Permitter Login and AI Agent Combined - #1218

Open

JamieRuderman wants to merge 237 commits into

mainfrom

feat/permitteer-login

Commits on Aug 10, 2026

feat(chat): AI agent chat panel (dev-only)
thelg4
committed
6bcfe3a
feat(chat): send Hydra bearer token to the agent service
thelg4
committed
47b61ac
feat(chat): in-app Hydra sign-in for the agent (PKCE + DCR)
thelg4
committed
1857be0
fix(chat): stop Amplify from swallowing the agent sign-in callback
thelg4
committed
de03d1a
feat(chat): sign the agent out with the app
thelg4
committed
2f2b69f
docs(chat): design spec for chat panel org selector

thelg4
and
claude
committed
080acd1
docs(chat): implementation plan for chat panel org selector

thelg4
and
claude
committed
368768a
feat(chat): optional org field on the agent chat request
thelg4
committed
c70ee3a
feat(chat): org selection state scoped to the chat panel
thelg4
committed
723e41e
feat(chat): org selector dropdown in the chat panel
thelg4
committed
c692c24
fix(chat): final review — membership name fallback, no orgId persistence
thelg4
committed
63dccb7
style(chat): taller org selector and themed scrollbars

thelg4
and
claude
committed
5f77b2a
chore(chat): bind agent sign-in to the beta MCP audience

thelg4
and
claude
committed
0326821
docs(chat): design spec for chat popout window

thelg4
and
claude
committed
5167a16
docs(chat): implementation plan for chat popout window

thelg4
and
claude
committed
1d44888
refactor(chat): extract ChatBody shared by panel and popout
thelg4
committed
99d2ae0
feat(chat): standalone chat window behind ?chatPopout boot flag
thelg4
committed
8a93e02
feat(chat): pop the chat out to its own window with transcript hand-off
thelg4
committed
62027bc
feat(electron): open the chat popout as a native window
thelg4
committed
7909fcc
fix(chat): final review — popout stream, sign-in, and lifecycle hardening
thelg4
committed
202506a
feat(chat): name the chat Mycal and heighten the org selector

thelg4
and
claude
committed
51eb339
feat(chat): builds resolve the agent via VITE_AGENT_URL, dev stays on the proxy
thelg4
committed
60f5827
feat(chat): zero-state sign-in prompt matching app empty-state pattern
thelg4
committed
bc39422
style(chat): match the org dropdown to the app's filled select pattern
thelg4
committed
62793bc
feat(chat): configurable agent proxy target for internal testing
thelg4
committed
4bf2cbf
feat(chat): user-friendly unavailable state
thelg4
committed
617275d
feat(chat): follow the app's active org instead of a chat-local selector
thelg4
committed
94c2583
feat(chat): agent service override in test settings
thelg4
committed
c84253e
feat(chat): soft-launch Mycal behind the Test UI in deployed builds
thelg4
committed
2814ff4
fix(chat): call the Hydra issuer directly in non-dev builds
thelg4
committed
3fd2d8b
fix(chat): route agent OAuth calls through the same-origin /hydra path
thelg4
committed
33dd524

Commits on Aug 19, 2026

Commits on Aug 20, 2026

D8: sign-in moves to the renderer — identical on web and desktop

evanrbowers
and
claude
committed
b3e2956
Failure paths never end the session; sign-out is local-only

evanrbowers
and
claude
committed
57a3938
Native security settings over the Passport self-API (Phase 2b)

evanrbowers
and
claude
committed
0931031
Security page: honest empty-state for federated-only accounts

evanrbowers
and
claude
committed
428842a
Explicit sign-out ends the AS session; web goes straight to login

evanrbowers
and
claude
committed
639c520
Boot restore validates the session is ALIVE before trusting it

evanrbowers
and
claude
committed
31a8d83
Sign-out journey wins the navigation; post-signout forces the login page

evanrbowers
and
claude
committed
dc621ad
Sign-out goes silent: fetch the AS logout, one hop to the login page

evanrbowers
and
claude
committed
d41ae76
Two-factor panel speaks the methods model (Phase 2c)

evanrbowers
and
claude
committed
e3a7fbb
Passkeys section on the Security page (Phase 2d)

evanrbowers
and
claude
committed
e89d64d
Fix the creation-options cast (tsc was masked by the pipe)

evanrbowers
and
claude
committed
c406360
Packaged shell: origin-keyed browser bounce + human launcher copy

evanrbowers
and
claude
committed
db76a63
Launcher copy: name the mechanism — Remote.It Single Sign-On

evanrbowers
and
claude
committed
cdfa340
Switch account: select_account lane + AS-owned chooser

evanrbowers
and
claude
committed
201d301
Auth journey opens a NEW browser window

evanrbowers
and
claude
committed
f87d2e1
Auth window: open in background, front once painted

evanrbowers
and
claude
committed
170b39b
Connected Apps rides the AS's account API (plan D6, direct-to-AS)

evanrbowers
and
claude
committed
3aa4696
Connected Apps: name what permissions apply to; revoke is a labeled action

evanrbowers
and
claude
committed
e7160af

Commits on Aug 21, 2026

Connected Apps renders the scope lane

evanrbowers
and
claude
committed
a93eb18
Detail groups name the owning API's address

evanrbowers
and
claude
committed
baaca7e
Connected Apps detail reads like the consent screen

evanrbowers
and
claude
committed
5416070
Desktop sign-in offers the account chooser

evanrbowers
and
claude
committed
c2819c6
Detail header shows the app's verifiable origin

evanrbowers
and
claude
committed
5eb60c4
Connected Apps detail becomes the grant editor

evanrbowers
and
claude
committed
ba6aca7
Connected Apps honors the grant's revoked state

evanrbowers
and
claude
committed
d6a4b3f
Connected Apps: the ACCOUNTS reach is editable within consent

evanrbowers
and
claude
committed
f01dee6
Deselecting 'all accounts' keeps today's accounts selected

evanrbowers
and
claude
committed
b9e39a7
DPoP module (plan D9): non-extractable key, proofs on every token call

evanrbowers
and
claude
committed
2df010e
AS-served stage switcher; events stream minted as its own audience

evanrbowers
and
claude
committed
0d90981

Commits on Aug 22, 2026

Test Settings: new i18n keys so the renamed switcher labels take effect

evanrbowers
and
claude
committed
cf684b4
Stage targets are radios — they are mutually exclusive

evanrbowers
and
claude
committed
8d773cb
Drop the override switch — the radio choice already carries it

evanrbowers
and
claude
committed
e48670f
Give the stage picker its own 'API Target' section

evanrbowers
and
claude
committed
abaeb1d
Windows gets the new-window auth browser too

evanrbowers
and
claude
committed
fccb701
Connected Apps: the same two extensions, in step with the console

evanrbowers
and
claude
committed
2524250
Heal a grant that predates a deployed slice, without a sign-in

evanrbowers
and
claude
committed
fe230b2
Detect a stale grant by fingerprint, not by minting tokens

evanrbowers
and
claude
committed
2b4c46e
Connected Apps: offer all-accounts when the AS says it is on offer

evanrbowers
and
claude
committed
a984d02
Name the account when stepping up

evanrbowers
and
claude
committed
9e9a250
Drop the sign-in warning from the extend confirmation

evanrbowers
and
claude
committed
03d106c

Commits on Aug 24, 2026

View-as deep-links to the operator console (Phase 4d)

evanrbowers
and
claude
committed
8cc2503
View-as deep-links by EMAIL — the key both worlds share

evanrbowers
and
claude
committed
0d1f732
The portal drops its tokens on a support-session launch (4d)

evanrbowers
and
claude
committed
d9723df
The support-session hook must not reach below itself (TDZ crash on dev)

evanrbowers
and
claude
committed
4b094cf

Commits on Aug 25, 2026

The support banner is back — fed by the token, not app state

evanrbowers
and
claude
committed
9524e7d
A support session is tab-scoped: sessionStorage, never the shared store

evanrbowers
and
claude
committed
544298b
View-as is one click: the deep link directs the portal launch

evanrbowers
and
claude
committed
f69dfc9
Merge feat/permitteer-login: the chat branch joins the permitteer world

evanrbowers
and
claude
committed
2b7209b
The chat rides the session: one sign-in, agent-audience tokens, the DCR lane retires

evanrbowers
and
claude
committed
151a067
The chat sends only its words: the desktop lands the D11 resource contract

evanrbowers
and
claude
committed
a61b03e
Background work gets its switch: enroll, watch the verdict, revoke

evanrbowers
and
claude
committed
da88a2b
Rename Mycal to Remote.It AI; the AI portal shows the chat unconditionally

evanrbowers
and
claude
committed
54fe78a
A history picker for the chat: past conversations, backed by the server (D11)

evanrbowers
and
claude
committed
2038726
The chat panel reads as a chat: intro empty-state, session name, slimmer chrome

evanrbowers
and
claude
committed
3198691
A working indicator: pulsing dots while the agent has the floor

evanrbowers
and
claude
committed
4c8ddb5
feat(chat): drag-to-resize the chat column
JamieRuderman
committed
754f3b2
Usage limits Phase 4: the visible meter, quiet until it matters

evanrbowers
and
claude
committed
65b4440
The chat resets when the signed-in identity changes — never inherit another account's thread

evanrbowers
and
claude
committed
a2b8721

Commits on Aug 26, 2026

Commits on Aug 27, 2026

Commits on Aug 28, 2026

Commits on Aug 31, 2026

Commits on Sep 1, 2026

chat: discover the MCP detail type from the resource's PRM — never pin it

evanrbowers
and
claude
committed
d646b22
chat/portal: the avatar menu lists every signed-in account — switching is one click

