CedarCopilot wants to merge 2 commits into staging from feat/inbox-client-composed-feed
Live on prod, no production signal yet
Libra has verdicts on 0 of 8 tracked behaviors on prod; 8 are still being checked. Libra checks hourly for 3 days after each deploy.
A large branch that lands five threads of work. The through-line is surfaces that were lying , a picker that offered a conference Google would never create, a tab that reported "No slack messages" over a live mirror, a breadcrumb whose last crumb quietly dropped its link.
Zoom conferencing, for real. Cedar could not ask Google to put a Zoom link on an event: conferenceData.createRequest only creates the solutions a calendar reports in allowedConferenceSolutionTypes, and every calendar probed reports exactly ["hangoutsMeet"]. So Cedar now holds a per-user Zoom OAuth token, mints the meeting through Zoom's own API, and writes the join details onto the event. The driver implements McpOAuthDriver deliberately , Zoom rotates its refresh token on every refresh and kills the old one, so the single-flight coalescing in mcp-token-refresh.ts is load-bearing, not a convenience. ZoomConnectDialog owns the consent detour so one click on "Add Zoom" still ends with Zoom on the event. See apps/server/docs/zoom-conferencing.md.
2FA policy moves from an env var onto the user row. TWO_FACTOR_REQUIRED_USER_IDS made a per-customer security setting a property of the deployment: changing one user's policy meant a redeploy, no admin surface could read it, nothing recorded who changed it. It is user data, so it lives on the user, with twoFactor.setPolicy as a staff-only write path that revokes sessions so the change binds immediately rather than sitting behind the session cookie cache. Adds a re-verification interval, and a unique index on two_factor(user_id) , prod had drifted to two secrets for one account, which is silently unrecoverable for whoever it happens to.
One channel filter that composes. A Gmail-query tab resolves to email alone, so narrowing it further by an explicit slack badge produced an empty intersection and rendered "No slack messages." over 38 of them. Important/Other are now correctly not mail-only , they re-slice the whole inbox by attention, not by subject , and an unanswerable badge resolves to all rather than a dead end.
One panel geometry, one breadcrumb, one form kit. Measurements taken off Linear with getComputedStyle and written down in apps/mail/docs/crystallized.md. Plus a Linear-style new-task modal, server-side file search, and SharePoint/OneDrive link classification.
A pre-merge review found four issues, all fixed here:
Breadcrumb silently discarded a destination. It decided "you are here" positionally, rendering the last crumb as an inert span and dropping any href. A task's bar is Tasks / <lane> above the task's own title , the h1 below is the page and the lane is somewhere to go , so its link was dead markup. The current crumb is now the last one with nowhere to go, which every other call site already is.modifyCalendarEventTool booked every AI-updated Zoom meeting as 60 minutes , it passed a start time but no duration, and Zoom silently defaults. A 25-minute event held an hour on the host's own account.schema.ts drifted from the applied DDL , two_factor_required lacked .notNull() while the migration (verified applied against the live DB) writes NOT NULL.HomeAgentsWidget cast an already-typed tRPC result , the redundant-cast shape that took down the home rail once before.Also deleted the dead uuid imports and requestId helper the Zoom refactor orphaned.
Both are additive and already applied, verified against the live database:
two_factor_policy_columns.sql , ADD COLUMN IF NOT EXISTS for two_factor_required / two_factor_reverify_hourstwo_factor_one_row_per_user.sql , dedupe (keeping the verified row) then CREATE UNIQUE INDEX IF NOT EXISTSServers on the old code keep working; they simply never read the columns.
pnpm run autofix:local green , oxlint --deny-warnings, deps:check (1721 modules, no violations), 3829Libra has not measured any production surfaces for this change yet.