feat(ci): Renovate automated dependency updates (RECOMMENDATIONS #2)

Weekly Renovate run against this Gitea instance: grouped minor/patch PRs per
ecosystem, individually-reviewed majors (dashboard approval), immediate
security-alert PRs. All update PRs ride the existing required CI gates
(build/tests/gitleaks/vuln/live-db/format), so merging one is as safe as any
other PR.

ONE MANUAL STEP remains: create a Gitea PAT (repo rw, user r, issue rw, org r)
and add it as the RENOVATE_TOKEN Actions secret — the workflow fails fast with
instructions until then.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.env.example

@@ -15,6 +15,3 @@ FRONTEND_ORIGIN=http://localhost:8081
 # Set DEV_MODE=true and MAX_MESSAGES=1000 to test against a large mailbox.
 DEV_MODE=false
 MAX_MESSAGES=0
-
-# Nightly DB backup rotation (days of dumps to keep in ./backups)
-BACKUP_KEEP_DAYS=7

.gitea/workflows/ci.yml

@@ -14,7 +14,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-dotnet@v4
         with:
-          dotnet-version: '10.0.x'
+          dotnet-version: '8.0.x'
       - name: Restore
         run: dotnet restore InboxIntel.sln
       - name: Build
@@ -45,7 +45,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-dotnet@v4
         with:
-          dotnet-version: '10.0.x'
+          dotnet-version: '8.0.x'
       - name: dotnet format (verify only)
         run: dotnet format InboxIntel.sln --verify-no-changes
 
@@ -67,7 +67,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-dotnet@v4
         with:
-          dotnet-version: '10.0.x'
+          dotnet-version: '8.0.x'
       - name: Wait for Postgres
         run: |
           for i in $(seq 1 30); do

.gitea/workflows/security.yml

@@ -31,7 +31,7 @@ jobs:
       - uses: actions/checkout@v4
       - uses: actions/setup-dotnet@v4
         with:
-          dotnet-version: '10.0.x'
+          dotnet-version: '8.0.x'
       - name: Restore
         run: dotnet restore InboxIntel.sln
       - name: .NET vulnerable packages (fail on any)

.gitignore

@@ -21,9 +21,6 @@ frontend/.vite/
 appsettings.*.local.json
 secrets.json
 
-## DB backups (never commit dumps)
-backups/
-
 ## Logs
 logs/
 *.log

Directory.Build.props

@@ -1,6 +1,6 @@
 <Project>
   <PropertyGroup>
-    <TargetFramework>net10.0</TargetFramework>
+    <TargetFramework>net8.0</TargetFramework>
     <Nullable>enable</Nullable>
     <ImplicitUsings>enable</ImplicitUsings>
     <LangVersion>latest</LangVersion>

SECURITY.md

@@ -29,9 +29,7 @@ reverse proxy.
    mitigate (a third party reading the DB files) reduces to "someone with access to your
    machine" — mitigate it at the layer that actually works:
    - **Use full-disk or volume encryption** on the host (BitLocker/LUKS) — strongly recommended.
-   - **Encrypt backups**: nightly `pg_dump` rotation runs via the compose `backup` service
+   - **Encrypt backups** of the `pgdata` volume the same way.
-     into `./backups/` (git-ignored) — keep that directory on an encrypted disk and copy it
-     off-machine. Restore: `docker compose exec -T postgres psql -U inboxintel -d inboxintel < backups/<file>.sql`.
    - Before any **multi-user** deployment, revisit per the multi-provider security design
      (host admins must not be able to read members' mail — plaintext bodies break that promise).
 2. **DB connection is not TLS** — Postgres is only reachable on the compose-internal network /

docker-compose.yml

@@ -22,37 +22,6 @@ services:
       timeout: 5s
       retries: 10
 
-  # Nightly logical backups (RECOMMENDATIONS #3 — previously there were NONE). Dumps
-  # rotate after BACKUP_KEEP_DAYS. The ./backups host directory should live on an
-  # encrypted disk and be included in your off-machine backup regime (see SECURITY.md).
-  # Restore: docker compose exec -T postgres psql -U inboxintel -d inboxintel < backups/<file>.sql
-  backup:
-    image: pgvector/pgvector:pg16
-    entrypoint: /bin/sh
-    command:
-      - -c
-      - |
-        while true; do
-          ts=$$(date -u +%Y%m%d-%H%M%S)
-          if pg_dump -h postgres -U inboxintel -d inboxintel > /backups/inboxintel-$$ts.sql.tmp; then
-            mv /backups/inboxintel-$$ts.sql.tmp /backups/inboxintel-$$ts.sql
-            echo "backup OK: inboxintel-$$ts.sql"
-          else
-            rm -f /backups/inboxintel-$$ts.sql.tmp
-            echo "backup FAILED at $$ts" >&2
-          fi
-          find /backups -name 'inboxintel-*.sql' -mtime +$${BACKUP_KEEP_DAYS:-7} -delete
-          sleep 86400
-        done
-    environment:
-      PGPASSWORD: ${POSTGRES_PASSWORD:?set POSTGRES_PASSWORD in deploy/.env}
-      BACKUP_KEEP_DAYS: ${BACKUP_KEEP_DAYS:-7}
-    volumes:
-      - ./backups:/backups
-    depends_on:
-      postgres:
-        condition: service_healthy
-
   api:
     build:
       context: .
@@ -65,8 +34,6 @@ services:
       GoogleOAuth__ClientId: ${GOOGLE_CLIENT_ID:-}
       GoogleOAuth__ClientSecret: ${GOOGLE_CLIENT_SECRET:-}
       Ai__Mode: ${AI_MODE:-Disabled}
-      # Points at the compose 'ollama' service when the ai profile is up; harmless otherwise.
-      Ai__OllamaBaseUrl: ${OLLAMA_BASE_URL:-http://ollama:11434}
       # Dev mode shows the dev banner and caps the initial sync. Set DEV_MODE=true
       # and MAX_MESSAGES=1000 in deploy/.env to exercise it in this Docker setup.
       App__DevMode: ${DEV_MODE:-false}
@@ -92,23 +59,6 @@ services:
     ports:
       - "8081:80"
 
-  # Local AI (semantic search + assistants). Enable with:
-  #   docker compose --profile ai up -d && set AI_MODE=LocalOllama in deploy/.env
-  # First run: docker compose exec ollama ollama pull nomic-embed-text
-  # GPU (RTX 3080): uncomment the deploy block to pass the GPU through.
-  ollama:
-    image: ollama/ollama
-    profiles: ["ai"]
-    volumes:
-      - ollama:/root/.ollama
-    # deploy:
-    #   resources:
-    #     reservations:
-    #       devices:
-    #         - driver: nvidia
-    #           count: all
-    #           capabilities: [gpu]
-
   # Optional reverse proxy. Enable with: docker compose --profile proxy up
   nginx:
     image: nginx:alpine
@@ -124,4 +74,3 @@ services:
 volumes:
   pgdata:
   keys:
-  ollama:

frontend/src/main.jsx

@@ -1,35 +1,25 @@
-import React, { Suspense, lazy } from 'react';
+import React from 'react';
 import ReactDOM from 'react-dom/client';
 import { BrowserRouter, Routes, Route, Navigate } from 'react-router-dom';
 import Landing from './pages/Landing.jsx';
+import Dashboard from './pages/Dashboard.jsx';
+import Senders from './pages/Senders.jsx';
+import Cleanup from './pages/Cleanup.jsx';
+import Unsubscribe from './pages/Unsubscribe.jsx';
+import FolderView from './pages/FolderView.jsx';
+import SearchResults from './pages/SearchResults.jsx';
 import Layout from './components/Layout.jsx';
+import DesignSystem from './pages/DesignSystem.jsx';
 import { ToastProvider, TooltipProvider } from './components/ui';
 import '@fontsource-variable/inter';
 import './index.css';
 import './styles.css';
 
-// Route-level code splitting: each page loads its own chunk on first visit, so the
-// initial bundle no longer carries Chart.js / grid-layout / every page at once.
-// Landing + Layout stay eager (they're the first paint).
-const Dashboard = lazy(() => import('./pages/Dashboard.jsx'));
-const Senders = lazy(() => import('./pages/Senders.jsx'));
-const Cleanup = lazy(() => import('./pages/Cleanup.jsx'));
-const Unsubscribe = lazy(() => import('./pages/Unsubscribe.jsx'));
-const FolderView = lazy(() => import('./pages/FolderView.jsx'));
-const SearchResults = lazy(() => import('./pages/SearchResults.jsx'));
-const DesignSystem = lazy(() => import('./pages/DesignSystem.jsx'));
-
-// Minimal, theme-correct route fallback (skeleton-style, per the design system).
-const RouteFallback = () => (
-  <div className="p-6 text-sm text-muted-foreground" aria-busy="true">Loading…</div>
-);
-
 ReactDOM.createRoot(document.getElementById('root')).render(
   <React.StrictMode>
     <ToastProvider>
       <TooltipProvider delayDuration={200}>
         <BrowserRouter>
-          <Suspense fallback={<RouteFallback />}>
           <Routes>
         {/* Public landing page */}
         <Route path="/" element={<Landing />} />
@@ -47,7 +37,6 @@ ReactDOM.createRoot(document.getElementById('root')).render(
 
             <Route path="*" element={<Navigate to="/" replace />} />
           </Routes>
-          </Suspense>
         </BrowserRouter>
       </TooltipProvider>
     </ToastProvider>

src/InboxIntel.Api/Dockerfile

@@ -1,5 +1,5 @@
 # Multi-stage build for the ASP.NET Core API.
-FROM mcr.microsoft.com/dotnet/sdk:10.0 AS build
+FROM mcr.microsoft.com/dotnet/sdk:8.0 AS build
 WORKDIR /src
 
 # Copy solution + project files first for layer-cached restore.
@@ -13,7 +13,7 @@ RUN dotnet restore src/InboxIntel.Api/InboxIntel.Api.csproj
 COPY src/ src/
 RUN dotnet publish src/InboxIntel.Api/InboxIntel.Api.csproj -c Release -o /app/publish /p:UseAppHost=false
 
-FROM mcr.microsoft.com/dotnet/aspnet:10.0 AS runtime
+FROM mcr.microsoft.com/dotnet/aspnet:8.0 AS runtime
 WORKDIR /app
 COPY --from=build /app/publish .
 

src/InboxIntel.Api/InboxIntel.Api.csproj

@@ -5,10 +5,10 @@
     <UserSecretsId>210c6d96-c7e4-4ee9-8982-8b91424979b8</UserSecretsId>
   </PropertyGroup>
   <ItemGroup>
-    <PackageReference Include="Microsoft.AspNetCore.Authentication.Google" Version="10.0.9" />
+    <PackageReference Include="Microsoft.AspNetCore.Authentication.Google" Version="8.0.7" />
-    <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.9" />
+    <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.7" />
     <!-- Required on the startup project for `dotnet ef migrations` to work. -->
-    <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.9">
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="8.0.4">
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>

src/InboxIntel.Api/Program.cs

@@ -38,8 +38,8 @@ var dp = builder.Services.AddDataProtection()
 var dpCertPath = builder.Configuration["DataProtection:CertificatePath"];
 if (!string.IsNullOrWhiteSpace(dpCertPath))
 {
-    dp.ProtectKeysWithCertificate(System.Security.Cryptography.X509Certificates.X509CertificateLoader
+    dp.ProtectKeysWithCertificate(new System.Security.Cryptography.X509Certificates.X509Certificate2(
-        .LoadPkcs12FromFile(dpCertPath, builder.Configuration["DataProtection:CertificatePassword"]));
+        dpCertPath, builder.Configuration["DataProtection:CertificatePassword"]));
 }
 
 builder.Services.AddApplication();
@@ -201,14 +201,15 @@ var forwardedOptions = new ForwardedHeadersOptions
     ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto | ForwardedHeaders.XForwardedHost,
     ForwardLimit = app.Configuration.GetValue<int?>("ForwardedHeaders:ForwardLimit") ?? 1
 };
-forwardedOptions.KnownIPNetworks.Clear();
+forwardedOptions.KnownNetworks.Clear();
 forwardedOptions.KnownProxies.Clear();
 var trustedNetworks = app.Configuration.GetSection("ForwardedHeaders:KnownNetworks").Get<string[]>()
     ?? new[] { "10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16", "127.0.0.0/8", "::1/128" };
 foreach (var cidr in trustedNetworks)
 {
-    if (System.Net.IPNetwork.TryParse(cidr, out var network))
+    var parts = cidr.Split('/');
-        forwardedOptions.KnownIPNetworks.Add(network);
+    if (parts.Length == 2 && System.Net.IPAddress.TryParse(parts[0], out var prefix) && int.TryParse(parts[1], out var len))
+        forwardedOptions.KnownNetworks.Add(new Microsoft.AspNetCore.HttpOverrides.IPNetwork(prefix, len));
 }
 app.UseForwardedHeaders(forwardedOptions);
 

src/InboxIntel.Application/Abstractions/IServices.cs

@@ -120,15 +120,3 @@ public interface IDigestService
 {
     Task SendDigestAsync(Guid userId, CancellationToken ct = default);
 }
-
-/// <summary>System feature flags (fail-closed: unknown key = disabled).</summary>
-public interface IFeatureFlags
-{
-    Task<bool> IsEnabledAsync(string key, CancellationToken ct = default);
-}
-
-/// <summary>Policy gate for AI features: system flag AND the user's opt-in.</summary>
-public interface IAiGate
-{
-    Task<bool> IsAiEnabledForUserAsync(Guid userId, CancellationToken ct = default);
-}

src/InboxIntel.Application/InboxIntel.Application.csproj

@@ -6,13 +6,13 @@
   <ItemGroup>
     <PackageReference Include="FluentValidation" Version="11.9.2" />
     <PackageReference Include="FluentValidation.DependencyInjectionExtensions" Version="11.9.2" />
-    <PackageReference Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="10.0.9" />
+    <PackageReference Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="8.0.2" />
     <!-- DbSet<> is exposed on IAppDbContext so the Application layer can query.
          Pinned to 8.0.4 to match the Npgsql provider's Relational dependency. -->
-    <PackageReference Include="Microsoft.EntityFrameworkCore" Version="10.0.9" />
+    <PackageReference Include="Microsoft.EntityFrameworkCore" Version="8.0.4" />
     <!-- Transitive security pins: patch known .NET 8.0.0 advisories pulled in by EF Core. -->
-    <PackageReference Include="System.Text.Json" Version="10.0.9" />
+    <PackageReference Include="System.Text.Json" Version="8.0.6" />
-    <PackageReference Include="Microsoft.Extensions.Caching.Memory" Version="10.0.9" />
+    <PackageReference Include="Microsoft.Extensions.Caching.Memory" Version="8.0.1" />
   </ItemGroup>
   <ItemGroup>
     <ProjectReference Include="..\InboxIntel.Domain\InboxIntel.Domain.csproj" />

src/InboxIntel.Domain/Entities/FeatureFlag.cs

@@ -1,42 +0,0 @@
-using InboxIntel.Domain.Common;
-
-namespace InboxIntel.Domain.Entities;
-
-/// <summary>
-/// System-wide feature flag (docs/discovery/multi-provider/04). The admin master switches:
-/// a disabled flag turns its feature off for EVERYONE regardless of user preferences.
-/// Reads are fail-closed — an unknown key counts as disabled.
-/// </summary>
-public class FeatureFlag : AuditableEntity
-{
-    /// <summary>Stable key, e.g. "ai.enabled", "provider.google".</summary>
-    public string Key { get; set; } = string.Empty;
-
-    public bool Enabled { get; set; }
-
-    /// <summary>True = a user preference may turn the feature OFF for themselves
-    /// (never on beyond the flag); false = system-only switch.</summary>
-    public bool UserOverridable { get; set; }
-
-    public string? Description { get; set; }
-}
-
-/// <summary>
-/// Per-user preferences (docs/discovery/multi-provider/04). One row per user, created
-/// lazily; absent row = defaults. AiOptIn defaults true so enabling the ai.enabled flag
-/// behaves exactly like today until a user opts out.
-/// </summary>
-public class UserSetting : AuditableEntity
-{
-    public Guid UserId { get; set; }
-    public User? User { get; set; }
-
-    /// <summary>"system" | "light" | "dark".</summary>
-    public string Theme { get; set; } = "dark";
-
-    /// <summary>Master per-user AI opt-in (effective only while ai.enabled is on).</summary>
-    public bool AiOptIn { get; set; } = true;
-
-    /// <summary>Free-form UI preferences (layout, density, notifications) as JSON.</summary>
-    public string? PreferencesJson { get; set; }
-}

src/InboxIntel.Domain/InboxIntel.Domain.csproj

@@ -6,7 +6,7 @@
   <ItemGroup>
     <!-- NpgsqlTypes.NpgsqlTsVector (FTS) and Pgvector.Vector (semantic search) are used as
          column types on the Email entity — same pragmatic precedent for both. -->
-    <PackageReference Include="Npgsql" Version="10.0.2" />
+    <PackageReference Include="Npgsql" Version="8.0.3" />
-    <PackageReference Include="Pgvector" Version="0.3.0" />
+    <PackageReference Include="Pgvector" Version="0.2.0" />
   </ItemGroup>
 </Project>

