release: merge develop into release/0.1 (Gitea-aligned RC) #92

Merged

james.maes merged 48 commits from align/develop-into-release-0.1 into release/0.1 2026-11-07 17:20:47 +00:00

Conversation 0 Commits 48 Files Changed 71

+6463 -1095

48 Commits

Author	SHA1	Message	Date
james.maesandClaude Opus 5.5	c3a03b8d84	Merge develop into release/0.1 (Gitea-aligned RC) ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-07 11:19:04 -06:00
james.maes	7391150aa0	Merge pull request 'build(deps): align with Gitea releases (parent 2.2.1, QQQ 4.1.0-RC.25)' (#91) from deps/align-gitea into develop	2026-11-07 17:18:25 +00:00
james.maesandClaude Opus 5.5	eb55ef552f	build(deps): align with Gitea releases (parent 2.2.1, QQQ 4.1.0-RC.25) ... pom.xml: parent -> 2.2.1 pom.xml: qqq.snapshot.version: 4.1.0-RC.15 -> 4.1.0-RC.25 pom.xml: removed Central snapshot repository Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-07 17:09:46 +00:00
james.maes	7b27f2ea9e	Merge pull request 'ci: pin shared workflow to v1' (#90) from ci/pin-v1-develop into develop	2026-11-06 16:03:24 +00:00
james.maesandClaude Opus 5.5	4eb81d2f5b	ci: pin shared workflow to v1 ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-06 14:04:14 +00:00
james.maes	8a2f9474c6	Merge pull request 'ci: use shared ci-workflows Maven workflow' (#89) from ci/ci-workflows into develop	2026-11-05 23:14:27 +00:00
james.maesandClaude Opus 5.5	55563ffac3	ci: use shared ci-workflows Maven workflow ... Replace the platform-ci release callers with one caller of KofTwentyTwo/ci-workflows maven.yaml (qqq-orb port). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-05 22:01:54 +00:00
james.maes	67bdd320a8	Merge pull request 'fix(assistant): store the transcript before message.end (develop)' (#86) from fix/transcript-stored-before-message-end-develop into develop	2026-11-05 10:17:30 +00:00
james.maesandClaude Sonnet 5.5	3539f5fd93	fix(assistant): store the transcript before message.end so the panel shows the answer ... The panel reloads the conversation the moment the stream ends. The redacted transcript (message parts, pending actions, stored events) was flushed only after message.end was sent, so that reload read the "[]" placeholders and showed the newest question and answer as empty bubbles until the panel was closed and reopened. Persist and flush first, then emit message.end. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-04 19:16:11 -06:00
forge-recovery	2d6df82f16	ci: enroll shared Gitea lifecycle	2026-11-02 22:09:34 +00:00
forge-recovery	db8f5398b8	ci: enroll shared Gitea lifecycle	2026-11-02 21:30:15 +00:00
forge-recoveryandCodex	f51482f69d	ci: enroll shared Gitea release-candidate lifecycle ... Co-Authored-By: Codex <noreply@openai.com>	2026-11-02 20:13:19 +00:00
3 people	4083e5041f	ci: add the isolated postpublish job to the QRun release caller ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Co-Authored-By: Codex <noreply@openai.com>	2026-11-02 15:45:12 +00:00
3 people	45b34b7ccd	ci: move the QRun release caller to the thin v2 contract ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Co-Authored-By: Codex <noreply@openai.com>	2026-11-02 06:15:41 +00:00
forge-recoveryandCodex	2652843c29	ci: add the identical QRun release caller ... Co-Authored-By: Codex <noreply@openai.com>	2026-11-02 03:25:36 +00:00
james.maesandClaude Fable 5.1	ca9212731d	fix(api): say NOT_CONFIGURED, with what to configure, when no model provider is usable (#83) ... The probe reports DISABLED, NOT_CONFIGURED, NO_PERMISSION, KILL_SWITCH in that order; GET /config gains an additive message naming what to configure; a user without access on an unconfigured server gets 503 NOT_CONFIGURED instead of 403. Extension 1.7.0. Fixes #82 Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>	2026-11-01 11:30:04 -06:00
james.maesandCodex	bcf173f4f2	ci: adopt managed orb 0.8 patch track (#78) ... Co-authored-by: Codex <noreply@openai.com>	2026-10-21 15:31:42 -05:00
james.maesandCodex	5a1985fd96	ci: adopt shared orb 0.7.18 (#77) ... Co-authored-by: Codex <noreply@openai.com>	2026-10-21 14:48:54 -05:00
james.maesandCodex	055df2e764	ci: adopt shared orb 0.7.17 (#76) ... Co-authored-by: Codex <noreply@openai.com>	2026-10-21 14:20:22 -05:00
james.maesandCodex	0f79e7352a	ci: use the shared branch-aware CodeQL worker (#74) ... Co-authored-by: Codex <noreply@openai.com>	2026-10-21 10:51:16 -05:00
james.maesandCodex	6bb8c7d826	ci: adopt central orb 0.7.12 and stable gates (#72) ... Co-authored-by: Codex <noreply@openai.com>	2026-10-21 08:58:48 -05:00
james.maesandCodex	3c04d1d1d7	ci: centralize rc release completion in qqq orb (#71) ... Co-authored-by: Codex <noreply@openai.com>	2026-10-21 02:29:05 -05:00
james.maesandCodex	a348a4b050	ci: adopt shared orb 0.7.11 (#70) ... Co-authored-by: Codex <noreply@openai.com>	2026-10-21 01:00:37 -05:00
james.maes	4049dffd0a	Merge pull request #69 from QRun-IO/feature/central-ci ... ci: adopt verified shared orb 0.7.0	2026-10-20 07:30:02 -05:00
james.maesandCodex	ebfdae8561	ci: adopt verified shared orb 0.7.0 ... Co-Authored-By: Codex <noreply@openai.com>	2026-10-20 07:23:15 -05:00
james.maesandOpenAI Codex	429397a4f1	fix(ci): normalize CircleCI runtime booleans ... Co-Authored-By: OpenAI Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-20 06:12:58 -05:00
james.maesandOpenAI Codex	a0f9187f71	ci: expose safe continuation failure diagnostics ... Co-Authored-By: OpenAI Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-20 06:09:40 -05:00
james.maesandOpenAI Codex	141de96626	ci: adopt centralized QQQ pipeline canary ... Replace copied workflow logic with the strict orb-owned QBit profile. Preserve publication opt-outs and full Maven verification. Co-Authored-By: OpenAI Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-20 06:01:46 -05:00
james.maes	dcf883fccb	Merge pull request #65 from QRun-IO/feature/conversation-management ... Conversation management: table access, archive/restore/delete actions, UI API 1.6.0	2026-10-19 09:58:58 -05:00
james.maesandCodex	3637ca3ad0	fix: integrate conversation management with current develop ... Preserve current attachment, notification and starter prompt behavior. Encrypt user titles that resemble ciphertext unless they match the same stored record; verify all eight reactor modules. Co-Authored-By: Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-19 09:52:41 -05:00
james.maes	63afe0b587	Merge pull request #64 from QRun-IO/feature/starter-prompts-from-access ... Starter prompts follow the user's access	2026-10-19 09:33:30 -05:00
james.maesandCodex	a353381d02	Merge develop into feature/starter-prompts-from-access ... Co-Authored-By: Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-19 09:20:00 -05:00
james.maesandCodex	b250585dde	fix(assistant): recheck starter prompt access on every request ... Cap combined prompts at three and remove cached authorization-sensitive suggestions. Preserve bounded deterministic generation and cover field, row, table, policy and history changes. Thirty focused tests passed. Co-Authored-By: Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-19 08:50:26 -05:00
james.maesandCodex	407bdcdb47	fix(tools): read the flat v1 table metadata response ... Preserve field visibility filtering while interpreting the actual API response shape. Verified allowed fields and hidden/password exclusions through the real endpoint. Co-Authored-By: Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-19 08:50:25 -05:00
james.maes	2167b77543	Merge pull request #63 from QRun-IO/feature/turns-not-jobs ... Chat turns are not jobs; link bulk loads to their job; notification audit	2026-10-19 08:44:43 -05:00
james.maesandCodex	3db34201fc	merge: integrate verified assistant attachment support ... Preserve both attachment and notification behavior. Full eight-module verify and 45 focused turn, notification, bulk-load and attachment tests passed. Co-Authored-By: Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-19 08:36:30 -05:00
james.maes	300bb3b96c	Merge pull request #66 from QRun-IO/feature/assistant-attachments ... feat(assistant): read files attached in the panel (untrusted, capped, vision-aware)	2026-10-19 08:15:33 -05:00
james.maesandCodex	9adc28f0d9	fix(attachments): validate image data and preserve host PDF fonts ... Decode images within frame and pixel limits before provider use, contain malformed attachments per file, and preserve the host PDFBox font mapper. Co-Authored-By: Codex <noreply@openai.com> Signed-off-by: James Maes <james@kof22.com>	2026-10-19 07:50:25 -05:00
james.maesandClaude Opus 5.5	de36dbaf8d	feat(assistant): give attached files to the model as untrusted data ... The turn engine reads pageContext.attachments through AttachmentService and inlines the framed content (and images for vision models) into the question's user message, after both cached system blocks. Unreadable files become notices; image parts are dropped before a call to a model without vision. In HIPAA mode attachments count as PHI. The system prompt treats uploaded_file blocks as data and tells the model to propose writes with create_record/update_record instead of saying it cannot create records. GET /config reports features.attachments and the attachment limits. Adds end-to-end, PHI routing and red-team tests. Part of KofTwentyTwo/Website-Backend#305 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-16 15:51:43 -05:00
james.maesandClaude Opus 5.5	589d8f5c1c	docs: changelog and upgrade notes for conversation management ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-16 15:46:06 -05:00
james.maesandClaude Opus 5.5	b5cd747899	feat(assistant): users manage their own conversations in the table UI ... assistant_conversation is open to every assistant user (assistant.hasAccess or assistant.admin) through AssistantAccessPermissionChecker; rows stay locked to their owner, and the Assistant app and other tables stay admin-only. A conversation customizer limits user edits to title, pinned and status, refuses deleting a conversation with an answer in progress and deletes the child rows after a table delete, through the same store code as DELETE /conversations/{id}. Adds Archive, Restore and Delete conversations as standard streamed-ETL record actions on the table, acting only on rows the user can see. UI API extension assistant 1.6.0: conversation list items have running, PATCH /conversations/{id} accepts {"read": true}, and GET /config has conversationsTable when the session may query that table. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-16 15:46:06 -05:00
james.maesandClaude Opus 5.5	c2023aa63f	feat(assistant): read attached files safely (sniffing, caps, PDF text, table previews, images) ... Adds the attachments package: uploads are read as the signed-in user's own upload (core UploadRefs plus an owner check) into memory with byte caps; the type is sniffed from content; executables, archives and unknown binary data are refused; text and JSON are decoded with charset detection; PDF page text comes from PDFBox (already on the classpath through core) with page, character and memory caps and no font scan; CSV and XLSX previews reuse core's bulk-load parsers; image sizes are read from headers. Content is framed as an untrusted uploaded_file block with neutralized delimiters. Limits live in AssistantQBitConfig.attachments. Part of KofTwentyTwo/Website-Backend#305 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-16 15:43:10 -05:00
james.maesandClaude Opus 5.5	e4f369a4e7	feat(config): build starter prompts per user from what they can access ... GET /assistant/config returned the profile's starter prompts as static text, so a user could be offered examples about tables they cannot see. profile.starterPrompts (same field and shape) is now built per user: up to three prompts generated from the tables the user can read through the assistant that have rows (list_tables, count_records and describe_table via the UI API with the user's own session), cached five minutes, stable for the day, bounded and fail-soft. Configured prompts stay only when tagged with tables the user can read. Part of KofTwentyTwo/Website-Backend#303 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-16 15:34:35 -05:00
james.maesandClaude Opus 5.5	fc5026594d	docs: changelog and upgrade notes for turns that are not jobs ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-16 15:29:54 -05:00
james.maesandClaude Opus 5.5	e1f64cfa05	fix(assistant): send scheduled task notifications through core QAlerts ... The notification a task owner asked for (output mode Notification or Both) now goes through core QAlerts.notify: category Job, the owner as the only audience, severity by run status and a link to the conversation. It replaces a reflective call into an older alerts SPI that no longer matched. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-16 15:29:53 -05:00
james.maesandClaude Opus 5.5	f7235690b6	feat(assistant): link a launched bulk load to its job ... A confirmed bulk load still launches a real durable job through POST /qqq/v1/processes/{p}/jobs. Its tool result now carries jobHref (the job's /app link) next to jobId and a record ref to the job, and the confirm response's href points at the job, so the conversation links to it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-16 15:29:51 -05:00
james.maesandClaude Opus 5.5	ac2107bd97	feat(assistant)!: chat turns are not jobs; remove the run tracker SPI ... Ordinary chat turns no longer create core tracking jobs, so they stay out of the Jobs tray and tables and no longer trigger a per-answer "finished" notification. Crash safety comes from the assistant's own turn table (leased, heartbeated assistant_turn rows, seq-numbered event replay and the abandoned-turn sweep), which is unchanged. Removes AssistantRunTracker, JobTrackingRunTracker, the config accessors and the tracking id on RunningTurn, with their tests. The panel's Stop (POST /turns/{id}/cancel) is unchanged and still covered. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-16 15:29:48 -05:00
james.maesandClaude Opus 5.5	092ea21579	feat(provider-api): add an IMAGE model part and map it in the Anthropic, Bedrock and OpenAI-compatible providers ... Claude models report vision. toString on a part never includes text or image data. Part of KofTwentyTwo/Website-Backend#305 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-16 15:26:01 -05:00