Commit Graph
887 Commits
Author SHA1 Message Date
Hare af008f802d feat: explicit hosting administrators and persistent self-registration policy 2026-10-16 07:26:21 +09:00
Hare 7042ec7d50 chore: merge develop into hare/develop 2026-10-16 05:52:36 +09:00
Hare a2cec5afd1 fix: preserve console alert order and improve alert colors 2026-10-16 05:28:17 +09:00
Hare b5a307811b fix: reconcile erased Archive removals and exercise live compaction recording
Reconcile immutable Runtime removal input under a confirmed permanent erase fence. A confirmed source_removed receipt is audited without republishing erased archives; unknown receipt plus attested remaining aggregate permits an audited stale plan and proof-bound purge replacement. Unknown receipt and inventory remain unresolved. Distinguish domain tombstones from scoped Runtime physical erasure acknowledgements.

Erase diagnostic originals and interrupted staging bound to the same archived Session/removal operation, validating Workspace/Worker/fingerprint and saved receipts without rewriting their historical retained flags. Finalize Backend removal only after physical acknowledgement, including previous Retain disposition.

Connect public standalone protocol, real Worker request-threshold compaction twice within one turn, cancellation and real pre-AI input rollback, original canonical readers, existing Jobs and sequential Journal tools. Gate generation while compaction completes; verify all durable originals were served, summary/rolled-back input exclusion, exact final cursor, no extra input for successor drain, and one ongoing open entry. External model streams/usage are scripted, not semantic evaluation.

Validation: Backend1112lib+11bin (existing ignore1), Runtime429lib+38bin, standalone72lib+27integration (existing model ignore1), runtime-api10, root check/doc/fmt/diff/naming, Server/Runtime builds, isolated worker_environment2 passed. Earlier broad suites remain recorded on the prior source. Fixtures and injected boundaries are not arbitrary crash/remote-transport-loss coverage; worker_environment only verifies startup/connection/cleanup.

Acceptance clarification: T-734 assignment answer event22 explicitly defers real-model semantic condition6 to user use, excluding it from this completion scope. It remains unexecuted and unevaluated, not passed. Technical review findings still require a fresh independent verdict on this source.
2026-10-16 04:58:53 +09:00
Hare 5bd49760e5 fix: fence Journal originals before publication and reconcile removal intent
Protect attributed originals before the first public commit; distinguish pending Session material from missing committed sources. Gate removal admission by the Journal Feature and resolve Subject ownership from durable singleton authority. Resume explicit erasure through signed delete transport and proof-bound purge plans without creating a Journal Job or archive.

Validation: changed-crate suites, root check, doc/fmt/diff/naming checks, Server/Runtime builds and worker_environment isolation suite passed. Public standalone scripted dialog connects Host, automatic Job, sequential tools and drain while dialog continues. Backend public embedded WorkerRemove tests connect removal forwarding, durable Jobs, retention, Runtime and SQLite; Session/attribution/profile fixture setup bypasses creation/auth routes. Runtime signed generated-client tests separately exercise request authentication.

Limits: real-model semantic acceptance condition 6 remains unevaluated without a new explicit model/credential/budget grant. Conditions 1/7/8/11 do not have complete product E2E coverage: worker_environment only verifies isolated startup/connection/cleanup. Compaction tests connect local hooks/reader/store rather than the full public dialog-to-Journal chain. Erasure racing a previously prepared Archive removal plan fails closed with conflict; automatic stale-plan replacement is not implemented.
2026-10-16 03:59:45 +09:00
Hare 9debf43645 Merge remote-tracking branch 'origin/develop' into work/T-734-journal-recording 2026-10-16 02:19:24 +09:00
Hare 81af1f085c feat: record confirmed public Session history through durable Journal Jobs 2026-10-16 02:19:24 +09:00
Hare b67aa2de7d fix: simplify Ticket reporting and speed up browser lists
Remove model-supplied assignment and retry identities from implementation reports; retain Host idempotency, authentication and notification evidence.

Add a SQL-only browser projection and decouple auxiliary page loads. Preserve authoritative MR evidence queries. Include regression tests and component benchmarks, documenting the remaining no-match search cost.
2026-10-16 01:58:15 +09:00
Hare 6218c27fb6 fix: separate account registration from authenticated passkey addition
Bind enrollment purpose and allocated/current account to verifier state. Reject existing-handle registration, derive additions from live transport authentication, recheck revocation/expiry in the insert-only transaction, and consume challenges atomically across connections. Derive stable account WebAuthn handles without rewriting legacy credentials; reject implicit-user login and unsafe legacy ceremonies.

Align account callers, DTO/OpenAPI/generated artifacts and migration/recovery rationale. Preserve credential-less legacy identities rather than allowing anonymous reclaim.

Validation: 14 actual-verifier passkey tests; full workspace-server 1086 library + 11 binary passed (Drive ignored case explicitly selected separately and passed); server-api default 99 and TypeScript feature 108 passed; isolated auth/Runtime E2E 1+2 passed; Web 645 + component 394 passed; root cargo check, docs/doctests, Server/Runtime builds, fmt, naming and generated consistency passed. Software authenticator only; hosted CI/hardware login not claimed.
2026-10-16 00:55:16 +09:00
Hare 7b52bea23b feat: integrate MR notifications and implementation results 2026-10-15 19:40:29 +09:00
Hare a31f002a0a fix: retain MR source observations and notification actors 2026-10-15 19:13:03 +09:00
Hare 62d71ed17e fix: retain preparation diagnostics and source-owned cleanup 2026-10-15 18:51:00 +09:00
Hare cafa2fa6ea fix: integrate recoverable and fair Job notification retries 2026-10-15 18:44:20 +09:00
Hare 95ed9e8719 fix: fairly schedule undecided Job notification retries 2026-10-15 18:43:23 +09:00
Hare 84ea23c2e6 feat: route MR events and authenticated implementation results 2026-10-15 18:38:27 +09:00
Hare bdc7c73143 fix: retry Job notification source preparation failures 2026-10-15 18:33:23 +09:00
Hare b9e7d5675b fix: project Job receipts and pinned notification recipients 2026-10-15 18:28:11 +09:00
Hare c155259c8e chore: integrate backend Job notifications with diagnostics 2026-10-15 18:16:29 +09:00
Hare e33729647c fix: preserve notification uncertainty and target provenance 2026-10-15 18:15:47 +09:00
Hare e71177900e feat: route backend job results through common notifications 2026-10-15 18:12:07 +09:00
Hare f50fa47a48 fix: await DB cleanup in cancelled Runtime metadata test 2026-10-15 17:55:54 +09:00
Hare b71fc9ee54 feat: expose read-only notification routing and delivery diagnostics 2026-10-15 17:55:54 +09:00
Hare e70cba4618 chore: integrate case permission fixes for notification work 2026-10-15 16:58:21 +09:00
Hare d115819f51 fix: honor Profile case permissions and expose Ticket API errors 2026-10-15 16:55:09 +09:00
Hare 822a084b31 fix: centralize durable Ticket notification routing 2026-10-15 02:20:40 +09:00
Hare da378fc902 fix: complete Ticket post integration and expose targets
Preserve ordered targets in Workspace ShowTicket and native reads. Complete authenticated post-edit transport, shared dispatch, generated contracts and regression fixtures. Keep canonical content-edit delivery inputs transactional and separate from discussion posts.
2026-10-14 14:49:20 +09:00
Hare 8611078058 feat: unify Ticket posts and simplify detail layout
Checkpoint requested before the targets read-tool correction. Includes canonical initial posts, creator/edit metadata, migration and UI work, and removal of delivery diagnostics from Ticket details.\n\nIntegration remains incomplete: the Client post-edit trait implementation and server post routes/dispatch are not yet connected; cargo check currently fails. This commit does not assert validation or delivery completion.
2026-10-14 02:42:58 +09:00
Hare 12d1588c05 chore: merge develop preserving documentation structure and console UX
Integrate develop at 523bade3 while retaining concise agent guidance, rustdoc-owned design rationale, and current console history/rewind behavior. Adapt incoming tests to public entry-ID rewind and synchronize OpenAPI/TypeScript artifacts.

Validation: default-member cargo test --all-features (4936 passed, 23 ignored), root cargo check, all-feature rustdoc with broken links denied, format/diff/name guards, OpenAPI and 11 TypeScript freshness checks. Web: 613 unit, 327 component, 7 Ticket browser and 3 Console browser tests; check/build passed. Merged-state Ticket visual review at 1440/768/390px in light/dark; no matching pre-merge image baseline. E2E/live-provider checks not run.
2026-10-13 02:46:50 +09:00
Hare 523bade3a6 fix: compose bounded execution with Ticket public callers 2026-10-12 18:25:42 +09:00
Hare e436b2ae58 fix(server): own remaining request callers and stop continuation 2026-10-12 17:36:08 +09:00
Hare 4d98119440 fix(server): bound embedded protocol and Feature shutdown ownership 2026-10-12 15:07:27 +09:00
Hare c6d73e8286 revert: remove withdrawn T748 composition from T743 source
Mainline corrective revert of 5c5727e3; preserve published history and report bodies. Implementation, public contracts and T743 semantic tests return exactly to 9b0d42fd against develop56795fb9. T748 platform, only-dependent adapter and execution fixtures are not T743 return gates. Independent T743 review and fixes continue on this same branch/MR.
2026-10-12 15:03:44 +09:00
Hare 4efb0ace1f docs: consolidate design documentation and standardize crate English 2026-10-12 14:58:00 +09:00
Hare 5873f25073 fix(server): own residual Ticket MR and worker request stages 2026-10-12 14:46:05 +09:00
Hare 1a065db0fc fix(server): retain trust-key revoke publication after cancellation 2026-10-12 12:12:50 +09:00
Hare 925bce2a40 fix: own Runtime management authority stages and commit publication workflows 2026-10-12 11:24:12 +09:00
Hare dbcea6c34b fix: await bounded Worker discovery and Runtime resource summary owners 2026-10-12 10:25:59 +09:00
Hare a2487b575d fix: keep mandatory Subject callbacks independent of waiting Host parents 2026-10-12 09:41:50 +09:00
Hare 5c5727e3f8 merge: compose T748 bounded execution with T743 public callers 2026-10-12 09:00:39 +09:00
Hare c0223a0dea fix: await owned cold protocol signing and propagate authorization failure 2026-10-12 08:58:34 +09:00
Hare d3fcfb2977 fix: keep mixed Subjektiv Runtime waits off the sole DB worker 2026-10-12 08:58:31 +09:00
Hare 49bfbfb235 test: diagnose early command rejection instead of waiting forever for provider dispatch 2026-10-12 08:09:15 +09:00
Hare f597f1b57a fix: acquire SQLite write ownership before restore and deletion authority reads 2026-10-12 07:57:46 +09:00
Hare df9d056d42 test: observe SQL admission and publication before replacing authority or teardown 2026-10-12 07:55:07 +09:00
Hare f3d4aba54e fix: isolate finite DB and Host execution ownership in fixtures 2026-10-12 07:55:07 +09:00
Hare 9b0d42fdbc feat(ticket): expose case tags and independent assignment handling 2026-10-12 07:33:11 +09:00
Hare 61533fadb6 feat(backend): compose Assign routing with bounded async callers 2026-10-12 06:57:34 +09:00
Hare b1076f1d65 feat(backend): bound synchronous database and host execution ownership 2026-10-12 06:43:16 +09:00
Hare 56795fb92c fix: drain concurrent assignment inputs and discard stale pending retries 2026-10-12 05:39:33 +09:00
Hare 26434bb867 feat: route Orchestrator delivery and Worker starts from Ticket Assign 2026-10-12 05:13:53 +09:00