Oliver Kieselbach 9fd343d328 fix(backend): typed bodies and error envelope for backup, session-restore and delegation wrappers ...

Six functions wrote their responses through a private wrapper taking the body as
object, which no typed-response guard could see. Their error bodies carried the code
in the error slot, no correlation id, and RestoreRow returned the raw exception text
on a 500.

- Backup job status, row restore and backup trigger answer through ResponseHelper:
  errors are the envelope, the 500 is sanitized, the 202 body is BackupTriggerResponse.
- Same for the session-deletion maintenance trigger, RestoreSession's three error
  sites and the delegation acknowledgements (MessageResponse).
- Backup codes are constants (Constants.BackupErrorCodes) and part of apiErrorCodes;
  RunAlreadyActive and EnqueueFailed join ApiErrorCodes.
- TypedResponseGuardTests gains guard F: no HttpResponseData-returning method with an
  object parameter. BackupWireParityTests pins that the move from the backup
  serializer options to the worker pipeline leaves the wire unchanged.
- Web reads BackupTriggerResponse from the generated wire types.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

2026-09-21 22:19:38 +02:00

..

Admin

fix(backend): typed bodies and error envelope for backup, session-restore and delegation wrappers

2026-09-21 22:19:38 +02:00

Annotations

shared+backend: IApiRequest marker, one RequestBody reader, every request body a Shared wire type (D-207)

2026-09-06 11:42:03 +02:00

Apps

feat(web,backend,mcp): app rows without a terminal state become Incomplete instead of running forever (D-237)

2026-09-10 00:02:24 +02:00

Backup

fix(backend): typed bodies and error envelope for backup, session-restore and delegation wrappers

2026-09-21 22:19:38 +02:00

Bootstrap

shared+backend: IApiRequest marker, one RequestBody reader, every request body a Shared wire type (D-207)

2026-09-06 11:42:03 +02:00

Config

feat(backend,web,mcp): the MCP quota follows the delegating tenant — every request is checked and counted on the caller's home tenant, a managed tenant is never charged or blocked by its manager's reads, and every delegation slot bought beyond the edition's included ones grows both the account and the organization windows by operator-editable per-slot values (D-250)

2026-09-11 16:46:27 +02:00

Diagnostics

shared+backend: IApiRequest marker, one RequestBody reader, every request body a Shared wire type (D-207)

2026-09-06 11:42:03 +02:00

Feedback

shared+backend: IApiRequest marker, one RequestBody reader, every request body a Shared wire type (D-207)

2026-09-06 11:42:03 +02:00

Global

backend: migrate the 458 anonymous error bodies to the typed envelope helpers

2026-09-05 01:21:01 +02:00

Graph

shared+backend: IApiRequest marker, one RequestBody reader, every request body a Shared wire type (D-207)

2026-09-06 11:42:03 +02:00

Infrastructure

feat(backend): the tenant row records the accepted DPA version — HandleNewTenantDomainAsync writes Constants.CurrentDpaVersion (2026-09-1.7) into TenantConfiguration.DpaVersion in the same first write as OnboardedBy, once, and later logins never touch it; the field is system-owned (patch deny-list, PUT preserve, revert-protected), projected by config/all, the MCP tenant list and the GA tenant report; no backfill (D-252)

2026-09-11 19:30:16 +02:00

Ingest

backend: storage SDK budgets under the agent timeout, ingest 503 on an exhausted budget, request-token fan-outs, single-flight factory budget, ProcessStall monitor (audit F09, D-203)

2026-09-06 01:51:02 +02:00

Maintenance

fix(backend): typed bodies and error envelope for backup, session-restore and delegation wrappers

2026-09-21 22:19:38 +02:00

Metrics

feat(backend,web,mcp): the MCP quota follows the delegating tenant — every request is checked and counted on the caller's home tenant, a managed tenant is never charged or blocked by its manager's reads, and every delegation slot bought beyond the edition's included ones grows both the account and the organization windows by operator-editable per-slot values (D-250)

2026-09-11 16:46:27 +02:00

Notifications

backend: migrate the 458 anonymous error bodies to the typed envelope helpers

2026-09-05 01:21:01 +02:00

Progress

backend: migrate the 458 anonymous error bodies to the typed envelope helpers

2026-09-05 01:21:01 +02:00

Queue

backend: remove the V2 index tables and their dual-write pipeline (D-196)

2026-09-05 04:27:48 +02:00

Raw

shared+backend: IApiRequest marker, one RequestBody reader, every request body a Shared wire type (D-207)

2026-09-06 11:42:03 +02:00

Reports

shared+backend: IApiRequest marker, one RequestBody reader, every request body a Shared wire type (D-207)

2026-09-06 11:42:03 +02:00

Rules

feat(rules): rule submissions — retention (withdrawn 30d, declined 90d), contact email, pending-first tenant list, operator hard delete (D-236 amended)

2026-09-09 23:27:25 +02:00

Sessions

fix(backend): typed bodies and error envelope for backup, session-restore and delegation wrappers

2026-09-21 22:19:38 +02:00

Vulnerability

backend+web: vulnerability summary carries a priority breakdown (act/attend/track); the exposure panel shows Act and Attend tiles and every severity or priority chip filters the top-CVE list (D-218)

2026-09-06 22:30:36 +02:00

WhatsNew

Agent Host changes for agents/whats-new-notification-settings (#153)

2026-09-08 20:51:20 +02:00