|
|
eb709d111d
|
fix(auth): allow empty string appPath inside session-creation route
|
2026-05-29 19:23:06 -07:00 |
|
|
|
c2f71769bb
|
feat(auth): enable requireWorkspacePrincipal on agent/sessions routes to support desktop API keys
|
2026-05-29 19:08:23 -07:00 |
|
|
|
7681bd1211
|
feat(auth): enable requireWorkspacePrincipal on individual project GET/PATCH routes to support desktop API keys
|
2026-05-29 18:48:28 -07:00 |
|
|
|
b263f6d392
|
feat(auth): enable requireWorkspacePrincipal on projects GET route to support desktop API keys
|
2026-05-29 17:06:23 -07:00 |
|
|
|
573ad989ca
|
feat(auth): add Copy Workspace Key button on Next.js auth page for desktop SSO fallback
|
2026-05-29 16:17:18 -07:00 |
|
|
|
af8902397e
|
docs: add ai-new-thread.md context injector for future AI sessions
|
2026-05-28 17:04:46 -07:00 |
|
|
|
92380d7b25
|
chore: sync outer project state and update vibn-code submodule pointer
|
2026-05-28 17:00:31 -07:00 |
|
|
|
bf6171a667
|
feat: added desktop sso endpoints
|
2026-05-28 16:05:47 -07:00 |
|
|
|
91a376ac0a
|
feat(refactor): dynamic agent status ticker card across all execution rounds
|
2026-05-21 17:24:12 -07:00 |
|
|
|
b3dd3714c3
|
feat(refactor): live zed-style codebase files autocomplete and context attachment
|
2026-05-21 17:20:31 -07:00 |
|
|
|
8049a7f1ab
|
feat(refactor): premium zed-style chat UI, collapsible reasoning, and comprehensive strict type sweeps
|
2026-05-21 17:05:42 -07:00 |
|
|
|
180aa9b311
|
fix(ui): safely restore remarkGfm without corrupting tsx syntax
|
2026-05-19 20:00:58 -07:00 |
|
|
|
602debfc82
|
fix(ui): re-add remarkGfm plugin to markdown renderer for PRD tab
|
2026-05-19 19:54:54 -07:00 |
|
|
|
ea8ded855a
|
fix(db): correct ambiguous data column error in plan generation query
|
2026-05-19 19:52:52 -07:00 |
|
|
|
f48cde3890
|
feat(ai): patch Architect prompt with full Spec Kit PRD template rules
|
2026-05-19 19:49:05 -07:00 |
|
|
|
329eb4eb67
|
feat(ai): configure Architect mode prompt with Spec Kit templates and enforce task completion rules in background runner
|
2026-05-19 19:40:23 -07:00 |
|
|
|
665c2ffa06
|
fix(ui): inject Spec Kit architectural templates directly into Architect mode prompt
|
2026-05-19 19:38:40 -07:00 |
|
|
|
02de32958f
|
feat(ai): automate end-to-end PRD, architecture, and task generation directly from Objective
|
2026-05-19 19:32:07 -07:00 |
|
|
|
14541c32aa
|
fix(ui): remove the redundant Objective heading
|
2026-05-19 19:11:42 -07:00 |
|
|
|
00146a63dc
|
fix(ui): combine PRD tabs and remove redundant headers
|
2026-05-19 19:10:17 -07:00 |
|
|
|
1667647f97
|
fix(ui): remove unnecessary User Stories description and emojis
|
2026-05-19 19:01:45 -07:00 |
|
|
|
620f4a7f90
|
feat(ui): redesign Plan tab with Objective, User Stories, Features, and Architecture panels
|
2026-05-19 19:00:07 -07:00 |
|
|
|
273008e14b
|
fix(ui): disable aggressive polling on plan page to prevent layout thrashing
|
2026-05-19 18:56:54 -07:00 |
|
|
|
d12e178b13
|
fix(ui): update API payloads for new chat modes
|
2026-05-19 18:50:27 -07:00 |
|
|
|
94a6198db3
|
fix(ui): simplify Plan tab by removing redundant Objective heading
|
2026-05-19 18:48:35 -07:00 |
|
|
|
c566f89976
|
fix(ui): remove over-polling from plan view to prevent infinite loops
|
2026-05-19 16:24:15 -07:00 |
|
|
|
fe525750f6
|
fix(runner): completely remove thinkingConfig from Gemini payload
|
2026-05-19 16:17:01 -07:00 |
|
|
|
d56131d8b4
|
fix(ai): completely remove thinkingConfig from Gemini payload to prevent 400 errors
|
2026-05-19 16:16:52 -07:00 |
|
|
|
0dcde757f5
|
fix(runner): correct Gemini SDK payload property thinkingBudgetTokens to thinkingBudget
|
2026-05-19 16:16:08 -07:00 |
|
|
|
f2dcd5597d
|
fix(ai): correct Gemini SDK payload property thinkingBudgetTokens to thinkingBudget
|
2026-05-19 16:15:59 -07:00 |
|
|
|
ba2cbd531d
|
docs: outline UX refactor from Tasks to Features for Plan tab
|
2026-05-19 16:13:25 -07:00 |
|
|
|
18355e1421
|
fix(ui): group plan tasks by User Story or Phase to support Spec Kit format
|
2026-05-19 15:56:13 -07:00 |
|
|
|
e12882d13b
|
fix(ai): revert thinkingBudget to thinkingBudgetTokens
|
2026-05-19 15:49:15 -07:00 |
|
|
|
7c45fdc5cc
|
fix(ai): bump roundSinceText cutoff to 30 to prevent panic loops
|
2026-05-19 15:26:15 -07:00 |
|
|
|
63b64d5fc2
|
feat(ui): implement explicit chat modes for collaborate, delegate, and vibe coding
|
2026-05-19 15:18:30 -07:00 |
|
|
|
096ebc278a
|
fix(api): delete legacy atlas and advisor agent endpoints
|
2026-05-19 15:09:59 -07:00 |
|
|
|
5573f1e6fa
|
fix(ai): restore thinking animations for gemini streams
|
2026-05-19 14:53:24 -07:00 |
|
|
|
d7d4b2d2fe
|
fix(ai): bump loop-breaker limits from 16 to 30 to permit long autonomous workflows
|
2026-05-19 14:51:45 -07:00 |
|
|
|
2e5ca29c40
|
fix(runner): bump max tool rounds to 30 to support long deployments
|
2026-05-19 14:51:11 -07:00 |
|
|
|
8071ac9049
|
fix(runner): remove leftover syntax errors
|
2026-05-19 14:34:42 -07:00 |
|
|
|
2f86a4262e
|
fix(runner): resolve TypeScript compilation errors
|
2026-05-19 14:14:34 -07:00 |
|
|
|
67fa4a2ccc
|
feat(runner): migrate vibn-agent-runner to use frontend MCP proxy tools and updated headless prompt
|
2026-05-19 14:06:12 -07:00 |
|
|
|
bbcd4ad55e
|
fix(ai): implement Phase 2 and 3 prompt recommendations from review
|
2026-05-19 13:47:18 -07:00 |
|
|
|
618f7796b2
|
feat(ai): optimize tool loops, fix deployments, and integrate new onboarding flow
|
2026-05-19 12:52:47 -07:00 |
|
|
|
331312b648
|
fix(ui): adopt SWR for useAnatomy to deduplicate requests across components and fix API flooding
|
2026-05-17 20:18:19 -07:00 |
|
|
|
6b8862ef2b
|
feat(api): comprehensive QA hardening — security gates, chat improvements, beta scaffolds
Closes checklist items F-01..F-06, D-01..D-28, S-01..S-10, C-01..C-07,
B-01..B-07, R-01..R-02, O-03.
Security (28 deletions + 10 auth gates):
- Delete 28 unauthenticated debug/cursor/firebase/test routes
- Gate ai/chat, ai/conversation, context/summarize, work-completed with withTenantProject/withAuth
- Add HMAC-SHA256 signature verification to webhooks/coolify
- Switch all admin secret comparisons to timingSafeStringEq
Foundations (lib/server/*):
- api-handler.ts: withAuth, withTenantProject, withWorkspace, withAdminSecret, withRateLimit
- logger.ts: structured request-scoped logging with turnId
- audit-log.ts: writeAuditLog helper + audit_log table
- rate-limit.ts: Postgres sliding window rate limiter
- coolify-webhook.ts: verifyCoolifySignature
- timing-safe.ts: timingSafeStringEq
Chat hardening (chat/route.ts):
- MAX_TOOL_ROUNDS 15 → 8 (C-01)
- Loop detection: hard-break at 3 identical fingerprints (was 5) (C-02)
- Add 6-consecutive-tool-call hard-break (C-02)
- Mode: respond first, act second prompt block (C-03)
- SSE heartbeat every 25s via setInterval (C-04)
- Per-tool 45s timeout via Promise.race (C-05)
- turnId per-turn UUID for log correlation (C-06)
- Recovery fires when roundsSinceText >= 4 (C-07)
- SSE plan event on plan_task_add/edit (B-05)
Beta features:
- invites table + GET/POST /api/invites (P4.8)
- invites/[token] validate + redeem (P4.8)
- fs_project_dev_servers table + lib/server/dev-server-state.ts (P6.B1)
- fs_project_secrets table + CRUD routes (P6.D2)
- lib/integrations/brief-extract.ts (P3.7)
Documentation:
- app/api/ROUTES.md: full route map with auth + tenant
|
2026-05-17 19:17:22 -07:00 |
|
|
|
955aeed6ce
|
fix(ai): hardcode all default LLM references to gemini-3.1-pro-preview across monorepo
|
2026-05-16 15:00:17 -07:00 |
|
|
|
814815af82
|
fix(deploy): install openssl in base docker image to fix prisma client initialization error during build phase
|
2026-05-16 14:05:48 -07:00 |
|
|
|
000d2d171e
|
fix(deploy): use explicit ssh:// scheme and port 222 for gitea clone urls in coolify
|
2026-05-16 13:54:17 -07:00 |
|
|
|
120f045a55
|
fix(ai): upgrade deploy mechanism to use explicit ssh deploy keys rather than http basic auth to solve gitea cloning bugs
|
2026-05-16 13:30:14 -07:00 |
|