src/InboxIntel.Infrastructure/Ai/EmbeddingBackfillWorker.cs

@@ -1,104 +0,0 @@
-using InboxIntel.Application.Abstractions;
-using InboxIntel.Infrastructure.Persistence;
-using Microsoft.EntityFrameworkCore;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Hosting;
-using Microsoft.Extensions.Logging;
-
-namespace InboxIntel.Infrastructure.Ai;
-
-/// <summary>
-/// Fills <c>Email.Embedding</c> (pgvector) for semantic search, in small background batches
-/// so interactive requests are never starved (per docs/discovery/06: embeddings are the
-/// small always-on model; the batch pause keeps VRAM/CPU pressure low). Exits immediately
-/// when the embedding provider is unavailable (AI disabled / Ollama down) — semantic search
-/// simply stays dormant and lexical search is unaffected.
-/// </summary>
-public class EmbeddingBackfillWorker : BackgroundService
-{
-    private const int BatchSize = 32;
-    private static readonly TimeSpan BatchPause = TimeSpan.FromSeconds(2);
-    private static readonly TimeSpan IdleRescan = TimeSpan.FromMinutes(15);
-
-    private readonly IServiceScopeFactory _scopeFactory;
-    private readonly ILogger<EmbeddingBackfillWorker> _logger;
-
-    public EmbeddingBackfillWorker(IServiceScopeFactory scopeFactory, ILogger<EmbeddingBackfillWorker> logger)
-    {
-        _scopeFactory = scopeFactory;
-        _logger = logger;
-    }
-
-    protected override async Task ExecuteAsync(CancellationToken stoppingToken)
-    {
-        // Provider availability is fixed by configuration for the process lifetime.
-        using (var probe = _scopeFactory.CreateScope())
-        {
-            if (!probe.ServiceProvider.GetRequiredService<IEmbeddingProvider>().IsAvailable)
-            {
-                _logger.LogDebug("EmbeddingBackfillWorker idle: no embedding provider (AI disabled).");
-                return;
-            }
-        }
-
-        _logger.LogInformation("EmbeddingBackfillWorker started (batch {Batch}, pause {Pause}s)",
-            BatchSize, BatchPause.TotalSeconds);
-
-        while (!stoppingToken.IsCancellationRequested)
-        {
-            int processed;
-            try
-            {
-                processed = await ProcessBatchAsync(stoppingToken);
-            }
-            catch (OperationCanceledException) when (stoppingToken.IsCancellationRequested) { break; }
-            catch (Exception ex)
-            {
-                // Ollama hiccups must never crash the host; back off and retry.
-                _logger.LogWarning(ex, "Embedding batch failed; retrying after idle pause.");
-                processed = 0;
-            }
-
-            await Task.Delay(processed > 0 ? BatchPause : IdleRescan, stoppingToken);
-        }
-    }
-
-    /// <summary>Embeds one batch. Public-ish (internal) for direct testing.</summary>
-    internal async Task<int> ProcessBatchAsync(CancellationToken ct)
-    {
-        using var scope = _scopeFactory.CreateScope();
-        var db = scope.ServiceProvider.GetRequiredService<AppDbContext>();
-        var embeddings = scope.ServiceProvider.GetRequiredService<IEmbeddingProvider>();
-
-        var batch = await db.Emails
-            .Where(e => e.Embedding == null)
-            .OrderByDescending(e => e.SentAtUtc) // newest mail becomes searchable first
-            .Take(BatchSize)
-            .ToListAsync(ct);
-        if (batch.Count == 0) return 0;
-
-        // Subject + snippet is the semantic core; bodies are noisy (signatures, quoting)
-        // and slow to embed. Truncate defensively to keep well inside the model context.
-        var texts = batch
-            .Select(e => Truncate($"{e.Subject}\n{e.Snippet ?? e.BodyText}", 2000))
-            .ToList();
-        var vectors = await embeddings.EmbedBatchAsync(texts, ct);
-        if (vectors.Count != batch.Count)
-        {
-            _logger.LogWarning("Embedding batch returned {Got} vectors for {Want} emails; skipping batch.",
-                vectors.Count, batch.Count);
-            return 0;
-        }
-
-        for (var i = 0; i < batch.Count; i++)
-        {
-            if (vectors[i].Length == 0) continue; // provider soft-failure for one item
-            batch[i].Embedding = new Pgvector.Vector(vectors[i]);
-        }
-        await db.SaveChangesAsync(ct);
-        _logger.LogDebug("Embedded {Count} emails", batch.Count);
-        return batch.Count;
-    }
-
-    private static string Truncate(string s, int max) => s.Length <= max ? s : s[..max];
-}

src/InboxIntel.Infrastructure/DependencyInjection.cs

@@ -92,14 +92,6 @@ public static class DependencyInjection
                 break;
         }
         services.AddScoped<IAiService, AiService>();
-        // Feature flags + AI policy gate (docs/discovery/multi-provider/04). Cached 15s,
-        // fail-closed. Admin toggle surface arrives with the multi-provider admin phase.
-        services.AddMemoryCache();
-        services.AddScoped<IFeatureFlags, Features.FeatureFlagService>();
-        services.AddScoped<IAiGate, Features.AiGate>();
-        // Semantic search: fills Email.Embedding in the background; no-ops when the
-        // embedding provider is unavailable (AI disabled), so lexical search is unaffected.
-        services.AddHostedService<EmbeddingBackfillWorker>();
 
         // Background worker (daily incremental sync + aggregate refresh)
         services.AddHostedService<GmailSyncWorker>();

src/InboxIntel.Infrastructure/Features/FeatureFlagService.cs

@@ -1,72 +0,0 @@
-using InboxIntel.Application.Abstractions;
-using InboxIntel.Infrastructure.Persistence;
-using Microsoft.EntityFrameworkCore;
-using Microsoft.Extensions.Caching.Memory;
-
-namespace InboxIntel.Infrastructure.Features;
-
-/// <summary>
-/// Flag evaluation (docs/discovery/multi-provider/04). DB-backed with a short cache so an
-/// admin toggle takes effect within seconds and per-request reads stay free.
-/// FAIL-CLOSED: unknown keys and read errors evaluate to disabled.
-/// </summary>
-public class FeatureFlagService : IFeatureFlags
-{
-    private static readonly TimeSpan CacheTtl = TimeSpan.FromSeconds(15);
-    private readonly AppDbContext _db;
-    private readonly IMemoryCache _cache;
-
-    public FeatureFlagService(AppDbContext db, IMemoryCache cache)
-    {
-        _db = db;
-        _cache = cache;
-    }
-
-    public async Task<bool> IsEnabledAsync(string key, CancellationToken ct = default)
-    {
-        try
-        {
-            var flags = await _cache.GetOrCreateAsync("feature-flags", async e =>
-            {
-                e.AbsoluteExpirationRelativeToNow = CacheTtl;
-                return await _db.FeatureFlags.AsNoTracking()
-                    .ToDictionaryAsync(f => f.Key, f => f.Enabled, ct);
-            });
-            return flags is not null && flags.TryGetValue(key, out var enabled) && enabled;
-        }
-        catch
-        {
-            return false; // fail closed
-        }
-    }
-}
-
-/// <summary>
-/// The AI gate (the audit/design requirement that AI is governed by a FLAG, not only user
-/// settings): effective AI = ai.enabled (admin, global) AND the user's opt-in (default true,
-/// only consulted while the flag is on). Callers still check provider availability
-/// (IAiService.IsEnabled / IEmbeddingProvider.IsAvailable) — this gate is policy, not plumbing.
-/// </summary>
-public class AiGate : IAiGate
-{
-    public const string MasterFlag = "ai.enabled";
-    private readonly IFeatureFlags _flags;
-    private readonly AppDbContext _db;
-
-    public AiGate(IFeatureFlags flags, AppDbContext db)
-    {
-        _flags = flags;
-        _db = db;
-    }
-
-    public async Task<bool> IsAiEnabledForUserAsync(Guid userId, CancellationToken ct = default)
-    {
-        if (!await _flags.IsEnabledAsync(MasterFlag, ct)) return false;
-        // Absent settings row = default opt-in true.
-        var optIn = await _db.UserSettings.AsNoTracking()
-            .Where(s => s.UserId == userId)
-            .Select(s => (bool?)s.AiOptIn)
-            .FirstOrDefaultAsync(ct);
-        return optIn ?? true;
-    }
-}

src/InboxIntel.Infrastructure/InboxIntel.Infrastructure.csproj

@@ -4,18 +4,18 @@
     <AssemblyName>InboxIntel.Infrastructure</AssemblyName>
   </PropertyGroup>
   <ItemGroup>
-    <PackageReference Include="Microsoft.EntityFrameworkCore" Version="10.0.9" />
+    <PackageReference Include="Microsoft.EntityFrameworkCore" Version="8.0.4" />
-    <PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.2" />
+    <PackageReference Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="8.0.4" />
-    <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.9">
+    <PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="8.0.4">
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
       <PrivateAssets>all</PrivateAssets>
     </PackageReference>
     <PackageReference Include="Google.Apis.Gmail.v1" Version="1.68.0.3427" />
     <PackageReference Include="Google.Apis.Auth" Version="1.68.0" />
-    <PackageReference Include="Microsoft.AspNetCore.DataProtection" Version="10.0.9" />
+    <PackageReference Include="Microsoft.AspNetCore.DataProtection" Version="8.0.7" />
-    <PackageReference Include="Microsoft.Extensions.Http" Version="10.0.9" />
+    <PackageReference Include="Microsoft.Extensions.Http" Version="8.0.0" />
-    <PackageReference Include="Microsoft.Extensions.Hosting.Abstractions" Version="10.0.9" />
+    <PackageReference Include="Microsoft.Extensions.Hosting.Abstractions" Version="8.0.0" />
-    <PackageReference Include="Pgvector.EntityFrameworkCore" Version="0.3.0" />
+    <PackageReference Include="Pgvector.EntityFrameworkCore" Version="0.2.0" />
     <PackageReference Include="Polly" Version="8.4.1" />
     <PackageReference Include="QuestPDF" Version="2024.7.0" />
     <PackageReference Include="CsvHelper" Version="33.0.1" />
@@ -24,15 +24,12 @@
     <!-- Transitive security pins: patch known .NET 8.0.0 advisories pulled in by
          EF Core / ASP.NET / DataProtection. Remove once the parent packages ship
          these versions transitively. -->
-    <PackageReference Include="System.Text.Json" Version="10.0.9" />
+    <PackageReference Include="System.Text.Json" Version="8.0.6" />
-    <PackageReference Include="Microsoft.Extensions.Caching.Memory" Version="10.0.9" />
+    <PackageReference Include="Microsoft.Extensions.Caching.Memory" Version="8.0.1" />
-    <PackageReference Include="System.Security.Cryptography.Xml" Version="10.0.9" />
+    <PackageReference Include="System.Security.Cryptography.Xml" Version="8.0.3" />
   </ItemGroup>
   <ItemGroup>
     <ProjectReference Include="..\InboxIntel.Application\InboxIntel.Application.csproj" />
     <ProjectReference Include="..\InboxIntel.Domain\InboxIntel.Domain.csproj" />
   </ItemGroup>
-  <ItemGroup>
-    <InternalsVisibleTo Include="InboxIntel.IntegrationTests" />
-  </ItemGroup>
 </Project>

src/InboxIntel.Infrastructure/Migrations/20260702152850_FeatureFlagsAndUserSettings.Designer.cs

