release: merge develop into release/0.1 (Gitea-aligned RC) #92

Merged

james.maes merged 48 commits from align/develop-into-release-0.1 into release/0.1 2026-11-07 17:20:47 +00:00

Conversation 0 Commits 48 Files Changed 71

+6463 -1095

james.maes commented 2026-11-07 17:20:31 +00:00

Owner

Copy link

Copy source

Merge the Gitea-aligned develop into release/0.1; conflicts resolved to develop's side, keeping release/0.1's RC revision so CI publishes the next RC.

🤖 Generated with Claude Code

Merge the Gitea-aligned develop into release/0.1; conflicts resolved to develop's side, keeping release/0.1's RC revision so CI publishes the next RC. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

james.maes added 48 commits 2026-11-07 17:20:32 +00:00

feat(provider-api): add an IMAGE model part and map it in the Anthropic, Bedrock and OpenAI-compatible providers ... 092ea21579

Claude models report vision. toString on a part never includes text or
image data.

Part of KofTwentyTwo/Website-Backend#305

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

feat(assistant)!: chat turns are not jobs; remove the run tracker SPI ... ac2107bd97

Ordinary chat turns no longer create core tracking jobs, so they stay out
of the Jobs tray and tables and no longer trigger a per-answer "finished"
notification. Crash safety comes from the assistant's own turn table
(leased, heartbeated assistant_turn rows, seq-numbered event replay and the
abandoned-turn sweep), which is unchanged.

Removes AssistantRunTracker, JobTrackingRunTracker, the config accessors and
the tracking id on RunningTurn, with their tests. The panel's Stop
(POST /turns/{id}/cancel) is unchanged and still covered.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

feat(assistant): link a launched bulk load to its job ... f7235690b6

A confirmed bulk load still launches a real durable job through
POST /qqq/v1/processes/{p}/jobs. Its tool result now carries jobHref (the
job's /app link) next to jobId and a record ref to the job, and the confirm
response's href points at the job, so the conversation links to it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

fix(assistant): send scheduled task notifications through core QAlerts ... e1f64cfa05

The notification a task owner asked for (output mode Notification or Both)
now goes through core QAlerts.notify: category Job, the owner as the only
audience, severity by run status and a link to the conversation. It replaces
a reflective call into an older alerts SPI that no longer matched.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docs: changelog and upgrade notes for turns that are not jobs ... fc5026594d

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

feat(config): build starter prompts per user from what they can access ... e4f369a4e7

GET /assistant/config returned the profile's starter prompts as static
text, so a user could be offered examples about tables they cannot see.
profile.starterPrompts (same field and shape) is now built per user:
up to three prompts generated from the tables the user can read through
the assistant that have rows (list_tables, count_records and
describe_table via the UI API with the user's own session), cached five
minutes, stable for the day, bounded and fail-soft. Configured prompts
stay only when tagged with tables the user can read.

Part of KofTwentyTwo/Website-Backend#303

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

feat(assistant): read attached files safely (sniffing, caps, PDF text, table previews, images) ... c2023aa63f

Adds the attachments package: uploads are read as the signed-in user's own
upload (core UploadRefs plus an owner check) into memory with byte caps;
the type is sniffed from content; executables, archives and unknown binary
data are refused; text and JSON are decoded with charset detection; PDF
page text comes from PDFBox (already on the classpath through core) with
page, character and memory caps and no font scan; CSV and XLSX previews
reuse core's bulk-load parsers; image sizes are read from headers.
Content is framed as an untrusted uploaded_file block with neutralized
delimiters. Limits live in AssistantQBitConfig.attachments.

Part of KofTwentyTwo/Website-Backend#305

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

feat(assistant): users manage their own conversations in the table UI ... b5cd747899

assistant_conversation is open to every assistant user (assistant.hasAccess
or assistant.admin) through AssistantAccessPermissionChecker; rows stay
locked to their owner, and the Assistant app and other tables stay
admin-only. A conversation customizer limits user edits to title, pinned
and status, refuses deleting a conversation with an answer in progress and
deletes the child rows after a table delete, through the same store code
as DELETE /conversations/{id}.

