7 commits

Author	SHA1	Message	Date
rcourtman	8bb89c4031	test: add memory regression coverage for AI stores	2026-02-04 19:56:12 +00:00
rcourtman	69e3286e5e	security: fix AI OAuth scope bypass, approval replay attacks, and approval endpoint scope gating ... - OAuth endpoints now require settings:write scope (not just admin) - Approval endpoints now require ai:execute scope - Added CommandHash to approvals for replay protection - Approvals are now single-use (consumed on first use) - consumeApprovalWithValidation validates command matches approval	2026-02-03 19:15:15 +00:00
rcourtman	d9370d88d8	perf(ai): debounce approval store writes to reduce disk I/O	2026-02-01 18:07:17 +00:00
rcourtman	95a0d7a6bd	feat(backend): implement AI Patrol, Investigation, and system-wide refactors	2026-01-30 19:02:14 +00:00
rcourtman	798f6a8deb	Refactor: Update AI tools and tests for multi-tenancy ... - Refactored tool execution to handle tenant-scoped contexts - Added new tests for infrastructure, control, and kubernetes tools - Improved test coverage for agentic chat and approval store	2026-01-22 16:43:08 +00:00
rcourtman	dc16c94766	fix: Add robustness improvements to approval, auth, and server ... approval/store.go: - Make Approve() idempotent - return success if already approved - Handles double-clicks and race conditions gracefully auth.go: - Add dev mode admin bypass (disabled by default) - When ALLOW_ADMIN_BYPASS=1, sets X-Authenticated-User header server.go: - Call router.StopOpenCodeAI() during shutdown - Ensures AI service stops cleanly on server termination	2026-01-19 19:24:45 +00:00
rcourtman	3febd3266e	feat(ai): add approval store and dry-run simulator for AI Auto-Fix ... - Add approval store for tracking AI-suggested changes - Implement SQLite-backed persistence for approvals - Add dry-run simulator for testing AI fixes safely - Support simulated execution with rollback capability	2026-01-12 15:20:16 +00:00