Commit Graph
100 Commits
Author SHA1 Message Date
Rogeeandrogee 77903ebebd test(HH-604): stabilize notification close ordering (#164)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 14:06:43 +08:00
Rogeeandrogee 49559d6ce1 HH-606: cover soft-deleted inbox assistants (#162)
* test(HH-606): cover soft-deleted inbox assistants

* test(HH-606): bind soft-deleted inbox to persisted assistant

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 14:00:17 +08:00
Rogeeandrogee 26eae1a0d7 fix(HH-603): harden legacy database logging (#163)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 13:49:07 +08:00
Rogeeandrogee a30eff4f3b test(HH-605): lock widget viewport layout (#161)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 13:24:44 +08:00
Rogeeandrogee 4eeb0f8957 HH-597: repair assignment policy migration parity (#156)
* fix(HH-597): repair assignment policy schema migration

* fix(HH-597): harden assignment policy migration

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 13:09:13 +08:00
Rogeeandrogee a7e96afef4 HH-598: hide unavailable AI takeover (#155)
* fix(HH-598): hide unavailable AI takeover

* fix: isolate inbox assistant availability

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 12:49:46 +08:00
Rogeeandrogee 907d8ea4e1 fix(widget): constrain conversation scroll viewport (#160)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 12:35:35 +08:00
Rogeeandrogee 1287b7702a fix(HH-600): isolate notification Redis lifecycle (#157)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 12:24:34 +08:00
Rogeeandrogee e8c010406d fix(security): redact database query parameters (HH-596) (#159)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 12:22:16 +08:00
Rogeeandrogee 57f8a64fd8 fix(HH-591): bound notification shutdown XACK (#154)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 11:36:24 +08:00
Rogeeandrogee 92ace6b041 test(HH-592): cover realtime timestamp boundaries (#153)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 11:13:53 +08:00
Rogeeandrogee 2c6bee2b37 fix(HH-581): keep widget websocket on visitor auth (#152)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 10:54:38 +08:00
Rogeeandrogee c4ac664deb fix(HH-590): define realtime timestamp range (#151)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 10:44:23 +08:00
Rogeeandrogee 34c45ff2c4 HH-463: wait for redisstream XAck during shutdown (#149)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 10:30:50 +08:00
Rogeeandrogee 02e60b8db5 test(HH-589): cover favicon static route (#150)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 10:26:45 +08:00
Rogeeandrogee b981cc6811 fix(HH-576): normalize realtime message timestamps (#148)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 10:16:22 +08:00
Rogeeandrogee 83e2a8ead6 test(HH-572): cover PostgreSQL longest-waiting null order (#146)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 10:09:55 +08:00
Rogeeandrogee eda4889d85 HH-549: serve the default favicon (#147)
* chore(agent): baseline — uncommitted work from the local directory

* HH-549: serve the default favicon

* Revert "chore(agent): baseline — uncommitted work from the local directory"

This reverts commit 4a3fabe624bfdc52bf935b62cb9871b7de9b3083.

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 10:09:24 +08:00
Rogeeandrogee 4204ae6a3a HH-581: restore WebChannel status and reply visibility (#145)
* fix(realtime): normalize web channel status events (HH-581)

* fix(realtime): resolve legacy widget tokens safely (HH-581)

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 08:06:56 +08:00
Rogeeandrogee 84a1e35294 HH-569: guard replayed frontend realtime messages (#144)
* fix(HH-569): guard replayed realtime messages

* fix(HH-569): gate dashboard message side effects

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 00:42:05 +08:00
Rogeeandrogee 88ac30d0b8 test(HH-558): complete WebChannel sender display regression matrix (#141)
* chore(agent): baseline — uncommitted work from the local directory

* test(HH-558): cover widget sender display matrix

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 00:16:38 +08:00
Rogeeandrogee 391fe98ad6 HH-565: complete assignment parity regressions (#142)
* fix(HH-565): complete assignment parity regressions

* fix(HH-565): scope capacity exclusions per agent

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 00:16:03 +08:00
Rogeeandrogee d4036a2074 docs(HH-570): clarify realtime relay boundaries (#143)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-24 00:14:21 +08:00
Rogeeandrogee e1ae9b57d8 docs(HH-566): define realtime replay contract (#140)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 23:47:43 +08:00
Rogeeandrogee f36606a4f2 HH-564: harden durable realtime publish boundaries (#139)
* fix(HH-564): harden durable realtime enqueue

* fix(HH-564): wire production SSE stream

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 23:38:00 +08:00
Rogeeandrogee cb0b554e94 HH-555: remove advanced assignment commercial gate (#138)
* fix(HH-555): remove advanced assignment paywall

* fix(HH-555): gate assignment entries with assignment v2

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 23:19:51 +08:00
Rogeeandrogee 60a6ac4785 fix: restore web widget realtime replies (HH-556) (#136)
* fix: restore web widget realtime replies (HH-556)

* fix: make realtime delivery durable (HH-556)

* fix: make realtime message outbox atomic (HH-556)

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 22:35:10 +08:00
Rogeeandrogee 17244bcc9d HH-554: connect auto-assignment runtime policy (#135)
* fix(HH-554): connect auto-assignment runtime policy

* fix(HH-554): bound and coalesce assignment jobs

* fix(HH-554): drain assignment backlog safely

* fix(HH-554): hold assignment claim through retries

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 22:28:43 +08:00
Rogeeandrogee 35727be51a HH-560: localize upstream activity messages (#137)
* fix(HH-560): localize upstream activity messages

* fix(HH-560): preserve unknown activity content

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 22:11:00 +08:00
Rogeeandrogee 1b5ea7c227 HH-551: localize activity messages (#132)
* fix(HH-551): localize activity messages

* fix(HH-551): handle null activity content

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 21:21:44 +08:00
Rogeeandrogee e41d40feb8 HH-546: flatten conversation AI actions (#128)
* fix(HH-546): flatten conversation AI actions

* fix(HH-546): wrap AI actions on narrow screens

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 21:16:19 +08:00
Rogeeandrogee eb1b5c8066 test(HH-557): cover CORS YAML config loading (#134)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 21:12:35 +08:00
Rogeeandrogee acf53be827 fix(HH-552): hide bot fallback from widget replies (#131)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 20:59:10 +08:00
Rogeeandrogee 14b25959ab HH-553: remove deprecated CORS env references (#130)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 20:46:40 +08:00
Rogeeandrogee e11f478c1a fix(HH-550): scope assignment upgrade prompts to cloud (#129)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 20:38:01 +08:00
Rogeeandrogee 8d5d019bb5 HH-548: allow Super Admin sessions to load platform lists (#125)
* fix(HH-548): authorize super admin platform lists

* fix(HH-548): limit dual auth to platform lists

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 20:21:05 +08:00
Rogeeandrogee eb83d241fe HH-547: allow cross-origin widget requests (#126)
* HH-547: allow cross-origin widget requests

* fix(HH-547): align production preflight with wildcard CORS

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 20:11:04 +08:00
Rogeeandrogee a2e4f9a1e8 HH-540: scope iframe policy to Widget page (#123)
* fix(HH-540): scope iframe policy to widget page

* fix(HH-540): reject non-string allowed domains

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 18:37:08 +08:00
Rogeeandrogee 867092fd99 HH-530: replace user-facing Chatwoot branding with GoChat (#117)
* fix(HH-530): replace user-facing Chatwoot branding

* fix(HH-530): close branding review blockers

* test(HH-530): cover update banner binding

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 18:14:02 +08:00
Rogeeandrogee a635be6dc8 HH-531: remove CSP-blocked draggable shim (#122)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 17:48:30 +08:00
Rogeeandrogee f719a18ba8 HH-533: align ActionCable heartbeat protocol (#121)
* fix(ws): align ActionCable heartbeat protocol (HH-533)

* test(ws): cover ActionCable heartbeat cadence (HH-533)

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 17:46:44 +08:00
Rogeeandrogee 56a2f2e6a5 ci: disable GitHub Actions workflow (#118)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 17:23:54 +08:00
Rogeeandrogee 3aac701495 fix(HH-528): persist auto resolve message (#116)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 16:54:20 +08:00
Rogeeandrogee 5a61aac1f2 HH-529: allow blob avatar previews in CSP (#115)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 16:52:20 +08:00
Rogeeandrogee dac8c5e068 HH-502: cover non-widget message sender events (#113)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 07:40:38 +08:00
Rogeeandrogee eaf6edef66 HH-503: harden production Docker mock assertions (#112)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 07:40:23 +08:00
Rogeeandrogee a5d244d293 HH-500: add reproducible production dist bundle (#111)
* HH-500: add reproducible production dist bundle

* HH-500: make production bundle builds reproducible

* HH-500: lock complete runtime APK closure

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 00:22:20 +08:00
Rogeeandrogee ef8931099c HH-469: close WebSocket fanout contract gaps (#109)
* HH-469: close websocket fanout contract gaps

* fix: unify message sender contracts

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-23 00:22:01 +08:00
Rogeeandrogee f91dc6ca1a test(HH-460): observe restore file order (#108)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 21:35:31 +08:00
Rogeeandrogee 4004645574 HH-459: disable worker HTTP healthcheck in quickstart (#105)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 21:20:44 +08:00
Rogeeandrogee 43253b51c9 HH-460: cover migration and backup restore regressions (#104)
* test(HH-460): cover migration and restore regressions

* test(HH-460): verify real restore evidence

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 21:20:27 +08:00
Rogeeandrogee c86744d326 docs: update production config references (HH-465) (#103)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 21:20:11 +08:00
Rogeeandrogee 2b75390529 HH-452: cover upload security boundaries (#106)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 21:19:43 +08:00
Rogeeandrogee 6444c40531 test: preserve quality and websocket evidence (#107)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 21:19:09 +08:00
Rogeeandrogee fb83285617 HH-445: deploy production observability and runbooks (#96)
* HH-445: deploy production observability and runbooks

* fix(ops): share production database DSN

* fix(HH-445): enforce database TLS gate

* fix(HH-445): preserve production serve command

* fix(prod): require external database dependencies

* fix(prod): unify database host rejection gates

* test(prod): enforce exact database TLS runbook contract

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 19:39:57 +08:00
Rogeeandrogee 61376a57fd HH-446: restore auditable quality gates from current main (#102)
* HH-446: restore auditable quality gates

* test(HH-446): restore help center smoke contract

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 15:45:58 +08:00
Rogeeandrogee f719529d66 fix(security): harden auth and secret handling (HH-444) (#101)
* fix(security): harden auth and credential handling (HH-444)

* fix(security): address HH-444 review blockers

* fix(security): close remaining HH-444 review blockers

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 15:45:06 +08:00
Rogeeandrogee e1557e7f21 test(HH-468): reject tampered promoted attestations (#98)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 04:35:33 +08:00
Rogeeandrogee fccfa85c3a ci(HH-464): pin browser harness Chrome (#97)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 04:30:06 +08:00
Rogeeandrogee b6b1597e90 HH-462: harden release attestation semantics (#94)
* HH-462: bind release attestations to source and digest

* HH-462: exercise release attestation production paths

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 04:07:32 +08:00
Rogeeandrogee 0e23ccc465 ci(HH-451): harden production Compose smoke (#95)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 03:58:11 +08:00
Rogeeandrogee 02a188dc29 HH-443: establish production CI and supply-chain evidence (#93)
* ci: enforce production release gates

* ci: close release gate review blockers

* ci: preserve verified digests during promotion

* ci: serialize and verify release cleanup

* ci: build govulncheck with Shangwutong toolchain

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 03:26:38 +08:00
Rogeeandrogee 798ea43c2f HH-442: isolate runtime processes and harden shutdown (#90)
* HH-442: isolate runtime processes and harden shutdown

* HH-442: harden worker shutdown races

* HH-442: gate dependency shutdown on active handlers

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 02:38:15 +08:00
Rogeeandrogee 6d6d80dd86 HH-441: harden durable storage and recovery (#92)
* HH-441: harden durable storage and recovery

* HH-441: clear recovery review blockers

* HH-441: enforce offsite backup failure domain

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-22 02:16:02 +08:00
Rogeeandrogee 77c91662d2 HH-438: close upload and remote URL attack surfaces (#89)
* HH-438: close upload and remote URL attack surfaces

* HH-438: use valid PNG in direct upload test

* HH-438: align PostgreSQL upload staging schema

* HH-438: run upload migrations before PostgreSQL E2E

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 20:36:52 +08:00
Rogeeandrogee 7a9fec33c5 HH-439: harden production artifact pipeline (#86)
* HH-439: harden production artifact pipeline

* fix(HH-439): address production compose review

* fix(HH-439): preserve previous JWT secrets in production

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 20:20:00 +08:00
Rogeeandrogee 7e3872170f HH-448: enforce PostgreSQL E2E gate (#87)
* HH-448 enforce PostgreSQL E2E gate

* HH-448 fail CI when concurrency test is missing

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 20:00:41 +08:00
Rogeeandrogee cf263d10b4 HH-437: harden production auth and tenant authorization (#84)
* HH-437 harden auth and account authorization

* HH-437 reject revoked platform access

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 19:13:10 +08:00
Rogeeandrogee 04c1654086 HH-427: add runtime config browser smoke (#81)
* HH-427: add runtime config browser smoke

* HH-427: enforce browser smoke in CI

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 16:02:54 +08:00
Rogeeandrogee 46d63245a1 HH-424: clean up Vite build warnings (#80)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 15:06:05 +08:00
Rogeeandrogee 26d494c6d6 test(autoassignment): report cleanup errors (HH-423) (#79)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 14:41:25 +08:00
Rogeeandrogee e665abbfb8 H-417: include frontend TypeScript in format checks (#78)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 14:37:23 +08:00
Rogeeandrogee a0f668b2d8 H-419: run auto-assignment concurrency on PostgreSQL (#77)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 14:18:32 +08:00
Rogeeandrogee e8fa7c9c2c H-418: cover widget direct upload file flow (#76)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 14:17:03 +08:00
Rogeeandrogee b971b09ac7 H-409: restore frontend ESLint and Prettier baseline (#72)
* H-409: restore frontend lint baseline

* ci(H-409): check representative frontend lint

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 14:11:08 +08:00
Rogeeandrogee 646449ebee test(autoassignment): stabilize concurrency diagnostics (#75)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 13:57:19 +08:00
Rogeeandrogee dddbe25899 H-412: cover legacy widget attachment parity (#73)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 13:50:08 +08:00
Rogeeandrogee 1afe9dddeb H-413: cover mismatched ContactInbox history (#74)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 13:49:11 +08:00
Rogeeandrogee 5135793bd2 test(autoassignment): cover concurrent CAS loser (#71)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 13:25:39 +08:00
Rogeeandrogee 40ab664b08 H-388: tighten contact inbox conversation scope (#68)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 13:19:12 +08:00
Rogeeandrogee a0a6c338f5 H-386: unify legacy widget message serialization (#69)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 13:18:13 +08:00
Rogeeandrogee 517a6090b3 test(H-359): assert direct upload completes after retry (#70)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 13:13:58 +08:00
Rogeeandrogee 181e9051ec H-354: cover Captain provider timeout (#67)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 13:10:04 +08:00
Rogeeandrogee 038f185b57 H-392: surface Captain playground failures (#66)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 13:01:13 +08:00
Rogeeandrogee d948222ac6 H-337: restore Captain inbox takeover and KB citations (#65)
* fix(captain): restore inbox takeover and KB citations

* fix(captain): harden grounded citations and smoke seed

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-20 22:33:38 +08:00
Rogeeandrogee b31b1b9562 H-337: restore Web widget reply visibility (#64)
* H-337: restore widget reply delivery

* H-337: harden widget conversation ownership

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-20 22:22:27 +08:00
Rogeeandrogee abb1bed424 H-337: add local Captain acceptance fixture (#63)
* H-337: add local Captain acceptance fixture

* fix(H-337): close acceptance fixture review gaps

* fix(H-337): reject non-string skill metadata

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-20 20:05:40 +08:00
Rogeeandrogee 60ad320e8d [H-337] Fix Captain provider runtime and knowledge flow (#61)
* fix(H-337): configure Captain provider runtime

* fix(captain): make knowledge rebuild atomic

* fix(captain): scope retrieval provider failures

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-20 14:46:01 +08:00
Rogeeandrogee 3d9817c9f5 H-337: fix Web Channel availability and realtime delivery (#60)
* H-337: fix Web Channel availability and realtime delivery

