feat: consent-first, role-aware Bedrock tutoring uplift (#8–#11)#13

Merged

OriNachum merged 40 commits into

mainfrom

feat/consent-tutoring-uplift

Jul 11, 2026

Commits on Jul 11, 2026

chore(worker): GITHUB_CLIENT_ID out of wrangler.toml — deploy-time secret from .env

OriNachum
and
claude
committed
feat(worker): D1 consent schema + db helpers (t2)

OriNachum
and
claude
committed
merge(t2): D1 consents schema + db helpers (getConsent/recordConsent/deleteLearnerData)
OriNachum
committed
feat(t1): versioned Terms of Use + Privacy Policy pages with shared TERMS_VERSION
OriNachum
committed
merge(t1): Terms of Use + Privacy Policy pages, TERMS_VERSION single source (shared/terms-version.mjs)
OriNachum
committed
feat(contract): add pick-the-right-word cloze exercises (t3, c16/h8)

OriNachum
and
claude
committed
merge(t3): cloze pick-the-right-word exercise kind — contract, doctor check, interactive export rendering
OriNachum
committed
feat(infra): voice-bridge serverless spike + SAM template — Nova Sonic 2 over API GW WebSocket (t4)

OriNachum
and
claude
committed
merge(t4): voice-bridge SAM template + Lambda relay + spike verdict (SigV4 GO, API-key bidirectional NO-GO)
OriNachum
committed
feat(worker): consent gate on both sign-in paths — pending-consent session, accept/decline endpoints, zero D1 writes pre-consent (t5)

OriNachum
and
claude
committed
merge(t5): consent gate on both sign-in paths — pending-consent sessions, consent routes, requireConsented wall
OriNachum
committed
feat(t14): re-export content from released subjects — french 0.6.0, spanish 0.7.0, culture-guide 0.10.0 (cloze in, dev- excluded)

OriNachum
and
claude
committed
feat(worker): re-consent on TERMS_VERSION bump — stale-consent D1 check, structured 403, /api/me additive field (t6)

OriNachum
and
claude
committed
merge(t6): re-consent on TERMS_VERSION bump — D1-backed stale-consent check, additive 403/me shapes
OriNachum
committed
feat(site): consent UI page wired to the pending-consent API (t10)

OriNachum
and
claude
committed
fix(worker): deterministic getConsent on granted_at ties — rowid tiebreak (flaky reconsent full-cycle test)

OriNachum
and
claude
committed
merge(t10): consent UI page — five-state client flow against the pending-consent API
OriNachum
committed
feat(worker): self-serve export + delete — consent withdrawal = whole-learner erasure (t7)

OriNachum
and
claude
committed
merge(t7): self-serve export + delete — GET /api/export, POST /api/delete, erasure invariant
OriNachum
committed
feat(t8): roles + visibility — ADMIN_GITHUB_IDS allow-list, admin learner list, self-serve visibility

OriNachum
and
claude
committed
merge(t8): roles + visibility — ADMIN_GITHUB_IDS allow-list, admin list surface, default-private visibility, account panel
OriNachum
committed
feat(t9): the approval gate — signed-out < signed-in < consented < APPROVED

OriNachum
and
claude
committed
merge(t9): approval gate — approved flag, admin approve/revoke, four-level tutor gate, c20 enforced
OriNachum
committed
feat(t16): voice session end-to-end — approval-gated token mint, monthly voice budget, site voice UI (c15/h7)

OriNachum
and
claude
committed
merge(t16): voice session e2e — /api/voice/token mint (cross-language pinned), monthly voice budget, voice page
OriNachum
committed
feat(t15): Nova Pro tutoring through the existing broker — Converse wiring (config only), approved-tier tutor surface, personalized cloze to the ledger

OriNachum
and
claude
committed
merge(t15): Nova Pro tutoring — Converse-direct config, tutor panel (grade/next-step/cloze-gen), zero broker code change (h11)

OriNachum
and
claude
committed
feat(t17): extended launch gate — consent/approval/deletion/tutor/voice/cloze success signals + boundary invariants

OriNachum
and
claude
committed
Merge branch 'agent/c1-t17' into feat/consent-tutoring-uplift
OriNachum
committed
chore: bump 0.6.0, changelog, and record the c24 Converse correction (pending user confirmation)

OriNachum
and
claude
committed
chore: gitignore .devague/questions (devague working-state, auto-added)

OriNachum
and
claude
committed
chore: scope GitGuardian ignore to the t16 voice-token test fixture

OriNachum
and
claude
committed
spec: apply the user-confirmed c24 correction (OpenAI-compat -> native Converse)

OriNachum
and
claude
committed
fix: reduce cognitive complexity of cloze conformance checks (S3776)
OriNachum
committed
fix(voice-bridge): Query the concurrency gate instead of Scan-ing the table

OriNachum
and
claude
committed
Merge branch 'fix/review-conformance' into feat/consent-tutoring-uplift
OriNachum
committed
Merge branch 'fix/review-voice-bridge' into feat/consent-tutoring-uplift
OriNachum
committed
fix(worker): close two Qodo review findings — delete session leak + voice budget race

OriNachum
and
claude
committed
Merge branch 'fix/review-worker' into feat/consent-tutoring-uplift
OriNachum
committed
docs: log the four Qodo/Sonar review fixes under 0.6.0

OriNachum
and
claude
committed