CONTRACT
Real signed CLI credential
An Express integration test reaches real Project and Skill storage through the bundle route with a signed product credential, then rejects cross-Organization access.
Merge readiness
The follow-up closes the cross-Project CLI gap, production queue wiring gaps, unbounded prompt inputs, missing Container discovery, and incomplete rollout gating. The scale proof now runs the production phase and queue code with controlled adapters.
Review fixes
| Area | Risk | Fix |
|---|---|---|
| CLI scope | A Container ID alone could use credential-owned scope. | Read the selected Project, put it in the route, and authorize it in app-api. |
| Release flag | API and UI could be off while the CLI stayed visible. | Gate CLI help and dispatch with learning.platform-v1. |
| Queue wiring | Dynamic Jobs could miss the configured pg-boss schema and producer pool. | Pass both values to every runner Job and test the rendered chart. |
| DB budget | The chart did not count all runner and producer connections. | Count two product-store links per active runner plus its producer pool. |
| Run handoff | Producer startup or queue-send failure could poison the process or leave an active run. | Acquire producer readiness first, clear rejected startup promises, and fail only the creator’s exact queued run when send rejects. |
| Prompt bounds | Old Insights and Skills could exceed the budget before snapshots were added. | Cap each list at 500, select stable Insight and Skill prefixes that fit, and reserve room for the first snapshot. |
| Container discovery | Only the first 500 Containers appeared in normal navigation. | Add scoped keyset pages and a Load more control while keeping direct ID fetch for deep links. |
| Scale proof | The old probe replaced all production runner code. | Bundle and call the production plan, batch, reduce, and queue functions with controlled DB, model, and blob adapters. |
Local validation
CONTRACT
An Express integration test reaches real Project and Skill storage through the bundle route with a signed product credential, then rejects cross-Organization access.
BINARY
The end-to-end test covers download when enabled and rejection when disabled.
CHART
Chart tests cover schema and pool propagation, connection budget rejection, and the 1–32 concurrency range.
Gate
The final merge check is GitHub CI, required review, and mergeability for both the Intelligence and CopilotKit pull requests after these commits land.