Repository navigation

feat: form/workflow builder — full CRUD, interactive actions, CSV import, playbooks - #6

Open

alikahwaji wants to merge 187 commits into

mainfrom

develop

Open

feat: form/workflow builder — full CRUD, interactive actions, CSV import, playbooks#6
alikahwaji wants to merge 187 commits into
mainfrom
develop

Commits on Apr 13, 2026
- feat: add database schema, shared models, and Coordinator Agent
  
  alikahwaji
  and
  claude
  committed
  c368d23
- Merge pull request #2 from DevilsDev/wt/cranky-joliot
  alikahwaji
  authored
  b33d2e8
- feat: add Researcher Agent (RAG) and LLM integration across all agents
  
  alikahwaji
  and
  claude
  committed
  1b9e577
- Merge pull request #3 from DevilsDev/wt/cranky-joliot
  alikahwaji
  authored
  a851a6b
- feat: build complete frontend dashboard with 6 pages and login flow
  
  alikahwaji
  and
  claude
  committed
  91db435
- Merge pull request #4 from DevilsDev/wt/cranky-joliot
  alikahwaji
  authored
  97f26a7
- feat: security hardening — CORS lockdown, rate limiting, JWT enforcement
  
  alikahwaji
  and
  claude
  committed
  ec660da
- Merge pull request #5 from DevilsDev/wt/cranky-joliot
  alikahwaji
  authored
  16630e6
- fix: deployment fixes for local Docker Compose startup
  
  alikahwaji
  and
  claude
  committed
  b306fa0
- fix: wire risk and recommendation data through the full pipeline
  
  alikahwaji
  and
  claude
  committed
  7214d07
- fix: add single-risk and risk-recommendations endpoints
  
  alikahwaji
  and
  claude
  committed
  b97432c
- feat: add suppliers, alerts, agent telemetry, RAG tables, and new pages
  
  alikahwaji
  and
  claude
  committed
  34d01e5
- feat: add predictions, supply chain map, and scenario simulation
  
  alikahwaji
  and
  claude
  committed
  dcdf700
- feat: Phase 3 security — MFA, OAuth 2.0, RLS, service auth
  
  alikahwaji
  and
  claude
  committed
  aeff673
- feat: Phase 4 — distributed tracing, Grafana dashboards, accessibility
  
  alikahwaji
  and
  claude
  committed
  534a365
- feat: replace Recharts with premium D3.js interactive visualizations
  
  alikahwaji
  and
  claude
  committed
  e44e4e6
- feat: replace force graph with tiered supply chain flow diagram
  
  alikahwaji
  and
  claude
  committed
  910c0e4
- feat: complete remaining 8% — TLS, OAuth, PagerDuty, ELK, i18n, load tests
  
  alikahwaji
  and
  claude
  committed
  dddf540
- feat: complete final gaps — auto-refresh scheduler + ERP connectors
  
  alikahwaji
  and
  claude
  committed
  fa3560b
Commits on Apr 14, 2026
- feat: add user signup route with registration flow
  
  alikahwaji
  and
  claude
  committed
  52309c7
- fix: allow registered users to login with their own password
  
  alikahwaji
  and
  claude
  committed
  56d07e6
- chore: update package-lock.json with i18next and d3 dependencies
  
  alikahwaji
  and
  claude
  committed
  3fb6418
- feat: Phase 1 — 7-dimension risk scoring engine + data repository
  
  alikahwaji
  and
  claude
  committed
  a362a51
- feat: Phase 2 — Tier-N supplier discovery + event-to-impact linking
  
  alikahwaji
  and
  claude
  committed
  bfaca74
- fix: add DISCOVERY_SERVICE_URL to coordinator docker-compose env
  
  alikahwaji
  and
  claude
  committed
  776979c
- feat: Phase 3 — real-time intelligence feed + NL chat interface
  
  alikahwaji
  and
  claude
  committed
  95703b1
- feat: Phase 4 — digital twin Monte Carlo simulator + autonomous procurement
  
  alikahwaji
  and
  claude
  committed
  62eacef
- feat: Phase 5 — component tracking, industry verticals, DAG orchestration
  
  alikahwaji
  and
  claude
  committed
  7e4aca0
- feat: top 5 UX improvements — dark mode, search, grouped nav, breadcrumbs, notifications
  
  alikahwaji
  and
  claude
  committed
  8f117dd
- fix: add dark mode text/bg/border classes to all 19 pages and components
  
  alikahwaji
  and
  claude
  committed
  2a297f5
- fix: D3 charts now adapt text colors to dark/light theme
  
  alikahwaji
  and
  claude
  committed
  36879a5
- fix: typo subcolors -> colors.textMuted in DonutChart
  
  alikahwaji
  and
  claude
  committed
  7786c23
- fix: D3 charts re-render on theme toggle via key prop
  
  alikahwaji
  and
  claude
  committed
  312068f
- fix: redesign Supply Chain Flow — aggregate risks by category
  
  alikahwaji
  and
  claude
  committed
  0a78584
- fix: increase Supply Chain Flow node spacing to prevent label overlap
  
  alikahwaji
  and
  claude
  committed
  d5c1677
- fix: increase Supply Chain Flow spacing to 130px and height to 720px
  
  alikahwaji
  and
  claude
  committed
  1df79ba
- fix: move risk category labels to left of bubbles to prevent overlap
  
  alikahwaji
  and
  claude
  committed
  3f51715
- fix: add background rect behind risk labels for readability over links
  
  alikahwaji
  and
  claude
  committed
  141444d
- fix: use SVG layer groups so labels render on top of links
  
  alikahwaji
  and
  claude
  committed
  8dfcd06
- fix: move risk labels back below bubbles with reduced radius for spacing
  
  alikahwaji
  and
  claude
  committed
  7b9c1e3
- fix: render all text labels in labelLayer (top SVG layer)
  
  alikahwaji
  and
  claude
  committed
  51e3b03
- fix: add overflow visible to SVG for Supply Chain Flow
  
  alikahwaji
  and
  claude
  committed
  c0706d2
- fix: add overflow-visible to supply chain card container
  
  alikahwaji
  and
  claude
  committed
  9627673
- feat: 8 UX improvements — should-have + nice-to-have features
  
  alikahwaji
  and
  claude
  committed
  deddda1
- feat: settings page, password reset, export, email alerts, scrollbar fix
  
  alikahwaji
  and
  claude
  committed
  5a0bca6
- fix: proper Toggle component — fix distorted toggle switches
  
  alikahwaji
  and
  claude
  committed
  d24048b
- fix: align Settings and Sign out buttons in sidebar footer
  
  alikahwaji
  and
  claude
  committed
  1909f92
- fix: sidebar footer buttons now properly aligned side-by-side
  
  alikahwaji
  and
  claude
  committed
  167ad8f
Commits on Apr 15, 2026
- feat: route guardrails for auth flows
  
  alikahwaji
  and
  claude
  committed
  89953d9
- fix: wire i18n to actually change language on selection
  
  alikahwaji
  and
  claude
  committed
  932a6fc
- feat: complete i18n migration — all 23 files use t() translation calls
  
  alikahwaji
  and
  claude
  committed
  89a173c
- feat: complete i18n — 292 keys across 12 languages, all pages migrated
  
  alikahwaji
  and
  claude
  committed
  0f935cf
- feat: form/workflow builder — full CRUD, interactive actions, CSV import, playbooks
  
  alikahwaji
  and
  claude
  committed
  d5953a7
- security: harden repo — gitignore cleanup, remove tracked secrets, env-based credentials
  
  alikahwaji
  and
  claude
  committed
  83c4350
- security: remove dev credentials from locale files, add database.py warning, clean up scripts
  
  alikahwaji
  and
  claude
  committed
  303fea9
Commits on Oct 19, 2026
- security: harden authentication and enforce tenant isolation
  
  alikahwaji
  and
  claude
  committed
  5ef6575
- fix(db): make migrations apply and row-level security effective
  
  alikahwaji
  and
  claude
  committed
  bd01b12
- fix(frontend): escape d3 tooltip HTML, fix production build, update deps
  
  alikahwaji
  and
  claude
  committed
  c2f15fb
- chore(config): fix env var names, remove public defaults, tighten CI and RBAC
  
  alikahwaji
  and
  claude
  committed
  ccc5873
- test: add security regression suite for auth, roles and tenant isolation
  
  alikahwaji
  and
  claude
  committed
  326676e
- ci: run security tests, type check and frontend build on every PR
  
