Skip to content

fix: multidomain workbench navigation + close G009/G010 vNext review findings - #50

Merged
wonkwonlee merged 4 commits into
mainfrom
wonkwonlee/scenario-navigation-and-workbench
Jul 30, 2026
Merged

fix: multidomain workbench navigation + close G009/G010 vNext review findings#50
wonkwonlee merged 4 commits into
mainfrom
wonkwonlee/scenario-navigation-and-workbench

Conversation

@wonkwonlee

Copy link
Copy Markdown
Owner

Summary

  • Restore multidomain workbench navigation (previously fixed on this branch, replayed post-rebase).
  • Close out G009 (accessibility/perf/security hardening) and G010 (cutover, docs, final quality gate) of the multi-domain console vNext ultragoal (docs/superpowers/plans/2026-07-29-multidomain-console-vnext-ultragoal.md). Both stories were mostly already implemented; this PR is the verification pass plus fixes for everything the independent code-reviewer (APPROVE WITH NOTES) and architect (CLEAR WITH NOTES) gates surfaced:
    • server-recomputed findings/risk now shown on the self-hosted pending-review read path (an approver no longer decides blind)
    • fixed a latent bug where receipt verification would reject every real self-hosted receipt once that path is wired up
    • removed the zero-caller reviewCanSimulate() and documented the rest of that lifecycle's current-no-caller status
    • dropped the stale liveAvailable/provider/model fields from the app's /api/status
    • derived the self-hosted transport's domain-id enum from the durable review contract instead of hardcoding it twice
    • added /workbench/self-hosted to the client-bundle budget/asset sweep
    • extended the secret-canary scan from .js-only to .js/.mjs/.json/.map/.css plus emitted route HTML bodies
    • fixed a misattributed-failure UI bug on a post-create queue refresh failure
    • removed a redundant double-parse in the analyze route
    • corrected docs/FUTURE_DOMAIN_TEMPLATE.md and the docs/OSS_ROADMAP.md DurableReviewStore paragraph

Rebased onto origin/main (which already carries the vNext feature via #48/#49 under different commits) to keep this diff to genuinely new work only.

Test plan

  • npm run lint
  • npm run typecheck
  • npm run build:packages / npm run build:cli
  • npm test — 1053 passed, 2 skipped
  • npm run build
  • npm run verify:client-bundles
  • scenario check (network/terraform/kubernetes, 13/13) + scenario gallery --check
  • npm run test:e2e — 31/31 passed

🤖 Generated with Claude Code

wonkwonlee and others added 2 commits July 30, 2026 16:43
Independent code-reviewer (APPROVE WITH NOTES) and architect (CLEAR WITH
NOTES) passes over the vNext diff surfaced no invariant violations but
several follow-ups; this fixes all of them:

- surface server-recomputed findings/risk on the self-hosted pending-review
  read path so an approver no longer decides blind
- fix a latent bug where receipt verification would reject every real
  self-hosted receipt once that path is wired up (approver === null assumed)
- remove the zero-caller reviewCanSimulate() and document why the rest of
  the review lifecycle has coverage but no current production caller
- drop the stale liveAvailable/provider/model fields from the app's
  /api/status (that's a CLI/server concern now, not the app route)
- derive the self-hosted transport's domain-id enum from the durable review
  contract instead of hardcoding it twice
- add /workbench/self-hosted to the client-bundle budget/asset sweep
- extend the secret-canary scan from .js-only to .js/.mjs/.json/.map/.css
  plus emitted route HTML bodies
- fix a misattributed-failure UI bug when a post-create queue refresh fails
- remove a redundant double-parse in the analyze route
- correct docs/FUTURE_DOMAIN_TEMPLATE.md and the docs/OSS_ROADMAP.md
  DurableReviewStore gap paragraph against this branch's actual code

Full gate (lint, typecheck, builds, scenario checks, gallery) plus 1051
vitest and 31 Playwright tests all pass. Records G009/G010 closure evidence
in the ultragoal plan doc.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@vercel

vercel Bot commented Jul 30, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
change-safe Ready Ready Preview Jul 30, 2026 9:12pm

…flow

Codifies what this session learned the hard way: check for branch drift
against origin/main before pushing, since parallel work can land the same
feature under different commit SHAs, and a raw PR would otherwise show a
misleading, unreviewable diff.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 47b564462f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread packages/server/src/http.ts
Comment thread features/reviews/selfHostedReviewViewState.ts
@wonkwonlee
wonkwonlee merged commit b0e277c into main Jul 30, 2026
7 of 9 checks passed
@wonkwonlee
wonkwonlee deleted the wonkwonlee/scenario-navigation-and-workbench branch July 30, 2026 21:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant