sales-trainer

kunthawat/sales-trainer

Fork 0

Commit Graph

Author	SHA1	Message	Date
Macky	3c22d88bcd	feat: demo SaaS + training flow security hardening (8/8 review gate passed) - Demo accounts: super_admin-only provisioning into isolated DEMO_ORG_ID tenant, 30-day UTC trial on first login, revocable, one-time credential delivery via optional SES/webhook (never persisted). Adds boto3 dependency. - Analytics/report/export/privacy: shared bounded scan budget across users/groups/ sessions, tenant-consistent session/user/group joins, scalar-only CSV export (no nested persisted-value stringification). - Ownership/tenant isolation: canonical owner-tenant predicate for list/read/chat; client sees is_owned only, never owner_user_id. - Lifecycle/races: status transition validation, analyzing is an in-progress gate (no duplicate reanalysis), structured-ready publication, stale-variant revalidation. - Auth/setup/consent/JWT/OAuth/config: fail-closed consent, bounded JWT lifetime, provider-subject atomic OAuth identity, repeated-secret rejection, strict Persona trait validation. - Chat/session/privacy: pre-seller opener redaction, corrupt-session recovery, role-aware completed-chat dashboard routing. - Frontend: Training→product→personas→practice flow, demo/role/demo guards, is_owned-based ownership display, 320×568 and 500×768 responsive E2E. - 8 independent exact-five-key review scopes passed; backend 509, frontend 26, production build 1775 modules, isolated E2E 15.	2026-08-25 06:39:06 +07:00
Macky	ab5fff0bd9	[verified] IP-protect pain (hide from all roles) + persona summary button + topbar user dropdown - Backend: strip pain/painProgress/revealed_persona.pains from debrief serializer and remove pain/initialPainFit from admin report so the coaching formula never leaks to any user-facing role (persona keeps pains internally to drive the judge/training) - Fix [object Object] array-of-objects rendering in Chat/SessionDetail - Personas: trained persona shows 'สรุปผล/Summary' button -> chat page with past result (chat already loads finished session) - Top bar: username dropdown containing Settings + Logout (was separate logout button); variant-from-base already preserves tier/difficulty - Updated debrief allowlist tests to reflect new redaction	2026-08-19 07:26:21 +07:00
Macky	dbfce9aa54	[verified] harden Sales Trainer and add PostgreSQL foundation	2026-08-16 02:41:10 +07:00

Author

SHA1

Message

Date

Macky

3c22d88bcd

feat: demo SaaS + training flow security hardening (8/8 review gate passed)

- Demo accounts: super_admin-only provisioning into isolated DEMO_ORG_ID tenant,
  30-day UTC trial on first login, revocable, one-time credential delivery via
  optional SES/webhook (never persisted). Adds boto3 dependency.
- Analytics/report/export/privacy: shared bounded scan budget across users/groups/
  sessions, tenant-consistent session/user/group joins, scalar-only CSV export
  (no nested persisted-value stringification).
- Ownership/tenant isolation: canonical owner-tenant predicate for list/read/chat;
  client sees is_owned only, never owner_user_id.
- Lifecycle/races: status transition validation, analyzing is an in-progress gate
  (no duplicate reanalysis), structured-ready publication, stale-variant revalidation.
- Auth/setup/consent/JWT/OAuth/config: fail-closed consent, bounded JWT lifetime,
  provider-subject atomic OAuth identity, repeated-secret rejection, strict Persona
  trait validation.
- Chat/session/privacy: pre-seller opener redaction, corrupt-session recovery,
  role-aware completed-chat dashboard routing.
- Frontend: Training→product→personas→practice flow, demo/role/demo guards,
  is_owned-based ownership display, 320×568 and 500×768 responsive E2E.
- 8 independent exact-five-key review scopes passed; backend 509, frontend 26,
  production build 1775 modules, isolated E2E 15.

2026-08-25 06:39:06 +07:00

Macky

ab5fff0bd9

[verified] IP-protect pain (hide from all roles) + persona summary button + topbar user dropdown

- Backend: strip pain/painProgress/revealed_persona.pains from debrief
  serializer and remove pain/initialPainFit from admin report so the
  coaching formula never leaks to any user-facing role (persona keeps
  pains internally to drive the judge/training)
- Fix [object Object] array-of-objects rendering in Chat/SessionDetail
- Personas: trained persona shows 'สรุปผล/Summary' button -> chat page
  with past result (chat already loads finished session)
- Top bar: username dropdown containing Settings + Logout (was separate
  logout button); variant-from-base already preserves tier/difficulty
- Updated debrief allowlist tests to reflect new redaction

2026-08-19 07:26:21 +07:00

Macky

dbfce9aa54

[verified] harden Sales Trainer and add PostgreSQL foundation

2026-08-16 02:41:10 +07:00

3 Commits