Skip to content

[comp] Production Deploy#2732

Merged
Marfuen merged 6 commits intoreleasefrom
main
May 1, 2026
Merged

[comp] Production Deploy#2732
Marfuen merged 6 commits intoreleasefrom
main

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot commented May 1, 2026

This is an automated pull request to release the candidate branch into production, which will trigger a deployment.
It was created by the [Production PR] action.


Summary by cubic

Adds an org-level toggle to bypass background checks and updates UI and scoring to respect it. Also ships SOC 2 Type 1 and SOC 3 badges in the trust portal (CS-240) and refreshes the integrations catalog to 569 entries with clearer setup docs.

  • New Features

    • Admins can set backgroundCheckStepEnabled via a unified PATCH /v1/admin/organizations/:id (with hasAccess and backgroundCheckStepEnabled). People scores and overviews ignore BG checks when disabled; the employee BG-check tab and verified tick are hidden; the people table hides the BG-check task; an info card explains the bypass; related fetches are skipped.
    • Added SOC 2 Type 1 badge in frameworks UI and SOC 3 in the trust portal with badge and “in progress” state. Refreshed integrations catalog to 569 with 10 new providers (Braintree, Carta, Culture Amp, Gainsight, Mailgun, Metabase, n8n, Pinecone, Plaid, Squarespace) and improved categories/auth/setup docs across 150+ entries.
  • Refactors

    • Consolidated admin org mutations behind a single updateOrganization service and PATCH /:id endpoint (replacing activate/deactivate); updated tests and set rate limit to 10/min.
    • Extracted ComplianceFrameworkLogo logic to reduce duplication in TrustPortalSwitch.

Written for commit a1a6586. Summary will update on new commits.

github-actions Bot and others added 2 commits May 1, 2026 14:18
@vercel
Copy link
Copy Markdown

vercel Bot commented May 1, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
app (staging) Ready Ready Preview, Comment May 1, 2026 6:41pm
comp-framework-editor (staging) Ready Ready Preview, Comment May 1, 2026 6:41pm
portal (staging) Ready Ready Preview, Comment May 1, 2026 6:41pm

Request Review

Copy link
Copy Markdown
Contributor

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 4 files

Requires human review: This PR introduces new feature support (SOC 2 Type 1) and refactors UI logic for compliance logos. Feature additions and code refactors require human review per the provided guidelines.

tofikwest and others added 2 commits May 1, 2026 12:01
10 added, 152 updated. Total: 569 integrations / 9 categories.

Added: braintree, carta, culture-amp, gainsight, mailgun, metabase,
n8n, pinecone, plaid, squarespace

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
chore(integrations-catalog): refresh 2026-04-29 round 3
* feat(db): new migration to add fields for SOC 3

* fix(api): support soc2 for trust-portal endpoints

* fix(app): add SOC 3 to Trust portal frameworks list

* working

* fix(app): update badge image for SOC 3 in trust portal

* fix(app): pass props to SOC 3 svg

* fix(db): upgrade db version

---------

Co-authored-by: chasprowebdev <chasgarciaprowebdev@gmail.com>
* feat(db): add Organization.backgroundCheckStepEnabled

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(api): gate BG-check requirement on backgroundCheckStepEnabled

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* test(api): cover all-pass case for BG-check gating, drop redundant mock

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(api): thread backgroundCheckStepEnabled through getOverviewScores

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* refactor(api): align backgroundCheckStepEnabled derivation with sibling flags

* feat(api): add admin setBackgroundCheckStep service method

Extend getOrganization to return backgroundCheckStepEnabled in its select
and add setBackgroundCheckStep(id, enabled) following the setAccess pattern.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(api): add PATCH /v1/admin/organizations/:id/background-check-step

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(app): admin BG-check requirement toggle in org overview

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* test(app): cover BG-check toggle rollback on PATCH failure

* feat(app): hide BG-check column in people table when bypassed

Thread backgroundCheckStepEnabled from TeamMembers server component
through TeamMembersClient to MemberRow; gate the BG-check task counter
and BackgroundCheckVerifiedTick behind the flag.

* fix(app): tighten BG-check bypass test assertion and parallelize org fetch

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(app): show bypass info card on employee BG-check page when disabled

When an org has backgroundCheckStepEnabled === false, replace the BG-check wizard
with an info card on both the standalone /background-check page and the inline
tab in the employee detail view. Threads the flag from the server pages through
Employee.tsx down to EmployeeBackgroundCheck.tsx.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* refactor(app): use design-system Information icon for BG-check bypass card

* fix(test): use role and getAllByText queries in AdminOrgTabs tests to avoid ambiguous matches

The org name appears in both the breadcrumb and the page heading, and
"Active" appears in multiple badge/status locations. Switch to
getByRole('heading') and getAllByText to avoid TestingLibraryElementError.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(app): hide BG-check tab and verified-tick badge when bypassed

Gate the BackgroundCheckVerifiedTick badge behind backgroundCheckStepEnabled
in EmployeePageHeader, and conditionally render the Background Check
TabsTrigger and TabsContent in Employee.tsx using the same flag (matching the
HIPAA tab pattern). Also guards the background-check tab default URL param
navigation when the flag is off.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* refactor(api): consolidate admin org endpoints into single PATCH

Replace activate, deactivate, and background-check-step PATCH endpoints
with a single PATCH /:id accepting UpdateAdminOrganizationDto. Forces
future toggles to add fields to the DTO rather than creating one-off
endpoints.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* refactor(app): point admin org mutations at unified PATCH endpoint

Update activate/deactivate calls to send hasAccess field to PATCH /:id,
and update background-check toggle to send backgroundCheckStepEnabled
field to the same endpoint. Update tests accordingly.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* fix(app): skip BG-check SWR fetches when org has bypass enabled

Pass null as the SWR key for both /background-check and /billing-status
hooks when backgroundCheckStepEnabled is false. SWR's revalidate-on-mount
and revalidate-on-focus would otherwise fire fetchers whose results are
discarded by the bypass-card early-return immediately after.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Mariano <marfuen98@gmail.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
@claudfuen
Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 3.41.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants