[dev] [tofikwest] tofik/make-beautifuly-policies-in-app-fix-bugs

[github-actions]

This is an automated pull request to merge tofik/make-beautifuly-policies-in-app-fix-bugs into dev.
It was created by the [Auto Pull Request] action.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

2 Skipped Deployments

Project	Deployment	Review	Updated (UTC)
app	Skipped		Jan 13, 2026 4:21am
portal	Skipped		Jan 13, 2026 4:21am

[cursor]

PR Summary

Enables server-driven policy exports and adds session-scoped chat history, with supporting infra and DX updates.

• Policies PDF bundle: New GET /v1/policies/download-all returns a signed URL for a merged, branded PDF of all published policies; renders from pdfUrl or content, adds headers/page numbers, uploads to S3. UI now calls this endpoint and opens the returned URL.
• Assistant Chat history: New assistant-chat module with GET/PUT/DELETE /v1/assistant-chat/history storing user-scoped messages in Upstash Redis (in-memory fallback), 7‑day TTL; restricted to JWT-authenticated users.
• Attachments: Support custom download filenames via getPresignedDownloadUrlWithFilename and raw S3 reads via getObjectBuffer (used by PDF bundling and ZIP building).
• Trust Portal downloads: More robust policy PDF merging (header on first page, page numbers) and faster ZIP generation with safe filenames and parallel fetch/render; uses new presigned filename support.
• Vendor automation: Internal endpoint to batch trigger vendor risk assessments; service skips research when data exists and still ensures "Verify risk assessment" tasks.
• Security/infra: Added InternalTokenGuard for internal endpoints. OpenAPI updated with new policies download route.

^{Written by Cursor Bugbot for commit a986e45. This will update automatically on new commits. Configure here.}

[claudfuen]

🎉 This PR is included in version 1.77.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