v0.3.5 — Read-Only Customer Service Tools

[Rcloudso]

Product impact

Adds one bounded customer-service workflow: a customer verifies one Demo order in the current chat and receives a deterministic, transient order and shipping status. Refunds, cancellation, address changes, notifications, and all other writes remain unsupported and route safely to policy or human support.

Implementation scope

• deterministic pre-RAG routing with write-action precedence and order-reference redaction
• ten-minute Strict HttpOnly grants bound to session, anonymous browser identity, one order, and order_status_lookup@1
• replaceable Demo adapter, strict closed-enum/mask validation, timeout/concurrency controls, and safe order_support fallback
• transient bilingual customer cards plus masked execution audit in the existing admin conversation detail
• additive SQLite grants/executions, startup recovery, fixed tool evaluation, CI gates, bilingual docs, and release evidence
• duplicate lookup keys fail closed with 409; transient results are never stored in generic idempotency replay

Verification

• EMBED_PROVIDER=other npm test
• FAQ 11/11, document Top-3 100% / MRR 0.958, mixed 6/6, quality/OCR/triage/tool evaluations; tool routing 12/12
• OCR Worker 11/11 plus Python compile
• PLAYWRIGHT_CHANNEL=chromium npm run test:e2e: 52/52
• EMBED_PROVIDER=other npm run build: 5,324 modules
• npm audit --omit=dev against the official registry: 0 vulnerabilities
• git diff --check
• independent standards/spec review completed and release blockers corrected

Remaining risks and boundaries

The included data is fictional Demo data only. userIdent is anonymous session ownership, not durable customer identity. Verification limits and SQLite coordination are deployment-local. There is no real OMS/carrier integration, polling, notification, order history, or write authority. Merge, annotated tag, and GitHub Release remain separate publication gates.