Skip to content

Harden publication recovery and workspace automation - #152

Merged
28 commits merged into
mainfrom
codex/audit-safety-fixes
Nov 3, 2026
Merged

28 commits merged into
mainfrom
codex/audit-safety-fixes

Conversation

@evonera

@evonera evonera commented Oct 27, 2026 •

Copy link
Copy Markdown
Owner

Protect publishing and workspace automation when provider responses, database writes, or scheduled work fail. A post accepted by Zernio now requires verification if its receipt cannot be saved; uncertain private replies are held for operator review instead of being resent.

The change also scopes existing community flow templates to their originating workspace and pauses new community template publishing until credentials can be safely removed; enforces workspace roles; applies AI usage admission to visual hook suggestions; makes content mix updates transactional; reports memory indexing failures; and keeps optional media failures from stopping unrelated scheduled work while alerting operators.

Media-only drafts can now be created, edited, approved and published without restoring a discarded caption. REST and MCP reject empty drafts and validate media URLs; malformed URLs return validation errors. Telegram webhook bodies are bounded while streaming, and private-reply provider calls have a bounded wait while preserving uncertain outcomes.

Validation:

  • 1,254 application tests passed; eight skipped.
  • Disposable PostgreSQL integration checks passed for publication receipt failure, private reply recovery, and recommendation rollback.
  • Production web build, TypeScript, targeted strict ESLint, Knip and 14 scheduler tests passed. Telegram streaming and validation tests passed on the final update.
  • Independent review led to repeated fixes for race conditions, authorization, alerting and operator visibility.

Community template publication remains unavailable until a safe export design is implemented. Existing non-official templates remain visible to their originating workspace. No real social post, payment, or deployment was made during these checks.

Standard DraftCard publication now prepares a fresh preview and atomically checks draft content, options, schedule and destination identity before claiming. Older drafts without a specific account must select one in Compose.

Compose now freezes the reviewed details and checks each saved draft and destination before publication, preserving individual results. Empty media arrays also replace old video attachments.

Theme Studio now previews the adapted content and destinations, validates a locked snapshot before claiming, and submits the captured payload. Existing provider receipts can be checked without resubmitting. The older ID-only UI actions reject new publications.

@evonera evonera closed this pull request by merging all changes into main in a7e47b9 Nov 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant