Thomas Durieux
1d326e7c32
fix: repair private repository access from the edit page ( #892 )
...
* fix: repair private repository access from the edit page
* fix: respect App rollout and reload renamed sources after repair
* fix: gate access repair by status and update response tests
2026-10-11 12:13:02 +01:00
KozakLordOfMatrix and Thomas Durieux
4a06aa9888
fix: rebuild ready snapshots on an explicit refresh ( #890 )
...
* fix repository refresh failing to reflect new public GitHub commits
* test: cover forced snapshot rebuilds and unchanged background refresh
* fix: serialize missing-tree recovery with owner refreshes
---------
Co-authored-by: Thomas Durieux <5577568+tdurieux@users.noreply.github.com >
2026-10-11 11:53:45 +01:00
Thomas Durieux
bee729e0ee
Merge pull request #889 from tdurieux/fix/registration-email
...
fix: save verified email addresses during GitHub registration
2026-10-09 15:29:42 +02:00
Thomas Durieux
444e5ab248
fix: save verified email addresses during GitHub registration
2026-10-09 13:24:21 +00:00
Thomas Durieux
2d21448a77
Merge pull request #888 from tdurieux/fix/profile-email-button
...
fix: balance profile email button padding
2026-10-09 14:51:45 +02:00
Thomas Durieux
167257f781
fix: balance profile email button padding
2026-10-09 12:47:38 +00:00
Thomas Durieux
7319a5a744
fix: keep settings links on profile and fill the project table ( #887 )
2026-10-09 13:20:27 +01:00
Thomas Durieux
c67d8ec3b2
Merge pull request #886 from tdurieux/fix/production-followup-errors
...
fix: handle production source failures and reduce ZIP work
2026-10-09 12:44:26 +02:00
Thomas Durieux
bfcea3e2b7
fix: cancel token-gate waits and detect complete LFS prefixes
2026-10-09 10:08:49 +00:00
Thomas Durieux
705f7c428a
fix: handle production source failures and reduce ZIP work
2026-10-09 09:40:54 +00:00
Thomas Durieux
bd7d6f0bef
Merge pull request #885 from tdurieux/t3/one-access-alert-per-resource
...
fix: send one access alert per repository until owner action
2026-10-09 09:54:09 +02:00
Thomas Durieux
633e5ddcae
fix: rearm owner alerts across recovery actions safely
2026-10-09 07:47:51 +00:00
Thomas Durieux
d519a0a9bb
fix: send one access alert per repository until owner action
2026-10-09 07:38:52 +00:00
Thomas Durieux
c55efd14ed
Merge pull request #884 from tdurieux/t3/notify-owners-on-repo-errors
...
feat: notify owners when GitHub access needs attention
2026-10-09 08:50:05 +02:00
Thomas Durieux
9a2707d4b8
fix: preserve probe errors and complete refresh alerts
2026-10-09 06:17:40 +00:00
Thomas Durieux
2b20abe0a5
fix: cover streamed access errors without alerting on outages
2026-10-09 06:00:16 +00:00
Thomas Durieux
85b9a50d4d
fix: address owner notification review findings
2026-10-09 05:42:19 +00:00
Thomas Durieux
95f8aef30a
feat: notify owners when GitHub access needs attention
2026-10-09 05:22:41 +00:00
Thomas Durieux
f92cfbe795
Merge pull request #883 from tdurieux/fix/production-stream-failures
...
fix: contain upstream failures and back off repeated retries
2026-10-09 07:13:08 +02:00
Thomas Durieux
66b71583d4
fix: count native resets and test deferred public downloads
2026-10-09 04:07:31 +00:00
Thomas Durieux
37d10eed20
fix: contain upstream failures and back off repeated retries
2026-10-09 03:48:05 +00:00
Thomas Durieux
74fe405e1b
Merge pull request #850 from tdurieux/codex/review-callback-handoff
...
Return artifact consent through registered POST callbacks
2026-10-08 18:33:51 +02:00
Thomas Durieux
8cfe7f33e2
Merge pull request #849 from tdurieux/codex/review-completion-http
...
Add scoped completion exchange service transport
2026-10-08 18:33:44 +02:00
Thomas Durieux
8b0588a8fa
Merge pull request #848 from tdurieux/codex/review-completion-exchange
...
Exchange owner consent codes for immutable pending bindings
2026-10-08 18:33:38 +02:00
Thomas Durieux
1d20b91024
Merge pull request #847 from tdurieux/codex/review-consent-ui
...
Add isolated artifact owner consent page
2026-10-08 18:33:32 +02:00
Thomas Durieux
0fb4a031c1
Merge pull request #846 from tdurieux/codex/review-consent-http
...
Protect artifact consent HTTP requests with current sessions and CSRF
2026-10-08 18:33:27 +02:00
Thomas Durieux
e5ef807159
Merge pull request #845 from tdurieux/codex/review-owner-consent
...
Record artifact owner consent under current account and repository authority
2026-10-08 18:32:49 +02:00
Thomas Durieux
c0596d4637
Merge pull request #844 from tdurieux/codex/review-intent-client
...
Consume saved review intents through bounded authenticated HTTPS
2026-10-08 18:29:45 +02:00
Thomas Durieux
58fc9f4c16
Merge pull request #843 from tdurieux/codex/review-service-capabilities
...
feat: expose authenticated review-service capabilities
2026-10-08 18:29:31 +02:00
Thomas Durieux
5a52cc5f3b
Merge commit 'refs/security-review/pr849' into HEAD
2026-10-08 16:28:53 +00:00
Thomas Durieux
e0fa4d37c1
Merge commit 'refs/security-review/pr848' into HEAD
2026-10-08 16:28:53 +00:00
Thomas Durieux
851f91222c
Merge commit 'refs/security-review/pr847' into HEAD
2026-10-08 16:28:53 +00:00
Thomas Durieux
6c8aae6ca5
Merge commit 'refs/security-review/pr846' into HEAD
2026-10-08 16:28:53 +00:00
Thomas Durieux
a269348bbb
Merge commit 'refs/security-review/pr845' into HEAD
2026-10-08 16:28:53 +00:00
Thomas Durieux
1ea077bd77
Give the disposable MongoDB fixture room for its journal
2026-10-08 16:28:53 +00:00
Thomas Durieux
eb4fbb6b15
Merge commit 'refs/security-review/pr849' into HEAD
...
# Conflicts:
# src/server/service/review-consent-http.ts
2026-10-08 16:26:12 +00:00
Thomas Durieux
7fc0a79a7a
Merge commit 'refs/security-review/pr848' into HEAD
2026-10-08 16:25:33 +00:00
Thomas Durieux
89d7a92072
Merge commit 'refs/security-review/pr847' into HEAD
2026-10-08 16:25:33 +00:00
Thomas Durieux
c1d192cb7f
Merge commit 'refs/security-review/pr846' into HEAD
...
# Conflicts:
# public/script/main.js
2026-10-08 16:25:32 +00:00
Thomas Durieux
5e84a7e1a3
Merge commit 'refs/security-review/pr845' into HEAD
2026-10-08 16:25:01 +00:00
Thomas Durieux
37a87a0fba
Merge commit 'refs/security-review/pr843' into HEAD
2026-10-08 16:25:00 +00:00
Thomas Durieux
243396515e
Merge commit 'refs/security-review/pr844' into HEAD
2026-10-08 16:25:00 +00:00
Thomas Durieux
9fa9838dea
Merge remote-tracking branch 'origin/main' into HEAD
2026-10-08 16:24:40 +00:00
Thomas Durieux
c24f6d4e94
Revalidate consent sessions after request body upload
2026-10-08 16:24:40 +00:00
Thomas Durieux
51c779dffa
fix: install native dependencies for the Docker runtime ( #881 )
2026-10-08 14:12:57 +01:00
Thomas Durieux
8b54456558
Merge pull request #879 from tdurieux/fix/ui-polish
...
fix: make the reviewer explorer readable and its errors legible
2026-10-08 14:55:13 +02:00
Thomas Durieux
adfc855f95
Merge pull request #880 from tdurieux/feat/ui-refine
...
feat: give reviewers a clearer explorer and the UI one visual system
2026-10-08 14:53:07 +02:00
tdurieux and Claude Opus 5.5
be2f979296
fix: keep redaction marks correct with custom masks, Prism and Mermaid
...
- The mask from /api/options is stored once loaded; code markers and
rendered Markdown are refreshed when it arrives instead of keeping the
XXXX default.
- Mermaid sources are left untouched so diagrams still parse.
- Fenced code blocks are marked from a Prism complete hook, after Prism
has rewritten their HTML.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-08 14:46:13 +02:00
tdurieux and Claude Opus 5.5
80944954d6
fix: bring the admin pages in line with the rest of the app
...
- Overview: error-volume bars render (the fills were inline spans), the
cumulative users chart is scaled to its range and labels it, latencies
over a second read in seconds, and charts and daily numbers use the
accent instead of four unrelated colours.
- Labels, table headers and state chips drop the mono caps; queue stat
values drop the serif.
- Error rows keep their content aligned; row metadata wraps instead of
truncating every item; "1 term" is singular.
- Errors filter uses the shared segmented control; breadcrumbs include
Admin; user detail spaces its status and actions, uses the accent for
Generate and says when no access token is stored.
- The jobs table scrolls inside its card on phones.
- Mock server: admin fixtures for every admin endpoint (ADMIN=1).
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-10-08 14:46:03 +02:00
tdurieux and Claude Opus 5.5
cfd7b73de4
fix: send queue job payloads to the admin page as objects
...
BullMQ's asJSON() stringifies data, failedReason, stacktrace and
returnvalue. The Queues page reads them as objects, so payload repo IDs
never showed, failure reasons kept their JSON quotes, and a stack trace
rendered one block per character.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
2026-10-08 14:46:01 +02:00