Commit Graph
890 Commits
Author SHA1 Message Date
Thomas Durieux 1d326e7c32 fix: repair private repository access from the edit page (#892)
* fix: repair private repository access from the edit page

* fix: respect App rollout and reload renamed sources after repair

* fix: gate access repair by status and update response tests
2026-10-11 12:13:02 +01:00
KozakLordOfMatrixandThomas Durieux 4a06aa9888 fix: rebuild ready snapshots on an explicit refresh (#890)
* fix repository refresh failing to reflect new public GitHub commits

* test: cover forced snapshot rebuilds and unchanged background refresh

* fix: serialize missing-tree recovery with owner refreshes

---------

Co-authored-by: Thomas Durieux <5577568+tdurieux@users.noreply.github.com>
2026-10-11 11:53:45 +01:00
Thomas Durieux bee729e0ee Merge pull request #889 from tdurieux/fix/registration-email
fix: save verified email addresses during GitHub registration
2026-10-09 15:29:42 +02:00
Thomas Durieux 444e5ab248 fix: save verified email addresses during GitHub registration 2026-10-09 13:24:21 +00:00
Thomas Durieux 2d21448a77 Merge pull request #888 from tdurieux/fix/profile-email-button
fix: balance profile email button padding
2026-10-09 14:51:45 +02:00
Thomas Durieux 167257f781 fix: balance profile email button padding 2026-10-09 12:47:38 +00:00
Thomas Durieux 7319a5a744 fix: keep settings links on profile and fill the project table (#887) 2026-10-09 13:20:27 +01:00
Thomas Durieux c67d8ec3b2 Merge pull request #886 from tdurieux/fix/production-followup-errors
fix: handle production source failures and reduce ZIP work
2026-10-09 12:44:26 +02:00
Thomas Durieux bfcea3e2b7 fix: cancel token-gate waits and detect complete LFS prefixes 2026-10-09 10:08:49 +00:00
Thomas Durieux 705f7c428a fix: handle production source failures and reduce ZIP work 2026-10-09 09:40:54 +00:00
Thomas Durieux bd7d6f0bef Merge pull request #885 from tdurieux/t3/one-access-alert-per-resource
fix: send one access alert per repository until owner action
2026-10-09 09:54:09 +02:00
Thomas Durieux 633e5ddcae fix: rearm owner alerts across recovery actions safely 2026-10-09 07:47:51 +00:00
Thomas Durieux d519a0a9bb fix: send one access alert per repository until owner action 2026-10-09 07:38:52 +00:00
Thomas Durieux c55efd14ed Merge pull request #884 from tdurieux/t3/notify-owners-on-repo-errors
feat: notify owners when GitHub access needs attention
2026-10-09 08:50:05 +02:00
Thomas Durieux 9a2707d4b8 fix: preserve probe errors and complete refresh alerts 2026-10-09 06:17:40 +00:00
Thomas Durieux 2b20abe0a5 fix: cover streamed access errors without alerting on outages 2026-10-09 06:00:16 +00:00
Thomas Durieux 85b9a50d4d fix: address owner notification review findings 2026-10-09 05:42:19 +00:00
Thomas Durieux 95f8aef30a feat: notify owners when GitHub access needs attention 2026-10-09 05:22:41 +00:00
Thomas Durieux f92cfbe795 Merge pull request #883 from tdurieux/fix/production-stream-failures
fix: contain upstream failures and back off repeated retries
2026-10-09 07:13:08 +02:00
Thomas Durieux 66b71583d4 fix: count native resets and test deferred public downloads 2026-10-09 04:07:31 +00:00
Thomas Durieux 37d10eed20 fix: contain upstream failures and back off repeated retries 2026-10-09 03:48:05 +00:00
Thomas Durieux 74fe405e1b Merge pull request #850 from tdurieux/codex/review-callback-handoff
Return artifact consent through registered POST callbacks
2026-10-08 18:33:51 +02:00
Thomas Durieux 8cfe7f33e2 Merge pull request #849 from tdurieux/codex/review-completion-http
Add scoped completion exchange service transport
2026-10-08 18:33:44 +02:00
Thomas Durieux 8b0588a8fa Merge pull request #848 from tdurieux/codex/review-completion-exchange
Exchange owner consent codes for immutable pending bindings
2026-10-08 18:33:38 +02:00
Thomas Durieux 1d20b91024 Merge pull request #847 from tdurieux/codex/review-consent-ui
Add isolated artifact owner consent page
2026-10-08 18:33:32 +02:00
Thomas Durieux 0fb4a031c1 Merge pull request #846 from tdurieux/codex/review-consent-http
Protect artifact consent HTTP requests with current sessions and CSRF
2026-10-08 18:33:27 +02:00
Thomas Durieux e5ef807159 Merge pull request #845 from tdurieux/codex/review-owner-consent
Record artifact owner consent under current account and repository authority
2026-10-08 18:32:49 +02:00
