Block a user
[Debt] Refactor high-complexity access directory/RBAC/admin flows
Codex State: done
The remaining system-account response assembly was split into focused membership, direct-role, group-role, ownership, and DTO helpers, and its queries are batched rather than…
[Security] Add a durable transactional event bridge for automation triggers
Codex State: progress
A first durable transactional bridge is now implemented through the Audit module: event IDs and payloads are persisted in SqlAuditOutbox, claims use short lock-safe…
[Debt] Add DB query timing and batch auth principal resolution
Codex State: progress
The July audit tranche reduced request-path work before closing this measurement issue:
- authentication activity timestamps are written through a configurable window…
[Debt] Decompose effective View resolution and provenance evaluation
[Debt] Decompose Poll update and response-retirement state transitions
[Debt] Decompose organization-function assignment updates
[Debt] Decompose Scheduling participant, slot, and invitation reconciliation
[Debt] Decompose Campaign delivery, report, and version decision paths
[Debt] Decompose Dataflow validation, execution, and SQL compilation paths
[Debt] Split CalDAV discovery and sync-source creation orchestration
[Performance] Split and budget the full-product WebUI entry bundle
[Performance] Add bounded provider-side search for cross-module reference selectors
[Performance] Batch tenant-summary providers across tenant list pages
[Security] Make security-audit tool coverage enforceable in CI
[UX] Replace raw cross-module references with typed searchable selectors
[UX] Replace raw cross-module references with typed searchable selectors
Codex State: done
Summary
- Added shared typed backend and WebUI reference-option/provider contracts with async single/multi selection, stable IDs, disabled/unavailable states, provenance,…
[Design review] Rework Mail server, envelope, credential, and policy structure
Codex State: progress
Summary
- Completed the govoplan-core#272 reference slice: credential module restrictions are registry-backed and server restrictions use typed selectors.
- Mail now…
[UX] Replace muted source module IDs with a module multi-selector
Codex State: done
Summary
- Muted notification sources now use the active module registry through a searchable multi-selector.
- Module IDs remain unchanged in preferences; uninstalled or…
[UX] Replace muted source module IDs with a module multi-selector
[UX] Add pattern-aware selectors for connector policy references