Commits
Back
Последние изменения из mirror GitHub. Здесь видны не только SHA, но и автор, дата, количество файлов и зоны риска.
aa4e171
TROPATTCRM-618/623: raise idea_interview output budget to the model ceiling, fix undefined $now in usage bookkeeping, init $parsed before the risk retry loop, detect *_FALLBACK stubs in the canary
2026-09-22T07:35:20+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 8 | core 0 | module 0 | forbidden 0
Flags:
94d2439
Auto-merge develop -> main: tests passed (60afd003)
2026-09-22T07:14:20+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 0 | core 0 | module 0 | forbidden 0
Flags:
60afd00
TROPATTCRM-623: add a daily canary run of the full ideas AI pipeline with admin notification and test-data cleanup
2026-09-22T07:08:33+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 2 | core 0 | module 0 | forbidden 0
Flags:
aa0ca8b
TROPATTCRM-622: add a circuit breaker so a known-down provider skips the retry tax and goes straight to the fallback
2026-09-22T07:08:33+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 2 | core 0 | module 0 | forbidden 0
Flags:
339febb
TROPATTCRM-618: split the ideas pipeline into per-step AI intents with tuned max_tokens and fast-model routing for light steps
2026-09-22T07:08:33+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 8 | core 0 | module 0 | forbidden 0
Flags:
cd947aa
TROPATTCRM-606: scope key lookup in rotateKey() by the actor's organization
2026-09-22T07:08:32+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 2 | core 0 | module 0 | forbidden 0
Flags:
fb540ee
TROPATTCRM-623: monitor AI provider health on a schedule and warn before a run fails
2026-09-21T23:24:59+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 42 | core 0 | module 0 | forbidden 0
Flags:
beab89d
TROPATTCRM-626: separate the MCP idea-analysis path from the live pipeline
2026-09-21T22:36:51+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 16 | core 0 | module 0 | forbidden 0
Flags:
ceff651
TROPATTCRM-603: scope project/task templates by organization
2026-09-21T22:30:37+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 4 | core 0 | module 0 | forbidden 0
Flags:
16ee4d4
TROPATTCRM-609: fix org-scope filter placeholder bug in ActivityRepository
2026-09-21T22:28:09+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 2 | core 0 | module 0 | forbidden 0
Flags:
30a79f9
TROPATTCRM-607: fix silent no-op org-scope filter in SavedViewRepository::list()
2026-09-21T21:37:42+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 2 | core 0 | module 0 | forbidden 0
Flags:
40619af
TROPATTCRM-606: fix org-scope filter placeholder bug in ApiClientRepository
2026-09-21T21:37:42+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 2 | core 0 | module 0 | forbidden 0
Flags:
9e033f1
Auto-merge develop -> main: tests passed (496320d0)
2026-09-21T20:03:55+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 0 | core 0 | module 0 | forbidden 0
Flags:
496320d
TROPATTCRM-608, TROPATTCRM-617: user-management org-scope fix + parallel AI pipeline
2026-09-21T19:29:45+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 24 | core 0 | module 0 | forbidden 0
Flags:
65abb9e
TROPATTCRM-617: run independent AI-analysis blocks in parallel
2026-09-21T19:29:44+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 2 | core 0 | module 0 | forbidden 0
Flags:
9c97da3
TROPATTCRM-608: keep user management and impersonation inside the active organization
2026-09-21T19:29:44+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 12 | core 0 | module 0 | forbidden 0
Flags:
ed8e1a2
TROPATTCRM-601: StickyNoteService org-scoping for convertToTask/convertToKnowledgePage
2026-09-21T12:33:55+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 2 | core 0 | module 0 | forbidden 0
Flags:
ca5399d
TROPATTCRM-613/614/615/616/619/621/624/602/604/610/611: AI stability + security fixes
2026-09-21T12:26:02+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 20 | core 0 | module 0 | forbidden 0
Flags:
b38001e
Fix isFeatureEnabled() to handle JSON-encoded setting values (e.g. "1" from SettingService::set json_encode)
2026-09-21T10:18:35+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 2 | core 0 | module 0 | forbidden 0
Flags:
8c0a93e
TROPATTCRM-585/590/591/592/593/594/595/596/587/586/598/597/589: Ideas module security (IDOR, allowlist, feature flag, rate limits, orphan cleanup, JSON retry, DDL optimization, timeout, UI vote fix)
2026-09-21T09:50:04+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 22 | core 0 | module 0 | forbidden 0
Flags:
44eeb17
TROPATTCRM-557/558/560/562/563/564: fix permissions, docs, SQL injection, PSR-4, StatusController i18n
2026-09-21T09:23:59+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 14 | core 0 | module 0 | forbidden 0
Flags:
da9e6cd
TROPATTCRM-557/558/560/562/563/564: fix REST vs RPC permissions, document 233 routes, add 44 MCP tools, parameterize SQL, PSR-4, StatusController errors
2026-09-21T09:13:15+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 12 | core 0 | module 0 | forbidden 0
Flags:
192416c
TROPATTCRM-558: document 233 RPC-alias routes in api_ru.md and api_en.md
2026-09-21T08:40:16+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 4 | core 0 | module 0 | forbidden 0
Flags:
cca37ed
TROPATTCRM-559: register 42 Idea AI Workflow tools in mcp_permissions.php, remove bypass in McpController::callTool()
2026-09-21T08:05:09+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 4 | core 0 | module 0 | forbidden 0
Flags:
69472d0
TROPATTCRM-574: CustomFieldService value validation (type/option enforcement); TROPATTCRM-573: cascade delete custom_field_values + deleteValuesByFieldId; TROPATTCRM-571: FS/SS/FF/SF relation_type mapping + target_project_public_id in TaskBoardService::move()
