[dev] [carhartlewis] lewis/comp-company-tasks by github-actions[bot] · Pull Request #2128 · trycompai/comp

github-actions · 2026-02-12T18:27:33Z

This is an automated pull request to merge lewis/comp-company-tasks into dev.
It was created by the [Auto Pull Request] action.

vercel · 2026-02-12T18:27:38Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
app	Ready	Preview, Comment	Feb 13, 2026 2:59pm
portal	Ready	Preview, Comment	Feb 13, 2026 2:59pm

cursor · 2026-02-12T18:27:39Z

PR Summary

Medium Risk
Adds new authenticated file-upload and review flows plus new query paths and notification routing for findings; risks center on auth/role enforcement, S3 upload validation, and correctness of task-vs-submission targeting.

Overview
Introduces a new Evidence Forms feature in the API (EvidenceFormsModule) with endpoints to list available form definitions, create/list/get submissions, upload supporting files to S3, review (approve/reject) submissions with role checks, fetch user-specific submission stats, and export submissions to CSV with signed file URLs.

Extends Findings so they can target either a taskId or an evidenceSubmissionId, updating DTO validation, query endpoints, DB includes, audit log payloads, and notification routing/URLs to support document-submission context.

Adds an Documents section in the app UI (nav + search) with pages/components to browse form categories, create multi-step submissions (including file/matrix fields), view submission details with review actions, and download CSV exports. Also adds new org setting actions/schemas for toggling whistleblowerReportEnabled and accessRequestFormEnabled, and wires in the shared @comp/company package across API/app configs.

^{Written by Cursor Bugbot for commit a129c50. This will update automatically on new commits. Configure here.}

apps/api/src/evidence-forms/evidence-forms.service.ts

apps/app/src/app/(app)/[orgId]/company/components/CompanySubmissionWizard.tsx

apps/portal/src/app/(app)/(home)/[orgId]/documents/[formType]/page.tsx

apps/portal/src/app/(app)/(home)/[orgId]/documents/[formType]/submissions/page.tsx

apps/api/src/evidence-forms/evidence-forms.controller.ts

apps/api/src/evidence-forms/evidence-forms.service.ts

apps/portal/src/app/(app)/(home)/[orgId]/documents/[formType]/page.tsx

apps/app/src/app/(app)/[orgId]/documents/components/CompanyFormPageClient.tsx

apps/app/src/app/(app)/[orgId]/documents/components/CompanySubmissionWizard.tsx

…es (#2129) Co-authored-by: Tofik Hasanov <annexcies@gmail.com>

@Transform

…2130) * fix(api): fix policy version content stored as empty arrays via API class-transformer with enableImplicitConversion was converting TipTap node objects to empty arrays when processing content: unknown[] DTO fields. Added @Transform decorator to preserve raw values. Also: - Block content updates on published policies via PATCH /policies/:id - Align updateVersionContent guard with UI (only block current version when published) - Sync content to current version when updating via PATCH /policies/:id - Add GET /policies/:id/versions/:versionId endpoint - Add Swagger docs for new endpoint Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix(app): allow PDF upload/delete on draft policy versions and fix false success toast The upload and delete PDF guards blocked all operations on the current version regardless of policy status. Now only blocks when policy is actually published (matching the pattern used everywhere else). Also fixed PdfViewer onSuccess handlers to check result.data.success before showing the success toast — previously showed "PDF uploaded successfully" even when the server action returned { success: false }. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix(api,app): protect current version during needs_review status and fix stale pointer Change version mutation guards from `status === 'published'` to `status !== 'draft'` so that the current version is also protected when the policy is in needs_review state. Fix stale currentVersionId in updateById by reading it inside the transaction. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix(api): move status guard inside transaction to prevent concurrent publish bypass The draft-only content guard was reading policy status before the transaction, allowing a concurrent publish to bypass the check. Now the existence check and status guard both run inside the transaction. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> --------- Co-authored-by: Tofik Hasanov <annexcies@gmail.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

## [1.82.3](v1.82.2...v1.82.3) (2026-02-12) ### Bug Fixes * **app:** check DNS records using Node's built-in DNS instead of using external APIs ([#2126](#2126)) ([5fab9bd](5fab9bd)) * **app:** enable capitalized text for role in csv when adding users ([#2123](#2123)) ([5fdb448](5fdb448)) * **automation:** clarify automation agent's data retrieval capabilities ([#2129](#2129)) ([eb2957f](eb2957f)) * policy version API content bug + published version protection ([#2130](#2130)) ([7f79351](7f79351))

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}

apps/api/src/evidence-forms/evidence-forms.service.ts

Co-authored-by: Cursor <cursoragent@cursor.com>

…ai/comp into lewis/comp-company-tasks

feat(company): add company package and integrate into various apps

469b618

github-actions bot added the automated-pr label Feb 12, 2026

mintlify bot deployed to staging - packages/docs February 12, 2026 18:28 View deployment

vercel bot deployed to Preview – app February 12, 2026 18:29 View deployment

vercel bot deployed to Preview – portal February 12, 2026 18:29 View deployment

cursor bot reviewed Feb 12, 2026

View reviewed changes

feat(app-shell): update company section to tasks and adjust sidebar

01acf22

vercel bot temporarily deployed to Preview – portal February 12, 2026 18:33 Inactive

vercel bot deployed to Preview – app February 12, 2026 18:35 View deployment

cursor bot reviewed Feb 12, 2026

View reviewed changes

apps/api/src/evidence-forms/evidence-forms.controller.ts Show resolved Hide resolved

apps/api/src/evidence-forms/evidence-forms.service.ts Show resolved Hide resolved

apps/portal/src/app/(app)/(home)/[orgId]/documents/[formType]/page.tsx Show resolved Hide resolved

carhartlewis added 2 commits February 13, 2026 12:43

feat(documents): add document management features and update routing

26911fe

style(policy): simplify button formatting and improve layout consistency

5da9e52

vercel bot deployed to Preview – app February 13, 2026 12:49 View deployment

vercel bot deployed to Preview – portal February 13, 2026 12:49 View deployment

cursor bot reviewed Feb 13, 2026

View reviewed changes

carhartlewis added 4 commits February 13, 2026 12:54

feat(org-chart): add email extension and integrate into build process

832c6a3

feat(documents): add concise form descriptions and refactor usage

2eef30c

docs(openapi): update org chart and evidence forms endpoints

ba3beec

Merge branch 'main' into lewis/comp-company-tasks

2803246

mintlify bot deployed to staging - packages/docs February 13, 2026 13:02 View deployment

vercel bot had a problem deploying to Preview – portal February 13, 2026 13:03 Failure

vercel bot deployed to Preview – app February 13, 2026 13:04 View deployment

mintlify bot deployed to staging - packages/docs February 13, 2026 13:04 View deployment

carhartlewis added 2 commits February 13, 2026 13:06

feat(tasks): pass organizationId to PolicyImageUploadModal

29a22fe

feat(tasks): pass organizationId to PolicyImageUploadModal

3a68a08

vercel bot temporarily deployed to Preview – app February 13, 2026 13:08 Inactive

github-actions bot and others added 2 commits February 13, 2026 13:09

fix(automation): clarify automation agent's data retrieval capabiliti…

de65b33

…es (#2129) Co-authored-by: Tofik Hasanov <annexcies@gmail.com>

vercel bot deployed to Preview – portal February 13, 2026 13:11 View deployment

cursor bot reviewed Feb 13, 2026

View reviewed changes

apps/api/src/evidence-forms/evidence-forms.service.ts Show resolved Hide resolved

carhartlewis and others added 2 commits February 13, 2026 13:23

feat(portal): add form visibility toggles and improve form layout

b34e05b

Co-authored-by: Cursor <cursoragent@cursor.com>

Merge branch 'lewis/comp-company-tasks' of https://github.com/trycomp…

338a924

…ai/comp into lewis/comp-company-tasks

mintlify bot deployed to staging - packages/docs February 13, 2026 13:26 View deployment

fix(evidence-forms): add validation for submission status before review

0d9ef3a

vercel bot temporarily deployed to Preview – portal February 13, 2026 13:27 Inactive

vercel bot temporarily deployed to Preview – app February 13, 2026 13:27 Inactive

feat(findings): add support for evidence submissions in findings

a129c50

mintlify bot deployed to staging - packages/docs February 13, 2026 14:57 View deployment

vercel bot deployed to Preview – app February 13, 2026 14:59 View deployment

vercel bot deployed to Preview – portal February 13, 2026 14:59 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[dev] [carhartlewis] lewis/comp-company-tasks#2128

[dev] [carhartlewis] lewis/comp-company-tasks#2128
github-actions[bot] wants to merge 17 commits intomainfrom
lewis/comp-company-tasks

github-actions bot commented Feb 12, 2026

Uh oh!

vercel bot commented Feb 12, 2026 •

edited

Loading

Uh oh!

cursor bot commented Feb 12, 2026 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

cursor bot left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

github-actions bot commented Feb 12, 2026

Uh oh!

vercel bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cursor bot commented Feb 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR Summary

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

cursor bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

vercel bot commented Feb 12, 2026 •

edited

Loading

cursor bot commented Feb 12, 2026 •

edited

Loading