanning, AI-powered chat with **RAG (
- Browse, inspect and delete individual embeddings from the ADB vector store
- 11 embedding models supported including Cohere Embed v4.0 and OpenAI Text Embedding 3
### 📜 Configuration Logs
### 📜 Configuration & Chat Logs
- **Persistent activity log** per configuration tab (OCI, GenAI, ADB, MCP)
- **Chat audit logs**: all chat interactions (user messages, AI responses, tool calls, errors) logged with session/message ID, severity, and source
- Logs all test, save, upload, report, and ingest operations with severity (success/error/info)
- **Inline log panel** at the bottom of each config tab with severity filter
- Auto-cleanup of logs older than 30 days
@@ -147,6 +174,9 @@ The platform combines security compliance scanning, AI-powered chat with **RAG (
│ │ ├─────────────┤ (discover │ │
│ │ │ │ +execute) │ │
│ │ ├─────────────┤ │ │
│ │ │ Terraform │──▶ Plan / │ │
│ │ │ │ Apply │ │
│ │ ├─────────────┤ │ │
│ │ │ oracledb │──▶ ADB │ │
│ │ ├─────────────┤ │ │
│ │ │ RAG Pipeline │──▶ Embed + │ │
@@ -316,13 +346,13 @@ Allow group <group-name> to read buckets in compartment <compartment-name>
```
oci-cis-agent/
├── backend/
│ ├── app.py # FastAPI application (~2600 lines)
│ ├── app.py # FastAPI application (~3800 lines)
│ ├── cis_reports.py # Oracle CIS Benchmark checker (6660 lines, report engine)
│ ├── mcp_cis_server.py # MCP server with 12 granular CIS tools
│ ├── Dockerfile # Python 3.12 + OCI CLI
│ ├── mcp_cis_server.py # MCP server with 12 granular CIS tools (~700 lines)
│ ├── Dockerfile # Python 3.12 + OCI CLI + Terraform CLI
│ └── requirements.txt # Dependencies
├── frontend/
│ └── index.html # SPA with Oracle Cloud theme (~900 lines)
│ └── index.html # SPA with Oracle Cloud theme (~1780 lines)
├── nginx/
│ └── default.conf # Reverse proxy config
├── docker-compose.yml # Orchestration
@@ -360,11 +390,44 @@ oci-cis-agent/
| Method | Endpoint | Description |
|--------|----------|-------------|
| GET | `/api/oci/explore/{id}/compartments` | List compartments |
| GET | `/api/oci/explore/{id}/compartment-tree` | Hierarchical compartment tree |
| GET | `/api/oci/explore/{id}/regions` | List subscribed regions |
| GET | `/api/oci/explore/{id}/vcns` | List VCNs |
| GET | `/api/oci/explore/{id}/instances` | List compute instances |
| GET | `/api/oci/explore/{id}/subnets` | List Subnets |
| GET | `/api/oci/explore/{id}/security_lists` | List Security Lists (with rules) |
| GET | `/api/oci/explore/{id}/nsgs` | List Network Security Groups |
| GET | `/api/oci/explore/{id}/route_tables` | List Route Tables (with rules) |
| GET | `/api/oci/explore/{id}/nat_gateways` | List NAT Gateways |
| GET | `/api/oci/explore/{id}/internet_gateways` | List Internet Gateways |
| GET | `/api/oci/explore/{id}/service_gateways` | List Service Gateways |
| GET | `/api/oci/explore/{id}/network_firewalls` | List Network Firewalls |
| GET | `/api/oci/explore/{id}/network_firewall_policies` | List Firewall Policies |
| GET | `/api/oci/explore/{id}/public_ips` | List Public IPs |
| GET | `/api/oci/explore/{id}/instances` | List Compute Instances |
| GET | `/api/oci/explore/{id}/instance_pools` | List Instance Pools |
| GET | `/api/oci/explore/{id}/container_instances` | List Container Instances |
| GET | `/api/oci/explore/{id}/databases` | List Autonomous Databases |
| GET | `/api/oci/explore/{id}/buckets` | List Object Storage buckets |
| GET | `/api/oci/explore/{id}/db_systems` | List DB Systems |
| GET | `/api/oci/explore/{id}/mysql_db_systems` | List MySQL DB Systems |
| GET | `/api/oci/explore/{id}/buckets` | List Object Storage Buckets |
| GET | `/api/oci/explore/{id}/block_volumes` | List Block Volumes |
| GET | `/api/oci/explore/{id}/boot_volumes` | List Boot Volumes |
| GET | `/api/oci/explore/{id}/file_systems` | List File Systems |
| GET | `/api/oci/explore/{id}/mount_targets` | List Mount Targets |
| GET | `/api/oci/explore/{id}/oke_clusters` | List OKE Clusters |
| GET | `/api/oci/explore/{id}/load_balancers` | List Load Balancers |
| GET | `/api/oci/explore/{id}/functions` | List Functions |
| GET | `/api/oci/explore/{id}/iam_users` | List IAM Users |
| GET | `/api/oci/explore/{id}/iam_groups` | List IAM Groups |
| GET | `/api/oci/explore/{id}/iam_policies` | List IAM Policies |
| GET | `/api/oci/explore/{id}/iam_dynamic_groups` | List Dynamic Groups |
| GET | `/api/oci/explore/{id}/vaults` | List Vaults |
| GET | `/api/oci/explore/{id}/dns_zones` | List DNS Zones |
| GET | `/api/oci/explore/{id}/api_gateways` | List API Gateways |
| GET | `/api/oci/explore/{id}/alarms` | List Alarms |
| GET | `/api/oci/explore/{id}/log_groups` | List Log Groups |
| GET | `/api/oci/explore/{id}/notification_topics` | List Notification Topics |
| GET | `/api/oci/explore/{id}/events_rules` | List Events Rules |
### Generative AI
@@ -417,6 +480,24 @@ oci-cis-agent/
| GET | `/api/embeddings/{vid}/list` | List embeddings in ADB (paginated, accepts `table_name` query param) |
| DELETE | `/api/embeddings/{vid}/{doc_id}` | Delete individual embedding (accepts `table_name` query param) |
### Terraform Agent
| Method | Endpoint | Description |
|--------|----------|-------------|
| POST | `/api/terraform/chat` | Send message to Terraform Agent |
| GET | `/api/terraform/resources` | List OCI resources in compartment (for context) |
| POST | `/api/terraform/workspaces` | Create Terraform workspace |
| GET | `/api/terraform/workspaces` | List user's workspaces |
| GET | `/api/terraform/workspaces/{wid}` | Get workspace details |
| PUT | `/api/terraform/workspaces/{wid}/code` | Update workspace Terraform code |
| POST | `/api/terraform/workspaces/{wid}/plan` | Run `terraform plan` |
| POST | `/api/terraform/workspaces/{wid}/apply` | Run `terraform apply` |
| POST | `/api/terraform/workspaces/{wid}/destroy` | Run `terraform destroy` |
| GET | `/api/terraform/workspaces/{wid}/status` | Poll workspace execution status |
| GET | `/api/terraform/workspaces/{wid}/download` | Download workspace `.tf` files |
| POST | `/api/terraform/workspaces/{wid}/cancel` | Cancel running Terraform operation |
| DELETE | `/api/terraform/workspaces/{wid}` | Delete workspace |
### Chat & Reports
| Method | Endpoint | Description |
@@ -458,7 +539,7 @@ oci-cis-agent/
---
## Supported GenAI Models (69 Chat + 11 Embedding)
## Supported GenAI Models (15 Chat + 3 Embedding)
All models include OCID mapping for `us-ashburn-1`. For other regions, use the "Personalizado (usar OCID)" option.
@@ -466,75 +547,21 @@ All models include OCID mapping for `us-ashburn-1`. For other regions, use the "
| Provider | Model | Model ID | API Format |
|----------|-------|----------|------------|
| Cohere | Command A Reasoning | `cohere.command-a-reasoning` | COHERE |
| Cohere | Command A Vision | `cohere.command-a-vision` | COHERE |
| Cohere | Command A | `cohere.command-a-03-2025` | COHERE |
| Cohere | Command R+ (08-2024) | `cohere.command-r-plus-08-2024` | COHERE |
| Cohere | Command R (08-2024) | `cohere.command-r-08-2024` | COHERE |
| Meta | Llama 4 Maverick | `meta.llama-4-maverick-17b-128e-instruct-fp8` | GENERIC |
| Meta | Llama 4 Scout | `meta.llama-4-scout-17b-16e-instruct` | GENERIC |
| Meta | Llama Guard 4 (12B) | `meta.llama-guard-4-12b` | GENERIC |
| Google | Gemini 2.5 Pro | `google.gemini-2.5-pro` | GENERIC |
| Google | Gemini 2.5 Flash | `google.gemini-2.5-flash` | GENERIC |
| Google | Gemini 2.5 Flash-Lite | `google.gemini-2.5-flash-lite` | GENERIC |
| OpenAI | GPT-5.3 Codex | `openai.gpt-5.3-codex` | GENERIC |
| OpenAI | GPT-5.2 Codex | `openai.gpt-5.2-codex` | GENERIC |
| OpenAI | GPT-5.2 Pro | `openai.gpt-5.2-pro` | GENERIC |
