Changelog

Built in 8 days for the Authorized to Act: Auth0 for AI Agents hackathon.

Aug 3

Model Refresh & Release Hygiene

  • Reader and Orchestrator agents moved to Claude Sonnet 5; model IDs centralized and env-overridable in lib/agents/models.ts
  • Turn Review gated behind demo mode — it renders a fixed synthetic scenario and was previously visible to every user
  • Voice token endpoint no longer mints a sidecar credential while the sidecar session is disabled
  • Version-floor CVE check moved into the verify gate so it runs in CI, not just pre-commit
  • Dependency bumps: Next.js 16.2.12, React 19.2.8; Dependabot split so major upgrades land as separate PRs
Jun 10

Demo Safety Boundaries

  • CIBA gating and audit-trail claims scoped to this implementation rather than stated absolutely
  • Voice stress/fatigue signals relabeled as synthetic demo values
  • Explicit statement that the demo does not infer medical, biometric, or psychological state
  • Synthetic Turn Review board for comparing operator move choices
Apr 6

Release 0.2.1

  • Production Google account connection endpoint at /api/auth/connect-google
  • Voice 1007 disconnect fixed by using sendRealtimeInput for the greeting
  • Input bar and chat button height/padding fixes across desktop and mobile
Apr 5

Polish & Documentation

  • Fix taskbar padding and pipeline line alignment
  • Production Portability section added to README
  • Sync mock data with Google Sheet (STR-013 image, L005–L008 launches)
  • Hackathon reference corrections across site
  • README What's Next and screenshot placeholder updates
Apr 4

Testing & Error Handling

  • Policy engine unit tests with vitest (boundary thresholds for bulk-write and price-change)
  • Shared apiError() helper standardizing API error responses
  • Distinct CIBA denial handling across executor, UI, and demo
  • Password-gated judges login with HMAC-signed tokens
  • Enriched demo data exercising all agent tools and proactive checks
  • "What Is Real vs. Simulated" README documentation
Apr 3

Submission Hardening

  • Reader Agent OAuth scope narrowed to spreadsheets.readonly (per-agent isolation)
  • README restructured for Devpost submission format
  • About page: OAuth scope badges per agent (Reader read-only, Writer read-write, Notifier send-only)
  • Blog post updated: per-agent scope isolation moved from future work to accomplishment
  • Inventory display fix and demo step delays for sequential execution feel
Apr 1–2

Demo Mode & Homepage Redesign

  • Demo mode with mock Auth0 login and 4 complete scenarios (discount, bulk, read-only, rollback)
  • Homepage redesign: demo-focused dark landing with animated pipeline
  • Mobile dashboard CTAs with long-press product actions and FAB for bulk actions
  • Product image support via Vercel Blob URLs in Google Sheet
  • Persistent voice agent across view navigation with prismatic mic glow
  • Token Vault visibility with demo phase annotations
  • Architecture diagram (static SVG + React component)
Mar 29

Content & Polish

  • Quick Actions card overflow and scrolling fixes
  • Accessibility refinements (aria-hidden, stable keys, filter input)
  • Create product action with execution-level guardrails and formula injection sanitization
  • Content pages: blog, about, changelog, privacy, terms
  • Site-wide footer component
Mar 28

Desktop UI Elevation

  • Content containment and premium surface treatments
  • Adaptive spacing and shadow token refinements
  • Card CVA variant fixes and px-safe conflict resolution
Mar 27

Mobile & Session Management

  • iOS Safari and Liquid Glass optimization
  • Compact pipeline UI for mobile viewports
  • Chat history with session persistence and auto-save
  • Draft rehydration and loading guards
  • Reduced-motion support and zoom accessibility
Mar 26

Voice Integration & Dashboard Modernization

  • Gemini Live dual-model voice integration (conversational + affective sidecar)
  • AudioWorklet for real-time audio processing
  • Pattern detection and Google Sheets voice session persistence
  • Three-panel dashboard layout with dark mode and toasts
  • Workflow pipeline stepper and CIBA approval gate UI
  • Agent theater, intent cards, and delegation graph visualization
  • Quick Actions sidebar with 2027-style agent workflow panel
Mar 24–25

Rollback & Read-Only Queries

  • Rollback changeset builder — invert diffs, recompute risk, reverse operations
  • Rollback execution button with phase guards and stable IDs
  • Read-only query support with formatted markdown results
  • Autonomy badges, tool call chips, and context boundary indicators
  • Orchestrator decomposition prompt improvements
Mar 23

Core Agent Pipeline

  • Token Vault spike — Google Sheets integration via OBO delegation
  • Connected Accounts flow for Google OAuth linking
  • CIBA + Guardian spike — push notification approval flow
  • Reader Agent with 4 read-only Google Sheets tools
  • Policy engine with json-rules-engine (7 risk evaluation rules)
  • Orchestrator Agent — gather, analyze, build changeset pipeline
  • Writer Agent — deterministic execution against Google Sheets
  • CIBA approval flow with dynamic binding messages and sanitization
  • Notifier Agent — Gmail execution summaries and audit receipts via Token Vault
  • Dashboard page with chat interface
  • Changeset display components (operation cards, risk badges, diff views)
Mar 22

Project Foundation

  • Next.js 16 App Router with React 19 and TypeScript strict mode
  • Auth0 v4 integration with middleware-based proxy pattern
  • Tailwind CSS v4 with oklch color system and glass morphism effects
  • shadcn/ui + Base UI component scaffolding
  • CI workflow, pre-commit hooks, and quality gates (lint + typecheck + build)
  • Version floor checks and security scanning