GeezerVison

…7868)

* chore(db): drop retired usage columns and compatibility scaffolding

* fix(db): forward force flags for local and dev schema pushes

…ty (#7872)

* fix(browser): preserve click targets and bound screenshot capture

* fix(browser): preserve observations and support native form controls

* fix(browser): share snapshot text budget with inline fragments

* feat(access-requests): request and review permission access

* fix(access-requests): reuse resource states and harden review lifecycle

* fix(access-requests): recheck rollout and retain public models

* fix(workspace): hydrate access policy before rendering chat

* fix(workspace): update layout test setup for access prefetch

cubic-dev-ai Bot left a comment •

edited

Loading

Uh oh!

There was an error while loading. Please reload this page.

… Difference? (#7878)

* feat(library): AI Personal Assistant vs. AI Agent Builder: What's the Difference?

* Pi Babysit: address PR #7878 feedback

---------

Co-authored-by: Sim Pi Agent <[email protected]>

* fix(credentials): restore scoped Slack bot reconnects

* chore(credentials): add const assertions to reconnect fixtures

* feat(sso): let organizations require single sign-on

Adds an organization setting that refuses password and email-code sign-in
for members, enforced when a session is created so enabling it signs
nobody out. Owners keep every sign-in method as a break-glass path, and
the requirement stops enforcing if no identity provider on a verified
domain is left to satisfy it.

* fix(sso): close policy gaps found in review

- Let an admin turn the requirement off after the organization loses its
  SSO entitlement, so a restored entitlement cannot silently resume it
- Fail closed when the requirement cannot be read: a failed lookup no
  longer admits a password sign-in
- Invalidate the policy cache when a provider is deleted or a domain's
  verification changes, on the server and in the query client
- Report whether the stored requirement is actually enforced, and say so
  in the settings copy

* refactor(sso): move the sign-in requirement behind an application use case

- Replace the hand-rolled route guards with organization operations, the
  pattern the SSO domain already uses for its primary-provider change
- Drop the multi-membership scan: users belong to at most one
  organization, the same assumption the expiry clamp makes
- Match the provider check to what sign-in resolution actually requires,
  so a capable provider is never read as incapable
- Invalidate the policy cache when a provider is registered or edited
- Show a policy refusal as a form-level message rather than marking the
  password field wrong

* fix(sso): close the fail-open paths an independent audit found

- Ask the entitlement read to throw rather than answer "not entitled" on
  an outage, so a blip cannot drop the requirement and cache that
- Keep the membership read's old resilience for paths the requirement
  allows anyway, and fail closed only on the ones it governs
- Say why a verification code was refused instead of calling it invalid
- Report the requirement from fresh reads, so the settings surface cannot
  disagree with what sign-in enforces
- Document that social sign-in is refused too, and how an owner without a
  password gets back in

…ails (#7883)

…ws (#7880)

* fix(access-requests): align permission checks and pending request flows

* fix(access-requests): align settings and state with shared patterns

* fix(access-requests): show readable integration policy names

* improvement(access-requests): trim redundant interface copy

* fix(access-requests): clear recovered limit dialogs and align review spacing

…7882)

* fix(credentials): clean up personal secrets in archived workspaces

* fix(mcp): use a deterministic clock for discovery timeout test

)

* fix(search): retain permission sync failures and clarify progress

* docs(search): explain permission warnings and sync continuation

* fix(search): report rejected permission grants as incomplete

* fix(search): distinguish member failures from continuation

* fix(testing): include member sync failure columns in schema mocks

* fix(search): retain central indexing dispatch warnings

#7899)

* fix(search): preserve indexed vector retrieval and literal source text

* fix(search): keep benchmark corpus defaults within valid bounds

* fix(search): retain ANN recall settings and verify distinct queries

* fix(slack): allow installation before organization setup

* fix(slack): keep installation guidance neutral

* fix(ci): prepare tasks before app rollout and promote at cutover

* fix(ci): correlate retry snapshots before checking failure

* fix(knowledge): bound KB block vector retrieval

* fix(knowledge): align search fixtures with scoped probing

* chore(ci): unify Trigger preparation and promotion jobs

* chore(ci): remove Trigger deployment test harness

…ce pickers (#7907)

* feat(coda): add Coda integration with API-token credential and resource pickers

* chore(coda): regenerate artifacts and fix block registry audit false positive

* fix(coda): retry field-setting PATCH updates on rate limits and server errors

* fix(coda): declare nullable outputs and harden review edge cases

* fix(insights): reduce activity aggregation overhead

* fix(db): declare activity index as concurrent

* fix(outbox): process cron batches outside HTTP requests

* fix(outbox): preserve polling capacity with larger workers

…7904)

* fix(credential-groups): expose provider emails and align people rows

* fix(credential-groups): keep people rows compact and active only

* fix(audit): compare effective block fields from base snapshots

* fix(file-search): bound dispatcher database work

* fix(file-search): preserve compatible dispatch cleanup

* fix(file-search): target PostgreSQL 17 transaction deadlines

* test(file-search): observe cleanup deadlines without sleeping

…obox (#7913)