034a3e8745
Add complimentary OOBE polish and configurable admin mTLS
...
CI / verify (push) Has been cancelled
CI / publish (push) Has been cancelled
Allow one server-audited onboarding polish request without credits and make the certificate gate temporarily reversible while preserving application authentication.
2026-08-20 17:05:35 +08:00
0b4acb5978
Visualize admin analytics dashboards
...
CI / verify (push) Has been cancelled
CI / publish (push) Has been cancelled
Turn operational, product, and referral metrics into accessible charts so trends, funnels, retention, and channel quality are faster to interpret.
2026-08-20 16:02:21 +08:00
4b465e0e5e
Add privacy-safe product analytics
...
CI / verify (push) Has been cancelled
CI / publish (push) Has been cancelled
Establish an idempotent analytics pipeline and internal decision dashboard while keeping event metadata allowlisted and account deletion enforceable.
2026-08-20 15:20:01 +08:00
231c5040a5
Add StoreKit history and modernize admin console
...
CI / verify (push) Has been cancelled
CI / publish (push) Has been cancelled
Expose ledger-backed cross-device purchase history while shipping the tested React admin redesign in the same reproducible deployment revision.
2026-08-19 22:13:13 +08:00
11ec34dacb
Enforce deterministic gateway task policies
...
Make the server authoritative for thinking, model, search, tools, retry, and output budgets while preserving legacy client behavior.
2026-08-19 20:55:05 +08:00
3edc86a9a0
Show product usage types in credit ledger
...
Persist hotword request origin so every reservation lifecycle entry can be classified without mutating the immutable ledger.
2026-08-19 19:47:12 +08:00
e1fd35b1ff
Fix managed ASR settlement and empty polish recovery
...
Accept the final sequence format returned by Volcengine without weakening ordering checks, and retry one safe buffered DeepSeek empty response under the same credit reservation.
2026-08-19 19:16:05 +08:00
2194e69bb8
Accept bounded StoreKit signing clock skew
...
Allow legitimate App Store transaction timestamps to differ within the existing verification tolerance while preserving rejection beyond that boundary.
2026-08-19 18:26:54 +08:00
75c046d91d
Show latest credit ledger in admin
...
Expose a paginated global ledger timeline and load it automatically so operators can see recent credit activity without first locating a user.
2026-08-19 18:05:54 +08:00
58445dd880
Show complete user credit data in admin
...
Load users by registration order, expose consumed and current credits, and accept short internal IDs so support can reliably locate accounts.
2026-08-19 17:54:27 +08:00
c592f426be
Enable StoreKit credit purchases in production
...
Keep runtime grant verification aligned with all database migrations so release builds fail before missing table privileges reach deployment.
2026-08-19 15:57:45 +08:00
1737106560
checkpoint before checking out feature/account-managed-gateway
2026-08-19 15:53:08 +08:00
25cfbfa4e6
Polish admin layout and navigation rhythm
...
Prevent Web Awesome controls from overflowing while giving dashboard sections and navigation states consistent visual spacing.
2026-08-18 09:22:17 +08:00
971b7e26c6
Modernize admin UI and harden provider contracts
...
Adopt Web Awesome for consistent accessible controls while aligning production ASR, App Attest, and runtime dependency safeguards.
2026-08-17 21:07:18 +08:00
dcd77b86ca
Make admin verification directly executable
...
Preserve the deployment verification script as an executable operational check so certificate-boundary acceptance is repeatable.
2026-08-17 15:21:05 +08:00
405a2cfc0f
Harden admin deployment and local acceptance
...
Enforce mTLS and least-privilege runtime boundaries while adding repeatable MySQL 8.4 and Docker smoke checks that require no production secrets.
2026-08-17 15:20:46 +08:00
1a9c518f96
Add secure administrator operations console
...
Provide TOTP-authenticated, role-controlled user and credit workflows with paginated audit data and SQL-backed statistics so operations can manage growth safely.
2026-08-17 15:20:34 +08:00
676bfd2451
Fix production referral service wiring
...
Bind the referral route interface to its service and extend the module regression test to cover every route-facing operations boundary.
2026-08-16 21:14:50 +08:00
c415c53a1c
Fix production credit service wiring
...
Register the credits service through its route-facing interface and verify the application module resolves the binding without touching MySQL.
2026-08-16 19:39:06 +08:00
a17d058748
Fix container build workspace ownership
...
Allow the non-root Gradle builder to create project-local caches during reproducible image builds.
2026-08-16 15:07:51 +08:00
3824d0f6c3
Fix MySQL gateway migration ordering
...
Split replacement-key recreation so MySQL drops the old constraint before validating its reused name.
2026-08-16 15:00:10 +08:00
41e2145334
Publish verified Docker images to GHCR
...
Make deployments pull immutable CI-built images while keeping test failures diagnosable before any package is published.
2026-08-16 14:56:36 +08:00
0af35d44f4
Establish secure account and managed AI backend
...
Provide the production foundation for Apple identity, immutable credits, referrals, integrity checks, managed providers, and hardened Docker deployment.
2026-08-16 14:46:23 +08:00
Rocky