feat: complete release readiness work #28

Open

cesnimda wants to merge 110 commits from release-readiness into main

pull from: release-readiness

merge into: cesnimda:main

cesnimda:main

cesnimda:feature/auth-2fa-security

cesnimda:perf/phase-7-8

cesnimda:fix/mysql-index-key-too-long

cesnimda:feature/career-workspace

cesnimda:feat/ux-review-quick-wins

cesnimda:fix/google-signin-and-theming-cleanup

cesnimda:fix/docker-npmrc-not-copied

cesnimda:feature/ui-rework-match-score-ring

cesnimda:feature/ui-rework-sidebar-kanban

cesnimda:feature/wave6-nextjs-migration

cesnimda:feature/wave7-oauth-signup

cesnimda:feature/wave4-ai-hardening

cesnimda:refactor/computed-attachment-flags

cesnimda:refactor/wave2-gmail-dtos-helpers

cesnimda:fix/gmail-review-decision-load-all

cesnimda:chore/resync-ef-snapshot

cesnimda:feat/email-provider-picker-ui

cesnimda:feat/correspondence-provider-discriminator

cesnimda:feat/imap-provider

cesnimda:ci/retry-frontend-build

cesnimda:fix/auth-guard-redirect-home

cesnimda:feat/microsoft-graph-provider

cesnimda:feat/gmail-provider-contract

cesnimda:chore/untrack-gsd

cesnimda:feat/gmail-provider-reads

cesnimda:ci/resilient-dotnet-setup

cesnimda:fix/deploy-nuget-integrity

cesnimda:feat/email-provider-migration

cesnimda:perf/wave1-perf

cesnimda:docs/remaster-audit

cesnimda:fix/ollama-no-duplicate

cesnimda:chore/wave0-quick-wins

cesnimda:milestone/M001

cesnimda:feat/gmail-job-correspondence

cesnimda:feat/cv-builder-parser-ollama

cesnimda:worktree/CV_changes

cesnimda:m005-s03-tailored-cv-drafts

cesnimda:m005-s02-multipass-extraction-review

cesnimda:m005-s01-canonical-cv-pipeline

Conversation 0 Commits 110 Files Changed 420

+58259 -2578

cesnimda commented 2026-08-02 17:46:35 +02:00

Owner

Copy Link

Copy Source

No description provided.

cesnimda added 2 commits 2026-08-02 17:46:36 +02:00

feat: complete release readiness work ... ce76046a29

- consolidate API ownership and remove dead vendor code

- add Stripe billing, learning paths, and public CV hardening

- add migration, recovery, security, audit, and browser gates

fix: close release preflight gaps ... 955182b7c2

Route public health checks to the API, backfill and synchronize job opportunities, stabilize SPA smoke tests, and document operator-only production steps.

cesnimda added 1 commit 2026-08-02 17:59:07 +02:00

fix: require verified production email ... 06518a7d52

Expose the existing email-verification setting through Compose and close the completed DataProtection rotation blocker.

cesnimda added 1 commit 2026-08-02 19:22:25 +02:00

fix(db): repair Jobs identity ... de937d25dc

Production's SQLite-shaped Jobs table lacks AUTO_INCREMENT, causing the legacy opportunity backfill to abort startup. Reuse the existing idempotent MariaDB primary-key repair before backfill runs.

cesnimda added 5 commits 2026-08-09 14:03:24 +02:00

feat/Update_Controllers_to_Allow_for_Premium_Membership c3f4a57195

feat(ai): enforce local-first routing ... 5eb9b3cb96

Keep external providers behind server consent, task, and prompt-cost gates while persisting actual provider provenance.

feat(ai): queue strategy snapshots a62122640c

docs(ai): record strategy queue evidence 89b9cdd92d

docs(cv): record durable processing trace 39e98049ea

cesnimda added 1 commit 2026-08-09 15:11:14 +02:00

feat(cv)!: queue durable processing ... c3c5af8329

CV upload now returns 202 with an owner-scoped operation instead of holding the request through parsing. Existing review approval remains required.

BREAKING CHANGE: profile-cv upload responses use the durable operation contract.

cesnimda added 1 commit 2026-08-09 15:14:44 +02:00

docs(cv): record durable processing evidence 83ddc0718e

cesnimda added 2 commits 2026-08-09 17:06:13 +02:00

feat(auth): unify sign-in options 93b869259e

docs(auth): record unified sign-in evidence 378807b3b9

cesnimda added 2 commits 2026-08-09 18:37:56 +02:00

fix(theme): make preference state deterministic 11734ee058

docs(theme): record deterministic state evidence f2d1963c61

cesnimda added 2 commits 2026-08-09 18:49:45 +02:00

fix(match): prioritize meaningful job terms da1aa8bb2a

docs(match): record term-quality evidence 3143568df0

cesnimda added 2 commits 2026-08-09 19:02:35 +02:00

feat(career): clarify workspace actions 268b3a07de

docs(career): record workspace evidence c201832603

cesnimda added 1 commit 2026-08-09 19:08:54 +02:00

fix(cv): protect unsaved builder edits b58cc19d54

cesnimda added 1 commit 2026-08-09 19:10:33 +02:00

docs(cv): track builder integrity progress df89a69306

cesnimda added 1 commit 2026-08-09 19:14:06 +02:00

feat(cv): structure custom section entries a5b74e0ab8

cesnimda added 1 commit 2026-08-09 21:06:16 +02:00

fix(cv): expose editor errors and controls 20433491db

cesnimda added 1 commit 2026-08-09 21:08:31 +02:00

docs(cv): complete builder implementation evidence efacc3a06b

cesnimda added 1 commit 2026-08-09 21:19:30 +02:00

feat(email): consolidate correspondence routes 6008b4afef

cesnimda added 1 commit 2026-08-09 21:22:43 +02:00

docs(email): track hub consolidation evidence 0e2a59a8ef

cesnimda added 1 commit 2026-08-09 21:35:11 +02:00

feat(email): expose provider-neutral reads 536d403b08

cesnimda added 1 commit 2026-08-09 21:38:28 +02:00

docs(email): record provider read boundary 6f0e9bb516

cesnimda added 1 commit 2026-08-09 21:44:31 +02:00

feat(email): add safe message detail a20775c24a

cesnimda added 1 commit 2026-08-09 21:47:35 +02:00

docs(email): record message detail evidence 3a7e4f1088

cesnimda added 1 commit 2026-08-09 23:32:34 +02:00

feat(email): add durable send ledger ... 653f011be2

Tracks only idempotency and delivery metadata; recipient, subject, and body are excluded. No provider send path is enabled.

cesnimda added 1 commit 2026-08-09 23:41:23 +02:00

docs(email): record send ledger evidence 429f427f49

cesnimda added 1 commit 2026-08-09 23:47:30 +02:00

feat(email): add delivery adapters ... e9937accd8

Gmail and Graph request explicit send consent and classify provider rejection separately from uncertain transport failure. IMAP remains read-only; no send API is exposed.

cesnimda added 1 commit 2026-08-09 23:49:08 +02:00

docs(email): record delivery adapter evidence d44c8ceb08

cesnimda added 2 commits 2026-08-10 00:02:39 +02:00

feat(email): add explicit send API ... 123fc5555a

Require tenant-owned jobs, explicit confirmation, canonical request IDs, and rate limiting before provider delivery. Persist sent correspondence with a content-free idempotency ledger, and never retry uncertain outcomes automatically.

docs(email): record send API evidence 90f9bf576c

cesnimda added 2 commits 2026-08-10 00:11:48 +02:00

feat(email): add confirmed reply composer ... 449faeb5ce

Keep provider, recipient, subject, thread, and body editable until an app-owned confirmation is accepted. Reuse one request UUID per attempt and block automatic retry when delivery is uncertain.

docs(email): record composer evidence 4de08b7c77

cesnimda added 2 commits 2026-08-10 00:21:28 +02:00

fix(email): reconcile abandoned sends ... ee5ef7e12a

Age stale pre-delivery attempts to failed and in-delivery attempts to uncertain without provider I/O. Notify each owner with content-free guidance and keep recovery idempotent across replicas and restarts.

docs(email): record recovery evidence c14b8a0ee4

cesnimda added 1 commit 2026-08-10 00:39:19 +02:00

fix(deps): resolve frontend advisories ... b55a592b2c

Upgrade React Router to the patched v7 line and refresh transitive js-yaml and nanoid packages. Adapt RouterProvider flags and the Jest jsdom environment without changing application routes.

cesnimda added 1 commit 2026-08-10 00:42:48 +02:00

docs(deps): record advisory remediation d7b556e494

cesnimda added 1 commit 2026-08-10 00:44:00 +02:00

fix(email): retire legacy SMTP follow-up ... 8fe39031ea

Keep follow-up draft generation but remove the direct application SMTP delivery boundary. Route users to the provider-aware Job email flow and return 410 for legacy API callers.

cesnimda added 1 commit 2026-08-10 00:45:33 +02:00

docs(email): record SMTP retirement evidence 14f8d4e928

cesnimda added 1 commit 2026-08-10 00:48:36 +02:00

feat(email): export send attempt metadata ... aff34cc645

Add content-free provider delivery history to encrypted and daily owner exports, exclude payload hashes, and lock in tenant-safe hard-delete cascades.

cesnimda added 1 commit 2026-08-10 00:49:51 +02:00

docs(email): record export lifecycle evidence 3f0eba0525

cesnimda added 1 commit 2026-08-10 00:56:26 +02:00

docs(email): add local browser evidence fa8241f34f

cesnimda added 1 commit 2026-08-10 09:26:38 +02:00

test: align career workspace smoke 75bf14417c

cesnimda added 2 commits 2026-08-10 09:36:53 +02:00

fix(email): share application context ff547df175

docs(email): record shared context evidence 73ee095795

cesnimda added 2 commits 2026-08-10 09:42:13 +02:00

feat(email): confirm hub thread unlink 1dabbeb233

docs(email): record hub unlink evidence 1e514272e1

cesnimda added 2 commits 2026-08-10 09:46:40 +02:00

fix(email): clarify provider capability states f9e641c23b

docs(email): record provider state evidence 4efee0726a

cesnimda added 2 commits 2026-08-10 09:49:33 +02:00

test(email): protect free send access 7f41cb271c

docs(email): record free access boundary ee8efd361d

cesnimda added 1 commit 2026-08-10 09:55:18 +02:00

feat(email): add tenant draft persistence ... 14b396a452

Add owner-filtered, job-cascading private draft storage with reversible SQLite and MariaDB migration paths. No API or UI exposes draft content yet.

cesnimda added 1 commit 2026-08-10 09:58:37 +02:00

docs(email): record draft persistence evidence 10740fd8c3

cesnimda added 1 commit 2026-08-10 10:00:37 +02:00

feat(email): include drafts in user exports ... 2fa4e38ba9

Export readable private draft content only through existing owner-filtered encrypted and daily export boundaries, with cross-tenant regression coverage.

cesnimda added 1 commit 2026-08-10 10:01:52 +02:00

docs(email): record draft export evidence fb7240f2ff

cesnimda added 1 commit 2026-08-10 10:05:41 +02:00

feat(email): add tenant-safe draft API ... a9bb22e530

Expose bounded draft CRUD with owned-job validation and revision conflicts. Saving drafts never contacts providers or sends email.

cesnimda added 1 commit 2026-08-10 10:07:00 +02:00

docs(email): record draft API evidence 108440d361

cesnimda added 1 commit 2026-08-10 10:11:07 +02:00

fix(email): preserve draft send identity ... 80b5532c2f

Persist and export each draft's idempotency UUID so refresh and edits cannot create a fresh delivery identity. Add reversible provider-specific migration SQL.

cesnimda added 1 commit 2026-08-10 10:12:05 +02:00

docs(email): record draft identity evidence 050b99ca36

cesnimda added 1 commit 2026-08-10 10:16:42 +02:00

feat(email): persist and resume reply drafts d3d2b6783a

cesnimda added 1 commit 2026-08-10 10:17:55 +02:00

docs(email): record reply recovery evidence 114e3b66ba

cesnimda added 1 commit 2026-08-10 10:21:40 +02:00

fix(email): gate draft attempt rotation ... 29de2632f6

Rotate persisted delivery identity only after the matching owner attempt is definitively failed. Keep stale, foreign, pending, sent, and uncertain drafts non-retryable.

cesnimda added 1 commit 2026-08-10 10:22:51 +02:00

docs(email): record retry rotation evidence b0537b8575

cesnimda added 1 commit 2026-08-10 10:28:45 +02:00

feat(email): add new-message drafting b73596394e

cesnimda added 1 commit 2026-08-10 10:30:02 +02:00

docs(email): record new-message evidence 289b3bec18

cesnimda added 1 commit 2026-08-10 10:31:43 +02:00

docs(plan): advance to job discovery 986f58522b

cesnimda added 1 commit 2026-08-10 10:38:04 +02:00

feat(jobs): expose discovery provenance 511a9f6795

cesnimda added 1 commit 2026-08-10 10:39:27 +02:00

docs(jobs): record discovery provenance evidence 3d219eb4ac

cesnimda added 1 commit 2026-08-10 10:42:49 +02:00

feat(jobs): improve discovery result states 3f74b236ef

cesnimda added 1 commit 2026-08-10 10:44:26 +02:00

docs(jobs): record discovery state evidence 8d86c697ef

cesnimda added 1 commit 2026-08-10 10:51:19 +02:00

test(jobs): cover discovery browser journey 82f45269d0

cesnimda added 1 commit 2026-08-10 10:53:12 +02:00

docs(plan): advance to kanban theme states 3a99531e46

cesnimda added 1 commit 2026-08-10 11:12:52 +02:00

fix(kanban): honor theme and keyboard moves fb6f17e1f3

cesnimda added 1 commit 2026-08-10 11:15:39 +02:00

test(kanban): verify required browser states 4e5ce0c447

cesnimda added 1 commit 2026-08-10 11:17:16 +02:00

docs(plan): advance to application workspace a54b70960c

cesnimda added 1 commit 2026-08-10 11:28:04 +02:00

feat(jobs): embed route-backed workspace b67a531af4

cesnimda added 1 commit 2026-08-15 13:00:31 +02:00

feat(jobs): persist list state in URL bd5362c8c2

cesnimda added 1 commit 2026-08-15 13:11:48 +02:00

fix(theme): persist one canonical preference 896746319b

cesnimda added 1 commit 2026-08-15 13:11:57 +02:00

fix(admin): protect administrator access ... 15e5464da7

Reject final-admin demotion and deletion at the API boundary. Require explicit confirmation before any administrator role removal.

cesnimda added 1 commit 2026-08-15 13:16:02 +02:00

refactor(cv): use app-owned confirmations 0dfaac18a1

cesnimda added 1 commit 2026-08-15 13:33:04 +02:00

feat(jobs): add dedicated workspace page ... 109745edb0

Make /jobs/:id the canonical application workspace while preserving list state and compatibility links. Replace popup and expandable-row navigation with accessible whole-row routing and richer job details.

cesnimda added 1 commit 2026-08-15 13:37:33 +02:00

feat(notifications): open bell popover 998ee07a9a

cesnimda added 1 commit 2026-08-15 13:50:03 +02:00

fix(career): preserve edits during polling ... d424633f95

Refresh extraction runs without reloading controlled profile fields. Keep stored-profile AI actions gated until pending edits are saved.

cesnimda added 1 commit 2026-08-15 14:09:54 +02:00

feat(cv): harden multi-page builder ... 5203ddea72

Wrap pathological content, paginate oversized entries, measure A4 and Letter previews correctly, unify section ordering, and gate stored-output actions on saved state.

cesnimda added 1 commit 2026-08-15 14:30:44 +02:00

test(frontend): follow dedicated job routes cd091159f3

cesnimda added 1 commit 2026-08-15 15:57:02 +02:00

test(e2e): use canonical theme preference 6b02e3f5d1

cesnimda added 1 commit 2026-08-15 16:47:50 +02:00

feat(admin): show deployed app version a6cffe0473

cesnimda added 1 commit 2026-08-15 16:56:38 +02:00

fix(career): preserve reviewed profile values ... f0b9b222ff

Keep extraction heuristics out of manual save, version, and import paths so reviewed locations, URLs, dates, and languages round-trip unchanged.

