feat: company standing gate (generic run-blocking primitive) - #256

Open

stubbi wants to merge 38 commits into

mainfrom

feat/company-standing-gate

Commits on Jul 18, 2026

feat(shared): add settings-surface taxonomy constants

stubbi
and
claude
committed
f70e175
feat(shared): add InstanceVisibilitySettings type and validators

stubbi
and
claude
committed
5f0b90f
fix(shared): restore InstanceGeneralSettings/InstanceExperimentalSettings validator barrel exports

stubbi
and
claude
committed
d47c099
feat(db): add instance_settings.visibility jsonb column

stubbi
and
claude
committed
e63e37e
feat(server): visibility section in instance-settings service

stubbi
and
claude
committed
0c55a14
feat(shared): PublicFeatureFlags, EffectiveStanding, BoardCapabilities and derivePublicFeatureFlags

stubbi
and
claude
committed
5791e35
feat(server): GET/PATCH /instance/settings/visibility (instance-admin only)

stubbi
and
claude
committed
5c7a938
feat(server)!: instance settings reads require instance admin

stubbi
and
claude
committed
045eab6
feat(server): assertSurfaceExposed authz helper with typed surface_not_exposed 403

stubbi
and
claude
committed
d4ac1fb
feat(server): capabilities payload (exposedSurfaces, features, companyStandings) on GET /cli-auth/me

stubbi
and
claude
committed
1997847
fix(cli): read enableCloudSync from cli-auth/me capabilities

stubbi
and
claude
committed
e0c4cb2
feat(server): enforce settings-surface policy on members, invites, and secrets routes

stubbi
and
claude
committed
2eeee90
test(server): provide instanceSettingsService mock in invite route suites

stubbi
and
claude
committed
9f29d6f
feat(ui): capabilities on CurrentBoardAccess + useFeatures/useBoardCapabilities hooks

stubbi
and
claude
committed
4c8f63f
refactor(ui): migrate all non-admin instance-settings reads to capabilities.features

stubbi
and
claude
committed
6c35814
feat(ui): capabilities-driven company settings nav with surface guard redirects

stubbi
and
claude
committed
7a1f30c
feat(ui): company settings visibility card on Instance Access

stubbi
and
claude
committed
a09daf4
fix(ui): surface save errors on company visibility card

stubbi
and
claude
committed
b49ea57
polish: final-review fixes (dup key, shared default, directory comment, test names)

stubbi
and
claude
committed
a0d11e6
feat(shared): add company standing statuses, CompanyStandingStatus, and company.standing.write capability

stubbi
and
claude
committed
9e42eff
feat(db): add company_standing table (hand-written migration 0174)

stubbi
and
claude
committed
5775819
fix(db): bump 0174 journal timestamp to be strictly increasing

stubbi
and
claude
committed
37d2ff2
feat(server): add companyStandingService with severity merge and cleanup helpers

stubbi
and
claude
committed
121929e
feat(plugin-sdk): add ctx.companies.setStanding/clearStanding gated on company.standing.write

stubbi
and
claude
committed
4eeb5a6
feat(server): implement plugin-scoped company standing host services

stubbi
and
claude
committed
9b60e63
feat(server): delete company standing rows on plugin uninstall/disable/company-disable

stubbi
and
claude
committed
c396713
feat(server): refuse run starts with typed company_blocked when standing is blocked

stubbi
and
claude
committed
9c1d1f3
feat(server): fill capabilities.companyStandings on GET /cli-auth/me

stubbi
and
claude
committed
dd52cfd
polish: correct companyStandings doc comments, assert local_trusted standings empty

stubbi
and
claude
committed
df7e1b6
feat(ui): company standing layout banner from capabilities payload

stubbi
and
claude
committed
212a767
fix: validate standing actionUrl scheme, harden banner link

stubbi
and
claude
committed
a84cbb9
feat(ui): company-switcher standing badges (grace/blocked)

stubbi
and
claude
committed
dccb476
refactor(ui): CompanySwitcher standings via useBoardCapabilities hook

stubbi
and
claude
committed
055a71c
fix(server): repair PR-1 fallout — service mocks in 5 suites, visibility routes in OpenAPI spec

stubbi
and
claude
committed
03b044b
test(server): companyStandingService mocks for repaired suites

stubbi
and
claude
committed
b55f03a
fix(server): enforce company standing at run claim and scheduled-retry gates

stubbi
and
claude
committed
a4c1188
fix(server): deterministic standing tiebreak and dead-code guard cleanup

stubbi
and
claude
committed
d76a323
docs: PR screenshots

stubbi
and
claude
committed
7a709a2