Adds Archive, Restore and Delete conversations as standard streamed-ETL
record actions on the table, acting only on rows the user can see.

UI API extension assistant 1.6.0: conversation list items have running,
PATCH /conversations/{id} accepts {"read": true}, and GET /config has
conversationsTable when the session may query that table.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docs: changelog and upgrade notes for conversation management ... 589d8f5c1c

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

feat(assistant): give attached files to the model as untrusted data ... de36dbaf8d

The turn engine reads pageContext.attachments through AttachmentService and
inlines the framed content (and images for vision models) into the
question's user message, after both cached system blocks. Unreadable files
become notices; image parts are dropped before a call to a model without
vision. In HIPAA mode attachments count as PHI. The system prompt treats
uploaded_file blocks as data and tells the model to propose writes with
create_record/update_record instead of saying it cannot create records.
GET /config reports features.attachments and the attachment limits.
Adds end-to-end, PHI routing and red-team tests.

Part of KofTwentyTwo/Website-Backend#305

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

fix(attachments): validate image data and preserve host PDF fonts ... 9adc28f0d9

Decode images within frame and pixel limits before provider use, contain malformed attachments per file, and preserve the host PDFBox font mapper.

Co-Authored-By: Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

Merge pull request #66 from QRun-IO/feature/assistant-attachments ... 300bb3b96c

feat(assistant): read files attached in the panel (untrusted, capped, vision-aware)

merge: integrate verified assistant attachment support ... 3db34201fc

Preserve both attachment and notification behavior. Full eight-module verify and 45 focused turn, notification, bulk-load and attachment tests passed.

Co-Authored-By: Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

Merge pull request #63 from QRun-IO/feature/turns-not-jobs ... 2167b77543

Chat turns are not jobs; link bulk loads to their job; notification audit

fix(tools): read the flat v1 table metadata response ... 407bdcdb47

Preserve field visibility filtering while interpreting the actual API response shape. Verified allowed fields and hidden/password exclusions through the real endpoint.

Co-Authored-By: Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

fix(assistant): recheck starter prompt access on every request ... b250585dde

Cap combined prompts at three and remove cached authorization-sensitive suggestions. Preserve bounded deterministic generation and cover field, row, table, policy and history changes. Thirty focused tests passed.

Co-Authored-By: Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

Merge develop into feature/starter-prompts-from-access ... a353381d02

Co-Authored-By: Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

Merge pull request #64 from QRun-IO/feature/starter-prompts-from-access ... 63afe0b587

Starter prompts follow the user's access

fix: integrate conversation management with current develop ... 3637ca3ad0

Preserve current attachment, notification and starter prompt behavior. Encrypt user titles that resemble ciphertext unless they match the same stored record; verify all eight reactor modules.

Co-Authored-By: Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

Merge pull request #65 from QRun-IO/feature/conversation-management ... dcf883fccb

Conversation management: table access, archive/restore/delete actions, UI API 1.6.0

ci: adopt centralized QQQ pipeline canary ... 141de96626

Replace copied workflow logic with the strict orb-owned QBit profile.
Preserve publication opt-outs and full Maven verification.

Co-Authored-By: OpenAI Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

ci: expose safe continuation failure diagnostics ... a0f9187f71

Co-Authored-By: OpenAI Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

fix(ci): normalize CircleCI runtime booleans ... 429397a4f1

Co-Authored-By: OpenAI Codex <noreply@openai.com>
Signed-off-by: James Maes <james@kof22.com>