evanrbowers
and
claude
committed
0cf3287

Commits on Sep 2, 2026

chat/portal: account rows wear the AS's avatar

evanrbowers
and
claude
committed
50d2a22
chat/portal: a stale saved account recovers silently through the AS

evanrbowers
and
claude
committed
e50f12c
chat/portal: a refresh that lands after sign-out (or activation) may not persist

evanrbowers
and
claude
committed
5908e75
chat/portal: a support session arrives by ticket and ends with its token

evanrbowers
and
claude
committed
b034236
chat/portal: the avatar menu learns the accounts signed in on this browser

evanrbowers
and
claude
committed
288527c
style(chat): drop the card behind agent messages
JamieRuderman
committed
aeb9eea
docs(chat): record the MCP detail retirement fix and drop the retired name from .env.example
JamieRuderman
committed
ff55c23

Commits on Sep 3, 2026

chat/portal: view-as lands on THIS portal's origin

evanrbowers
and
claude
committed
21fa307
chat/portal: the support banner's close falls back to the console when the tab cannot close

evanrbowers
and
claude
committed
4e3c234
Merge branch 'main' into feature/agent-chat-interface
JamieRuderman
authored
b81a808
chat/portal: view-as is a navigation into the AS — the confirm page, then the portal as the user

evanrbowers
and
claude
committed
5cc8b7c

Commits on Sep 4, 2026

Commits on Sep 5, 2026

Commits on Sep 6, 2026

note why the unified front also skips minting a socket audience

evanrbowers
and
claude
committed
be5fe88

Commits on Sep 7, 2026

the dev fallback resource is the unified front, not the host that was destroyed

evanrbowers
and
claude
committed
7c038d0
Merge branch 'feat/permitteer-login' into feature/agent-chat-interface

evanrbowers
and
claude
committed
8d23363
the grant heal stops latching a refusal it can no longer justify

evanrbowers
and
claude
committed
ad18d10
Merge branch 'feat/permitteer-login' into feature/agent-chat-interface

evanrbowers
and
claude
committed
5a25925
the chat's own failure is what unlatches the grant heal

evanrbowers
and
claude
committed
a7d8967
the API target picker understands a front whose identifier is not a URL

evanrbowers
and
claude
committed
908e088
Merge branch 'feat/permitteer-login' — the API target picker, ported rather than taken

evanrbowers
and
claude
committed
0731d4d
oidc: a stale copy recovers the session instead of ending it; a switched-away rotation keeps its successor

evanrbowers
and
claude
committed
db913e4

Commits on Sep 9, 2026

Commits on Sep 11, 2026

ci: app.next.remote.it — the `next` branch mirrors this one

evanrbowers
and
claude
committed
39bb1dd

Commits on Sep 13, 2026

Sign-out is local to the app; default API endpoint moves to the unified front (#1216)
evanrbowers
authored
dec3099

Commits on Sep 14, 2026

Merge feat/permitteer-login: sign-out + unified-front prod defaults; keep permitteer-login's API Target picker

evanrbowers
and
claude
committed
53746ec
Test Settings: plain "Agent service URL (advanced)" field (no toggle)

evanrbowers
and
claude
committed
4e1a807
Codex review fixes (merge/reconciliation scope)

evanrbowers
and
claude
committed
25b1c05
test(agent): pin agentURL() override resolution

evanrbowers
and
claude
committed
98f8777
Codex review fixes — AI-agent subsystem (holistic)

evanrbowers
and
claude
committed
8c1b609
Codex review fixes (round 2)

evanrbowers
and
claude
committed
58cf220
Codex review fixes (round 3) — popout entitlement, sign-in failures, transcript races

evanrbowers
and
claude
committed
418639c
Codex review fixes (round 4) — popout account scope, entitlement-loss stop, chat request races

evanrbowers
and
claude
committed
aa724b8
Codex review fixes (round 5) — Pop back in gate, send invalidates picks, SSE line endings

evanrbowers
and
claude
committed
843b9b5
Codex review fixes (round 6) — chat identity, background-work control, deny-on-abandon, stream cut-offs

evanrbowers
and
claude
committed
f574f2c
Codex review fixes (round 7) — one generation guard for every chat load; boot heal waits for MCP metadata

evanrbowers
and
claude
committed
5fd120b
Merge feature/agent-chat-interface — Remote.It AI chat, Connected Apps, the agent lane (#1217)

evanrbowers
and
claude
committed
4b656b0
feat(platforms): platform catalogue from the API — desktop keeps only code (#1203)
JamieRuderman
authored
9c6388e
Icon buttons get their accessible name; the chat's close is "Close chat" (#1219)

evanrbowers
and
claude
authored
cac9c27

Commits on Sep 15, 2026

Commits on Sep 16, 2026

chore(merge): main into feat/permitteer-login — 3.48.10, partial preferences emits, consolidated lockfile
JamieRuderman
committed
83b91bc