Merge develop into release/0.1 for the next 0.1.0 RC #88

Open

james.maes wants to merge 52 commits from merge/develop-into-release-0.1 into release/0.1

pull from: merge/develop-into-release-0.1

merge into: QRun-IO:release/0.1

QRun-IO:develop

QRun-IO:feat/process-tools

QRun-IO:feat/writes-follow-the-person

QRun-IO:fix/atomic-confirm-and-closed-surface

QRun-IO:fix/tool-service-owns-policy-and-identity

QRun-IO:fix/tool-call-service-enforces-its-checks

QRun-IO:feat/tool-registry

QRun-IO:docs/actions-and-mcp-design

QRun-IO:release/0.1

QRun-IO:rc/develop-into-release-0.1-everyone

QRun-IO:feat/store-reads-as-trusted-code

QRun-IO:rc/develop-into-release-0.1-weekly

QRun-IO:feat/weekly-budget

QRun-IO:rc/develop-into-release-0.1-save

QRun-IO:feat/save-and-schedule-analysis

QRun-IO:rc/develop-into-release-0.1-analyze

QRun-IO:feat/analyze-records

QRun-IO:fix/turn-watchdog-never-hangs-develop

QRun-IO:fix/turn-watchdog-never-hangs

QRun-IO:fix/live-thread-placeholders

QRun-IO:automation/qbit-rc-pending

QRun-IO:fix/transcript-stored-before-message-end-develop

QRun-IO:fix/transcript-stored-before-message-end

QRun-IO:main

QRun-IO:archive/qrun-github-cutover-20261101/ca9212731dc2/develop

QRun-IO:feat/openai-compatible-provider

QRun-IO:dependabot/maven/develop/maven-minor-and-patch-634f43d868

QRun-IO:dependabot/github_actions/develop/github-actions-0fdda1077f

QRun-IO:feature/orb-0.8-track

QRun-IO:feature/orb-0.7.18

QRun-IO:feature/orb-0.7.17

QRun-IO:feature/orb-standardize-release-0.1

QRun-IO:feature/orb-main-standardization

QRun-IO:feature/shared-codeql

QRun-IO:feature/orb-0712-stable-gate

QRun-IO:feature/orb-rc-worker

QRun-IO:feature/orb-0.7.11

QRun-IO:feature/central-ci

QRun-IO:feature/conversation-management

QRun-IO:feature/starter-prompts-from-access

QRun-IO:feature/turns-not-jobs

QRun-IO:feature/assistant-attachments

QRun-IO:feature/assistant-optional-provider-health

QRun-IO:fix/assistant-health-tile-wording

QRun-IO:feature/fail-soft-renders

QRun-IO:fix/records-render-and-stream-context

QRun-IO:ci/release-rc-secrets-inherit

QRun-IO:feature/ui-api-1.6

QRun-IO:fix/shutdown-hook-weak-runtime

QRun-IO:fix/help-bundle-version

QRun-IO:feature/health-checks

QRun-IO:feature/jobs-tray

QRun-IO:feature/help-bundle

QRun-IO:feature/transcript-redaction

QRun-IO:feature/foreign-keys

QRun-IO:feature/schema-indexes

QRun-IO:fix/assistant-defaults-rollback

QRun-IO:feature/durable-turns

QRun-IO:fix/assistant-defaults-guards

QRun-IO:feature/tables-populated-defaults

QRun-IO:feature/provider-spi-package

QRun-IO:feature/email-api

QRun-IO:feature/orb-0.6.9

QRun-IO:feature/write-mode

QRun-IO:feature/x1-y1-channel-wall

QRun-IO:feature/email-qbit

QRun-IO:feature/spec-endpoints-core-invoker

QRun-IO:feature/provider-api-module

QRun-IO:feature/p7-scheduled-tasks

QRun-IO:feature/bulk-load-tools

QRun-IO:feature/p6-rag

QRun-IO:feature/presentation-demo-shots

QRun-IO:feature/answer-presentation

QRun-IO:fix/core-alerts-rc5

QRun-IO:feature/p5-routing-fallback

QRun-IO:feature/p4-budgets

QRun-IO:feature/p3-hipaa-routing

QRun-IO:feature/p2-bedrock-vertex

QRun-IO:feature/p1-provider-registry

QRun-IO:feature/spec-providers-write-mode-wall

QRun-IO:feature/demo-pending-card

QRun-IO:feature/release-rc-automation

QRun-IO:feature/demo-screens

QRun-IO:feature/profiles-skills-access

QRun-IO:feature/ui-api-tools

QRun-IO:feature/strict-tools-grammar-fix

QRun-IO:feature/app-home-settings

QRun-IO:feature/fix-rename-version-labels

QRun-IO:feature/note-burned-rc

QRun-IO:feature/assistant-record-screens

QRun-IO:feature/robustness-test-flake

QRun-IO:feature/ga-only-release-tags

QRun-IO:feature/snake-case-table-names

QRun-IO:chore/qrun-repo-standard

QRun-IO:feature/pom-revision-comment

QRun-IO:feature/phase-0-1-assistant

Conversation 0 Commits 52 Files Changed 1

+1 -1

james.maes commented 2026-11-05 11:57:05 +00:00

Owner

Copy link

Copy source

Brings develop (including #83 and #86) into release/0.1. The automated cut was blocked by conflicts in .qqq-ci.yml, .circleci/config.yml and CHANGELOG.md; resolved by taking develop's versions. Tree matches develop except the RC version in pom.xml. ./mvnw verify -pl qbit-assistant -am passes.

🤖 Generated with Claude Code