2026-09-21T07:52:19+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 8 | core 0 | module 0 | forbidden 0
Flags:
0dacda6
TROPATTCRM-565: add email/phone/tax_inn/counterparty_public_id/client_type/legal_name/address_legal/website/is_primary to crm_crm MCP schema
2026-09-21T07:35:50+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 2 | core 0 | module 0 | forbidden 0
Flags:
d231220
TROPATTCRM-567: fix Scrum invariant — add CYCLE_ACTIVE_ALREADY_EXISTS check to WorkCycleService::reopen()
2026-09-21T07:23:22+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 2 | core 0 | module 0 | forbidden 0
Flags:
5ae1d7f
TROPATTCRM-524: docs drift fix — added 2 missing endpoints to api_ru.md, fixed 38 Yes→Да, improved chat descriptions
2026-09-20T23:56:05+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 2 | core 0 | module 0 | forbidden 0
Flags:
afb17c1
TROPATTCRM-579: SLA BusinessCalendarService integration + SlaRepository::findByPublicId id fix + sla_business_calendar_unit tests
2026-09-20T22:38:30+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 2 | core 0 | module 0 | forbidden 0
Flags:
95f278f
TROPATTCRM-578: fix RruleParser computeNextWeekly BYDAY week-offset bug + 3 unit test files (64 assertions)
2026-09-20T22:10:34+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 68 | core 0 | module 0 | forbidden 0
Flags:
c3f51a1
fix(comms/kb): knowledge base IDOR & MCP security, multi-tenant chats & crm_chat permissions, sticky notes validation
2026-09-20T21:25:41+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 34 | core 0 | module 0 | forbidden 0
Flags:
0e4636f
fix(auth/security): rate-limiting brute force, impersonation RBAC and audit attribution, system role protection
2026-09-20T20:58:45+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 20 | core 0 | module 0 | forbidden 0
Flags:
155bee6
fix(security): webhooks RBAC, AI secret masking, client/contact cross-tenant isolation, file deletion IDOR & quarantine safe download (TROPATTCRM-568, TROPATTCRM-569, TROPATTCRM-566, TROPATTCRM-572)
2026-09-20T20:40:17+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 18 | core 0 | module 0 | forbidden 0
Flags:
d5a39c1
Auto-merge develop -> main: tests passed (28f96c02)
2026-09-20T16:12:39+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 0 | core 0 | module 0 | forbidden 0
Flags:
28f96c0
fix(workflow): refuse circular dependencies and directed task relations (TROPATTCRM-570)
2026-09-20T16:06:35+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 38 | core 0 | module 0 | forbidden 0
Flags:
9da09cc
Auto-merge develop -> main: tests passed (7e979dfb)
2026-09-20T15:42:59+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 0 | core 0 | module 0 | forbidden 0
Flags:
7e979df
fix(webhooks): scope subscriptions/deliveries and stop cross-org event fan-out (TROPATTCRM-563)
2026-09-20T14:55:39+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 8 | core 0 | module 0 | forbidden 0
Flags:
c0864c8
fix(search): scope global/entity search by organization_id (TROPATTCRM-562)
2026-09-20T14:55:27+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 4 | core 0 | module 0 | forbidden 0
Flags:
e64fd5e
fix(knowledge): scope tag attach/detach lookup by organization_id (TROPATTCRM-561)
2026-09-20T14:55:21+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 4 | core 0 | module 0 | forbidden 0
Flags:
ae8c5c7
fix(files): fix cross-client leak precedence and add missing org-context guard (TROPATTCRM-560)
2026-09-20T14:55:11+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 4 | core 0 | module 0 | forbidden 0
Flags:
c7b56fb
fix(approvals): scope reviewer resolution and request lookup by organization (TROPATTCRM-559)
2026-09-20T14:55:05+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 10 | core 0 | module 0 | forbidden 0
Flags:
c947809
fix(project-modules): scope by organization_id and require manager role for writes (TROPATTCRM-558)
2026-09-20T14:54:57+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 12 | core 0 | module 0 | forbidden 0
Flags:
ec06ca8
fix(estimates): scope estimate sets/options and summaries by organization_id (TROPATTCRM-557)
2026-09-20T14:54:50+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 8 | core 0 | module 0 | forbidden 0
Flags:
6a7d105
fix(logs): restrict system-wide audit/security/request logs to root actors (TROPATTCRM-556)
2026-09-20T14:18:41+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 8 | core 0 | module 0 | forbidden 0
Flags:
d4b7106
fix(team): apply organization/visibility checks to raw-id parent/manager refs (TROPATTCRM-555)
2026-09-20T08:18:56+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 4 | core 0 | module 0 | forbidden 0
Flags:
7e96227
fix(department): invalidate team/worklog caches on create/update/delete (TROPATTCRM-554)
2026-09-20T08:18:48+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 2 | core 0 | module 0 | forbidden 0
Flags:
f4528f8
fix(custom-fields): verify entity ownership before reading/writing values (TROPATTCRM-553)
2026-09-20T08:18:42+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 18 | core 0 | module 0 | forbidden 0
Flags:
ad31877
fix(tags): scope get/update/delete/create by organization_id (TROPATTCRM-552)
2026-09-20T08:18:26+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 6 | core 0 | module 0 | forbidden 0
Flags:
21f1efd
fix(telemetry): redact sensitive fields before writing login-debug logs (TROPATTCRM-551)
2026-09-20T08:18:13+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 2 | core 0 | module 0 | forbidden 0
Flags:
e7a159f
fix(ai): scope AI usage log listing by organization_id (TROPATTCRM-550)
2026-09-20T08:18:06+00:00
Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>
Files: 6 | core 0 | module 0 | forbidden 0
Flags: