Claude 56d378f2b2 feat(backend): PR2 — reclassify timed-out sessions in the sweep ...

Wire EnrollmentTimeoutClassifier into MarkStalledSessionsAsTimedOutAsync so the
5h inactivity sweep stops blindly failing silent-but-provisioned sessions
(docs/design/enrollment-status-reclassification.md). Forward-only.

- TenantConfiguration.SessionGraceHours (default 72h) + default config.
- Sweep Stage 2: classify from the ESP subcategory rollup instead of hard Failed.
  Fast-path skips within-grace AwaitingUser sessions with NO event read (grace is
  time-based; late completions are caught by ingest). Per-outcome counters; audit
  + ops event only when the pass actually terminalized/transitioned something.
- session_timeout event + auto-analyze kept ONLY for Failed/Incomplete (parity with
  the agent max-lifetime path); AwaitingUser is non-terminal, Succeeded is a reconcile.
- GetStalledSessionsAsync includes AwaitingUser so it graduates to Incomplete once
  grace elapses; agent-silent (Stage 1) stays InProgress-only.
- UpdateSessionStatusAsync: Incomplete is terminal (idempotency); AwaitingUser can't
  regress a terminal; CompletedAt stamped for Incomplete (no skewing duration); reason
  + snapshot persisted for Incomplete/AwaitingUser.

Full Functions.Tests suite: 2670 pass.

2026-07-08 14:17:18 +00:00

..

design

feat(backend): PR2 — reclassify timed-out sessions in the sweep

2026-07-08 14:17:18 +00:00

images

docs(readme): green brand logo in front of the title

2026-07-06 20:27:20 +02:00

architecture.md

docs: trim architecture.md to overview + solution structure

2026-07-06 21:39:29 +02:00

customer-graph-add-on-permissions.md

feat(backend,web): optional Graph add-on permissions for Intune script display names

2026-05-19 01:14:21 +02:00