| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
minor detail (#1018) | 7 个月前 | |
ci: gate PRs on one quick check, run the rest after merge (#6804) * ci(warden): design Warden as a fixer and add an off-by-default prototype Warden's findings report now carries each finding's confidence and suggested fix. The manual, variable-gated fixer turns high-confidence, small fixes to files a same-repository PR already changes into one fix PR against that PR's branch. It never pushes to the PR, approves or merges. Release note: none * ci: gate PRs on one quick check; run everything else after merge PRs run only the Quick check (openwork-tests-required): static CI guards, the feature registry and Helm chart, a typecheck of shipped code for every changed package and its dependents (tests left out), and the Den API auth and permission tests plus audit route coverage when Den API inputs change. Moved off PRs, with the same assertions: - Build and core checks (unit tests, full Den API suite, desktop build, docs and models validation) runs on dev pushes and nightly. - PR change proof runs by hand; core journeys and changed proofs run on the dev push that merges them. - The packaged desktop smoke runs before every alpha release. - CodeQL analyzes dev pushes and weekly; PRs upload empty results for the code_scanning rule. - EE images verify nightly; plugin, Terraform, installer, feature registry and evidence tooling checks run on the dev pushes that change them. Release note: none | 4 天前 | |
ci(codeql): exclude repository tooling and fixtures (#6404) | 13 天前 | |
feat(website): refresh branding and social previews (#5027) | 1 个月前 | |
fix(ci): approve fork test runs after /test (#6981) GitHub returns an empty pull_requests list on workflow runs from a fork, so runsForPr matched nothing and /test approved 0 waiting runs. Accept an unattributed run only when its SHA, fork repository and branch match the PR and that fork branch has no other open PR here. | 15 小时前 | |
feat(den-web): feature intros as default empty states (#6964) * feat(den-web): feature intros as default empty states Adds per-page feature intros (full screen, tab box, banner) with live sample-data examples, a ? help button and unseen tab dots, behind the featureIntros flag, plus per-member intro state (feature_intro_state, /v1/me/feature-intros). Merges SSO and SCIM into Settings > Auth & Security behind authSecuritySettings. DESIGN.md gains rules I1-I10. * docs: add missing pages for feature intro links Adds docs for OpenWork Models, gateway users and teams, the usage dashboard, connectors, per-person sign-in, plugins, agents/commands/hooks, GitHub Sources, prompts, Workbot, My bot, My Library, Automations, analytics, audit logs, API keys, billing, Tool Tester and the managed installer. Fixes members-and-rbac (custom roles exist) and points each intro's Read the docs link at its page. * fix(den-web): wrap Auth & Security routes in Suspense for prerender useSearchParams needs a Suspense boundary during next build; the new /dashboard/auth-security page and the redirecting /dashboard/sso and /dashboard/scim routes failed to prerender. * fix(den-web): align Auth & Security intro and docs with per-organization SSO Require SSO is now per organization and can live on the SSO tab (ssoSettingsOnSsoPage); the intro no longer says domain emails always go straight to SSO, and the docs describe where Require SSO, Restrict this domain and Ask for SSO again live. | 7 小时前 | |
ci: decouple UI guardrails from Helm and prevent recoupling (#6624) | 7 天前 | |
feat(evidence): open web screenshots as private browser checkpoints (#5339) * test(evidence): prove live web checkpoint prerequisites * feat(evidence): wire checkpoint capture and private fork controls * feat(evidence): host isolated web checkpoint worlds * feat(evidence): prove and publish branch-local checkpoint reviews * fix(evidence): use the web workspace and cover checkpoint states * fix(evidence): secure the CDP relay and verify complete replies * test(evidence): verify fork isolation and the saved framebuffer * test: preserve ownership assertions without ordering concurrent reads * fix(evidence): wait for painted frames and use one approval gate * fix(evidence): make saved browsers discoverable and relaunchable * ci: run internal contributor proof without deployment review (#5342) * test(evidence): follow contributor-aware proof environments * fix(evidence): assert the enabled new-copy action and fix session-home world args * perf(evidence): reuse the web world template across runtime-identical commits | 1 个月前 | |
ci: build and deploy only affected products (#6694) Resolve per-product inputs from workspace dependencies and explicit build-time source reads instead of treating every dev merge as a full product change. Keep unknown comparisons conservative and preserve the required checks and daily/manual backstops. Use successfully published image fingerprints and target-level locks so skipped or failed work is not mistaken for a successful baseline. Preserve release builds and exercise changed image recipes on infrastructure PRs. Version native Render filters behind an explicit preview/apply operator workflow; this commit does not edit live services. Keep real dev CodeQL scans until their complete-baseline accounting can be changed separately. | 7 天前 | |
ci: add dependabot cooldown (#3364) | 3 个月前 | |
chore(pr): add implementation and side-change sections to PR template (#5349) | 1 个月前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 7 个月前 | ||
| 4 天前 | ||
| 13 天前 | ||
| 1 个月前 | ||
| 15 小时前 | ||
| 7 小时前 | ||
| 7 天前 | ||
| 1 个月前 | ||
| 7 天前 | ||
| 3 个月前 | ||
| 1 个月前 |