ci: adopt verified shared orb 0.7.0 ... ebfdae8561

Co-Authored-By: Codex <noreply@openai.com>

Merge pull request #69 from QRun-IO/feature/central-ci ... 4049dffd0a

ci: adopt verified shared orb 0.7.0

ci: adopt shared orb 0.7.11 (#70) ... a348a4b050

Co-authored-by: Codex <noreply@openai.com>

ci: centralize rc release completion in qqq orb (#71) ... 3c04d1d1d7

Co-authored-by: Codex <noreply@openai.com>

ci: adopt central orb 0.7.12 and stable gates (#72) ... 6bb8c7d826

Co-authored-by: Codex <noreply@openai.com>

ci: use the shared branch-aware CodeQL worker (#74) ... 0f79e7352a

Co-authored-by: Codex <noreply@openai.com>

ci: adopt shared orb 0.7.17 (#76) ... 055df2e764

Co-authored-by: Codex <noreply@openai.com>

ci: adopt shared orb 0.7.18 (#77) ... 5a1985fd96

Co-authored-by: Codex <noreply@openai.com>

ci: adopt managed orb 0.8 patch track (#78) ... bcf173f4f2

Co-authored-by: Codex <noreply@openai.com>

fix(api): say NOT_CONFIGURED, with what to configure, when no model provider is usable (#83) ... ca9212731d

The probe reports DISABLED, NOT_CONFIGURED, NO_PERMISSION, KILL_SWITCH in that order; GET /config gains an additive message naming what to configure; a user without access on an unconfigured server gets 503 NOT_CONFIGURED instead of 403. Extension 1.7.0.

Fixes #82

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

ci: add the identical QRun release caller ... 2652843c29

Co-Authored-By: Codex <noreply@openai.com>

ci: move the QRun release caller to the thin v2 contract ... 45b34b7ccd

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Co-Authored-By: Codex <noreply@openai.com>

ci: add the isolated postpublish job to the QRun release caller ... 4083e5041f

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Co-Authored-By: Codex <noreply@openai.com>

ci: enroll shared Gitea release-candidate lifecycle ... f51482f69d

Co-Authored-By: Codex <noreply@openai.com>

ci: enroll shared Gitea lifecycle db8f5398b8

ci: enroll shared Gitea lifecycle 2d6df82f16

fix(assistant): store the transcript before message.end so the panel shows the answer ... 3539f5fd93

The panel reloads the conversation the moment the stream ends. The
redacted transcript (message parts, pending actions, stored events) was
flushed only after message.end was sent, so that reload read the "[]"
placeholders and showed the newest question and answer as empty bubbles
until the panel was closed and reopened. Persist and flush first, then
emit message.end.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Merge pull request 'fix(assistant): store the transcript before message.end (develop)' (#86) from fix/transcript-stored-before-message-end-develop into develop 67bdd320a8

ci: use shared ci-workflows Maven workflow ... 55563ffac3

Replace the platform-ci release callers with one caller of
KofTwentyTwo/ci-workflows maven.yaml (qqq-orb port).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Merge pull request 'ci: use shared ci-workflows Maven workflow' (#89) from ci/ci-workflows into develop 8a2f9474c6

ci: pin shared workflow to v1 ... 4eb81d2f5b

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Merge pull request 'ci: pin shared workflow to v1' (#90) from ci/pin-v1-develop into develop 7b27f2ea9e

build(deps): align with Gitea releases (parent 2.2.1, QQQ 4.1.0-RC.25) ... eb55ef552f

pom.xml: parent -> 2.2.1
pom.xml: qqq.snapshot.version: 4.1.0-RC.15 -> 4.1.0-RC.25
pom.xml: removed Central snapshot repository

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Merge pull request 'build(deps): align with Gitea releases (parent 2.2.1, QQQ 4.1.0-RC.25)' (#91) from deps/align-gitea into develop 7391150aa0

Merge develop into release/0.1 (Gitea-aligned RC) ... c3a03b8d84

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

james.maes merged commit b51dd4dad1 into release/0.1 2026-11-07 17:20:47 +00:00

james.maes deleted branch align/develop-into-release-0.1 2026-11-07 17:20:50 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

architecture

Architecture review: coupling, cohesion, UI API

bug

Something isn't working

dependencies

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

github_actions

Pull requests that update GitHub Actions code

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

java

Pull requests that update java code

question

Further information is requested

release:rc

Merging this develop PR cuts the next release candidate

secuurity

ux

Admin UX / information architecture

wontfix

This will not be worked on

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

forge-recovery (Forge Recovery) james.maes (James Maes)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: QRun-IO/qbit-assistant#92