This website requires JavaScript.
9452e5d408
fix: remove unused admin account icon import
2026-04-02 04:48:38 +00:00
87de51b06e
fix: resolve stale selection bug in network diagram PropertiesPanel
2026-04-04 14:18:02 +00:00
e002fe4969
feat: add admin account detail management
2026-04-02 04:37:23 +00:00
f6e7613a5e
fix: resolve TypeScript errors in DeviceToolbar and DiagramEditor
2026-04-04 08:00:42 +00:00
7cbc9fe224
feat: expand admin customer account controls
2026-04-02 04:17:29 +00:00
ddd55167c1
feat: add Network Maps to sidebar navigation and router
2026-04-04 07:59:06 +00:00
70242ad037
feat: reorganize admin panel around accounts
2026-04-02 03:46:11 +00:00
2622258b04
feat: add Network Diagrams list page with search, client filter, import
2026-04-04 07:57:43 +00:00
90d7aa04a9
feat: add DiagramEditor page assembling all panels with auto-save and AI generation
2026-04-04 07:56:03 +00:00
2a977e4d81
feat: add NetworkCanvas wrapper and DiagramHeader components
2026-04-04 07:53:52 +00:00
1371c2edd9
feat: add AIAssistPanel with replace and merge modes
2026-04-04 07:52:28 +00:00
25233dbfae
feat: add PropertiesPanel for node and edge property editing
2026-04-04 07:52:15 +00:00
ab49635de2
feat: add DeviceToolbar panel with search, categories, drag-drop, custom type creation
2026-04-04 07:51:44 +00:00
354b44844c
feat: add device registry, DeviceNode, ConnectionEdge for React Flow
2026-04-04 07:50:10 +00:00
1ec7bbbbd3
feat: add frontend API clients for device types and network diagrams
2026-04-04 07:48:03 +00:00
b9e37ecdfb
feat: add TypeScript types for network diagrams
2026-04-04 07:48:00 +00:00
074548678f
feat: add network diagrams CRUD + AI generate + export/import router
2026-04-04 07:45:42 +00:00
24afe5eb41
feat: add AI generation service for network diagrams
2026-04-04 07:44:00 +00:00
c16f3968d5
feat: add device types CRUD router
2026-04-04 07:43:23 +00:00
973efb1f81
feat: add Pydantic schemas for device types and network diagrams
2026-04-04 07:42:18 +00:00
bb35cff38d
feat: add network_diagrams table
2026-04-04 07:41:13 +00:00
947516f81e
feat: add device_types table with system seed data
2026-04-04 07:40:12 +00:00
f54d7ecd78
docs: update current state after Phase 4 merge
2026-04-12 04:35:30 +00:00
46593ba8ca
Merge PR #136 : feat: tenant isolation Phase 4 — RLS on all remaining tables
2026-04-12 04:35:01 +00:00
52553d62d2
fix(tests): update expectations for RLS-correct behavior
2026-04-12 03:48:30 +00:00
a48660700a
fix: background jobs and lifespan must use BYPASSRLS sessions
2026-04-12 03:44:23 +00:00
3ff886363c
fix: use BYPASSRLS session for all auth deps and user-mutation endpoints
2026-04-12 03:25:18 +00:00
501442e5f0
fix: seed_test_users must use ADMIN_DATABASE_URL after Phase 4 RLS on users
2026-04-12 03:12:46 +00:00
6f53ec06f5
docs: add lessons 107-109 — RLS startup, global tables, tree_shares account_id
2026-04-12 02:58:12 +00:00
ec322f7cdf
fix: bootstrap service account with BYPASSRLS session
2026-04-12 02:44:36 +00:00
f9248aeaa8
fix: remove platform_steps and template_trees from Phase 4 RLS
2026-04-12 01:48:50 +00:00
c6da4ebee5
fix: remove script_categories from Phase 4 RLS — no account_id column
2026-04-12 01:32:42 +00:00
64f004a62c
feat: tenant isolation Phase 4 — RLS on 31 remaining tables + script_builder fix
2026-04-12 01:25:28 +00:00
ba36e37dab
docs: update CHANGELOG with Tenant Isolation Phase 2 and Phase 3 details
2026-04-11 10:42:57 +00:00
9e6965512b
Merge pull request #135 from resolutionflow/feat/tenant-isolation-phase-3
2026-04-11 04:28:47 -04:00
893b8a5008
fix: tree_shares.account_id must come from tree owner, not the actor
2026-04-11 05:17:25 +00:00
e05472615b
feat: tenant isolation Phase 3 — audit_logs, tree_shares, remaining RLS
2026-04-11 05:02:43 +00:00
00fdd663bc
Merge pull request #134 from resolutionflow/feat/tenant-isolation-phase-2
2026-04-11 03:02:25 -04:00
8cf58add22
fix: use valid confidence_tier value in RLS test ai_sessions INSERT
2026-04-11 05:28:52 +00:00
6c231ef1c6
fix: use started_at (not created_at) in RLS test session INSERT
2026-04-11 04:53:35 +00:00
758cd61621
fix: propagate account_id through all write paths missing NOT NULL coverage
2026-04-11 04:24:36 +00:00
b9fcdd5d73
fix: use DATABASE_URL_SYNC (Railway reference var) as primary Alembic URL
2026-04-11 03:42:07 +00:00
4273ed0e5c
fix: use Railway native PG env vars for Alembic migrations
2026-04-11 03:35:04 +00:00
0107d2d896
fix: use resolutionflow_admin for Alembic migrations (avoid postgres superuser)
2026-04-11 03:23:32 +00:00
79ae34108a
fix: add Alembic migrations step + RLS env vars to CI
2026-04-10 19:55:10 +00:00
bd29f590a2
fix: set account_id on all Session constructors; fix 3 ESLint errors in CI
2026-04-10 14:41:42 +00:00
1c6e22ceb3
docs: update CHANGELOG with tenant isolation Phase 1 and recent fixes
2026-04-10 10:46:04 +00:00
ce4cfc3240
fix: set account_id on PsaPostLog in psa_post_to_ticket (missed third write path); fix get_admin_db docstring
2026-04-10 07:12:45 +00:00
82ee177d9b
fix: harden Phase 2 RLS tests — try/finally cleanup, assert guards, seed B-data for isolation checks
2026-04-10 07:07:26 +00:00
ed8de92c52
test: add Phase 2 RLS isolation tests for 11 session tables (incl. step_library visibility regression)
2026-04-10 07:00:09 +00:00
5bd331ca92
fix: clarify step_library RLS comment; remove unused sqlalchemy import
2026-04-10 06:57:41 +00:00
87fac02e9b
feat: migration — enable RLS on 11 Phase 2 session tables (tenant-only + step_library visibility policy)
2026-04-10 06:55:25 +00:00
4f4bc435da
docs: broaden admin_database docstring to cover non-admin BYPASSRLS use cases
2026-04-10 06:51:53 +00:00
ac2b193909
fix: use get_admin_db in access_share to handle cross-tenant session reads (public shares)
2026-04-10 06:50:00 +00:00
b641ac6c55
fix: set account_id on session_supporting_data, session_resolution_outputs, maintenance_schedules, psa_post_log constructors
2026-04-10 06:44:17 +00:00
8292e6ec65
fix: handle non-default, no-team trees in global content migration
2026-04-10 05:21:18 +00:00
20bd428d83
Merge pull request #133 from resolutionflow/feat/tenant-isolation-phase-1
2026-04-10 00:57:53 -04:00
b9da0e7107
chore: resolve merge conflicts with main
2026-04-10 04:57:39 +00:00
8f044849d4
fix: get_tree returns 404 (not 403) for inaccessible trees — don't leak resource existence
2026-04-10 04:17:31 +00:00
14304be383
fix: correct RLS test fixtures — tree_structure NOT NULL, tree_tags schema, session-scoped set_config
2026-04-10 04:15:41 +00:00
a5c5eb6cc3
fix: convert DATABASE_URL_SYNC from property to overridable field for Alembic superuser URL
2026-04-10 04:03:32 +00:00
c4f919f3a5
feat: migration — enable RLS on trees, tags, categories, psa_connections, flow_proposals
2026-04-10 04:02:10 +00:00
8de6ee7aa4
feat: migration — create resolutionflow_app and resolutionflow_admin DB roles
2026-04-10 03:59:28 +00:00
83ad2e0661
feat: migrate admin endpoints to get_admin_db (BYPASSRLS) before RLS switch
2026-04-10 03:57:18 +00:00
ce4056c6b9
test: add failing RLS isolation tests (green after Task 10 migration + Task 11 URL switch)
2026-04-10 03:54:42 +00:00
9d60b9a244
feat: apply require_tenant_context to all user-facing routers
2026-04-10 03:52:52 +00:00
df9ecf2d29
feat: add require_tenant_context and require_admin_db dependencies
2026-04-10 03:50:59 +00:00
b0e5f12897
feat: register RLS transaction-begin listener on app engine at startup
2026-04-10 03:49:49 +00:00
b4f8694f6b
feat: add tenant_context module — ContextVar, transaction listener, tenant_filter
2026-04-10 03:48:34 +00:00
6f1becf21f
feat: add admin_engine and get_admin_db for BYPASSRLS admin endpoints
2026-04-10 03:46:29 +00:00
acbfb3fb37
feat: add ADMIN_DATABASE_URL setting with fallback to DATABASE_URL
2026-04-10 03:45:52 +00:00
a394a1d464
fix: replace account_id=None with PLATFORM_ACCOUNT_ID for global content
2026-04-09 18:35:52 +00:00
d2ebc4f182
fix: correct tree tags subquery in template_trees migration
2026-04-09 17:30:05 +00:00
8bcf08ae06
fix: persist account ownership for script templates and generations
2026-04-09 17:18:38 +00:00
85575839f2
docs: update CHANGELOG with tenant isolation Phase 0 and security fixes
2026-04-09 10:41:21 +00:00
478205c208
fix: platform account fallback for script_templates seeded without team/user
2026-04-09 06:41:00 +00:00
0f33feb6d6
fix: use correlated subquery in psa_post_log backfill to avoid invalid FROM-clause reference
2026-04-09 06:31:17 +00:00
034b858fc9
fix: add depends_on 067 to cc214c63aa30 to fix fresh-DB migration order
2026-04-09 06:20:00 +00:00
b937cb41e4
fix: merge Phase 1 account_id chain with main head to resolve multiple-heads error
2026-04-09 06:14:04 +00:00
0d475c71ed
fix: correct Phase 1 down_revision — chain from 064 not b8d2f4a6c091
2026-04-09 06:04:10 +00:00
417fa562ce
fix: Task 9 migration — include tags in template_trees INSERT
2026-04-09 05:34:59 +00:00
42937b24a4
feat: Phase 1 Group 9 — enforce NOT NULL on all account_id columns
2026-04-09 05:34:32 +00:00
b4b8c67d3b
feat: Phase 1 Group 10 — create global content tables and platform account
2026-04-09 05:31:33 +00:00
d24da77604
feat: Phase 1 Group 8 — add account_id to target_lists (keep team_id)
2026-04-09 05:25:24 +00:00
857e782d14
feat: Phase 1 Group 7 — add account_id to script tables (keep team_id)
2026-04-09 05:23:35 +00:00
086c4580f1
feat: Phase 1 Group 6 — add account_id to maintenance_schedules
2026-04-09 05:20:56 +00:00
0d69474128
feat: Phase 1 Group 5 — add account_id to PSA and notification tables
2026-04-09 05:19:12 +00:00
b5fdb488b3
feat: Phase 1 Group 4 — add account_id to user_folders and user_pinned_trees
2026-04-09 05:16:50 +00:00
de5ecf4fb2
feat: Phase 1 Group 3 — add account_id to step_ratings and step_usage_log
2026-04-09 05:15:10 +00:00
2779a41b94
feat: Phase 1 Group 2 — add account_id to AI branching tables
2026-04-09 05:12:18 +00:00
4666c4f6d2
feat: Phase 1 Group 1 — add account_id to core session tables
2026-04-09 05:07:05 +00:00
2837c6e4cf
docs: add Phase 1 tenant isolation schema migrations implementation plan
2026-04-09 04:58:24 +00:00
b3dba57bc5
feat: tenant isolation Phase 0 — app-layer filters, UUID audit, CI gate (#132 )
2026-04-09 00:42:19 -04:00
29a9573d6e
fix: CRITICAL — scope copilot tree query to current account (#131 )
2026-04-09 00:41:30 -04:00
56775eca04
docs: add tenant isolation Phase 0 implementation plan
2026-04-09 03:02:19 +00:00
82bb7967d8
docs: add background job isolation policy to tenant isolation spec
2026-04-09 02:38:55 +00:00
a7dff9e143
docs: add tenant data isolation design spec
2026-04-09 02:24:38 +00:00
ba0680ce06
docs: update CHANGELOG with image support, header actions, and design token normalization
2026-04-08 10:40:15 +00:00
290f2be2fd
fix: resolve "sorry something went wrong" errors and show images in chat
2026-04-07 13:09:16 +00:00
e8e12cc7e5
fix: move session lifecycle actions to header bar in AssistantChatPage
2026-04-07 06:31:24 +00:00
chihlasm