CTO Sub-Audit Fix Wave + moderation (#693) — money/security/booking integrity, Sonar-clean - #995

Merged

teetangh merged 63 commits into

devfrom

integration/cto-audit-wave

Jul 16, 2026

Commits on Jul 11, 2026

feat(moderation): wire real side-effects into staff moderation actions (Part of #693)

teetangh
and
claude
committed
ee95455
fix(stream): authz guards on token providers and addMemberToChannel (Part of #899)

teetangh
and
claude
committed
fde3490
perf(webhooks): narrow notification fetches from deep includes to selects (Part of #734)

teetangh
and
claude
committed
de0b0bc
chore(tasks)+docs: retire the tasks/ folder; record moderation + peer-chat decisions

teetangh
and
claude
committed
e9471ae
fix(moderation): CI type errors — use extended-client Tx type, es5-safe Set iteration, number money fields

teetangh
and
claude
committed
49ea52b
fix(moderation): review-comment triage — clearable suspension input, merged 404 branch, session-mocked stream tests

teetangh
and
claude
committed
e154607
fix(moderation): CodeRabbit triage — honor Novu TriggerResult, surface server errors in toast, roadmap addendum

teetangh
and
claude
committed
5987e85
fix(stream): session-bind token actions and demote default Stream role

teetangh
and
claude
committed
ea5749f
fix(enterprise): enforce ADR-18 program allowlist + exclusive-engagement at checkout

teetangh
and
claude
committed
665ca5b
fix(reviews): enforce review ownership + booking eligibility, unique per pair, recompute rating on all mutations

teetangh
and
claude
committed
36dea1e
fix(stream): grant channel-scoped host/moderator on event + meeting channels

teetangh
and
claude
committed
d400e4b
fix(stream): enqueue permanent-recording transfer on ready, stream uploads, delete objects on retention

teetangh
and
claude
committed
a76e371
chore(payments): remove Lemon Squeezy + XFlow, add post-MVP DODO_PAYMENTS gateway enum

teetangh
and
claude
committed
183d0e7
feat(waitlist): soft-hold seat on accept, transactional join with friendly conflict

teetangh
and
claude
committed
0539a30
fix(booking): scope subscription reschedule status, wire allocation idempotency, widen reconcile, tx CRUD, shard auto-allocate lock

teetangh
and
claude
committed
ebd9f86
fix(trust): referral stash (#891), Novu idempotency, support dedup, collaborator perms, legal constants, DPDP docstring

teetangh
and
claude
committed
fe8d808
fix(payments): auto-refund amount-mismatch + double-booking loser, freeze wallet on ledger drift

teetangh
and
claude
committed
043550f
fix(enterprise): CAS onboarding submit + SSO settings, gate SCIM seats, correct session-revoke claim on membership removal

teetangh
and
claude
committed
5e171b0
fix(enterprise): rescope PENDING_TRUST to sponsor org, park consultant earnings, wire domain-verify gate

teetangh
and
claude
committed
a663356
feat(booking): consultant no-show detection with auto-refund and notification

teetangh
and
claude
committed
3ed84ce
feat(payments): add BATCHED earnings status so PAID means cash moved

teetangh
and
claude
committed
1ce9888
fix(payments): close the checkout↔ledger earnings-journal consistency window

teetangh
and
claude
committed
44a52a9
fix(booking): address review — guard undefined appointmentId filter, BigInt-safe amount compare

teetangh
and
claude
committed
eeb72f7
fix(trust): address review — strip internal fields from ticket dedup response, findFirst for relation filters

teetangh
and
claude
committed
5f5fe88
fix(payments): address review — add WalletFrozenError httpStatus

teetangh
and
claude
committed
08a8843
fix(payments): address review — BigInt-safe Sentry context, clear manual-recovery marker after auto-refund

teetangh
and
claude
committed
cc55e96
fix(booking): address review — reconcile detector excludes in-flight tentative holds

teetangh
and
claude
committed
0dd75bf
fix(reviews): address review — validate PUT body, serialize rating recompute

teetangh
and
claude
committed
c45f17b
fix(stream): address review — don't grant channel-moderator on direct-message channels

teetangh
and
claude
committed
a89117a
fix(stream): address review — make recording enqueue durable, bound retention delete concurrency

teetangh
and
claude
committed
44b4f12
fix(enterprise): address review — always bump SSO version, idempotent SCIM create

teetangh
and
claude
committed
34fb1cc
Merge remote-tracking branch 'origin/fix/enterprise-invoice-trust' into integration/cto-audit-wave
teetangh
committed
bf57e0a
Merge remote-tracking branch 'origin/feat/payout-batched-status' into integration/cto-audit-wave
teetangh
committed
57bfd00
Merge remote-tracking branch 'origin/fix/checkout-earnings-atomicity' into integration/cto-audit-wave
teetangh
committed
c376d09
Merge remote-tracking branch 'origin/feat/noshow-automation' into integration/cto-audit-wave
teetangh
committed
fef5643
Merge remote-tracking branch 'origin/fix/booking-correctness' into integration/cto-audit-wave
teetangh
committed
970c03e
Merge remote-tracking branch 'origin/fix/reviews-integrity' into integration/cto-audit-wave
teetangh
committed
4d935ff
Merge remote-tracking branch 'origin/chore/gateway-cleanup' into integration/cto-audit-wave
teetangh
committed
cd5a27a
Merge remote-tracking branch 'origin/fix/onboarding-identity-races' into integration/cto-audit-wave
teetangh
committed
c4fbbc6
Merge remote-tracking branch 'origin/fix/trust-safety-sweep' into integration/cto-audit-wave
teetangh
committed
2405974
Merge remote-tracking branch 'origin/fix/stream-security' into integration/cto-audit-wave
teetangh
committed
379b78f
Merge remote-tracking branch 'origin/fix/adr18-allowlist-enforcement' into integration/cto-audit-wave
teetangh
committed
103cf5d
Merge remote-tracking branch 'origin/feat/waitlist-seat-hold' into integration/cto-audit-wave
teetangh
committed
0b38132
Merge remote-tracking branch 'origin/fix/recordings-pipeline' into integration/cto-audit-wave
teetangh
committed
2613e83
docs: reconcile documentation with the CTO audit fix wave

teetangh
and
claude
committed
d4a6e68
fix(integration): resolve type errors from the merge — narrow checkout gateway to implemented set, depth-safe waitlist-holds client type

teetangh
and
claude
committed
44205cd
fix(integration): address review — INVOICE-gate PENDING_TRUST, surface wallet-freeze 409, re-check allocation idempotency, eslint build-fixes

teetangh
and
claude
committed
85a8f35

Commits on Jul 12, 2026

test(integration): update booking/payments/payout tests for the fix-wave behavior changes

teetangh
and
claude
committed
6accddb

Commits on Jul 16, 2026

Merge remote-tracking branch 'origin/dev' into HEAD
teetangh
committed
2289847
fix(moderation): unblock next build for /api/admin/analytics + update onto dev

teetangh
and
claude
committed
6a2cb59
fix(auth): define STAFF/ADMIN admin roles so the BetterAuth admin plugin initializes at build

teetangh
and
claude
committed
888a7ae
revert(moderation): drop unnecessary force-dynamic on analytics route

teetangh
and
claude
committed
ed0f994
merge(#974): reconcile moderation branch into the audit wave

teetangh
and
claude
committed
431a823
docs+chore(moderation): clarify sideEffects recovery guarantee, Number.NaN

teetangh
and
claude
committed
d126d30
Merge remote-tracking branch 'origin/feature/moderation-actions-693' into integration/cto-audit-wave
teetangh
committed
b58923a
fix(novu): give toSorted a localeCompare comparator (Sonar S2871)

teetangh
and
claude
committed
8776d31
chore(moderation): Number.parseInt (Sonar S7773)

teetangh
and
claude
committed
d3e3161
chore(sonar): node:fs import + Number.parseInt (S7772/S7773)

teetangh
and
claude
committed
0ee07a0
fix(moderation): reject decimal suspension durations instead of truncating

teetangh
and
claude
committed
48fda59
refactor(sonar): reduce cognitive complexity in SSO/onboarding/cleanup/no-show fns (S3776)

teetangh
and
claude
committed
7c96868
Merge remote-tracking branch 'origin/feature/moderation-actions-693' into integration/cto-audit-wave
teetangh
committed
fb3fbfc
refactor(moderation): reduce cognitive complexity in side-effects/action/cancel orchestrators (S3776)

teetangh
and
claude
committed
1d36220
Merge remote-tracking branch 'origin/feature/moderation-actions-693' into integration/cto-audit-wave
teetangh
committed
7a93861