fix(phase-5): responder review remediation — callable hardening, E2E decline flow, auth error surfacing#60

Merged

Exc1D merged 16 commits intomainfrom

feature/responder-phase-5-enhancements

Apr 23, 2026

Commits on Apr 23, 2026

fix(shared-validators): make canonicalPayloadHash async using Web Crypto
claude
committed
fix(functions): await canonicalPayloadHash in idempotency guard
claude
committed
fix(decline-dispatch): rate limit, safe assignedTo access, conditional enforceAppCheck
claude
committed
test(dispatch-mirror): add declined dispatch integration test path
claude
committed
fix(shared-sms-parser): add JS entrypoint for functions emulator compatibility
claude
committed
fix(responder-app): surface auth errors and refresh token before callables
claude
committed
fix(responder-app): App Check emulator token and correct functions region
claude
committed
fix(responder-app): error handling, auto-advance guard, user-friendly error messages
claude
committed
test(e2e): add decline smoke test, convert empty stubs to test.skip
claude
committed
docs: phase 5 responder review findings, remediation plan, and learnings
claude
committed
Potential fix for pull request finding 'CodeQL / Unused variable, import, function or class'

Exc1D
and
github-advanced-security[bot]
authored
Potential fix for pull request finding 'CodeQL / Unused variable, import, function or class'

Exc1D
and
github-advanced-security[bot]
authored
fix: address all PR #60 CodeRabbit review comments
claude
committed
fix(ci): untrack src/lib/ dirs, populate complete Camarines Norte gazetteer
claude
committed
fix(responder): handle client-side validation errors in getActionErrorMessage
claude
committed
fix(rules): regenerate firestore.rules to prevent responder updates
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(phase-5): responder review remediation — callable hardening, E2E decline flow, auth error surfacing#60

fix(phase-5): responder review remediation — callable hardening, E2E decline flow, auth error surfacing#60
Exc1D merged 16 commits intomainfrom
feature/responder-phase-5-enhancements

Commits on Apr 23, 2026

fix(shared-validators): make canonicalPayloadHash async using Web Crypto

fix(functions): await canonicalPayloadHash in idempotency guard

fix(decline-dispatch): rate limit, safe assignedTo access, conditional enforceAppCheck

test(dispatch-mirror): add declined dispatch integration test path

fix(shared-sms-parser): add JS entrypoint for functions emulator compatibility

fix(responder-app): surface auth errors and refresh token before callables

fix(responder-app): App Check emulator token and correct functions region

fix(responder-app): error handling, auto-advance guard, user-friendly error messages

test(e2e): add decline smoke test, convert empty stubs to test.skip

docs: phase 5 responder review findings, remediation plan, and learnings

Potential fix for pull request finding 'CodeQL / Unused variable, import, function or class'

Potential fix for pull request finding 'CodeQL / Unused variable, import, function or class'

fix: address all PR #60 CodeRabbit review comments

fix(ci): untrack src/lib/ dirs, populate complete Camarines Norte gazetteer

fix(responder): handle client-side validation errors in getActionErrorMessage

fix(rules): regenerate firestore.rules to prevent responder updates