Skip to content

fix: restore Settings/Admin access and demo readiness - #48

Merged
DanielHC16 merged 3 commits into
mainfrom
fix/demo-readiness
Nov 3, 2026
Merged

DanielHC16 merged 3 commits into
mainfrom
fix/demo-readiness

Conversation

@DanielHC16

@DanielHC16 DanielHC16 commented Nov 2, 2026 •

Copy link
Copy Markdown
Owner

Profile Settings and the Admin Console pointed to missing routes despite existing screen/backend implementations. This repair connects validated existing account/admin RPCs, gates access by current server capabilities, restores server workspace defaults, and replenishes the admin queue after each saved moderation decision.

Closes #47. Full hosted authentication and physical-device acceptance remains #46. Completed M03A issue #4 is closed separately; PR #45 already merged. Video generation is outside this follow-up.

Changes

  • Protected Settings/Admin routes, retry/denial and account isolation, validated RPC payloads and ten-character moderation note minimum.
  • Pinned JavaScript-only TanStack Query 5.105.2, fresh user-scoped clients, no persisted capability/admin authority, bounded startup preference lookup; ADR 0009 documents the existing mandated query architecture.
  • Awaited moderation queue/overview refetch, including 21st-report replenishment and recovery when a decision saves but refresh fails.
  • Accurate audit, installation, demo and recovery guides. Live uses the current marketplace; offline is a separate disclosed fictional sandbox.

Verification

Fresh source 67b6c77: formatting, ESLint, strict TypeScript, 115 suites/718 tests, Expo Doctor 20/20 and Android Hermes export 5.3MB pass. Source CI 41586631382 passed app, database migrations/policies and GitGuardian. Independent final code and documentation reviews: LGTM. Both automated review threads resolved after fixes and regression verification. Test-first evidence includes the initially failing first-page replenishment regression. Secret-exposure tests and staged diff checks pass. Final docs-only commit 099f834 leaves application source unchanged; final head CI 41588486940 passed app and database checks, with GitGuardian also green.

APK and emulator evidence

Both locally built standalone APKs are 60,496,430 bytes, support ARM64+x86_64, embed JS/assets and passed v2 signature and private-credential/archive scans. Ignored artifacts:

  • do-well-live.apk — SHA256 95AEC80101C992D02712AC4A08649DE7355B39FDE36C906D1B71F43164FA8BCB
  • do-well-demo-offline.apk — SHA256 65B1ED12AAA1234B5EEB3BCAA6513F06C4851218B9E3DBB50F583DE2AE8A27D8

Both final APK installs succeeded on isolated do_well_demo_api35 (Android 15/API 35/x86_64), cold launch without Metro: 3.067s offline / 3.858s live. Offline new post→apply→select→text submit→approve→reset passed with airplane mode on and Wi-Fi/mobile data off, visible completed assignment/timeline. Live existing authorized employer email sign-in, redesigned Home, Profile→Settings, server default save and original-default restore passed. No new account or admin grant. Both rehearsal processes exited 0. Full commands, source manifest, hashes, logs and screenshots are recorded in docs/DEMO_GUIDE.md; prepared emulator is left on the live APK, online and signed in. The old full medium_phone AVD's data was preserved.

Screenshots

Actual ignored local evidence: apk-demo-first-launch.png, apk-demo-lifecycle-complete.png, apk-live-home.png, apk-live-settings.png, apk-live-settings-saved.png under .codex-artifacts/. Code reviewer and root inspected screenshots/logs; reviewer independently recomputed hashes.

Security, cost and limits

No schema/RLS/hosted provisioning/capability grant/billing change. Existing SQL RPCs enforce authority. No private credentials, signing material or APKs tracked; owner .gitignore/expo-env.d.ts modifications preserved. PHP 0 / USD 0, local Android SDK only. Development signing is for controlled sideloading, not store publication. No connected physical phone or fresh local HTTP integration (Docker unavailable). Offline does not establish hosted RLS/OAuth/photo/GPS acceptance; one email sign-in/settings path does not close the full multi-principal/device matrix. Default brief assistance is deterministic; no payment, ratings or automatic queued-write synchronization claim.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Nov 2, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-11-02T15:52:23.172171Z 383c2c1 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 383c2c19c8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@DanielHC16
DanielHC16 merged commit ecfb46a into main Nov 3, 2026
3 checks passed
@DanielHC16
DanielHC16 deleted the fix/demo-readiness branch November 3, 2026 06:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Restore demo Settings/Admin navigation and publish verified local APK instructions

1 participant