feat(security-agent): complete security agent and code reviewer loop (w6a) - #5428

Merged

iscekic merged 100 commits into

mainfrom

audit-w6a-security-reviewer-6304

Aug 24, 2026

Commits on Aug 21, 2026

feat(security-agent): add single command-type authority with drift tests
iscekic
committed
ce92982
feat(notifications): add typed security lifecycle push payload
iscekic
committed
25843ba
feat(analytics): extend settled-outcome catalog for security and code review
iscekic
committed
3e6b20f
feat(security-agent): add bounded batch command status procedure
iscekic
committed
4d1ae22
feat(organizations): gate GitLab OAuth replacement to billing roles
iscekic
committed
4a3056a
feat(user): expose notification producer capabilities
iscekic
committed
727190d
feat(mobile): add bounded batch command status observer
iscekic
committed
dcfe208
feat(mobile): render patch parts with file-list summary
iscekic
committed
346dd22
feat(mobile): add native security audit report screen
iscekic
committed
46bb543
feat(mobile): persist attention items in encrypted KV
iscekic
committed
2deae16
feat(mobile): consume security lifecycle pushes with invalidation
iscekic
committed
f43674e
feat(mobile): drive notification controls from producer capabilities
iscekic
committed
a8baf20
feat(security-agent): add auto-remediation approval gate with trust controls
iscekic
committed
feb6e86
feat(organizations): narrow member-visible DTOs by role
iscekic
committed
c2d70ec
feat(code-reviews): add paginated review memory with native screen
iscekic
committed
e521079
fix(security-agent): complete approval_required reason surface
iscekic
committed
d91073a
fix(mobile): type review-memory FlashList test mock
iscekic
committed
8575113
fix(code-reviews): keep array listProposals and add paginated page
iscekic
committed
934836c
fix(mobile): complete review-memory review fixes
iscekic
committed
d0cfa2f
fix(mobile): resolve automation-settings test lint errors
iscekic
committed
a6d3226
test(mobile): wait for sibling row before unavailable assertion
iscekic
committed
b3a42b5
feat(security-agent): settle remediation ledger rows at every terminal transition
iscekic
committed
ca2789f
feat(code-reviews): emit settled outcomes for code review and security commands
iscekic
committed
307b126
feat(web): narrow list DTOs for findings, code reviews, and organizations
iscekic
committed
52676ea
feat(notifications): add security lifecycle push producers
iscekic
committed
a1afbdc
test(security-agent): cover terminal launch-failure emit after retry exhaustion
iscekic
committed
73013a8
feat(code-reviews): add delta repository save with webhook sync
iscekic
committed
1ee321e
feat(security-agent): add remediation progress timeline to finding detail
iscekic
committed
be83248
feat(mobile): route remediation PR buttons into native PR review
iscekic
committed
ce5b195
feat(mobile): debounce repo selection saves into deltas
iscekic
committed
9282552
chore(format): run oxfmt on changed files
iscekic
committed
5f25153
fix(organizations): type member DTO narrowing without unsafe cast
iscekic
committed
c9e9f12
fix(organizations): hide copy-invite control without invite URL
iscekic
committed
180cf27
Merge remote-tracking branch 'origin/main' into audit-w6a-security-reviewer-6304
iscekic
committed
51532f6
fix(mobile): drop unused repo-selection delta export
iscekic
committed
03c67dd
fix(security-agent): enqueue include-existing backlog when approval turns off
iscekic
committed
65f26ba
fix(organizations): validate Bitbucket deltas before patch save
iscekic
committed
dfa8798
fix(code-reviews): redact raw ids in detail and settle local cancels
iscekic
committed
f670eaa
fix(code-reviews): admit ledger row after review transaction commits
iscekic
committed
14ffde4
fix(code-reviews): settle ledger for superseded and user-cancelled reviews
iscekic
committed
7b47ad4
fix(code-reviews): use two-argument jest.fn generic in ledger test
iscekic
committed
374ed6a
fix(security-agent): default missing approval flag to not required
iscekic
committed
afb81fc
fix(mobile): refetch analysis on security lifecycle recovery
iscekic
committed
c8a44e3
fix(mobile): keep personal audit-report auth failures retryable
iscekic
committed
0efadca
fix(code-reviews): label hidden check run instead of None for members
iscekic
committed
855c445
fix(mobile): default missing remediation timeline to empty
iscekic
committed
2a7811b
fix(mobile): show enable CTA while reviewer permission unresolved
iscekic
committed
9107477

Commits on Aug 22, 2026

Commits on Aug 24, 2026