dev

文件	最后提交记录	最后更新时间
den-deps	perf(ci): cut Den API test schema setup with folded DDL and in-memory MySQL (#6530) * perf(ci): build each Den API test schema in one DDL per table, on in-memory MySQL Every den-api security test file creates its own database. With ~15 files at once, the 350 separate CREATE INDEX statements per database made schema setup the bottleneck: 31s per database under that load vs 5.7s with indexes folded into CREATE TABLE (178 tables, identical SHOW CREATE TABLE). CI MySQL also keeps throwaway data in memory without fsync (pnpm ci:den:mysql), used by the security tests, the PR spec lane and the journey Den setup. * fix(evals): read plugin request timings through the typed CDP API #6519 added a raw Runtime.evaluate call in the library connector world, which the browser-code check rejects, so Unit tests fail on every dev push. Use evaluate + browserScript like the other worlds.	9 天前
setup-browser	feat(den): add self-hosted operator Services to Settings (#6224) * feat(den): authorize local deployment service diagnostics * feat(den): expose operator Services in normal Settings * fix(testkit): locate visible native and explicit dialogs * test(den): prove Settings service authority in real journeys * fix(ci): support Ubuntu 22 browser dependencies * fix(testkit): use typed browser evaluation in dialog test	15 天前
setup-tests	ci: gate PRs on one quick check, run the rest after merge (#6804) * ci(warden): design Warden as a fixer and add an off-by-default prototype Warden's findings report now carries each finding's confidence and suggested fix. The manual, variable-gated fixer turns high-confidence, small fixes to files a same-repository PR already changes into one fix PR against that PR's branch. It never pushes to the PR, approves or merges. Release note: none * ci: gate PRs on one quick check; run everything else after merge PRs run only the Quick check (openwork-tests-required): static CI guards, the feature registry and Helm chart, a typecheck of shipped code for every changed package and its dependents (tests left out), and the Den API auth and permission tests plus audit route coverage when Den API inputs change. Moved off PRs, with the same assertions: - Build and core checks (unit tests, full Den API suite, desktop build, docs and models validation) runs on dev pushes and nightly. - PR change proof runs by hand; core journeys and changed proofs run on the dev push that merges them. - The packaged desktop smoke runs before every alpha release. - CodeQL analyzes dev pushes and weekly; PRs upload empty results for the code_scanning rule. - EE images verify nightly; plugin, Terraform, installer, feature registry and evidence tooling checks run on the dev pushes that change them. Release note: none	4 天前
windows-signing	fix(desktop): sign all Windows payload binaries (#6302) * fix(desktop): sign Windows app binaries before packaging Signed-off-by: Guillaume Loret <guillaume@openworklabs.com> * test(desktop): harden Windows signature verification controls Signed-off-by: Guillaume Loret <guillaume@openworklabs.com> * fix(desktop): resolve the signing hook within the checkout Signed-off-by: Guillaume Loret <guillaume@openworklabs.com> * fix(desktop): bind the Artifact Signing credential switch explicitly Signed-off-by: Guillaume Loret <guillaume@openworklabs.com> * fix(desktop): verify preserved signatures across Windows catalogs Signed-off-by: Guillaume Loret <guillaume@openworklabs.com> --------- Signed-off-by: Guillaume Loret <guillaume@openworklabs.com>	14 天前