4c9e5feec0
Make session refresh retries idempotent
...
CI / verify (push) Has been cancelled
CI / publish (push) Has been cancelled
Preserve the successor session for legitimate refresh retries so transient failures no longer revoke the user's session family.
2026-08-25 13:13:41 +08:00
0d236f57fb
Add anonymous OOBE gateway grants
...
CI / verify (push) Has been cancelled
CI / publish (push) Has been cancelled
Provide App Attest-bound, one-time onboarding AI access without creating accounts, with durable replay protection and production deployment safeguards.
2026-08-21 22:55:46 +08:00
454ba8ddc5
Migrate AI Hint feed generation
...
Bring dynamic hint generation into the account service while preserving the legacy key.osglab.com deployment for existing clients.
2026-08-21 15:17:15 +08:00
034a3e8745
Add complimentary OOBE polish and configurable admin mTLS
...
CI / verify (push) Has been cancelled
CI / publish (push) Has been cancelled
Allow one server-audited onboarding polish request without credits and make the certificate gate temporarily reversible while preserving application authentication.
2026-08-20 17:05:35 +08:00
11ec34dacb
Enforce deterministic gateway task policies
...
Make the server authoritative for thinking, model, search, tools, retry, and output budgets while preserving legacy client behavior.
2026-08-19 20:55:05 +08:00
c592f426be
Enable StoreKit credit purchases in production
...
Keep runtime grant verification aligned with all database migrations so release builds fail before missing table privileges reach deployment.
2026-08-19 15:57:45 +08:00
1737106560
checkpoint before checking out feature/account-managed-gateway
2026-08-19 15:53:08 +08:00
971b7e26c6
Modernize admin UI and harden provider contracts
...
Adopt Web Awesome for consistent accessible controls while aligning production ASR, App Attest, and runtime dependency safeguards.
2026-08-17 21:07:18 +08:00
405a2cfc0f
Harden admin deployment and local acceptance
...
Enforce mTLS and least-privilege runtime boundaries while adding repeatable MySQL 8.4 and Docker smoke checks that require no production secrets.
2026-08-17 15:20:46 +08:00
41e2145334
Publish verified Docker images to GHCR
...
Make deployments pull immutable CI-built images while keeping test failures diagnosable before any package is published.
2026-08-16 14:56:36 +08:00
0af35d44f4
Establish secure account and managed AI backend
...
Provide the production foundation for Apple identity, immutable credits, referrals, integrity checks, managed providers, and hardened Docker deployment.
2026-08-16 14:46:23 +08:00
Rocky