WorkBuddy
377429995c
CI/CD Pipeline / Test Shell Guard (Phase 23 Gate) (push) Waiting to run
CI/CD Pipeline / Backend Build & Test (push) Waiting to run
CI/CD Pipeline / Admin Web Build (push) Waiting to run
CI/CD Pipeline / Mini Program Compile Check (push) Waiting to run
CI/CD Pipeline / Migration Validation (push) Blocked by required conditions
CI/CD Pipeline / UI Contracts (source-structure gates) (push) Waiting to run
CI/CD Pipeline / E2E (live stack) (push) Blocked by required conditions
1.6 KiB
1.6 KiB
V1.2 Task 3 Completion Report
Status
Completed
Implemented
- Added operator manual onboarding endpoint:
POST /api/v1/operator/users. - Added CSV preview and commit endpoints with required header validation.
- Preview stores temporary CSV content in Redis and does not write user or batch rows.
- Commit persists import batch and row outcomes, rejects duplicate/invalid rows individually, and uses a 24-hour operator/idempotency-key guard.
- Added
user.createpermission and granted it to platform/organization administrators. - Review approval now updates
published_profile_revision; rejection and need-edit keep the prior published revision. - Account issuance checks verified phone, approved and published profile, and two agreed consent records before creating a hash-only credential.
- Added admin manual-create and CSV import pages.
Automated Tests
mvn -B -f backend/pom.xml test "-Dtest=UserImportServiceTest,UserCredentialIssuanceTest,UserRegistrationServiceTest,V12MigrationContractTest,MigrationValidationTest,EntityMigrationParityTest,ReviewServiceTest"
26 tests passed, 0 failures, 0 errors
pnpm --dir admin-web type-check
passed
Not Verified
- Clean PostgreSQL V001-V066 migration was not run.
- Real account delivery channel is not connected; only a credential reference is returned.
- Full admin browser workflow and CSV download of failed rows are not implemented.
- End-to-end review-to-issuance flow still needs Task 4 consent/login integration.
Next Phase
Task 4: password login, forced initial password change, service consent gates, and authenticated profile revision enforcement.