feat: Sprints 24-29A — comprehensive review, security, a11y, skills, UI components - #4

Merged

rafaelob merged 21 commits into

mainfrom

sprint-26-comprehensive-review-and-improvements

Mar 4, 2026

Commits on Feb 20, 2026

feat: comprehensive review — 16 new test files, 133 new tests, 10+ critical fixes

rafaelob
and
claude
committed
720943b
feat: a11y status badge, persona explainer, /capabilities endpoint, enhanced focus states

rafaelob
and
claude
committed
3902f3f
docs: Sprint 27 plan + control docs sync (F-223 through F-242)

rafaelob
and
claude
committed
47a967a
feat: before/after accessibility theme compare slider (F-233)

rafaelob
and
claude
committed
d30daed
fix: P0 demo profile keys, ARIA labelledby, focus restore, JWT iss/aud

rafaelob
and
claude
committed
704d277
feat: demo-login endpoint, pipeline animations, motor a11y, infra fixes

rafaelob
and
claude
committed
7cd3beb
feat: demo storyboard with 2 tracks, 5 steps each (F-242)

rafaelob
and
claude
committed
4e0de99
feat: SessionFactoryUserRepository + DI wiring for persistent auth (F-230)

rafaelob
and
claude
committed
d505bdd
feat: motor accessibility sticky toolbar with 56px targets (F-235)

rafaelob
and
claude
committed
900db8d
fix: cache skill registry scan for diagnostics + capabilities (F-241, F-238)

rafaelob
and
claude
committed
da281ee
fix: auth store reset in skills/tenant tests, deprecate AiLineConfig (F-240)

rafaelob
and
claude
committed
5e0e135
chore: bump dependencies — tailwindcss 4.2.0, motion 12.34.2, pydantic-ai >=1.62.0

rafaelob
and
claude
committed
8f8e04e
feat: split health diagnostics + explicit auth dependencies (F-232, F-239)

rafaelob
and
claude
committed
2dd7689
feat: /runs REST resource model with status filtering + pagination (F-237)

rafaelob
and
claude
committed
7655de3
feat: JWT hardening — RS256/HS256 algo selection, jti blacklist, logout endpoint (F-231)

rafaelob
and
claude
committed
89fc541

Commits on Feb 21, 2026

feat: Sprint 28 — security containment, reliability hardening, docs sync (F-251→F-271)

rafaelob
and
claude
committed
c370a5a
chore: move Sprint 28 to completed — all 21 features delivered, 3,889 tests green

rafaelob
and
claude
committed
a60c7e8
docs: add Sprint 28 (F-251→F-271) to FEATURES.md

rafaelob
and
claude
committed
4e3a776
fix: audit findings — Redis encapsulation, return type, docstring (F-258/F-261/F-259)

rafaelob
and
claude
committed
1a569a7

Commits on Feb 27, 2026

docs: audit fixes — WebSocket path, auth scope, dep versions, demo profiles

rafaelob
and
claude
committed
d329fc0

Commits on Mar 4, 2026

feat: Sprint 29A — security fixes, skill repository hardening, SSE refactor, UI components, sprint planning

rafaelob
and
claude
committed
104854b