cesnimda added 1 commit 2026-08-15 17:08:21 +02:00

fix(cv): enforce readable render palettes ... 3b86ea2da0

Choose a contrasting header foreground for custom accents and keep public colour and font overrides inside safe supported values.

cesnimda added 1 commit 2026-08-15 17:34:39 +02:00

feat(jobs): complete workspace draft parity deed948183

cesnimda added 1 commit 2026-08-15 17:49:44 +02:00

fix(a11y): close cross-app interaction gaps a7c25499bb

cesnimda added 1 commit 2026-08-15 18:04:20 +02:00

feat(plans): publish honest Free and Pro a25c31b93a

cesnimda added 1 commit 2026-08-15 18:16:01 +02:00

test(release): complete local action matrix 0d487123af

cesnimda added 1 commit 2026-08-15 18:20:00 +02:00

refactor(storage): scope exports by owner cdcc7163fa

cesnimda added 1 commit 2026-08-15 18:36:42 +02:00

feat(export): add readable account archive 1ec9dd037e

cesnimda added 1 commit 2026-08-15 19:03:57 +02:00

feat(account): add deletion lifecycle 842e793f69

cesnimda added 1 commit 2026-08-15 19:24:03 +02:00

feat(ai): add safe benchmark harness f7312f4ba6

cesnimda added 1 commit 2026-08-15 19:31:54 +02:00

fix(ai): confine benchmark requests ... c0e190d5b5

Disable proxy discovery and redirect following so validated Ollama origins cannot escape the approved network boundary. Run the standard-library safety suite in CI.

cesnimda added 1 commit 2026-08-15 19:40:11 +02:00

fix(account): close deletion cache gap ... 7185491a05

Require authenticated sidecar cache purge before a deletion can complete and keep failures retryable. Mount tombstones outside restored application data while leaving deletion disabled by default.

cesnimda added 1 commit 2026-08-15 19:45:49 +02:00

fix(cv): sync operation terminal state dbff0f8d49

cesnimda added 1 commit 2026-08-15 20:03:08 +02:00

feat(ai): centralize durable usage ... 134aac7bcf

Add a content-free usage ledger with legacy backfill. Reserve Workspace and durable Strategy/CV work before execution so deleted history or duplicate admission cannot reset limits.

cesnimda added 1 commit 2026-08-15 20:06:11 +02:00

test(auth): prove email token lifecycle ... dc511296a4

Reject verification-link replay and cover real Identity token expiry, replay, email change, and custom username preservation on SQLite.

cesnimda added 1 commit 2026-08-15 20:13:17 +02:00

fix(mail): search every owned job ... a08ba9b45d

Replace ineffective pageSize=100 selectors with a bounded owner-filtered search endpoint for composing and moving linked threads.

cesnimda added 1 commit 2026-08-15 20:18:04 +02:00

test(workers): prove clock and restart safety dbf28b97ce

cesnimda added 1 commit 2026-08-15 20:25:11 +02:00

fix(ai): meter synchronous generations 25a6da951e

cesnimda added 1 commit 2026-08-15 20:28:26 +02:00

test(billing): prove downgrade lifecycle 191de69c48

cesnimda added 1 commit 2026-08-15 20:47:42 +02:00

fix(db): repair fresh migration chain 74a1e0d845

cesnimda added 1 commit 2026-08-15 20:53:19 +02:00

fix(security): harden public CV edges 8ef8b098c8

cesnimda added 1 commit 2026-08-15 21:02:53 +02:00

fix(scale): page mail and batch roles e7cacad7d6

Some checks are pending

Hide all checks

CI and Deploy / test (pull_request) Failing after 2m46s

Details

CI and Deploy / deploy (pull_request) Has been skipped

Details

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin release-readiness:release-readiness

git checkout release-readiness

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

cesnimda

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: cesnimda/jobtrackingapp#28