Close residual cross-org existence oracles + cap WORM-bound JSON blobs
Adversarial-review findings MLOS-W-01/03/04: - the 404-normalized empty list envelope now echoes the request's identity keys **************** so unknown, fore...
OAuth2 client registrations CRUD (platform-admin gated, encrypted-at-rest, secrets never leaked) + platform-enc-key env
Steward WRITE proxies — record feedback, publish pull-through policy, trigger pricing run
Write discipline, applied identically on all three POSTs: - downstream body built server-side from a WHITELIST of browser fields; - organizationId + actor membe...
Madai ya nyuklia kabla ya uumbaji wa kuongoza - kuzuia yatima inaongoza
jamii.lead.new inaweza kusindika pamoja (zamani + usalama mpya) Timu zote mbili zinashiriki Uandikishaji wa msingi wa NATS wakati wa RollingUpdate moja ya kucha...
FFA toggle - mwisho wa haraka + matangazo kwenye sasisho za bidhaa
- PATCH **************** (MANAGE_CREDITS): toggle a product's free-for-all flag from the Leads-Available shortcut; publishes vendor-product + availability. - ...
Warn when a social connection lacks vendorProduct/market (lead created but not pooled)
SecurityService read-proxy for MLOS Governance
One controller/client pair fronting MLOSGovernanceService's five reads (both its steward-feedback and pull-through-policy modules share /api/governance). organi...
Huduma ya Usalama kusoma-proxy kwa nyaraka za MLOS (doc + doc-orchestration)
Two browser-facing read-proxy controller/client pairs fronting MLOSDocService (/api/docs) and MLOSDocOrchestrationService (/api/doc-orchestration) for the Docum...
Pricing review read proxy (rate ladder + LLPA decomposition)
MlosPricingController @ /api/security/mlos/pricing + MlosPricingClient to MLOSPricingService (/api/pricing). Reuses MlosBaseController. runs inventory injects t...
status filter kwenye orodha ya masoko; kuondoa DELETE redundant
GET /api/security/commerce-markets now takes an optional status=active|archived|all (default active) so the settings Archived tab can load archived markets. Dro...
Fail-closed tenant guard on underwriting waivers/validations
Review found the org guard was a no-op on the common empty-list case for the by-id waivers/validations reads (which the MLOS service does not org-filter), leaki...
Chini ya mapitio ya kusoma wakala (agency AUS + sheria za ndani zisizo za QM)
MlosUnderwritingController @/api/security/mlos/underwriting + MlosUnderwriting Wateja Huduma ya MLOSUnderwriting (/api/underwriting, X-Internal-Auth). Matumizi ...
Capital-markets steward read proxy for the Command Center
Add an MLOS-named, read-only proxy that lets the kamo-internal Capital & Risk Command Center reach MLOSCapitalMarketsService without exposing the internal netwo...
Kuingiza mfumo mzima, watazamaji wa kuongoza, hariri ya usawa wa mkopo, pagination historia
- / mikopo / mfumo mzima GET +PATCH (org credit-suspend), / mikopo / washauri wa kuongoza (VIEW LEADS) Wamiliki wa incl. ruzuku-yote) kwa filter ya mwanachama w...
FFA kukubalika juu ya kusimamishwa katika mwisho inapatikana + inapatikana
available-summary now resolves the member's allotment and skips the product when suspended BEFORE the free-for-all short-circuit, and available() gates creditOk...
] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ] ]
Wateja wa Huduma ya Usalama wa Ndani (Recovery SMS -> VOIP, ahueni barua pepe + template mbegu -> barua pepe) kutuma X-Internal-Auth kutoka ndani.auth.siri, amb...
Accept leadId as string in createPost to preserve CRDB id precision
Lead IDs are CRDB unique_rowid() values that exceed JS MAX_SAFE_INTEGER. The frontend now sends leadId as a string; parse both String and numeric forms so findB...
Inject test lead + fix Manage-Credits list for grant-all admins
- New POST **************** (MANAGE_CREDITS): creates a synthetic 'Void > Test Lead' (John Doe / 555-555-5555 / noreply@<org base domain>) with requiresAssi...
Faili ya awali ya MinIO + download mwisho
Injects MinIOStorageService; POST /source-file stores the raw upload in the private internal bucket; GET /{id}/source-file streams it back (org-checked); the ke...
Persist runs/records, template CRUD, header auto-detect & re-import
- LeadImportPersistenceService: header normalize+SHA3 fingerprint (ordered/unordered), mapping/row JSON round-trips, persist run + non-success records, templa...
GET /leads/available-summary for the live NavPri lead alert
Aggregates the caller acceptability across all active markets (comment gate + credit/FFA/ daily-spend rules). Returns hasAcceptable / hasAcceptableCredit / bloc...
Usahihi, ukubwa & PII mgumu katika LeadImportController
- Imeunganishwa kupitia swala la LeadRepository badala ya FindAll () juu ya wapangaji wote (Ilikuwa OOM / DoS + hatari ya mfiduo wa msalaba, kukimbia tena kwa k...
Mark-reassignment gated by MARK right; Manage-Credits returns members with Spend/Receive right
LeadAcceptController: mark-reassignment requires MARK_LEADS_REQUIRES_ASSIGNMENT. LeadCreditController.manage: returns eligibleMemberIds (SPEND_RECEIVE_LEAD_CRED...
Credit lead-assignment API ****************
- LeadAcceptController: GET /leads/available, POST /leads/accept (atomic, comment-gated, FFA + credit), GET /leads/uncommented, POST /leads/{id}/mark-reassign...
Market status filter, archive/reactivate, market-scoped vendors
- GET **************** (default active); enrich each market DTO with vendor-products derived from its vendors - Replace DELETE /lead-markets/{id} with PATCH /...
Kuanza saa ya majaribio kwenye login ya kwanza ya mmiliki wa org
Seed new orgs with a PENDING trial (source=TRIAL, trialExpiresAt=null) that grants nothing until started, then start the 3-day clock on the owner's first FQDN-s...
Weka eneo la tovuti + kutumia node-local MinIO kwa pod
Ongeza kamo.minio.region (MINIO REGION, default us-magharibi-ca-s-1) hivyo SigV4 saini zinalingana na eneo la tovuti iliyotekelezwa na seva; kurekebisha backgro...
Trial banner signal is org-level (all members of a trialing org), not seat-based
Member gate grants unlimited catalog for active TRIAL + exposes trialExpiresAt
Retry boot-time rights sync on transient DB unavailability to avoid CrashLoopBackOff
Stop cross-org background image leak; order-safe reorder + staging bucket
Reordering only re-uploaded new files to their new index, dropping reordered existing images and leaving imageBgCount claiming unpopulated slots; provisioning t...
Kurudi 404 kwa org haipo badala ya 200 na mwili tupu
getOrganizationById ilirudi null kabisa, ambayo Spring ilichapishwa kwa HTTP 200 na mwili mtupu; wateja wito majibu.json () kisha kurusha "Mwisho usiotarajiwa w...
Ruhusu mtumiaji wa mfumo kutatua mfumo wowote uliotumika wa org
Lango la msalaba lilirudi 403 wakati orgId! = kikao org na mpiga simu Hakukuwa na mgombea wa urais katika chama hicho. Watumiaji wa mfumo wa uendeshaji wa jukwa...
Use cluster MinIO service DNS; drop deprecated WireGuard/CGNAT IPs and retired k2m1/k0m1
Add kamp-apps, VectorService, kamolos, kamo-signer-monorepo to public changelog
Canonicalize webhook repo name to public-projects casing
After the cluster migration the Forgejo repos were recreated lower-cased (securityservice), but historical rows and the public-projects filter use canonical cas...
Generate favicons via multi-node logo read, not single-node exists()
generateAndUploadFavicons() gated on minioService.exists(), which only stats the current MinIO host. When the simple logo was written to (or only replicated ont...
Expose GD (god eligibility) in /user-info for kamo-universe
The session stores the GD flag (KSessionService) but /user-info never returned it, so kamo-universe's KamoIdentity always deserialized is_god=false and the god/...
Case-insensitive email lookup so reset emails send
Password recovery lowercased the input but findByEmailEmail does a case-sensitive match against the stored email (e.g. Sage@KamoCRM.com), so the user was never ...
Carry impersonation audit trail across org jumps
When the caller is already an impersonation session (a god admin acting as another member, carrying SUDO_MEMBER_ID), entering another org from /network minted t...
God-mode member impersonation endpoint
POST /api/security/impersonate mints a fresh ***+OTK for an arbitrary member of the caller's current org, gated on the caller session carrying god mode (GD). Re...
Return orgName + language in /user-info
Resolve the org's display name and the member's selected language (ISO-639-1 code) from the DB so kamo-universe can show each player's org + language flag on th...
Resurrect on k1m1 — shared-lib from k1m1:3000, drop dead k2m1 deploy, pin k1m1 registry image
Je, unaona nini kuhusu usafiri?
Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.