  alikahwaji
  and
  claude
  committed
  845f9f4
- fix(ai): never present missing, failed or sample data as real intelligence
  
  alikahwaji
  and
  claude
  committed
  69decd4
- ci: run on every pull request, including stacked PRs
  
  alikahwaji
  and
  claude
  committed
  388134e
- build: make every service image buildable, runnable and non-root
  
  alikahwaji
  and
  claude
  committed
  88ab8e6
- Merge branch 'fix/phase0-deploy' into fix/phase0-persistence
  alikahwaji
  committed
  1e6c076
- feat(db): persist coordinator state and an append-only audit log in PostgreSQL
  
  alikahwaji
  and
  claude
  committed
  9fc7586
- ci(deploy): migrate before applying manifests, which can start a rollout
  
  alikahwaji
  and
  claude
  committed
  bec2148
- feat(intel): real public signals from FDA and GDACS, matched to suppliers
  
  alikahwaji
  and
  claude
  committed
  1a25bef
- feat(eval): back-test the recall-history signal on real FDA history
  
  alikahwaji
  and
  claude
  committed
  0cf7f03
- fix(intel): count recalls, not firm-months; keep ongoing shortages visible
  
  alikahwaji
  and
  claude
  committed
  cf96af3
- feat(intel): FDA warning letters and import alerts; back-tested watch flag
  
  alikahwaji
  and
  claude
  committed
  6856151
- fix(intel): delist what FDA drops; report back-test coverage honestly
  
  alikahwaji
  and
  claude
  committed
  5f0b7f9
Commits on Oct 20, 2026
Commits on Oct 21, 2026
- feat(sap): direct SAP S/4HANA connection over OData
  
  alikahwaji
  and
  claude
  committed
  c716056
- fix(sap): test the import's real queries; never wipe spend on an empty read
  
  alikahwaji
  and
  claude
  committed
  70b07ce
- Merge #30: Direct SAP S/4HANA connection over OData
  
  alikahwaji
  and
  claude
  authored
  d2b429d
- fix(spend): rank in the currency on the most order lines; fix swapped columns
  
  alikahwaji
  and
  claude
  committed
  b57ebb3
Commits on Oct 22, 2026
- feat(auth): two-step sign-in users can set up; on by default
  
  alikahwaji
  and
  claude
  committed
  4dbe220
- Merge #31: Spend ranking in the currency on the most order lines; fix swapped columns
  alikahwaji
  authored
  198198b
- Merge #32: Two-step sign-in users can set up, on by default; remaining gate fixes
  alikahwaji
  authored
  07b2fc9
- feat(audit): audit log screen with filters, paging and CSV export
  
  alikahwaji
  and
  claude
  committed
  e9b0c71
- Merge #33: Audit log screen with filters, paging and CSV export
  alikahwaji
  authored
  8859337
- feat(api): API keys for a read-only public API; fix CORS for PATCH and exposed headers
  
  alikahwaji
  and
  claude
  committed
  6a796d9
- Merge #34: API keys for a read-only public API; CORS fixes
  alikahwaji
  authored
  53658e4
- feat(webhooks): signed webhooks when new public records match a tenant's suppliers
  
  alikahwaji
  and
  claude
  committed
  2523895
- fix(webhooks): catch late-committing records, honour pause for queued retries
  
  alikahwaji
  and
  claude
  committed
  d6dad22
- Merge #35: Signed webhooks when new public records match a supplier
  alikahwaji
  authored
  a45a8bb
- feat(integrations): one page for every integration and its health
  
  alikahwaji
  and
  claude
  committed
  777e1f4
- Merge #36: Integrations page
  alikahwaji
  authored
  e18e15b
- feat(reports): scheduled supplier risk digest by email
  
  alikahwaji
  and
  claude
  committed
  cfe1c7a
- Merge #37: Scheduled supplier risk digest by email
  alikahwaji
  authored
  c741851
Commits on Oct 23, 2026
- fix(auth): password change and reset actually work; old sessions end
  
  alikahwaji
  and
  claude
  committed
  63e75fd
- Merge #38: Password change and reset actually work; old sessions end
  alikahwaji
  authored
  b69b9b6
- feat(sso): single sign-on with OpenID Connect, per organization
  