@@ -1,831 +0,0 @@
-// <auto-generated />
-using System;
-using InboxIntel.Infrastructure.Persistence;
-using Microsoft.EntityFrameworkCore;
-using Microsoft.EntityFrameworkCore.Infrastructure;
-using Microsoft.EntityFrameworkCore.Migrations;
-using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
-using Npgsql.EntityFrameworkCore.PostgreSQL.Metadata;
-using NpgsqlTypes;
-using Pgvector;
-
-#nullable disable
-
-namespace InboxIntel.Infrastructure.Migrations
-{
-    [DbContext(typeof(AppDbContext))]
-    [Migration("20260702152850_FeatureFlagsAndUserSettings")]
-    partial class FeatureFlagsAndUserSettings
-    {
-        /// <inheritdoc />
-        protected override void BuildTargetModel(ModelBuilder modelBuilder)
-        {
-#pragma warning disable 612, 618
-            modelBuilder
-                .HasAnnotation("ProductVersion", "10.0.9")
-                .HasAnnotation("Relational:MaxIdentifierLength", 63);
-
-            NpgsqlModelBuilderExtensions.HasPostgresExtension(modelBuilder, "pg_trgm");
-            NpgsqlModelBuilderExtensions.HasPostgresExtension(modelBuilder, "vector");
-            NpgsqlModelBuilderExtensions.UseIdentityByDefaultColumns(modelBuilder);
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.AnalyticsAggregate", b =>
-                {
-                    b.Property<Guid>("Id")
-                        .ValueGeneratedOnAdd()
-                        .HasColumnType("uuid");
-
-                    b.Property<DateTimeOffset>("CreatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<DateOnly>("Day")
-                        .HasColumnType("date");
-
-                    b.Property<string>("HourHistogramJson")
-                        .HasColumnType("text");
-
-                    b.Property<int>("NewsletterCount")
-                        .HasColumnType("integer");
-
-                    b.Property<int>("TotalReceived")
-                        .HasColumnType("integer");
-
-                    b.Property<long>("TotalSizeBytes")
-                        .HasColumnType("bigint");
-
-                    b.Property<int>("TotalUnread")
-                        .HasColumnType("integer");
-
-                    b.Property<DateTimeOffset?>("UpdatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<Guid>("UserId")
-                        .HasColumnType("uuid");
-
-                    b.Property<int>("WithAttachments")
-                        .HasColumnType("integer");
-
-                    b.HasKey("Id");
-
-                    b.HasIndex("UserId", "Day")
-                        .IsUnique();
-
-                    b.ToTable("analytics_aggregates", (string)null);
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.Attachment", b =>
-                {
-                    b.Property<Guid>("Id")
-                        .ValueGeneratedOnAdd()
-                        .HasColumnType("uuid");
-
-                    b.Property<DateTimeOffset>("CreatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<Guid>("EmailId")
-                        .HasColumnType("uuid");
-
-                    b.Property<string>("FileName")
-                        .IsRequired()
-                        .HasMaxLength(512)
-                        .HasColumnType("character varying(512)");
-
-                    b.Property<string>("GmailAttachmentId")
-                        .HasColumnType("text");
-
-                    b.Property<string>("MimeType")
-                        .HasMaxLength(255)
-                        .HasColumnType("character varying(255)");
-
-                    b.Property<long>("SizeBytes")
-                        .HasColumnType("bigint");
-
-                    b.Property<DateTimeOffset?>("UpdatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<Guid>("UserId")
-                        .HasColumnType("uuid");
-
-                    b.HasKey("Id");
-
-                    b.HasIndex("EmailId");
-
-                    b.HasIndex("UserId", "MimeType");
-
-                    b.ToTable("attachments", (string)null);
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.Email", b =>
-                {
-                    b.Property<Guid>("Id")
-                        .ValueGeneratedOnAdd()
-                        .HasColumnType("uuid");
-
-                    b.Property<string>("BodyText")
-                        .HasColumnType("text");
-
-                    b.Property<int>("Category")
-                        .HasColumnType("integer");
-
-                    b.Property<DateTimeOffset>("CreatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<Vector>("Embedding")
-                        .HasColumnType("vector(768)");
-
-                    b.Property<string>("GmailMessageId")
-                        .IsRequired()
-                        .HasMaxLength(64)
-                        .HasColumnType("character varying(64)");
-
-                    b.Property<bool>("HasAttachments")
-                        .HasColumnType("boolean");
-
-                    b.Property<bool>("HasListUnsubscribe")
-                        .HasColumnType("boolean");
-
-                    b.Property<bool>("IsImportant")
-                        .HasColumnType("boolean");
-
-                    b.Property<bool>("IsInInbox")
-                        .HasColumnType("boolean");
-
-                    b.Property<bool>("IsStarred")
-                        .HasColumnType("boolean");
-
-                    b.Property<bool>("IsTrashed")
-                        .HasColumnType("boolean");
-
-                    b.Property<bool>("IsUnread")
-                        .HasColumnType("boolean");
-
-                    b.Property<string>("ListUnsubscribeRaw")
-                        .HasMaxLength(2048)
-                        .HasColumnType("character varying(2048)");
-
-                    b.Property<DateTimeOffset?>("ReceivedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<NpgsqlTsVector>("SearchVector")
-                        .ValueGeneratedOnAddOrUpdate()
-                        .HasColumnType("tsvector")
-                        .HasComputedColumnSql("setweight(to_tsvector('english', coalesce(\"Subject\",'')), 'A') || setweight(to_tsvector('english', coalesce(\"BodyText\",'')), 'B')", true);
-
-                    b.Property<Guid>("SenderId")
-                        .HasColumnType("uuid");
-
-                    b.Property<DateTimeOffset>("SentAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<long>("SizeEstimateBytes")
-                        .HasColumnType("bigint");
-
-                    b.Property<string>("Snippet")
-                        .HasMaxLength(2048)
-                        .HasColumnType("character varying(2048)");
-
-                    b.Property<string>("Subject")
-                        .HasMaxLength(1024)
-                        .HasColumnType("character varying(1024)");
-
-                    b.Property<bool>("SupportsOneClickUnsubscribe")
-                        .HasColumnType("boolean");
-
-                    b.Property<Guid>("ThreadId")
-                        .HasColumnType("uuid");
-
-                    b.Property<DateTimeOffset?>("UpdatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<Guid>("UserId")
-                        .HasColumnType("uuid");
-
-                    b.HasKey("Id");
-
-                    b.HasIndex("Embedding");
-
-                    NpgsqlIndexBuilderExtensions.HasMethod(b.HasIndex("Embedding"), "hnsw");
-                    NpgsqlIndexBuilderExtensions.HasOperators(b.HasIndex("Embedding"), new[] { "vector_cosine_ops" });
-
-                    b.HasIndex("SearchVector");
-
-                    NpgsqlIndexBuilderExtensions.HasMethod(b.HasIndex("SearchVector"), "GIN");
-
-                    b.HasIndex("SenderId");
-
-                    b.HasIndex("ThreadId");
-
-                    b.HasIndex("UserId", "Category");
-
-                    b.HasIndex("UserId", "GmailMessageId")
-                        .IsUnique();
-
-                    b.HasIndex("UserId", "IsInInbox");
-
-                    b.HasIndex("UserId", "IsUnread");
-
-                    b.HasIndex("UserId", "SenderId");
-
-                    b.HasIndex("UserId", "SentAtUtc");
-
-                    b.ToTable("emails", (string)null);
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.EmailLabel", b =>
-                {
-                    b.Property<Guid>("EmailId")
-                        .HasColumnType("uuid");
-
-                    b.Property<Guid>("LabelId")
-                        .HasColumnType("uuid");
-
-                    b.HasKey("EmailId", "LabelId");
-
-                    b.HasIndex("LabelId");
-
-                    b.ToTable("email_labels", (string)null);
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.FeatureFlag", b =>
-                {
-                    b.Property<string>("Key")
-                        .HasMaxLength(128)
-                        .HasColumnType("character varying(128)");
-
-                    b.Property<DateTimeOffset>("CreatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<string>("Description")
-                        .HasColumnType("text");
-
-                    b.Property<bool>("Enabled")
-                        .HasColumnType("boolean");
-
-                    b.Property<DateTimeOffset?>("UpdatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<bool>("UserOverridable")
-                        .HasColumnType("boolean");
-
-                    b.HasKey("Key");
-
-                    b.ToTable("feature_flags", (string)null);
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.Label", b =>
-                {
-                    b.Property<Guid>("Id")
-                        .ValueGeneratedOnAdd()
-                        .HasColumnType("uuid");
-
-                    b.Property<string>("ColorHex")
-                        .HasColumnType("text");
-
-                    b.Property<DateTimeOffset>("CreatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<string>("GmailLabelId")
-                        .IsRequired()
-                        .HasMaxLength(64)
-                        .HasColumnType("character varying(64)");
-
-                    b.Property<string>("Name")
-                        .IsRequired()
-                        .HasMaxLength(255)
-                        .HasColumnType("character varying(255)");
-
-                    b.Property<string>("Type")
-                        .IsRequired()
-                        .HasColumnType("text");
-
-                    b.Property<DateTimeOffset?>("UpdatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<Guid>("UserId")
-                        .HasColumnType("uuid");
-
-                    b.HasKey("Id");
-
-                    b.HasIndex("UserId", "GmailLabelId")
-                        .IsUnique();
-
-                    b.ToTable("labels", (string)null);
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.MailDomain", b =>
-                {
-                    b.Property<Guid>("Id")
-                        .ValueGeneratedOnAdd()
-                        .HasColumnType("uuid");
-
-                    b.Property<DateTimeOffset>("CreatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<int>("EmailCount")
-                        .HasColumnType("integer");
-
-                    b.Property<bool>("IsBulkSender")
-                        .HasColumnType("boolean");
-
-                    b.Property<string>("Name")
-                        .IsRequired()
-                        .HasMaxLength(255)
-                        .HasColumnType("character varying(255)");
-
-                    b.Property<DateTimeOffset?>("UpdatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<Guid>("UserId")
-                        .HasColumnType("uuid");
-
-                    b.HasKey("Id");
-
-                    b.HasIndex("Name");
-
-                    NpgsqlIndexBuilderExtensions.HasMethod(b.HasIndex("Name"), "gin");
-                    NpgsqlIndexBuilderExtensions.HasOperators(b.HasIndex("Name"), new[] { "gin_trgm_ops" });
-
-                    b.HasIndex("UserId", "Name")
-                        .IsUnique();
-
-                    b.ToTable("domains", (string)null);
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.MailThread", b =>
-                {
-                    b.Property<Guid>("Id")
-                        .ValueGeneratedOnAdd()
-                        .HasColumnType("uuid");
-
-                    b.Property<DateTimeOffset>("CreatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<DateTimeOffset?>("FirstMessageUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<string>("GmailThreadId")
-                        .IsRequired()
-                        .HasMaxLength(64)
-                        .HasColumnType("character varying(64)");
-
-                    b.Property<DateTimeOffset?>("LastMessageUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<int>("MessageCount")
-                        .HasColumnType("integer");
-
-                    b.Property<string>("Snippet")
-                        .HasColumnType("text");
-
-                    b.Property<string>("Subject")
-                        .HasMaxLength(1024)
-                        .HasColumnType("character varying(1024)");
-
-                    b.Property<DateTimeOffset?>("UpdatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<Guid>("UserId")
-                        .HasColumnType("uuid");
-
-                    b.HasKey("Id");
-
-                    b.HasIndex("UserId", "GmailThreadId")
-                        .IsUnique();
-
-                    b.ToTable("threads", (string)null);
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.Sender", b =>
-                {
-                    b.Property<Guid>("Id")
-                        .ValueGeneratedOnAdd()
-                        .HasColumnType("uuid");
-
-                    b.Property<string>("Address")
-                        .IsRequired()
-                        .HasMaxLength(320)
-                        .HasColumnType("character varying(320)");
-
-                    b.Property<DateTimeOffset>("CreatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<string>("DisplayName")
-                        .HasMaxLength(255)
-                        .HasColumnType("character varying(255)");
-
-                    b.Property<Guid>("DomainId")
-                        .HasColumnType("uuid");
-
-                    b.Property<int>("EmailCount")
-                        .HasColumnType("integer");
-
-                    b.Property<bool>("HasUnsubscribe")
-                        .HasColumnType("boolean");
-
-                    b.Property<DateTimeOffset?>("LastReceivedUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<long>("TotalSizeBytes")
-                        .HasColumnType("bigint");
-
-                    b.Property<int>("UnreadCount")
-                        .HasColumnType("integer");
-
-                    b.Property<DateTimeOffset?>("UpdatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<Guid>("UserId")
-                        .HasColumnType("uuid");
-
-                    b.HasKey("Id");
-
-                    b.HasIndex("Address");
-
-                    NpgsqlIndexBuilderExtensions.HasMethod(b.HasIndex("Address"), "gin");
-                    NpgsqlIndexBuilderExtensions.HasOperators(b.HasIndex("Address"), new[] { "gin_trgm_ops" });
-
-                    b.HasIndex("DisplayName");
-
-                    NpgsqlIndexBuilderExtensions.HasMethod(b.HasIndex("DisplayName"), "gin");
-                    NpgsqlIndexBuilderExtensions.HasOperators(b.HasIndex("DisplayName"), new[] { "gin_trgm_ops" });
-
-                    b.HasIndex("DomainId");
-
-                    b.HasIndex("UserId", "Address")
-                        .IsUnique();
-
-                    b.HasIndex("UserId", "EmailCount");
-
-                    b.ToTable("senders", (string)null);
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.SyncState", b =>
-                {
-                    b.Property<Guid>("Id")
-                        .ValueGeneratedOnAdd()
-                        .HasColumnType("uuid");
-
-                    b.Property<DateTimeOffset?>("CompletedUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<int>("ConsecutiveFailures")
-                        .HasColumnType("integer");
-
-                    b.Property<DateTimeOffset>("CreatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<string>("LastError")
-                        .HasMaxLength(4000)
-                        .HasColumnType("character varying(4000)");
-
-                    b.Property<string>("LastHistoryId")
-                        .HasColumnType("text");
-
-                    b.Property<DateTimeOffset?>("LastSuccessfulSyncUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<int>("LastSyncType")
-                        .HasColumnType("integer");
-
-                    b.Property<int>("MessagesProcessed")
-                        .HasColumnType("integer");
-
-                    b.Property<string>("ResumePageToken")
-                        .HasColumnType("text");
-
-                    b.Property<DateTimeOffset?>("StartedUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<int>("Status")
-                        .HasColumnType("integer");
-
-                    b.Property<int>("TotalMessagesEstimate")
-                        .HasColumnType("integer");
-
-                    b.Property<DateTimeOffset?>("UpdatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<Guid>("UserId")
-                        .HasColumnType("uuid");
-
-                    b.HasKey("Id");
-
-                    b.HasIndex("UserId")
-                        .IsUnique();
-
-                    b.ToTable("sync_states", (string)null);
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.UnsubscribeItem", b =>
-                {
-                    b.Property<Guid>("Id")
-                        .ValueGeneratedOnAdd()
-                        .HasColumnType("uuid");
-
-                    b.Property<double>("Confidence")
-                        .HasColumnType("double precision");
-
-                    b.Property<DateTimeOffset>("CreatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<int>("EmailCount")
-                        .HasColumnType("integer");
-
-                    b.Property<DateTimeOffset?>("LastAttemptUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<int>("Method")
-                        .HasColumnType("integer");
-
-                    b.Property<string>("ResultMessage")
-                        .HasColumnType("text");
-
-                    b.Property<Guid>("SenderId")
-                        .HasColumnType("uuid");
-
-                    b.Property<int>("Status")
-                        .HasColumnType("integer");
-
-                    b.Property<string>("UnsubscribeTarget")
-                        .HasMaxLength(2048)
-                        .HasColumnType("character varying(2048)");
-
-                    b.Property<DateTimeOffset?>("UpdatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<Guid>("UserId")
-                        .HasColumnType("uuid");
-
-                    b.HasKey("Id");
-
-                    b.HasIndex("SenderId");
-
-                    b.HasIndex("UserId", "SenderId")
-                        .IsUnique();
-
-                    b.ToTable("unsubscribe_items", (string)null);
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.User", b =>
-                {
-                    b.Property<Guid>("Id")
-                        .ValueGeneratedOnAdd()
-                        .HasColumnType("uuid");
-
-                    b.Property<DateTimeOffset?>("AccessTokenExpiresAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<DateTimeOffset>("CreatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<bool>("DigestEnabled")
-                        .HasColumnType("boolean");
-
-                    b.Property<string>("DisplayName")
-                        .HasColumnType("text");
-
-                    b.Property<string>("Email")
-                        .IsRequired()
-                        .HasMaxLength(320)
-                        .HasColumnType("character varying(320)");
-
-                    b.Property<byte[]>("EncryptedRefreshToken")
-                        .HasColumnType("bytea");
-
-                    b.Property<string>("GoogleSubjectId")
-                        .IsRequired()
-                        .HasMaxLength(64)
-                        .HasColumnType("character varying(64)");
-
-                    b.Property<DateTimeOffset?>("LastDigestSentUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<DateTimeOffset?>("LastLoginUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<string>("PictureUrl")
-                        .HasColumnType("text");
-
-                    b.Property<DateTimeOffset?>("UpdatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.HasKey("Id");
-
-                    b.HasIndex("Email")
-                        .IsUnique();
-
-                    b.HasIndex("GoogleSubjectId")
-                        .IsUnique();
-
-                    b.ToTable("users", (string)null);
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.UserSetting", b =>
-                {
-                    b.Property<Guid>("UserId")
-                        .HasColumnType("uuid");
-
-                    b.Property<bool>("AiOptIn")
-                        .HasColumnType("boolean");
-
-                    b.Property<DateTimeOffset>("CreatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<string>("PreferencesJson")
-                        .HasColumnType("text");
-
-                    b.Property<string>("Theme")
-                        .IsRequired()
-                        .HasColumnType("text");
-
-                    b.Property<DateTimeOffset?>("UpdatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.HasKey("UserId");
-
-                    b.ToTable("user_settings", (string)null);
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.WidgetLayout", b =>
-                {
-                    b.Property<Guid>("Id")
-                        .ValueGeneratedOnAdd()
-                        .HasColumnType("uuid");
-
-                    b.Property<DateTimeOffset>("CreatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<int>("H")
-                        .HasColumnType("integer");
-
-                    b.Property<string>("SettingsJson")
-                        .HasColumnType("text");
-
-                    b.Property<int>("SortOrder")
-                        .HasColumnType("integer");
-
-                    b.Property<DateTimeOffset?>("UpdatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<Guid>("UserId")
-                        .HasColumnType("uuid");
-
-                    b.Property<bool>("Visible")
-                        .HasColumnType("boolean");
-
-                    b.Property<int>("W")
-                        .HasColumnType("integer");
-
-                    b.Property<string>("WidgetKey")
-                        .IsRequired()
-                        .HasMaxLength(64)
-                        .HasColumnType("character varying(64)");
-
-                    b.Property<int>("X")
-                        .HasColumnType("integer");
-
-                    b.Property<int>("Y")
-                        .HasColumnType("integer");
-
-                    b.HasKey("Id");
-
-                    b.HasIndex("UserId", "WidgetKey")
-                        .IsUnique();
-
-                    b.ToTable("widget_layouts", (string)null);
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.Attachment", b =>
-                {
-                    b.HasOne("InboxIntel.Domain.Entities.Email", "Email")
-                        .WithMany("Attachments")
-                        .HasForeignKey("EmailId")
-                        .OnDelete(DeleteBehavior.Cascade)
-                        .IsRequired();
-
-                    b.Navigation("Email");
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.Email", b =>
-                {
-                    b.HasOne("InboxIntel.Domain.Entities.Sender", "Sender")
-                        .WithMany("Emails")
-                        .HasForeignKey("SenderId")
-                        .OnDelete(DeleteBehavior.Restrict)
-                        .IsRequired();
-
-                    b.HasOne("InboxIntel.Domain.Entities.MailThread", "Thread")
-                        .WithMany("Emails")
-                        .HasForeignKey("ThreadId")
-                        .OnDelete(DeleteBehavior.Cascade)
-                        .IsRequired();
-
-                    b.HasOne("InboxIntel.Domain.Entities.User", null)
-                        .WithMany("Emails")
-                        .HasForeignKey("UserId")
-                        .OnDelete(DeleteBehavior.Cascade)
-                        .IsRequired();
-
-                    b.Navigation("Sender");
-
-                    b.Navigation("Thread");
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.EmailLabel", b =>
-                {
-                    b.HasOne("InboxIntel.Domain.Entities.Email", "Email")
-                        .WithMany("EmailLabels")
-                        .HasForeignKey("EmailId")
-                        .OnDelete(DeleteBehavior.Cascade)
-                        .IsRequired();
-
-                    b.HasOne("InboxIntel.Domain.Entities.Label", "Label")
-                        .WithMany("EmailLabels")
-                        .HasForeignKey("LabelId")
-                        .OnDelete(DeleteBehavior.Cascade)
-                        .IsRequired();
-
-                    b.Navigation("Email");
-
-                    b.Navigation("Label");
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.Sender", b =>
-                {
-                    b.HasOne("InboxIntel.Domain.Entities.MailDomain", "Domain")
-                        .WithMany("Senders")
-                        .HasForeignKey("DomainId")
-                        .OnDelete(DeleteBehavior.Restrict)
-                        .IsRequired();
-
-                    b.Navigation("Domain");
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.UnsubscribeItem", b =>
-                {
-                    b.HasOne("InboxIntel.Domain.Entities.Sender", "Sender")
-                        .WithMany()
-                        .HasForeignKey("SenderId")
-                        .OnDelete(DeleteBehavior.Cascade)
-                        .IsRequired();
-
-                    b.Navigation("Sender");
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.UserSetting", b =>
-                {
-                    b.HasOne("InboxIntel.Domain.Entities.User", "User")
-                        .WithOne()
-                        .HasForeignKey("InboxIntel.Domain.Entities.UserSetting", "UserId")
-                        .OnDelete(DeleteBehavior.Cascade)
-                        .IsRequired();
-
-                    b.Navigation("User");
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.WidgetLayout", b =>
-                {
-                    b.HasOne("InboxIntel.Domain.Entities.User", null)
-                        .WithMany("WidgetLayouts")
-                        .HasForeignKey("UserId")
-                        .OnDelete(DeleteBehavior.Cascade)
-                        .IsRequired();
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.Email", b =>
-                {
-                    b.Navigation("Attachments");
-
-                    b.Navigation("EmailLabels");
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.Label", b =>
-                {
-                    b.Navigation("EmailLabels");
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.MailDomain", b =>
-                {
-                    b.Navigation("Senders");
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.MailThread", b =>
-                {
-                    b.Navigation("Emails");
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.Sender", b =>
-                {
-                    b.Navigation("Emails");
-                });
-
-            modelBuilder.Entity("InboxIntel.Domain.Entities.User", b =>
-                {
-                    b.Navigation("Emails");
-
-                    b.Navigation("WidgetLayouts");
-                });
-#pragma warning restore 612, 618
-        }
-    }
-}

src/InboxIntel.Infrastructure/Migrations/20260702152850_FeatureFlagsAndUserSettings.cs

@@ -1,75 +0,0 @@
-using System;
-using Microsoft.EntityFrameworkCore.Migrations;
-
-#nullable disable
-
-namespace InboxIntel.Infrastructure.Migrations
-{
-    /// <inheritdoc />
-    public partial class FeatureFlagsAndUserSettings : Migration
-    {
-        /// <inheritdoc />
-        protected override void Up(MigrationBuilder migrationBuilder)
-        {
-            migrationBuilder.CreateTable(
-                name: "feature_flags",
-                columns: table => new
-                {
-                    Key = table.Column<string>(type: "character varying(128)", maxLength: 128, nullable: false),
-                    Enabled = table.Column<bool>(type: "boolean", nullable: false),
-                    UserOverridable = table.Column<bool>(type: "boolean", nullable: false),
-                    Description = table.Column<string>(type: "text", nullable: true),
-                    CreatedAtUtc = table.Column<DateTimeOffset>(type: "timestamp with time zone", nullable: false),
-                    UpdatedAtUtc = table.Column<DateTimeOffset>(type: "timestamp with time zone", nullable: true)
-                },
-                constraints: table =>
-                {
-                    table.PrimaryKey("PK_feature_flags", x => x.Key);
-                });
-
-            migrationBuilder.CreateTable(
-                name: "user_settings",
-                columns: table => new
-                {
-                    UserId = table.Column<Guid>(type: "uuid", nullable: false),
-                    Theme = table.Column<string>(type: "text", nullable: false),
-                    AiOptIn = table.Column<bool>(type: "boolean", nullable: false),
-                    PreferencesJson = table.Column<string>(type: "text", nullable: true),
-                    CreatedAtUtc = table.Column<DateTimeOffset>(type: "timestamp with time zone", nullable: false),
-                    UpdatedAtUtc = table.Column<DateTimeOffset>(type: "timestamp with time zone", nullable: true)
-                },
-                constraints: table =>
-                {
-                    table.PrimaryKey("PK_user_settings", x => x.UserId);
-                    table.ForeignKey(
-                        name: "FK_user_settings_users_UserId",
-                        column: x => x.UserId,
-                        principalTable: "users",
-                        principalColumn: "Id",
-                        onDelete: ReferentialAction.Cascade);
-                });
-
-            // Behaviour-preserving defaults (docs/discovery/multi-provider/04): ai.enabled on
-            // (AI availability still requires Ai:Mode + provider), Google on, others off.
-            migrationBuilder.Sql("""
-                INSERT INTO feature_flags ("Key", "Enabled", "UserOverridable", "Description", "CreatedAtUtc", "UpdatedAtUtc")
-                VALUES
-                  ('ai.enabled', TRUE, TRUE,  'Master AI switch: off hides AI for everyone', NOW(), NOW()),
-                  ('provider.google', TRUE, FALSE, 'Google/Gmail provider', NOW(), NOW()),
-                  ('provider.microsoft', FALSE, FALSE, 'Microsoft/Outlook provider (future)', NOW(), NOW()),
-                  ('provider.imap', FALSE, FALSE, 'IMAP provider (future)', NOW(), NOW())
-                ON CONFLICT ("Key") DO NOTHING;
-                """);
-        }
-
-        /// <inheritdoc />
-        protected override void Down(MigrationBuilder migrationBuilder)
-        {
-            migrationBuilder.DropTable(
-                name: "feature_flags");
-
-            migrationBuilder.DropTable(
-                name: "user_settings");
-        }
-    }
-}

src/InboxIntel.Infrastructure/Migrations/AppDbContextModelSnapshot.cs

@@ -19,7 +19,7 @@ namespace InboxIntel.Infrastructure.Migrations
         {
 #pragma warning disable 612, 618
             modelBuilder
-                .HasAnnotation("ProductVersion", "10.0.9")
+                .HasAnnotation("ProductVersion", "8.0.4")
                 .HasAnnotation("Relational:MaxIdentifierLength", 63);
 
             NpgsqlModelBuilderExtensions.HasPostgresExtension(modelBuilder, "pg_trgm");
@@ -243,32 +243,6 @@ namespace InboxIntel.Infrastructure.Migrations
                     b.ToTable("email_labels", (string)null);
                 });
 
-            modelBuilder.Entity("InboxIntel.Domain.Entities.FeatureFlag", b =>
-                {
-                    b.Property<string>("Key")
-                        .HasMaxLength(128)
-                        .HasColumnType("character varying(128)");
-
-                    b.Property<DateTimeOffset>("CreatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<string>("Description")
-                        .HasColumnType("text");
-
-                    b.Property<bool>("Enabled")
-                        .HasColumnType("boolean");
-
-                    b.Property<DateTimeOffset?>("UpdatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<bool>("UserOverridable")
-                        .HasColumnType("boolean");
-
-                    b.HasKey("Key");
-
-                    b.ToTable("feature_flags", (string)null);
-                });
-
             modelBuilder.Entity("InboxIntel.Domain.Entities.Label", b =>
                 {
                     b.Property<Guid>("Id")
@@ -617,32 +591,6 @@ namespace InboxIntel.Infrastructure.Migrations
                     b.ToTable("users", (string)null);
                 });
 
-            modelBuilder.Entity("InboxIntel.Domain.Entities.UserSetting", b =>
-                {
-                    b.Property<Guid>("UserId")
-                        .HasColumnType("uuid");
-
-                    b.Property<bool>("AiOptIn")
-                        .HasColumnType("boolean");
-
-                    b.Property<DateTimeOffset>("CreatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.Property<string>("PreferencesJson")
-                        .HasColumnType("text");
-
-                    b.Property<string>("Theme")
-                        .IsRequired()
-                        .HasColumnType("text");
-
-                    b.Property<DateTimeOffset?>("UpdatedAtUtc")
-                        .HasColumnType("timestamp with time zone");
-
-                    b.HasKey("UserId");
-
-                    b.ToTable("user_settings", (string)null);
-                });
-
             modelBuilder.Entity("InboxIntel.Domain.Entities.WidgetLayout", b =>
                 {
                     b.Property<Guid>("Id")
@@ -769,17 +717,6 @@ namespace InboxIntel.Infrastructure.Migrations
                     b.Navigation("Sender");
                 });
 
-            modelBuilder.Entity("InboxIntel.Domain.Entities.UserSetting", b =>
-                {
-                    b.HasOne("InboxIntel.Domain.Entities.User", "User")
-                        .WithOne()
-                        .HasForeignKey("InboxIntel.Domain.Entities.UserSetting", "UserId")
-                        .OnDelete(DeleteBehavior.Cascade)
-                        .IsRequired();
-
-                    b.Navigation("User");
-                });
-
             modelBuilder.Entity("InboxIntel.Domain.Entities.WidgetLayout", b =>
                 {
                     b.HasOne("InboxIntel.Domain.Entities.User", null)

src/InboxIntel.Infrastructure/Persistence/AppDbContext.cs

@@ -29,8 +29,6 @@ public class AppDbContext : DbContext, IAppDbContext
     public DbSet<Email> Emails => Set<Email>();
     public DbSet<MailThread> Threads => Set<MailThread>();
     public DbSet<Sender> Senders => Set<Sender>();
-    public DbSet<FeatureFlag> FeatureFlags => Set<FeatureFlag>();
-    public DbSet<UserSetting> UserSettings => Set<UserSetting>();
     public DbSet<MailDomain> Domains => Set<MailDomain>();
     public DbSet<Attachment> Attachments => Set<Attachment>();
     public DbSet<Label> Labels => Set<Label>();
@@ -49,36 +47,20 @@ public class AppDbContext : DbContext, IAppDbContext
         // its manual `WHERE UserId ==` clause cannot leak across tenants. Applied
         // uniformly to all user-scoped entities so EF sees no filtered/unfiltered
         // navigation mismatch. Bypassed when CurrentUserId is Guid.Empty (workers).
-        modelBuilder.Entity<Email>().HasQueryFilter("Tenant", e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
+        modelBuilder.Entity<Email>().HasQueryFilter(e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
-        modelBuilder.Entity<Sender>().HasQueryFilter("Tenant", e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
+        modelBuilder.Entity<Sender>().HasQueryFilter(e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
-        modelBuilder.Entity<MailThread>().HasQueryFilter("Tenant", e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
+        modelBuilder.Entity<MailThread>().HasQueryFilter(e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
-        modelBuilder.Entity<MailDomain>().HasQueryFilter("Tenant", e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
+        modelBuilder.Entity<MailDomain>().HasQueryFilter(e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
-        modelBuilder.Entity<Attachment>().HasQueryFilter("Tenant", e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
+        modelBuilder.Entity<Attachment>().HasQueryFilter(e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
-        modelBuilder.Entity<Label>().HasQueryFilter("Tenant", e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
+        modelBuilder.Entity<Label>().HasQueryFilter(e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
         // AUDIT M-6: EmailLabel is the required end of a relationship with the filtered Email
         // entity; without a matching filter EF warns on boot and joins could surface rows whose
         // parent is filtered out. Filter via the Email navigation so the pair is consistent.
-        modelBuilder.Entity<EmailLabel>().HasQueryFilter("Tenant", el => CurrentUserId == Guid.Empty || el.Email!.UserId == CurrentUserId);
+        modelBuilder.Entity<EmailLabel>().HasQueryFilter(el => CurrentUserId == Guid.Empty || el.Email!.UserId == CurrentUserId);
-        modelBuilder.Entity<SyncState>().HasQueryFilter("Tenant", e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
+        modelBuilder.Entity<SyncState>().HasQueryFilter(e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
-        modelBuilder.Entity<AnalyticsAggregate>().HasQueryFilter("Tenant", e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
+        modelBuilder.Entity<AnalyticsAggregate>().HasQueryFilter(e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
-        modelBuilder.Entity<WidgetLayout>().HasQueryFilter("Tenant", e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
+        modelBuilder.Entity<WidgetLayout>().HasQueryFilter(e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
-        modelBuilder.Entity<UnsubscribeItem>().HasQueryFilter("Tenant", e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
+        modelBuilder.Entity<UnsubscribeItem>().HasQueryFilter(e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
-        modelBuilder.Entity<UserSetting>().HasQueryFilter("Tenant", e => CurrentUserId == Guid.Empty || e.UserId == CurrentUserId);
-
-        // Feature flags are system-wide (no tenant filter). Key is the natural PK.
-        modelBuilder.Entity<FeatureFlag>(b =>
-        {
-            b.ToTable("feature_flags");
-            b.HasKey(f => f.Key);
-            b.Property(f => f.Key).HasMaxLength(128);
-        });
-        modelBuilder.Entity<UserSetting>(b =>
-        {
-            b.ToTable("user_settings");
-            b.HasKey(x => x.UserId);
-            // 1:1 with User sharing the PK — prevents a shadow UserId1 FK column.
-            b.HasOne(x => x.User).WithOne().HasForeignKey<UserSetting>(x => x.UserId);
-        });
 
         // PostgreSQL full-text search: generated tsvector over subject + body with a
         // GIN index, maintained by the DB and read-only in code. Subject is weighted 'A'

tests/InboxIntel.IntegrationTests/AuditFixesTests.cs

@@ -25,7 +25,7 @@ namespace InboxIntel.IntegrationTests;
 /// endpoints (model validation, per-user rate limits) without a real Google login.</summary>
 public class TestAuthHandler : AuthenticationHandler<AuthenticationSchemeOptions>
 {
-    public new const string Scheme = "Test";
+    public const string Scheme = "Test";
     // Stable across requests so per-user rate-limit partitions accumulate correctly.
     public static readonly string Uid = Guid.NewGuid().ToString();
 
@@ -52,9 +52,6 @@ public class AuditTestAppFactory : WebApplicationFactory<Program>
         builder.ConfigureHostConfiguration(cfg => cfg.AddInMemoryCollection(new Dictionary<string, string?>
         {
             ["Database:AutoMigrate"] = "false",
-            // Npgsql 10 eagerly validates the connection string when the DbContext is
-            // resolved (8.x was lazy); these tests never connect, but the string must parse.
-            ["ConnectionStrings:Postgres"] = "Host=localhost;Database=test;Username=test;Password=test",
             ["GoogleOAuth:ClientId"] = "test-client-id",
             ["GoogleOAuth:ClientSecret"] = "test-client-secret",
             // H-2: make the auth policy trip on the 3rd request within the window.

tests/InboxIntel.IntegrationTests/AuthEndpointsTests.cs

@@ -19,9 +19,6 @@ public class TestAppFactory : WebApplicationFactory<Program>
         builder.ConfigureHostConfiguration(cfg => cfg.AddInMemoryCollection(new Dictionary<string, string?>
         {
             ["Database:AutoMigrate"] = "false",
-            // Npgsql 10 eagerly validates the connection string when the DbContext is
-            // resolved (8.x was lazy); these tests never connect, but the string must parse.
-            ["ConnectionStrings:Postgres"] = "Host=localhost;Database=test;Username=test;Password=test",
             // Dummy OAuth creds so the Google challenge produces a real 302 redirect
             // (an empty ClientId can make the handler throw instead of redirecting).
             ["GoogleOAuth:ClientId"] = "test-client-id",

