28147b40d0
Merge origin/main into admin release candidate
Staging Backend Quality Gate / validate (push) Successful in 12m49s
Staging Backend Quality Gate / publish (push) Has been cancelled
2026-08-07 12:27:47 +08:00
66a6c96a5c
fix(admin): fail safe across migration and auth boundaries
...
The recovery migration crossed the identity and RBAC ledgers without guarding schema prerequisites, while unknown configuration, provider, and database failures escaped the admin authorization boundary as 500s. Keep recovery in the DB ledger with explicit prerequisite no-ops, and sanitize unknown authorization failures to the existing 503 path.
2026-08-07 12:08:58 +08:00
49f6edd7fb
feat(web): add persistent beam avatars
Staging Backend Quality Gate / validate (push) Successful in 13m34s
Staging Backend Quality Gate / publish (push) Has been cancelled
2026-08-07 12:07:57 +08:00
754505d40a
fix(admin): preserve revoked owners and 503 status
...
Owner recovery lived in the identity-only migration path and could clear historical revocations on conflict. Admin layout also rethrew authorization 503s, turning service-unavailable failures into 500 responses.\n\nMove recovery behind the RBAC migration sequence, exclude revoked candidates without mutating their history, and terminate layout redirects at a no-store 503 route.
2026-08-07 11:33:48 +08:00
e7482c49c6
fix(web): restore starter card state after click
Staging Backend Quality Gate / validate (push) Successful in 15m14s
Staging Backend Quality Gate / publish (push) Successful in 10m19s
2026-08-07 11:32:05 +08:00
0d7e5a26d5
fix(admin): break denied-session redirect loop
...
Preserve 403/503 responses instead of redirecting them through the Caddy root, and recover Owner only for the sole loginable synced identity admin.
2026-08-07 11:06:13 +08:00
jesse
ae41b3aef5
Merge pull request 'Clarify staging report auth smoke' ( #26 )
...
Staging Backend Quality Gate / validate (push) Successful in 14m6s
Staging Backend Quality Gate / publish (push) Successful in 15m38s
Merge docs-only correction matching the deployed route contract.
2026-08-07 02:34:28 +08:00
aebd1b56c9
docs(staging): clarify report auth smoke
2026-08-07 02:33:55 +08:00
jesse
8099091e43
Merge pull request 'Close staging exact-SHA release acceptance' ( #25 )
...
Merge docs-only staging acceptance closure after successful gate 1525, migration 1516, deploy 1526, and post-deploy audit.
2026-08-07 02:32:03 +08:00
91a39f2528
docs(staging): close exact-SHA release acceptance
2026-08-07 02:30:59 +08:00
jesse
6c1dcbe857
Merge pull request 'Refresh staging dual-host edge verification' ( #24 )
...
Staging Backend Quality Gate / validate (push) Successful in 13m23s
Staging Backend Quality Gate / publish (push) Successful in 2m6s
Merge reviewed Caddy bind refresh and dual-host verification fix after successful PR gate 1523.
2026-08-07 02:05:38 +08:00
e718b2c6d9
fix(staging): refresh dual-host edge verification
Staging Backend Quality Gate / validate (pull_request) Successful in 17m22s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-07 01:46:47 +08:00
jesse
28f4207f29
Merge pull request 'Wait for staging public release identity' ( #23 )
...
Staging Backend Quality Gate / validate (push) Successful in 11m21s
Staging Backend Quality Gate / publish (push) Successful in 3m33s
Merge reviewed bounded staging public identity convergence fix after successful PR gate 1519.
2026-08-07 01:22:04 +08:00
3221b6a9a4
fix(staging): await public release identity
Staging Backend Quality Gate / validate (pull_request) Successful in 13m57s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-07 01:07:08 +08:00
jesse
8dc61e3135
Merge pull request 'Bound staging quality gate frontend build' ( #22 )
...
Staging Backend Quality Gate / validate (push) Successful in 11m4s
Staging Backend Quality Gate / publish (push) Successful in 2m7s
Merge reviewed fail-closed staging gate timeout after successful exact-head PR validation run 1511.
2026-08-07 00:32:23 +08:00
f145f52b01
fix(staging): bound frontend quality build
Staging Backend Quality Gate / validate (pull_request) Successful in 11m6s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-07 00:06:45 +08:00
jesse
6fd2292119
Merge pull request 'Restore staging gate after concurrent admin rollout' ( #21 ) from fix/staging-gate-retry-and-admin-audit into main
Staging Backend Quality Gate / validate (push) Failing after 56m44s
Staging Backend Quality Gate / publish (push) Has been skipped
2026-08-06 22:51:27 +08:00
56dbed0d93
docs(staging): record runtime role drift repair
Staging Backend Quality Gate / validate (pull_request) Successful in 14m11s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 22:35:33 +08:00
f3b78bfee1
Merge remote-tracking branch 'origin/main' into fix/staging-gate-retry-and-admin-audit
...
Staging Backend Quality Gate / validate (pull_request) Successful in 14m24s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
# Conflicts:
# docs/BUG_HISTORY.md
# frontend/tests/admin-users-contract.test.ts
2026-08-06 22:11:41 +08:00
9a3d0d440f
fix(frontend): declare admin users runtime locally
Staging Backend Quality Gate / validate (push) Successful in 16m8s
Staging Backend Quality Gate / publish (push) Successful in 12m59s
2026-08-06 21:20:12 +08:00
015f1e501e
fix(admin): declare users route runtime locally
Staging Backend Quality Gate / validate (pull_request) Successful in 19m9s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 21:17:19 +08:00
de2caf6249
test(audit): include billing admin routes
Staging Backend Quality Gate / validate (push) Failing after 10m43s
Staging Backend Quality Gate / publish (push) Has been skipped
2026-08-06 20:50:42 +08:00
ec0a8c3c39
test(admin): register operations routes in capability audit
Staging Backend Quality Gate / validate (pull_request) Failing after 11m5s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 20:48:56 +08:00
c1061695c7
fix(staging): retry exact gate checkout
2026-08-06 20:47:38 +08:00
9d8c73561f
test(deploy): integrate billing admin rollout checks
Staging Backend Quality Gate / validate (push) Failing after 7m30s
Staging Backend Quality Gate / publish (push) Has been skipped
2026-08-06 20:15:50 +08:00
5622ab448a
feat(admin): add operations resources and audit UI
2026-08-06 20:15:08 +08:00
28e04857fa
feat(models): secure catalog and pin model versions
2026-08-06 20:15:08 +08:00
7040fd998e
feat(billing): add products subscriptions orders and usage
2026-08-06 20:15:08 +08:00
6457c836fa
feat(admin): add RBAC identity and MFA controls
2026-08-06 20:15:08 +08:00
jesse
9f71e849a0
Merge pull request 'Close staging controller fetch incident' ( #19 )
...
Staging Backend Quality Gate / validate (push) Failing after 2m5s
Staging Backend Quality Gate / publish (push) Has been skipped
Record resolved gate-attested controller deployment evidence and retain browser handoff blockers.
2026-08-06 20:05:29 +08:00
3f61188b07
docs(staging): close controller fetch incident
2026-08-06 20:04:47 +08:00
jesse
e59f15d352
Merge pull request 'Deploy gate-attested staging controllers' ( #18 )
...
Staging Backend Quality Gate / validate (push) Successful in 13m53s
Staging Backend Quality Gate / publish (push) Successful in 10m17s
Replace mutation-time Git object fetches with exact-gate hash-bound controller bundles.
2026-08-06 19:33:47 +08:00
8473146773
fix(staging): deploy gate-attested controllers
Staging Backend Quality Gate / validate (pull_request) Successful in 14m1s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 19:18:04 +08:00
jesse
784ee36cec
Merge pull request 'Bound staging trusted-main fetch retries' ( #17 )
...
Staging Backend Quality Gate / validate (push) Successful in 14m3s
Staging Backend Quality Gate / publish (push) Successful in 5m36s
Fail closed on prolonged trusted-main fetches without changing exact-SHA or ancestry controls.
2026-08-06 18:14:55 +08:00
fa8698c95b
docs(staging): close bounded fetch incident
Staging Backend Quality Gate / validate (pull_request) Successful in 12m46s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 18:00:40 +08:00
52b467cbe5
docs(bugs): clarify recovered staging fetch stall
Staging Backend Quality Gate / validate (pull_request) Successful in 15m11s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 17:43:06 +08:00
975f5c346d
fix(staging): bound trusted main fetch retries
2026-08-06 17:40:41 +08:00
jesse
02cc483b7c
Merge pull request 'Record personal report staging acceptance' ( #16 )
...
Staging Backend Quality Gate / validate (push) Successful in 13m48s
Staging Backend Quality Gate / publish (push) Successful in 4m59s
Record the tested staging evidence and explicit browser handoff blockers.
2026-08-06 17:03:14 +08:00
3431956de1
docs(staging): record personal report acceptance evidence
2026-08-06 17:01:17 +08:00
jesse
f7a615a5bf
Merge pull request 'Harden staging SSH secret and env ownership' ( #15 )
...
Staging Backend Quality Gate / validate (push) Successful in 12m56s
Staging Backend Quality Gate / publish (push) Successful in 5m51s
Rotate the staging key boundary and align deploy-owned environment validation.
2026-08-06 15:53:41 +08:00
0ddbe11eda
docs(bugs): record staging credential incident resolved
Staging Backend Quality Gate / validate (pull_request) Successful in 14m56s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 15:52:37 +08:00
cfc7af6b46
fix(staging): rotate SSH secret handling and env ownership
Staging Backend Quality Gate / validate (pull_request) Successful in 16m32s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 15:34:31 +08:00
jesse
eccd831ae9
Merge pull request 'Record staging env ownership drift guard' ( #14 )
...
Staging Backend Quality Gate / validate (push) Successful in 11m31s
Staging Backend Quality Gate / publish (push) Successful in 15m29s
Record and prevent the staging env owner drift found by the encrypted backup gate.
2026-08-06 14:32:20 +08:00
a277efb8f4
docs(ops): record staging env ownership drift
2026-08-06 14:30:39 +08:00
jesse
8d636fc5ac
Merge pull request 'Record staging SSH host key rotation guard' ( #13 )
...
Record the independently verified staging host-key rotation before release.
2026-08-06 14:26:47 +08:00
eb4ebf7c73
docs(ops): record staging host key rotation guard
2026-08-06 14:24:20 +08:00
jesse
e018dc90a7
Merge pull request 'Add one-way Skill governance and personal reports' ( #12 )
...
Reviewed one-way Skill governance and ReportDocument v1 personal report rollout.
2026-08-06 14:10:51 +08:00
8a475198e3
docs(bugs): record report gate regressions resolved
Staging Backend Quality Gate / validate (pull_request) Successful in 16m17s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 13:53:11 +08:00
94f051f4d0
test(report): register personal reports in database fixture
Staging Backend Quality Gate / validate (pull_request) Successful in 15m5s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 13:36:23 +08:00
58894b201b
test(report): register report reader in capability audit
Staging Backend Quality Gate / validate (pull_request) Failing after 12m13s
Staging Backend Quality Gate / publish (pull_request) Has been skipped
2026-08-06 13:21:04 +08:00
Jesse_Chen
jesse