Repository navigation
Mobile direct channel invitations and isolated guest access #2148
Description
Outcome
An organization owner invites an existing application user into one channel from mobile. The recipient accepts from their own inbox and exchanges text without joining or selecting the host organization. Other organization channels remain inaccessible; revocation removes subsequent guest access.
Scope and acceptance
- Reuse trusted cloud configuration and independent WorkOS sessions.
- Owner channel invitation, recipient inbox, guest-channel entry and durable text via public TOB routes.
- Preserve retry keys and drafts across uncertain writes/restarts; bounded lists and explicit failures.
- Prove A → B in UAT, no WorkOS organization membership, no sibling/pre-join access, owner CLI agreement, revocation with old B session.
- Native keyboard and large-text/theme checks, sanitized screenshots and recording. Android/Human gates remain explicit.
- No email-delivery/new-signup claim, complex visibility, Agent credentials or channel bridging in this slice.
Stacked after #2146 and TOB organization invitations. Refs BotHarness/tob#3. UAT only; no Prod, no merge.
Merge outcome — 2026-10-18
Human authorized merge and closure of completed slices. PR #2150 was integrated with its original commits through #2157 into main. This issue’s bounded implementation and recorded UAT path are complete. Source, Simulator, real UAT and historical Human-assisted browser evidence retain their published boundaries; no new physical-device/Android/Human acceptance is implied. Broader identity-event revocation, WebSocket, org-wide Agents and T1–T5 acceptance remain in BotHarness/tob#1 and its child tasks. No Prod deployment or release.
Agent task codex/local/01a148ae-ec7f-74b2-8157-961411ce54c9: completed for this bounded slice.
Activity
DoodleBears commentedon Oct 18, 2026
Agent work claim
codex/local/01a148ae-ec7f-74b2-8157-961411ce54c9(not a DSH Session)codex/2148-channel-guestsStacked on #2146; service candidate tracks BotHarness/tob#3. No Prod and no merge.
fix(mobile): name the channel invitation destination clearly
fix(mobile): pass selected channel name into invitation form
fix(mobile): distinguish accepted guest access from workspace membership
fix(mobile): use single-action keyboard spacing for guest composer
fix(mobile): retain prediction-bar clearance with compact guest action
test(mobile): record UAT channel guest lifecycle evidence
DoodleBears commentedon Oct 18, 2026
UAT slice handoff — Draft #2150, evidence head
55b546ce8efcb38ff0419c203b5cfaacf2ef31ad; runtimebc08a47e6f060fe6caa6b879c4b2464e12d69e05. Service TOB #21, runtime6226ec3/schema5/4/2.Phone owner invite → B inbox accept → isolated guest read/send → independent owner CLI readback passed. No org membership/selection change, no sibling/prejoin history. Refresh/cold restart passed; revocation denied old phone and CLI; owner max-text revoke passed. Independent phone logout removed own session/latest refresh while CLI retained. Final six composer/form size/theme cases passed after correcting the recorded first failures.
32 focused checks and runtime CI39083819797 passed; evidence-only CI pending. Six embedded PR images verified loaded in GitHub. Native signed494a20f1e reused, shared window released, local fixture removed, other resources preserved. Android/physical/Human QA, actual email/new signup and native uncertain-response injection remain unqualified. No Prod/merge. Agent/WS/two-Host work continues separately; this issue is ready for human review.
Agent-Task: codex/local/01a148ae-ec7f-74b2-8157-961411ce54c9
DoodleBears commentedon Oct 18, 2026
Agent work outcome: completed for this bounded UAT slice. Human authorized merge; original commits are integrated through #2157. See the updated issue for exact evidence and remaining parent-task/platform gates. No Prod deployment. Task: codex/local/01a148ae-ec7f-74b2-8157-961411ce54c9.
feat(mobile): invite and open isolated cloud channel guests