  alikahwaji
  and
  claude
  committed
  fc756da
- fix(sso): tie the sign-in to the tab that started it; invites and issuer changes
  
  alikahwaji
  and
  claude
  committed
  ba78590
- Merge #39: Single sign-on with OpenID Connect
  alikahwaji
  authored
  74b28bf
Commits on Oct 24, 2026
- feat(scim): SCIM 2.0 user provisioning with a SCIM token
  
  alikahwaji
  and
  claude
  committed
  f2c2e4e
- Merge #40: SCIM 2.0 user provisioning
  alikahwaji
  authored
  4d56423
- fix: Phase 2 gate follow-ups (audit detail, categories, placeholders, wording)
  
  alikahwaji
  and
  claude
  committed
  544083a
- Merge #41: Phase 2 gate follow-ups
  alikahwaji
  authored
  02676a8
- feat(assessments): supplier assessments and the supplier portal
  
  alikahwaji
  and
  claude
  committed
  f69f8bc
- Merge #42: Supplier assessments and the supplier portal
  alikahwaji
  authored
  6411d38
- feat(regulatory-watch): EMA sources and a per-organization regulatory watchlist
  
  alikahwaji
  and
  claude
  committed
  59e80ed
- Merge #43: FDA/EMA regulatory watch
  alikahwaji
  authored
  97b7eab
- feat(war-room): incidents to coordinate the response to a disruption
  
  alikahwaji
  and
  claude
  committed
  846ed70
- Merge #44: War room
  alikahwaji
  authored
  3fe5d9f
- fix: Phase 2 gate (part 2) follow-ups: incident deletes, watch prefilters
  
  alikahwaji
  and
  claude
  committed
  fb2a6fb
- Merge #45: Phase 2 gate (part 2) follow-ups
  alikahwaji
  authored
  9cd2561
- feat(ai): AI control centre: run log, action policy and approval queue
  
  alikahwaji
  and
  claude
  committed
  4f55b9c
- Merge #46: AI control centre
  alikahwaji
  authored
  a9be16c
Commits on Oct 25, 2026
- feat(mcp): MCP server for AI agents, with proposals under the action policy
  
  alikahwaji
  and
  claude
  committed
  f45e6e2
- Merge #47: MCP server
  alikahwaji
  authored
  7ba80ef
- feat(scenarios): scenario studio and resilience planner on real spend
  
  alikahwaji
  and
  claude
  committed
  ccc0a36
- Merge #48: Scenario studio and resilience planner
  alikahwaji
  authored
  63742fe
- feat(signatures): electronic signatures with 21 CFR Part 11 controls
  
  alikahwaji
  and
  claude
  committed
  bc459c4
- Merge #49: Electronic signatures with Part 11 controls
  alikahwaji
  authored
  57e95a7
- feat(due-diligence): LkSG and CSDDD due diligence on suppliers
  
  alikahwaji
  and
  claude
  committed
  1931cb7
- Merge #50: Due diligence (LkSG, CSDDD)
  alikahwaji
  authored
  7a672de
- feat(validation): validation pack traced from the CI test runs
  
  alikahwaji
  and
  claude
  committed
  fde341d
- Merge #51: Validation pack
  alikahwaji
  authored
  8d75917
Commits on Oct 26, 2026
- fix(phase3-gate): follow-ups from the Phase 3 gate
  
  alikahwaji
  and
  claude
  committed
  c707229
- Merge #52: Phase 3 gate follow-ups
  alikahwaji
  authored
  f6d7013
- feat(water-risk): WRI Aqueduct 4.0 water risk by supplier site
  
  alikahwaji
  and
  claude
  committed
  f6dca00
- Merge #53: Water risk by site (WRI Aqueduct 4.0)
  alikahwaji
  authored
  dd01b0f
- feat(ownership): supplier ownership from the GLEIF Global LEI Index
  
  alikahwaji
  and
  claude
  committed
  eef9bd8
- Merge #54: Supplier ownership from GLEIF
  alikahwaji
  authored
  926e3c8

Commits

Commits on Apr 13, 2026

Commits on Apr 14, 2026

Commits on Apr 15, 2026

Commits on Oct 19, 2026

Commits on Oct 20, 2026

Commits on Oct 21, 2026

Commits on Oct 22, 2026