Thomas Durieux c0596d4637 Merge pull request #844 from tdurieux/codex/review-intent-client
Consume saved review intents through bounded authenticated HTTPS
2026-10-08 18:29:45 +02:00
Thomas Durieux 58fc9f4c16 Merge pull request #843 from tdurieux/codex/review-service-capabilities
feat: expose authenticated review-service capabilities
2026-10-08 18:29:31 +02:00
Thomas Durieux 5a52cc5f3b Merge commit 'refs/security-review/pr849' into HEAD 2026-10-08 16:28:53 +00:00
Thomas Durieux e0fa4d37c1 Merge commit 'refs/security-review/pr848' into HEAD 2026-10-08 16:28:53 +00:00
Thomas Durieux 851f91222c Merge commit 'refs/security-review/pr847' into HEAD 2026-10-08 16:28:53 +00:00
Thomas Durieux 6c8aae6ca5 Merge commit 'refs/security-review/pr846' into HEAD 2026-10-08 16:28:53 +00:00
Thomas Durieux a269348bbb Merge commit 'refs/security-review/pr845' into HEAD 2026-10-08 16:28:53 +00:00
Thomas Durieux 1ea077bd77 Give the disposable MongoDB fixture room for its journal 2026-10-08 16:28:53 +00:00
Thomas Durieux eb4fbb6b15 Merge commit 'refs/security-review/pr849' into HEAD
# Conflicts:
#	src/server/service/review-consent-http.ts
2026-10-08 16:26:12 +00:00
Thomas Durieux 7fc0a79a7a Merge commit 'refs/security-review/pr848' into HEAD 2026-10-08 16:25:33 +00:00
Thomas Durieux 89d7a92072 Merge commit 'refs/security-review/pr847' into HEAD 2026-10-08 16:25:33 +00:00
Thomas Durieux c1d192cb7f Merge commit 'refs/security-review/pr846' into HEAD
# Conflicts:
#	public/script/main.js
2026-10-08 16:25:32 +00:00
Thomas Durieux 5e84a7e1a3 Merge commit 'refs/security-review/pr845' into HEAD 2026-10-08 16:25:01 +00:00
Thomas Durieux 37a87a0fba Merge commit 'refs/security-review/pr843' into HEAD 2026-10-08 16:25:00 +00:00
Thomas Durieux 243396515e Merge commit 'refs/security-review/pr844' into HEAD 2026-10-08 16:25:00 +00:00
Thomas Durieux 9fa9838dea Merge remote-tracking branch 'origin/main' into HEAD 2026-10-08 16:24:40 +00:00
Thomas Durieux c24f6d4e94 Revalidate consent sessions after request body upload 2026-10-08 16:24:40 +00:00
Thomas Durieux 51c779dffa fix: install native dependencies for the Docker runtime (#881) 2026-10-08 14:12:57 +01:00
Thomas Durieux 8b54456558 Merge pull request #879 from tdurieux/fix/ui-polish
fix: make the reviewer explorer readable and its errors legible
2026-10-08 14:55:13 +02:00
Thomas Durieux adfc855f95 Merge pull request #880 from tdurieux/feat/ui-refine
feat: give reviewers a clearer explorer and the UI one visual system
2026-10-08 14:53:07 +02:00
tdurieuxandClaude Opus 5.5 be2f979296 fix: keep redaction marks correct with custom masks, Prism and Mermaid
- The mask from /api/options is stored once loaded; code markers and
  rendered Markdown are refreshed when it arrives instead of keeping the
  XXXX default.
- Mermaid sources are left untouched so diagrams still parse.
- Fenced code blocks are marked from a Prism complete hook, after Prism
  has rewritten their HTML.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-08 14:46:13 +02:00
tdurieuxandClaude Opus 5.5 80944954d6 fix: bring the admin pages in line with the rest of the app
- Overview: error-volume bars render (the fills were inline spans), the
  cumulative users chart is scaled to its range and labels it, latencies
  over a second read in seconds, and charts and daily numbers use the
  accent instead of four unrelated colours.
- Labels, table headers and state chips drop the mono caps; queue stat
  values drop the serif.
- Error rows keep their content aligned; row metadata wraps instead of
  truncating every item; "1 term" is singular.
- Errors filter uses the shared segmented control; breadcrumbs include
  Admin; user detail spaces its status and actions, uses the accent for
  Generate and says when no access token is stored.
- The jobs table scrolls inside its card on phones.
- Mock server: admin fixtures for every admin endpoint (ADMIN=1).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
2026-10-08 14:46:03 +02:00
tdurieuxandClaude Opus 5.5 cfd7b73de4 fix: send queue job payloads to the admin page as objects
BullMQ's asJSON() stringifies data, failedReason, stacktrace and
returnvalue. The Queues page reads them as objects, so payload repo IDs
never showed, failure reasons kept their JSON quotes, and a stack trace
rendered one block per character.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
2026-10-08 14:46:01 +02:00