Brings develop (including #83 and #86) into release/0.1. The automated cut was blocked by conflicts in .qqq-ci.yml, .circleci/config.yml and CHANGELOG.md; resolved by taking develop's versions. Tree matches develop except the RC version in pom.xml. ./mvnw verify -pl qbit-assistant -am passes. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

james.maes added 42 commits 2026-11-05 11:57:06 +00:00

feat(provider-api): add an IMAGE model part and map it in the Anthropic, Bedrock and OpenAI-compatible providers ... 092ea21579

Claude models report vision. toString on a part never includes text or
image data.

Part of KofTwentyTwo/Website-Backend#305

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

feat(assistant)!: chat turns are not jobs; remove the run tracker SPI ... ac2107bd97

Ordinary chat turns no longer create core tracking jobs, so they stay out
of the Jobs tray and tables and no longer trigger a per-answer "finished"
notification. Crash safety comes from the assistant's own turn table
(leased, heartbeated assistant_turn rows, seq-numbered event replay and the
abandoned-turn sweep), which is unchanged.

Removes AssistantRunTracker, JobTrackingRunTracker, the config accessors and
the tracking id on RunningTurn, with their tests. The panel's Stop
(POST /turns/{id}/cancel) is unchanged and still covered.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

feat(assistant): link a launched bulk load to its job ... f7235690b6

A confirmed bulk load still launches a real durable job through
POST /qqq/v1/processes/{p}/jobs. Its tool result now carries jobHref (the
job's /app link) next to jobId and a record ref to the job, and the confirm
response's href points at the job, so the conversation links to it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

fix(assistant): send scheduled task notifications through core QAlerts ... e1f64cfa05

The notification a task owner asked for (output mode Notification or Both)
now goes through core QAlerts.notify: category Job, the owner as the only
audience, severity by run status and a link to the conversation. It replaces
a reflective call into an older alerts SPI that no longer matched.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docs: changelog and upgrade notes for turns that are not jobs ... fc5026594d

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

feat(config): build starter prompts per user from what they can access ... e4f369a4e7

GET /assistant/config returned the profile's starter prompts as static
text, so a user could be offered examples about tables they cannot see.
profile.starterPrompts (same field and shape) is now built per user:
up to three prompts generated from the tables the user can read through
the assistant that have rows (list_tables, count_records and
describe_table via the UI API with the user's own session), cached five
minutes, stable for the day, bounded and fail-soft. Configured prompts
stay only when tagged with tables the user can read.

Part of KofTwentyTwo/Website-Backend#303

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

feat(assistant): read attached files safely (sniffing, caps, PDF text, table previews, images) ... c2023aa63f

Adds the attachments package: uploads are read as the signed-in user's own
upload (core UploadRefs plus an owner check) into memory with byte caps;
the type is sniffed from content; executables, archives and unknown binary
data are refused; text and JSON are decoded with charset detection; PDF
page text comes from PDFBox (already on the classpath through core) with
page, character and memory caps and no font scan; CSV and XLSX previews
reuse core's bulk-load parsers; image sizes are read from headers.
Content is framed as an untrusted uploaded_file block with neutralized
delimiters. Limits live in AssistantQBitConfig.attachments.

Part of KofTwentyTwo/Website-Backend#305

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

feat(assistant): users manage their own conversations in the table UI ... b5cd747899

assistant_conversation is open to every assistant user (assistant.hasAccess
or assistant.admin) through AssistantAccessPermissionChecker; rows stay
locked to their owner, and the Assistant app and other tables stay
admin-only. A conversation customizer limits user edits to title, pinned
and status, refuses deleting a conversation with an answer in progress and
deletes the child rows after a table delete, through the same store code
as DELETE /conversations/{id}.

Adds Archive, Restore and Delete conversations as standard streamed-ETL
record actions on the table, acting only on rows the user can see.

UI API extension assistant 1.6.0: conversation list items have running,
PATCH /conversations/{id} accepts {"read": true}, and GET /config has
conversationsTable when the session may query that table.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docs: changelog and upgrade notes for conversation management ... 589d8f5c1c

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

feat(assistant): give attached files to the model as untrusted data ... de36dbaf8d

The turn engine reads pageContext.attachments through AttachmentService and
inlines the framed content (and images for vision models) into the
question's user message, after both cached system blocks. Unreadable files
become notices; image parts are dropped before a call to a model without
vision. In HIPAA mode attachments count as PHI. The system prompt treats
uploaded_file blocks as data and tells the model to propose writes with
create_record/update_record instead of saying it cannot create records.
GET /config reports features.attachments and the attachment limits.
Adds end-to-end, PHI routing and red-team tests.

Part of KofTwentyTwo/Website-Backend#305

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

fix(attachments): validate image data and preserve host PDF fonts ... 9adc28f0d9

Decode images within frame and pixel limits before provider use, contain malformed attachments per file, and preserve the host PDFBox font mapper.

Co-Authored-By: Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

Merge pull request #66 from QRun-IO/feature/assistant-attachments ... 300bb3b96c

feat(assistant): read files attached in the panel (untrusted, capped, vision-aware)

merge: integrate verified assistant attachment support ... 3db34201fc

Preserve both attachment and notification behavior. Full eight-module verify and 45 focused turn, notification, bulk-load and attachment tests passed.

Co-Authored-By: Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

Merge pull request #63 from QRun-IO/feature/turns-not-jobs ... 2167b77543

Chat turns are not jobs; link bulk loads to their job; notification audit

fix(tools): read the flat v1 table metadata response ... 407bdcdb47

Preserve field visibility filtering while interpreting the actual API response shape. Verified allowed fields and hidden/password exclusions through the real endpoint.

Co-Authored-By: Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

fix(assistant): recheck starter prompt access on every request ... b250585dde

Cap combined prompts at three and remove cached authorization-sensitive suggestions. Preserve bounded deterministic generation and cover field, row, table, policy and history changes. Thirty focused tests passed.

Co-Authored-By: Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

Merge develop into feature/starter-prompts-from-access ... a353381d02

Co-Authored-By: Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

Merge pull request #64 from QRun-IO/feature/starter-prompts-from-access ... 63afe0b587

Starter prompts follow the user's access

fix: integrate conversation management with current develop ... 3637ca3ad0

Preserve current attachment, notification and starter prompt behavior. Encrypt user titles that resemble ciphertext unless they match the same stored record; verify all eight reactor modules.

Co-Authored-By: Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

Merge pull request #65 from QRun-IO/feature/conversation-management ... dcf883fccb

Conversation management: table access, archive/restore/delete actions, UI API 1.6.0

ci: adopt centralized QQQ pipeline canary ... 141de96626

Replace copied workflow logic with the strict orb-owned QBit profile.
Preserve publication opt-outs and full Maven verification.

Co-Authored-By: OpenAI Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

ci: expose safe continuation failure diagnostics ... a0f9187f71

Co-Authored-By: OpenAI Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

fix(ci): normalize CircleCI runtime booleans ... 429397a4f1

Co-Authored-By: OpenAI Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

ci: adopt verified shared orb 0.7.0 ... ebfdae8561

Co-Authored-By: Codex <noreply@openai.com>

Merge pull request #69 from QRun-IO/feature/central-ci ... 4049dffd0a

ci: adopt verified shared orb 0.7.0

ci: adopt shared orb 0.7.11 (#70) ... a348a4b050

Co-authored-by: Codex <noreply@openai.com>

ci: centralize rc release completion in qqq orb (#71) ... 3c04d1d1d7

Co-authored-by: Codex <noreply@openai.com>

ci: adopt central orb 0.7.12 and stable gates (#72) ... 6bb8c7d826

Co-authored-by: Codex <noreply@openai.com>

ci: use the shared branch-aware CodeQL worker (#74) ... 0f79e7352a

Co-authored-by: Codex <noreply@openai.com>

ci: adopt shared orb 0.7.17 (#76) ... 055df2e764

Co-authored-by: Codex <noreply@openai.com>

ci: adopt shared orb 0.7.18 (#77) ... 5a1985fd96

Co-authored-by: Codex <noreply@openai.com>

ci: adopt managed orb 0.8 patch track (#78) ... bcf173f4f2

Co-authored-by: Codex <noreply@openai.com>

fix(api): say NOT_CONFIGURED, with what to configure, when no model provider is usable (#83) ... ca9212731d

The probe reports DISABLED, NOT_CONFIGURED, NO_PERMISSION, KILL_SWITCH in that order; GET /config gains an additive message naming what to configure; a user without access on an unconfigured server gets 503 NOT_CONFIGURED instead of 403. Extension 1.7.0.