| OpenAI | GPT-5.2 Pro (2025-12-11) | `openai.gpt-5.2-pro-2025-12-11` | GENERIC |
| OpenAI | GPT-5.2 | `openai.gpt-5.2` | GENERIC |
| OpenAI | GPT-5.2 (2025-12-11) | `openai.gpt-5.2-2025-12-11` | GENERIC |
| OpenAI | GPT-5.2 Chat Latest | `openai.gpt-5.2-chat-latest` | GENERIC |
| OpenAI | GPT-5.1 Codex Max | `openai.gpt-5.1-codex-max` | GENERIC |
| OpenAI | GPT-5.1 Codex | `openai.gpt-5.1-codex` | GENERIC |
| OpenAI | GPT-5.1 Codex Mini | `openai.gpt-5.1-codex-mini` | GENERIC |
| OpenAI | GPT-5.1 | `openai.gpt-5.1` | GENERIC |
| OpenAI | GPT-5.1 (2025-11-13) | `openai.gpt-5.1-2025-11-13` | GENERIC |
| OpenAI | GPT-5.1 Chat Latest | `openai.gpt-5.1-chat-latest` | GENERIC |
| OpenAI | GPT-5 Codex | `openai.gpt-5-codex` | GENERIC |
| OpenAI | GPT-5 | `openai.gpt-5` | GENERIC |
| OpenAI | GPT-5 (2025-08-07) | `openai.gpt-5-2025-08-07` | GENERIC |
| OpenAI | GPT-5 Mini | `openai.gpt-5-mini` | GENERIC |
| OpenAI | GPT-5 Mini (2025-08-07) | `openai.gpt-5-mini-2025-08-07` | GENERIC |
| OpenAI | GPT-5 Nano | `openai.gpt-5-nano` | GENERIC |
| OpenAI | GPT-5 Nano (2025-08-07) | `openai.gpt-5-nano-2025-08-07` | GENERIC |
| OpenAI | GPT-4.1 | `openai.gpt-4.1` | GENERIC |
| OpenAI | GPT-4.1 (2025-04-14) | `openai.gpt-4.1-2025-04-14` | GENERIC |
| OpenAI | **GPT-4.1 (Default)** | `openai.gpt-4.1` | GENERIC |
| OpenAI | GPT-4.1 Mini | `openai.gpt-4.1-mini` | GENERIC |
| OpenAI | GPT-4.1 Mini (2025-04-14) | `openai.gpt-4.1-mini-2025-04-14` | GENERIC |
| OpenAI | GPT-4.1 Nano | `openai.gpt-4.1-nano` | GENERIC |
| OpenAI | GPT-4.1 Nano (2025-04-14) | `openai.gpt-4.1-nano-2025-04-14` | GENERIC |
| OpenAI | GPT-4o | `openai.gpt-4o` | GENERIC |
| OpenAI | GPT-4o (2024-08-06) | `openai.gpt-4o-2024-08-06` | GENERIC |
| OpenAI | GPT-4o (2024-11-20) | `openai.gpt-4o-2024-11-20` | GENERIC |
| OpenAI | GPT-4o Mini | `openai.gpt-4o-mini` | GENERIC |
| OpenAI | GPT-4o Mini Search Preview | `openai.gpt-4o-mini-search-preview` | GENERIC |
| OpenAI | GPT-4o Mini Search (2025-03-11) | `openai.gpt-4o-mini-search-preview-2025-03-11` | GENERIC |
| OpenAI | GPT-4o Search Preview | `openai.gpt-4o-search-preview` | GENERIC |
| OpenAI | GPT-4o Search (2025-03-11) | `openai.gpt-4o-search-preview-2025-03-11` | GENERIC |
| OpenAI | GPT Image 1.5 | `openai.gpt-image-1.5` | GENERIC |
| OpenAI | GPT Image 1 | `openai.gpt-image-1` | GENERIC |
| OpenAI | GPT Audio | `openai.gpt-audio` | GENERIC |
| OpenAI | o4-mini | `openai.o4-mini` | GENERIC |
| OpenAI | o4-mini (2025-04-16) | `openai.o4-mini-2025-04-16` | GENERIC |
| OpenAI | o3 | `openai.o3` | GENERIC |
| OpenAI | o3 (2025-04-16) | `openai.o3-2025-04-16` | GENERIC |
| OpenAI | o3-mini | `openai.o3-mini` | GENERIC |
| OpenAI | o3-mini (2025-01-31) | `openai.o3-mini-2025-01-31` | GENERIC |
| OpenAI | o1 | `openai.o1` | GENERIC |
| OpenAI | o1 (2024-12-17) | `openai.o1-2024-12-17` | GENERIC |
| OpenAI | GPT-oss (120B) | `openai.gpt-oss-120b` | GENERIC |
| OpenAI | GPT-oss (20B) | `openai.gpt-oss-20b` | GENERIC |
| xAI | Grok 4 | `xai.grok-4` | GENERIC |
| xAI | Grok 4.1 Fast Reasoning | `xai.grok-4-1-fast-reasoning` | GENERIC |
| xAI | Grok 4.1 Fast Non-Reasoning | `xai.grok-4-1-fast-non-reasoning` | GENERIC |
| xAI | Grok 4 Fast Reasoning | `xai.grok-4-fast-reasoning` | GENERIC |
| xAI | Grok 4 Fast Non-Reasoning | `xai.grok-4-fast-non-reasoning` | GENERIC |
| xAI | Grok 3 | `xai.grok-3` | GENERIC |
| xAI | Grok 3 Mini | `xai.grok-3-mini` | GENERIC |
| xAI | Grok 3 Fast | `xai.grok-3-fast` | GENERIC |
| xAI | Grok 3 Mini Fast | `xai.grok-3-mini-fast` | GENERIC |
| xAI | Grok Code Fast 1 | `xai.grok-code-fast-1` | GENERIC |
| ProtectAI | DeBERTa Prompt Injection v2 | `protectai.deberta-v3-base-prompt-injection-v2` | GENERIC |
> **Custom OCID**: You can also use any model available in your region by selecting "Personalizado (usar OCID)" and providing the full model OCID.
