286579ceeb
docs(remaster): record multi-tenant SaaS direction + multi-provider email
...
User decision (2026-07-05): evolve from single-user to public multi-tenant SaaS.
Adds PRODUCT_DIRECTION.md: email linking generalises beyond Gmail (Microsoft
Graph + IMAP + always-available free-text fallback), SaaS platform wave
(onboarding, billing, quotas, per-tenant AI budget, rate limiting, outbox), and
resolves the .gsd "use next.js" override in favour of executing it (public SEO).
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-05 10:13:29 +02:00
f0f178d77e
docs(remaster): full-system audit + rebuild-vs-refactor decision
...
Deep, code-grounded audit of Job Tracker producing the mission deliverables
under docs/remaster/: system audit, bug report, architecture/data-model/AI/UX
reviews, remaster proposal, migration plan, competitor research, and the gated
REBUILD_DECISION.
Verdict: Incremental Refactor (no full rebuild). Evidence: no Critical defects;
hardened cookie/CSRF auth (token never in JS storage), real SSRF defence,
enforced multi-tenancy via global query filters, decoupled provider-swappable
AI service, 135 backend tests. Debt is localised (god controllers/entity,
missing hot-path indexes, prompt-injection hardening, CRA build debt) and
reachable by in-place, test-guarded refactors.
Also harden .gitignore: exclude agent tooling (.claude/, .bg-shell/, .agent.md)
and restore/broaden the runtime-secrets block (**/keys/, **/backups/, exports,
CV artifacts) so nested DataProtection keys can't be committed accidentally.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-05 10:04:03 +02:00
cesnimda
657cb95a48
Add guided CV builder controls
CI and Deploy / test (push) Failing after 0s
CI and Deploy / deploy (push) Has been skipped
2026-04-20 21:22:57 +02:00
cesnimda
eea327e1f6
Turn CV template chooser into visual carousel
2026-04-11 22:45:24 +02:00
cesnimda
54abc9f546
Use Ollama rewrite path for CV generation
2026-04-11 22:26:03 +02:00
cesnimda
591c9b8a64
Clamp AI summarize lengths for CV rewrite
2026-04-11 21:55:51 +02:00
cesnimda
534534b333
Harden CV rewrite diagnostics and preview PDFs
2026-04-11 21:36:45 +02:00
cesnimda
fcccecefa3
Fix startup admin seeding connection scope
2026-04-11 18:27:33 +02:00
cesnimda
48cd83b442
Clean error alerts and harden startup migration
2026-04-11 18:07:20 +02:00
cesnimda
b52371ea79
Fix backend deployment Playwright restore issue
2026-04-11 17:45:51 +02:00
cesnimda
cc97a6b6c5
Fix ProfileCvController null warning
2026-04-11 17:13:25 +02:00
cesnimda
5f2f0a881a
Record authorization replay findings
2026-04-11 17:07:10 +02:00
cesnimda
811963749e
Fix cross-user job history leak
2026-04-11 17:05:52 +02:00
cesnimda
41595605b9
Add hostile fixture setup for authz testing
2026-04-11 16:57:15 +02:00
cesnimda
ac217dab53
Record security remediation verification
2026-04-11 16:31:05 +02:00
cesnimda
09e96ce381
Fail closed on malformed local auth
2026-04-11 16:29:53 +02:00
cesnimda
6a223a4b70
Harden job import SSRF validation
2026-04-11 16:26:14 +02:00
cesnimda
b4719a9916
Add adversarial security assessment findings
2026-04-11 14:30:32 +02:00
cesnimda
ce26325682
Tighten Gmail and export hot paths
2026-04-11 12:10:49 +02:00
cesnimda
33ac4b963b
Optimize workspace and daily-loop surfaces
2026-04-11 12:03:49 +02:00
cesnimda
27fd70a2d7
refactor, security updates, cv extraction upgrades
2026-04-11 01:34:32 +02:00
cesnimda
806b200ac5
Trigger deploy for Gmail and CV rewrite fixes
2026-04-09 22:07:36 +02:00
cesnimda
269dcb3487
Handle disconnected Gmail and bound CV rewrite prompts
2026-04-09 22:07:36 +02:00
cesnimda
dd10b635e6
Trigger deploy for MySQL rule settings bootstrap
2026-04-09 21:35:18 +02:00
cesnimda
8852b501f5
Create missing MySQL rule settings tables
2026-04-09 21:35:17 +02:00
cesnimda
2f4c6d5bb7
Trigger deploy for MySQL schema repair
2026-04-09 21:00:05 +02:00
cesnimda
b6a36cd860
Repair MySQL auto increment drift for core tables
2026-04-09 21:00:04 +02:00
cesnimda
0fdfcd727d
Trigger deploy after AI build split
2026-04-09 19:53:12 +02:00
cesnimda
6fb7b57b09
Stop rebuilding AI service on every deploy
2026-04-09 19:51:32 +02:00
cesnimda
b8c91a22b6
Fix API startup by removing unused OpenAPI package
2026-04-04 16:43:26 +02:00
cesnimda
170f1390a9
Trigger deploy after relaxing AI gate
2026-04-02 14:53:38 +02:00
cesnimda
a22ce08913
Do not block deploy on AI service health
2026-04-02 14:52:44 +02:00
cesnimda
f7efad7337
Trigger rebuild after CI repro
2026-04-02 14:34:30 +02:00
cesnimda
947d4eeab9
Trigger redeploy after backend runtime fix
2026-04-02 14:06:52 +02:00
cesnimda
f61da1869d
Include JwtBearer in backend publish output
2026-04-02 14:06:48 +02:00
cesnimda
463d4277cd
Trigger redeploy
2026-04-02 13:27:48 +02:00
cesnimda
7b9a97323e
Fix backend Docker publish context
2026-04-02 12:49:49 +02:00
cesnimda
5cd34f17bb
Complete Gmail correspondence workflow
2026-04-02 12:29:24 +02:00
cesnimda
1f34eb42d2
fix: include backend project in docker build context
2026-04-01 22:24:00 +02:00
cesnimda
b87e673d38
feat: add gmail review actions
2026-04-01 21:54:05 +02:00
cesnimda
161ecb4b94
feat: add gmail review decisions
2026-04-01 21:45:01 +02:00
cesnimda
a0e823facf
test: opt gmail router tests into v7 future flags
2026-04-01 17:26:07 +02:00
cesnimda
5af2c66616
feat: add gmail review queue surface
2026-04-01 17:16:00 +02:00
cesnimda
69e78d8951
refactor: extract gmail matching service
2026-04-01 16:59:29 +02:00
cesnimda
61c12d3479
feat: add global correspondence inbox
2026-04-01 16:51:02 +02:00
cesnimda
3f04849fe6
feat: add correspondence inbox and gmail ingestion contract
2026-04-01 16:50:14 +02:00
cesnimda
289c2f47ad
Merge feature branch feat/gmail-job-correspondence
2026-04-01 16:38:03 +02:00
cesnimda
fd3527776a
docs: update gmail workstream progress
2026-04-01 16:38:03 +02:00
cesnimda
f48136f04c
feat: enrich gmail correspondence metadata
2026-04-01 16:27:34 +02:00
cesnimda
e5bcf9d5ea
feat: harden gmail sync foundation
2026-04-01 16:09:29 +02:00
cesnimda
cesnimda