jobtrackingapp/docs/work-programmes/session-handoff.md

JobTracker session handoff

Updated: 2026-08-03

• Exact current task: AI-002 — revalidate and implement the central local-first Ollama/provider routing policy using PROD-002 task classes, POL-002 consent gates and AI-001 execution context.
• Last completed step: AI-001 added reusable Pro/privacy admission, bounded priority/capacity, typed default-off worker, owner/policy/cancellation recheck, heartbeat/timeout/retry handling and configuration. POL-002 immediately before it added persistent AI opt-out/external consent plus backend/sidecar gates. AI-002 is the sole IN PROGRESS item.
• Files currently modified: all prior uncommitted programme work plus AI privacy settings/policy/controller/migration/UI/sidecar changes, AiOperationQueue.cs, queue tests/configuration and new architecture/verification/evidence/tracking documents. Pre-existing unrelated changes remain preserved.
• Commands already run this session: targeted source tracing; backend builds; EF migration scaffold/pending-model/script/update attempts; focused/full backend tests; focused/full frontend tests; frontend production build; sidecar pytest; Compose config; diff checks. Exact POL-002 commands/results are V-089–V-095; AI-001 are V-096/V-097.
• Test results: backend 581/581; AI-001 focused queue/state/API 17/17; frontend 47/47 suites and 158/158 tests plus production build; Python sidecar 18/18; Compose config and diff check pass. Browser was not run.
• Services currently running: no process started in this session remains. The attempted temporary API launch command was rejected before execution. Pre-existing Docker development containers previously observed were not changed.
• Temporary files or processes: no process remains. tmp/pol002-migration.db is a disposable partial SQLite migration rehearsal; it contains no user data and stopped at the pre-existing historical migration-chain defect. No startup-test files were created because the launch command was rejected.
• Production changes currently active: none. No provider/model call, deployment, production configuration, model pull, paid service or production migration occurred.
• Rollback status: all changes are repository-only and uncommitted. Set EXTERNAL_AI_ENABLED=false and WORKER_AI_OPERATIONS_ENABLED=false for immediate local-only/inactive behavior. The AI preference migration is additive; application rollback should retain its columns. AI-001 adds no schema.
• Uncommitted changes: the worktree remains broadly dirty from user/prior programme work, including original D .agent.md, ?? AGENTS.md, audit/todo trees and all completed package changes. Do not revert, reset, bulk-format or commit unrelated files.
• Known failures: browser localhost denied; MariaDB/SMTP/production unavailable; SEC-006 package upgrades need explicit internet permission; direct clean EF-only SQLite migration fails before the new preference migration because historical AddJobEntityAndProspectStages expects startup reconciliation. No real AI task handler is registered and all AI workers remain off.
• Exact next action: trace every /summarize and /cv/* call into one AI-002 task-routing matrix, then add actual-provider/result metadata and local health/circuit/fallback decisions to the AI-001 execution path without changing Strategy/CV producers yet.
• Work that can continue independently: AI-002 repository adapter/routing tests with fake transports; then AI-003/004 typed producers/handlers. UX-001/QA-001 can proceed after foundations. SEC-006/007 require package-index permission; PROD-001/003/004 require production access.
• Decisions still required from the user: none for repository-only AI-002 fake/local work. External/paid provider calls, package upgrades and production rollout/access still require explicit authority/configuration; SEC-009 deletion/retention needs the recorded retention/legal decision.