@@ -545,14 +572,6 @@ All models include OCID mapping for `us-ashburn-1`. For other regions, use the "
| Cohere | Embed v4.0 (Multimodal) | `cohere.embed-v4.0` | 1536 |
| OpenAI | Text Embedding 3 Large | `openai.text-embedding-3-large` | 3072 |
| OpenAI | Text Embedding 3 Small | `openai.text-embedding-3-small` | 1536 |
| Cohere | Embed English v3.0 | `cohere.embed-english-v3.0` | 1024 |
| Cohere | Embed Multilingual v3.0 | `cohere.embed-multilingual-v3.0` | 1024 |
| Cohere | Embed English Light v3.0 | `cohere.embed-english-light-v3.0` | 384 |
| Cohere | Embed Multilingual Light v3.0 | `cohere.embed-multilingual-light-v3.0` | 384 |
| Cohere | Embed English Image v3.0 | `cohere.embed-english-image-v3.0` | 1024 |
| Cohere | Embed Multilingual Image v3.0 | `cohere.embed-multilingual-image-v3.0` | 1024 |
| Cohere | Embed English Light Image v3.0 | `cohere.embed-english-light-image-v3.0` | 384 |
| Cohere | Embed Multilingual Light Image v3.0 | `cohere.embed-multilingual-light-image-v3.0` | 384 |
### GenAI Regions
@@ -573,6 +592,7 @@ All models include OCID mapping for `us-ashburn-1`. For other regions, use the "
| GenAI | `oci.generative_ai_inference` |
| Container | Docker Compose, Nginx reverse proxy |
| MCP | Model Context Protocol SDK (stdio/SSE) with tool discovery + execution |
| Terraform | Terraform CLI 1.7.5, OCI Provider |
| CIS Scanner | Oracle CIS Foundations Benchmark 3.0 checker (`cis_reports.py`) |
---
@@ -581,6 +601,7 @@ All models include OCID mapping for `us-ashburn-1`. For other regions, use the "
| Version | Date | Changes |
|---------|------|---------|
| **v2.1** | 2026-03 | Terraform Agent (AI-powered IaC generation with plan/apply/destroy lifecycle, workspace management, Terraform CLI in container), OCI Explorer expanded to 40+ resource types across 8 categories with tree-view navigation and resizable panels, compartment filtering for MCP CIS scans, chat sidebar with model parameters, chat audit logs, collection error tracking in MCP server, tool timeout increased to 30min with auto-retry, memory compaction tuned (6K threshold, 20 recent messages), model catalog trimmed from 69 to 15 curated models |
| **v2.0** | 2026-03 | Async background chat processing (no more 504 timeouts), frontend polling with timestamps, 8 uvicorn workers + 16-thread chat executor for ~12 simultaneous chats, parallelized MCP data collection (5-thread base + 8-thread regional), 2-hour MCP session cache, 5-min tool timeout, full dead code cleanup across backend/frontend/MCP |
| **v1.9** | 2026-03 | Multimodal chat (image/PDF/text file upload with OCI GenAI ImageContent/DocumentContent), region-specific MCP scanning (`regions` param on all scan tools), orphaned report auto-detection on progress poll, nginx timeout increased to 15min, improved API error handling for non-JSON responses |
| **v1.8** | 2026-03 | CIS Engine auto-update from Oracle GitHub with automatic patch reapplication, version check UI card (admin), new `/api/cis-engine/*` endpoints, report file listing and individual download endpoints, reorganized Reports tab (execution history + status) and Downloads tab (file browser only with expandable cards per report), CIS Level description tooltip, persistent log expand during report generation |