Fixes #82

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

ci: add the identical QRun release caller ... 2652843c29

Co-Authored-By: Codex <noreply@openai.com>

ci: move the QRun release caller to the thin v2 contract ... 45b34b7ccd

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Co-Authored-By: Codex <noreply@openai.com>

ci: add the isolated postpublish job to the QRun release caller ... 4083e5041f

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Co-Authored-By: Codex <noreply@openai.com>

ci: enroll shared Gitea release-candidate lifecycle ... f51482f69d

Co-Authored-By: Codex <noreply@openai.com>

ci: enroll shared Gitea lifecycle db8f5398b8

ci: enroll shared Gitea lifecycle 2d6df82f16

fix(assistant): store the transcript before message.end so the panel shows the answer ... 3539f5fd93

The panel reloads the conversation the moment the stream ends. The
redacted transcript (message parts, pending actions, stored events) was
flushed only after message.end was sent, so that reload read the "[]"
placeholders and showed the newest question and answer as empty bubbles
until the panel was closed and reopened. Persist and flush first, then
emit message.end.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Merge pull request 'fix(assistant): store the transcript before message.end (develop)' (#86) from fix/transcript-stored-before-message-end-develop into develop 67bdd320a8

Merge develop into release/0.1 for the next 0.1.0 RC ... 43d3a45ae1

Resolves the CI config and CHANGELOG conflicts by taking develop's
versions (managed orb 0.8, release completion).

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Some required checks failed

Hide all checks

QRun-IO/ci-policy: ci / fork-guard (pull_request) Skipped

Details

QRun-IO/ci-policy: native / fork-deny (pull_request) Skipped

Details

QRun-IO/ci-policy: native / dotnet-0 (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / Scoped workflow [workflow 13053bb397bf07f3eaacd6e51ef0ffad7f9f1eb3] (pull_request) Successful in 6s

Details

QRun-IO/ci-policy: ci / head-profile (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / repository-policy (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / application-template-0 (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / gradle-1 (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / java-core-2-head (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / java-docker-3-head (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / java-docker-4 (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / java-frontend-browser-5 (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / java-maven-6 (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / java-maven-6-head (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / java-maven-7 (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / java-maven-7-head (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / node-8 (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / node-9 (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / node-10 (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / node-playwright-11 (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / repository-policy-12 (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / source-config-13 (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / source-config-14 (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / android-0 (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / original-business (pull_request) Skipped

Details

QRun-IO/ci-policy: native / native-result (pull_request) Successful in 6s

Details

QRun-IO/ci-policy: ci / original-mcp (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / original-voyage (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / original-cli (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / not-enrolled (pull_request) Skipped

Details

QRun-IO/ci-policy: ci / shared-pipeline (pull_request) Skipped

Details

QRun-IO/ci-policy: Shared Java Maven CI with Docker / secrets (pull_request) Successful in 29s

Details

QRun-IO/ci-policy: Shared Java Maven CI with Docker / verify (pull_request) Successful in 6m40s

Details

QRun-IO/ci-policy: Shared Java Maven CI with Docker / gate (pull_request) Successful in 21s

Details

QRun-IO/ci-policy: ci / java-docker-3 (pull_request) Successful in 1h20m28s

Details

QRun-IO/ci-policy: ci / ci-result (pull_request) Successful in 10s

Details

Shared Java Maven CI with Docker / secrets (push) Successful in 29s

Details

Shared Java Maven CI with Docker / verify (push) Failing after 6m59s

Details

Shared Java Maven CI with Docker / gate (push) Failing after 16s

Details

qrun-release / release (push) Failing after 51m47s

Details

qrun-release / postpublish (push) Skipped

Details

This pull request has changes conflicting with the target branch.

• pom.xml

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin merge/develop-into-release-0.1:merge/develop-into-release-0.1

git checkout merge/develop-into-release-0.1

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

architecture

Architecture review: coupling, cohesion, UI API

bug

Something isn't working

dependencies

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

github_actions

Pull requests that update GitHub Actions code

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

java

Pull requests that update java code

question

Further information is requested

release:rc

Merging this develop PR cuts the next release candidate

secuurity

ux

Admin UX / information architecture

wontfix

This will not be worked on

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

forge-recovery (Forge Recovery) james.maes (James Maes)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: QRun-IO/qbit-assistant#88