* fix(widget): preserve realtime sender and activity contracts

* fix(widget): keep realtime sender payloads consistent

* fix(widget): make public message persistence atomic

* fix(inbox): keep availability projection out of schema

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-20 14:30:05 +08:00
Rogeeandrogee 55b56ee172 H-337: restore minimal GitHub Actions CI (#62)
* ci(H-337): restore minimal GitHub Actions checks

* ci(H-337): preserve workflow check identity

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-20 14:17:41 +08:00
Rogeeandrogee 6c78820a1f H-338: close H-335 release blockers (#59)
* H-16: align takeover with channel AI workflow (#2)

* feat(conversations): complete manual AI takeover

* fix(conversations): align AI takeover flow with channel AI

* fix(conversations): close takeover review gaps

---------

Co-authored-by: Rogee <rogee@ipao.vip>

* feat(shangwutong): sync customer names back to channel (#3)

Co-authored-by: Rogee <rogee@ipao.vip>

* fix(shangwutong): close contact sync review gaps (#4)

Co-authored-by: Rogee <rogee@ipao.vip>

* H-28: harden Shangwutong CID sync (#5)

* fix(shangwutong): close contact sync review gaps

* fix(shangwutong): harden CID sync boundaries

---------

Co-authored-by: Rogee <rogee@ipao.vip>

* fix(conversations): sync AI takeover exit in realtime (#6)

Co-authored-by: Rogee <rogee@ipao.vip>

* test(shangwutong): cover CID rename reliability (#7)

Co-authored-by: Rogee <rogee@ipao.vip>

* H-43: fix WEB Captain takeover E2E flow (#8)

* test(shangwutong): cover CID rename reliability

* H-43: fix WEB Captain takeover flow

* H-48: preserve compatible provider model

* H-49: make Captain takeover atomic

* H-50: prevent duplicate widget initialization

---------

Co-authored-by: Rogee <rogee@ipao.vip>

* H-55: make Captain bindings atomic (#9)

Co-authored-by: Rogee <rogee@ipao.vip>

* H-60: harden Captain migration rollback and concurrency

* chore(agent): baseline — uncommitted work from the local directory

* H-335: add safe Captain skills and user deactivation

* H-338: close auth and Captain review blockers

* H-338: close assignment and session races

* H-338: close assignment and websocket invalidation gaps

* H-338: enforce assignment write invariants

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-20 10:21:19 +08:00
Rogeeandrogee 1d8145f3b5 H-332: remove committed runtime artifacts (#58)
* H-332: remove committed runtime artifacts

* H-332: remove nested Playwright artifact

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-19 21:11:46 +08:00
Rogeeandrogee 8a8750c9f4 H-328: codify frontend delivery checks (#57)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-19 20:30:32 +08:00
Rogeeandrogee 6e582c767c H-296: cover stale Captain Skills list errors (#52)
* test: cover stale captain skill list errors

* test: flush stale skill request rejection

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-19 20:24:10 +08:00
Rogeeandrogee 644267f24a H-303: count cached Skill payloads against budget (#53)
* H-303: count cached skill payloads against budget

* H-303: exercise cached budget through skill runtime

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-19 18:23:09 +08:00
Rogeeandrogee 35360d3a92 H-326: speed up profile handler race tests (#56)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-19 18:05:24 +08:00
Rogeeandrogee aaad337ef3 H-292: prove Captain Skill updates reach CAS (#54)
* H-292: prove Captain Skill updates reach CAS

* H-292: prove handler conflict comes from CAS

* H-292: reuse profile test password digest

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-19 17:55:19 +08:00
Rogeeandrogee c61b533ce2 H-313: move pnpm overrides to workspace root (#49)
* H-313: move pnpm overrides to workspace root

* H-313: align vite-node override with lockfile

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-19 17:55:00 +08:00
Rogeeandrogee be53f30394 H-290: enforce Captain Skill tenant bindings (#51)
* H-290: enforce Captain Skill tenant consistency

* H-290: fix SQLite tenant migration coverage

* H-290: leave tenant constraints to migrations

---------

Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-19 17:54:45 +08:00
Rogeeandrogee d54700ac13 chore(H-296): remove GitHub Actions workflow (#55)
Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-19 17:02:37 +08:00