tests/InboxIntel.IntegrationTests/EmbeddingBackfillTests.cs

@@ -1,95 +0,0 @@
-using FluentAssertions;
-using InboxIntel.Application.Abstractions;
-using InboxIntel.Domain.Entities;
-using InboxIntel.Infrastructure.Ai;
-using InboxIntel.Infrastructure.Persistence;
-using Microsoft.EntityFrameworkCore;
-using Microsoft.Extensions.DependencyInjection;
-using Microsoft.Extensions.Logging.Abstractions;
-using Pgvector.EntityFrameworkCore;
-using Xunit;
-
-namespace InboxIntel.IntegrationTests;
-
-/// <summary>
-/// Semantic-search backfill: the worker embeds emails lacking an Embedding and persists the
-/// vectors. Runs against live Postgres (pgvector) since the Embedding column is ignored under
-/// the InMemory provider; the CI db-tests job provides the database. Uses a deterministic fake
-/// embedding provider — real-Ollama integration is verified separately (endpoint contract:
-/// /api/embeddings, 768 dims).
-/// </summary>
-[Trait("Category", "LiveDb")]
-[Collection("LiveDb")] // serialise LiveDb classes: concurrent MigrateAsync on a fresh DB races
-public class EmbeddingBackfillTests
-{
-    private static string? Conn => Environment.GetEnvironmentVariable("LIVEDB_CONNECTION");
-
-    private sealed class FakeCurrentUser : ICurrentUser
-    {
-        public Guid UserId => Guid.Empty; // worker scope sees all rows
-        public bool IsAuthenticated => false;
-    }
-
-    private sealed class FakeEmbeddings : IEmbeddingProvider
-    {
-        public bool IsAvailable => true;
-        public Task<float[]> EmbedAsync(string text, CancellationToken ct = default)
-            => Task.FromResult(Vec(text));
-        public Task<IReadOnlyList<float[]>> EmbedBatchAsync(IReadOnlyList<string> texts, CancellationToken ct = default)
-            => Task.FromResult<IReadOnlyList<float[]>>(texts.Select(Vec).ToList());
-        private static float[] Vec(string text)
-        {
-            var v = new float[768];
-            v[0] = text.Length; // deterministic, content-dependent
-            return v;
-        }
-    }
-
-    [Fact]
-    public async Task Worker_embeds_pending_emails_and_persists_vectors()
-    {
-        if (Conn is null) return; // soft-skip outside the live-db CI job
-        var uid = Guid.NewGuid();
-        var opts = new DbContextOptionsBuilder<AppDbContext>().UseNpgsql(Conn!, o => o.UseVector()).Options;
-
-        var services = new ServiceCollection();
-        services.AddScoped<ICurrentUser, FakeCurrentUser>();
-        services.AddScoped(_ => new AppDbContext(opts, new FakeCurrentUser()));
-        services.AddScoped<IEmbeddingProvider, FakeEmbeddings>();
-        using var sp = services.BuildServiceProvider();
-
-        using (var seed = new AppDbContext(opts, new FakeCurrentUser()))
-        {
-            await seed.Database.MigrateAsync();
-            seed.Users.Add(new User { Id = uid, GoogleSubjectId = "g" + uid, Email = uid + "@t.t" });
-            var dom = new MailDomain { UserId = uid, Name = "t.t" };
-            var snd = new Sender { UserId = uid, Address = "a@t.t", Domain = dom };
-            var thr = new MailThread { UserId = uid, GmailThreadId = "th" + uid };
-            seed.AddRange(dom, snd, thr);
-            seed.Emails.Add(new Email { UserId = uid, GmailMessageId = "e1" + uid, Subject = "hello world", Sender = snd, Thread = thr, SentAtUtc = DateTimeOffset.UtcNow });
-            seed.Emails.Add(new Email { UserId = uid, GmailMessageId = "e2" + uid, Subject = "quarterly invoice", Sender = snd, Thread = thr, SentAtUtc = DateTimeOffset.UtcNow });
-            await seed.SaveChangesAsync();
-        }
-        try
-        {
-            var worker = new EmbeddingBackfillWorker(
-                sp.GetRequiredService<IServiceScopeFactory>(), NullLogger<EmbeddingBackfillWorker>.Instance);
-            var processed = await worker.ProcessBatchAsync(CancellationToken.None);
-            processed.Should().BeGreaterThanOrEqualTo(2);
-
-            using var check = new AppDbContext(opts, new FakeCurrentUser());
-            var mine = await check.Emails.Where(e => e.UserId == uid).ToListAsync();
-            mine.Should().OnlyContain(e => e.Embedding != null);
-            mine.First().Embedding!.ToArray().Length.Should().Be(768);
-        }
-        finally
-        {
-            using var c = new AppDbContext(opts, new FakeCurrentUser());
-            await c.Emails.Where(e => e.UserId == uid).ExecuteDeleteAsync();
-            await c.Threads.Where(t => t.UserId == uid).ExecuteDeleteAsync();
-            await c.Senders.Where(s => s.UserId == uid).ExecuteDeleteAsync();
-            await c.Domains.Where(d => d.UserId == uid).ExecuteDeleteAsync();
-            await c.Users.Where(u => u.Id == uid).ExecuteDeleteAsync();
-        }
-    }
-}

tests/InboxIntel.IntegrationTests/FeatureFlagTests.cs

@@ -1,76 +0,0 @@
-using FluentAssertions;
-using InboxIntel.Application.Abstractions;
-using InboxIntel.Domain.Entities;
-using InboxIntel.Infrastructure.Features;
-using InboxIntel.Infrastructure.Persistence;
-using Microsoft.EntityFrameworkCore;
-using Microsoft.Extensions.Caching.Memory;
-using Xunit;
-
-namespace InboxIntel.IntegrationTests;
-
-/// <summary>
-/// Feature-flag + AI-gate contracts (docs/discovery/multi-provider/04):
-/// flags are FAIL-CLOSED, and the admin master switch (ai.enabled) beats any user opt-in.
-/// </summary>
-public class FeatureFlagTests
-{
-    private sealed class FakeCurrentUser : ICurrentUser
-    {
-        public Guid UserId { get; set; }
-        public bool IsAuthenticated => UserId != Guid.Empty;
-    }
-
-    private static AppDbContext NewDb(string name) =>
-        new(new DbContextOptionsBuilder<AppDbContext>().UseInMemoryDatabase(name).Options, new FakeCurrentUser());
-
-    private static FeatureFlagService Flags(AppDbContext db) =>
-        new(db, new MemoryCache(new MemoryCacheOptions()));
-
-    [Fact]
-    public async Task Unknown_flag_is_disabled_fail_closed()
-    {
-        using var db = NewDb(nameof(Unknown_flag_is_disabled_fail_closed));
-        (await Flags(db).IsEnabledAsync("does.not.exist")).Should().BeFalse();
-    }
-
-    [Fact]
-    public async Task Enabled_flag_reads_true_disabled_reads_false()
-    {
-        using var db = NewDb(nameof(Enabled_flag_reads_true_disabled_reads_false));
-        db.FeatureFlags.AddRange(
-            new FeatureFlag { Key = "on.flag", Enabled = true },
-            new FeatureFlag { Key = "off.flag", Enabled = false });
-        await db.SaveChangesAsync();
-        var flags = Flags(db);
-        (await flags.IsEnabledAsync("on.flag")).Should().BeTrue();
-        (await flags.IsEnabledAsync("off.flag")).Should().BeFalse();
-    }
-
-    [Fact]
-    public async Task Ai_gate_master_flag_off_beats_user_opt_in()
-    {
-        using var db = NewDb(nameof(Ai_gate_master_flag_off_beats_user_opt_in));
-        var user = Guid.NewGuid();
-        db.FeatureFlags.Add(new FeatureFlag { Key = AiGate.MasterFlag, Enabled = false });
-        db.UserSettings.Add(new UserSetting { UserId = user, AiOptIn = true });
-        await db.SaveChangesAsync();
-
-        (await new AiGate(Flags(db), db).IsAiEnabledForUserAsync(user)).Should().BeFalse();
-    }
-
-    [Fact]
-    public async Task Ai_gate_flag_on_defaults_to_opted_in_but_respects_opt_out()
-    {
-        using var db = NewDb(nameof(Ai_gate_flag_on_defaults_to_opted_in_but_respects_opt_out));
-        var optedOut = Guid.NewGuid();
-        var noRow = Guid.NewGuid();
-        db.FeatureFlags.Add(new FeatureFlag { Key = AiGate.MasterFlag, Enabled = true });
-        db.UserSettings.Add(new UserSetting { UserId = optedOut, AiOptIn = false });
-        await db.SaveChangesAsync();
-        var gate = new AiGate(Flags(db), db);
-
-        (await gate.IsAiEnabledForUserAsync(noRow)).Should().BeTrue("no settings row = default opt-in");
-        (await gate.IsAiEnabledForUserAsync(optedOut)).Should().BeFalse("explicit opt-out wins while the flag is on");
-    }
-}

tests/InboxIntel.IntegrationTests/InboxIntel.IntegrationTests.csproj

@@ -7,8 +7,8 @@
     <PackageReference Include="xunit" Version="2.9.0" />
     <PackageReference Include="xunit.runner.visualstudio" Version="2.8.2" />
     <PackageReference Include="FluentAssertions" Version="6.12.0" />
-    <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.9" />
+    <PackageReference Include="Microsoft.AspNetCore.Mvc.Testing" Version="8.0.7" />
-    <PackageReference Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.9" />
+    <PackageReference Include="Microsoft.EntityFrameworkCore.InMemory" Version="8.0.4" />
   </ItemGroup>
   <ItemGroup>
     <ProjectReference Include="..\..\src\InboxIntel.Api\InboxIntel.Api.csproj" />

tests/InboxIntel.IntegrationTests/LiveDbSearchTests.cs

@@ -21,7 +21,6 @@ namespace InboxIntel.IntegrationTests;
 /// InMemory test run is unaffected.
 /// </summary>
 [Trait("Category", "LiveDb")]
-[Collection("LiveDb")] // serialise LiveDb classes: concurrent MigrateAsync on a fresh DB races
 public class LiveDbSearchTests
 {
     private static string? Conn => Environment.GetEnvironmentVariable("LIVEDB_CONNECTION");