jcoffey-dev
7d316f92db
Adds a self-hosted (Ollama, qwen2.5-coder) model provider abstraction with a pluggable opt-in cloud adapter, schema grounding, and a shared cost/safety guard every AI-suggested query is assessed against -- compiling to and executing through the same unchanged Phase 2 IR/ compiler and Phase 4 tenant scoping as a hand-written query, no parallel execution path. Track A (built into the query bar): inline ghost-text autocomplete, "Explain this query", "Fix this query" with a diff view, and a rule-based "Optimize" suggestion. Track B: natural-language-to-query translation, always a separate review step from execution, with `sentryctl query --nl` requiring explicit confirmation to run. Every accepted/dismissed translate-fix-optimize interaction is logged into the same append-only audit_log table Phase 4 built. Two real product bugs were found and fixed via live browser verification (a Svelte effect re-running on every keystroke that silently cancelled the ghost-text debounce; a ghost-text widget positioned at document offset 0 instead of the cursor), and a real costguard logic bug (unbounded-aggregation vs. raw-row) was caught by its own test suite. New integration tests wire a real Ollama client through the real HTTP handler against a mock server matching Ollama's wire contract (hack/mock-ollama), keeping model-quality verification out of CI as a disclosed, periodic human-run check instead. See /docs/phase-7-ai-design.md and /docs/phase-7-runbook.md.
34 lines
795 B
Plaintext
34 lines
795 B
Plaintext
# Rust
|
|
agent/target/
|
|
search/target/
|
|
|
|
# Go build cache (go build ./... without -o doesn't normally leave
|
|
# binaries in-tree, but be defensive)
|
|
/ingest/ingest
|
|
/api/api
|
|
/cli/sentryctl
|
|
/terraform/terraform-provider-sentry
|
|
/alerting/alerting
|
|
/hack/windows-fixture/windows-fixture
|
|
/hack/benchmark-fixture/benchmark-fixture
|
|
/hack/alert-load-test/alert-load-test
|
|
/hack/webhook-sink/webhook-sink
|
|
/hack/mock-ollama/mock-ollama
|
|
|
|
# Node / SvelteKit (web/ has its own more detailed .gitignore too)
|
|
web/node_modules/
|
|
web/build/
|
|
web/.svelte-kit/
|
|
|
|
# Dev-only generated secrets
|
|
hack/dev-certs/out/
|
|
|
|
# Local overrides that may carry real credentials (e.g. a real OIDC/SAML
|
|
# dev-tenant client secret for manual SSO testing) -- never committed.
|
|
docker-compose.override.yml
|
|
|
|
# OS / editor
|
|
.DS_Store
|
|
Thumbs.db
|
|
*.swp
|