feat: chat + optmz control panel

packages/casan-control-panel/backend/test/chat.test.ts

@@ -47,6 +47,23 @@ test('chat ask returns certified read-only answer with evidence sources', () =>
   });
 });
 
+test('chat history returns only integrity-checked previews for the requesting actor', () => {
+  withTempChatState(() => {
+    const svc = new ChatService();
+    svc.ask({ message: 'Summarize Plan 18 MVP-0 status', chatId: 'history-chat' }, viewer);
+    svc.ask({ message: 'Summarize Plan 18 MVP-2 status', chatId: 'history-chat' }, viewer);
+    svc.ask({ message: 'Summarize Plan 18 MVP-0 status', chatId: 'other-actor' }, { ...viewer, actor: 'someone-else' });
+
+    const history = svc.history(viewer, 'history-chat') as any;
+    assert.equal(history.ok, true);
+    assert.equal(history.turns.length, 2);
+    assert.equal(history.turns[0].chat_id, 'history-chat');
+    assert.ok(history.turns.every((turn: any) => turn.prompt_preview && turn.audit_hash));
+    assert.equal(history.conversations.length, 1);
+    assert.equal(history.conversations[0].chat_id, 'history-chat');
+  });
+});
+
 test('chat ask denies prompt injection and returns governed block response', () => {
   withTempChatState(() => {
     const svc = new ChatService();