IA audit remediation: decouple publish from the order lifecycle, harden public surfaces, and converge report/repair/agent UX#279

Merged

important-new merged 35 commits into

InspectorHub:mainfrom

important-new:fix/ia-critical-pr1-publish-decoupling

Jul 24, 2026

Commits on Jul 23, 2026

fix(publish): decouple report delivery from the order lifecycle
important-new
committed
fix(hub): stop hiding the Report card behind the order lifecycle
important-new
committed
fix(complete): stop firing report.published from order completion
important-new
committed
feat: let inspectors mark fieldwork complete, from either surface
important-new
committed
test(e2e): cover publishing with and without the completion step
important-new
committed
fix(agent): read defect states by the canonical key so recommendations appear
important-new
committed
fix(pca): map the produced bucket domain in the Systems Summary severity roll-up
important-new
committed
fix(report): keep internal_notes and price out of the public report payload
important-new
committed
fix(repair): resolve the actor kind instead of assuming client
important-new
committed
feat(repair): tenant switch for agent access to the repair list (IA-73)
important-new
committed
feat(portal): revoke report access on removal, expire links on unpublish (IA-36)
important-new
committed
fix(command-palette): mount it workspace-wide so Cmd/Ctrl+K works everywhere
important-new
committed
fix(sidebar): wire the search button to open the command palette (IA-38)
important-new
committed
fix(marketplace): wire the Install button to actually import the template (IA-39)
important-new
committed

Commits on Jul 24, 2026