|
|
8eb941f1d9
|
chore(telemetry): implement robust path-confusion stall guard, persist verify signatures correctly, and redact secrets from telemetry logs
|
2026-06-10 11:38:49 -07:00 |
|
|
|
0e579be136
|
chore(telemetry): loosen error normalization to preserve status codes and line numbers for accurate verification signatures
|
2026-06-10 11:12:29 -07:00 |
|
|
|
6cbe7c2515
|
chore(telemetry): resolve universal path normalizer logic and path-confusion tracking
|
2026-06-10 11:08:42 -07:00 |
|
|
|
b1ad4fb363
|
feat(telemetry): implement phase-based execution loop and adaptive tool budgets
|
2026-06-09 18:58:12 -07:00 |
|
|
|
ee8109c927
|
chore(telemetry): add path-confusion loop breaker and strict blank-preview diagnostic protocol
|
2026-06-09 16:27:09 -07:00 |
|
|
|
eca23d2266
|
chore(telemetry): replace fragile regex path normalization with bulletproof path.posix.resolve
|
2026-06-09 16:25:51 -07:00 |
|
|
|
7917ad2b37
|
chore(telemetry): remove hardcoded legacy getacquired slug from universal path normalizer
|
2026-06-09 16:21:12 -07:00 |
|
|
|
0ae3748ec4
|
chore(telemetry): implement universal path normalizer and omni-reaper to prevent preview sprawl
|
2026-06-09 16:11:31 -07:00 |
|
|
|
69f7e79266
|
chore(telemetry): add path-confusion loop breaker and strict blank-preview diagnostic protocol
|
2026-06-09 16:10:45 -07:00 |
|
|
|
f1e1d1e753
|
chore(telemetry): verify signature comment and cleanup
|
2026-06-09 15:35:46 -07:00 |
|
|
|
5409d651b3
|
ux(chat): tune silent-loop status nudge threshold to 6 rounds and strip leaked tool trace payloads from UI
|
2026-06-09 15:02:34 -07:00 |
|
|
|
d5d5d6e8d4
|
chore(telemetry): align shell_exec and dev_server_start cwd to flattened workspace root
|
2026-06-09 14:59:42 -07:00 |
|
|
|
173eabd8bf
|
chore(telemetry): jack up MAX_TOOL_ROUNDS to 150 for ultimate custom app-building runway
|
2026-06-09 14:30:36 -07:00 |
|
|
|
65c8dcb6dc
|
chore(telemetry): jack up MAX_TOOL_ROUNDS to 150 for ultimate custom app-building runway
|
2026-06-09 14:18:44 -07:00 |
|
|
|
1301819501
|
chore(telemetry): raise MAX_TOOL_ROUNDS to 60 for complete engineering runway
|
2026-06-09 14:16:31 -07:00 |
|
|
|
341e40c8d5
|
chore(telemetry): align attached-file reader to flattened project root path
|
2026-06-09 13:38:32 -07:00 |
|
|
|
bb63755dcd
|
chore(telemetry): refactor stall detector to track real state progress and persist non-null verify signatures across edit rounds
|
2026-06-09 13:36:30 -07:00 |
|
|
|
5026cc64a3
|
chore(telemetry): flatten the project slug layer and remove cd path instructions from system prompt
|
2026-06-09 13:28:57 -07:00 |
|
|
|
649cf0279c
|
ux(mcp): resolve tool-pill red X contradiction inside Playwright browser crawler
|
2026-06-09 12:42:53 -07:00 |
|
|
|
9d32747e07
|
chore(telemetry): optimize state-based loop stall detector by tracking tool input signatures and clean up unused helper functions
|
2026-06-09 12:23:20 -07:00 |
|
|
|
4caf7755bf
|
chore(telemetry): implement state-based loop governor, 180s tool timeout, visual-qa path fix, and fs_write diff-guard
|
2026-06-09 12:05:15 -07:00 |
|
|
|
bf2b4f966a
|
chore(telemetry): add bulletproof mcp_token sanitization and read-only mode fallback in chat route
|
2026-06-09 10:47:32 -07:00 |
|
|
|
1f2fbd1115
|
chore(telemetry): fix agent loops, name mangling, dev server leaks, CWD alignment, and add daily session auditor
|
2026-06-08 16:09:58 -07:00 |
|
|
|
2e5a03f273
|
fix(agency): add force-dynamic to workspace api route to prevent aggressive next.js cache
|
2026-06-08 13:23:07 -07:00 |
|
|
|
d9057b922d
|
feat(auth): make Name field required on signup
|
2026-06-08 10:45:26 -07:00 |
|
|
|
c1d37184eb
|
feat(frontend): email+password auth, /signin + /signup pages, marketing consolidation, onboarding workspace naming + full data persistence
|
2026-06-06 20:28:38 -07:00 |
|
|
|
16a545a26a
|
feat: complete live-verified GTM onboarding flow & places autocomplete search proxies
|
2026-06-06 17:53:13 -07:00 |
|
|
|
28a959ea5a
|
fix(db): cast project_id to uuid in agent_sessions INSERT query
|
2026-05-30 12:40:14 -07:00 |
|
|
|
775c42e2fa
|
fix(auth): allow empty string appPath inside session-creation route
|
2026-05-29 19:23:06 -07:00 |
|
|
|
3cb079f6e4
|
feat(auth): enable requireWorkspacePrincipal on agent/sessions routes to support desktop API keys
|
2026-05-29 19:08:23 -07:00 |
|
|
|
a8b55b7d8f
|
feat(auth): enable requireWorkspacePrincipal on individual project GET/PATCH routes to support desktop API keys
|
2026-05-29 18:48:28 -07:00 |
|
|
|
7a3b964fb2
|
feat(auth): enable requireWorkspacePrincipal on projects GET route to support desktop API keys
|
2026-05-29 17:06:23 -07:00 |
|
|
|
2a8bc25804
|
feat: added desktop sso endpoints
|
2026-05-28 16:05:47 -07:00 |
|
|
|
2647919bd5
|
feat(refactor): live zed-style codebase files autocomplete and context attachment
|
2026-05-21 17:20:31 -07:00 |
|
|
|
50f65e337d
|
feat(refactor): premium zed-style chat UI, collapsible reasoning, and comprehensive strict type sweeps
|
2026-05-21 17:05:42 -07:00 |
|
|
|
8323108f96
|
feat(ai): configure Architect mode prompt with Spec Kit templates and enforce task completion rules in background runner
|
2026-05-19 19:40:23 -07:00 |
|
|
|
2b799e4907
|
feat(ai): automate end-to-end PRD, architecture, and task generation directly from Objective
|
2026-05-19 19:32:07 -07:00 |
|
|
|
1da2a0b166
|
fix(ai): bump roundSinceText cutoff to 30 to prevent panic loops
|
2026-05-19 15:26:15 -07:00 |
|
|
|
5309a72206
|
fix(api): delete legacy atlas and advisor agent endpoints
|
2026-05-19 15:09:59 -07:00 |
|
|
|
0a4b3af327
|
fix(ai): restore thinking animations for gemini streams
|
2026-05-19 14:53:24 -07:00 |
|
|
|
6a083ff261
|
fix(ai): bump loop-breaker limits from 16 to 30 to permit long autonomous workflows
|
2026-05-19 14:51:45 -07:00 |
|
|
|
0eaa5534d0
|
feat(runner): migrate vibn-agent-runner to use frontend MCP proxy tools and updated headless prompt
|
2026-05-19 14:06:12 -07:00 |
|
|
|
d21daa8abf
|
fix(ai): implement Phase 2 and 3 prompt recommendations from review
|
2026-05-19 13:47:18 -07:00 |
|
|
|
93087d4f9a
|
feat(ai): optimize tool loops, fix deployments, and integrate new onboarding flow
|
2026-05-19 12:52:47 -07:00 |
|
|
|
5364bd8497
|
feat(api): comprehensive QA hardening — security gates, chat improvements, beta scaffolds
Closes checklist items F-01..F-06, D-01..D-28, S-01..S-10, C-01..C-07,
B-01..B-07, R-01..R-02, O-03.
Security (28 deletions + 10 auth gates):
- Delete 28 unauthenticated debug/cursor/firebase/test routes
- Gate ai/chat, ai/conversation, context/summarize, work-completed with withTenantProject/withAuth
- Add HMAC-SHA256 signature verification to webhooks/coolify
- Switch all admin secret comparisons to timingSafeStringEq
Foundations (lib/server/*):
- api-handler.ts: withAuth, withTenantProject, withWorkspace, withAdminSecret, withRateLimit
- logger.ts: structured request-scoped logging with turnId
- audit-log.ts: writeAuditLog helper + audit_log table
- rate-limit.ts: Postgres sliding window rate limiter
- coolify-webhook.ts: verifyCoolifySignature
- timing-safe.ts: timingSafeStringEq
Chat hardening (chat/route.ts):
- MAX_TOOL_ROUNDS 15 → 8 (C-01)
- Loop detection: hard-break at 3 identical fingerprints (was 5) (C-02)
- Add 6-consecutive-tool-call hard-break (C-02)
- Mode: respond first, act second prompt block (C-03)
- SSE heartbeat every 25s via setInterval (C-04)
- Per-tool 45s timeout via Promise.race (C-05)
- turnId per-turn UUID for log correlation (C-06)
- Recovery fires when roundsSinceText >= 4 (C-07)
- SSE plan event on plan_task_add/edit (B-05)
Beta features:
- invites table + GET/POST /api/invites (P4.8)
- invites/[token] validate + redeem (P4.8)
- fs_project_dev_servers table + lib/server/dev-server-state.ts (P6.B1)
- fs_project_secrets table + CRUD routes (P6.D2)
- lib/integrations/brief-extract.ts (P3.7)
Documentation:
- app/api/ROUTES.md: full route map with auth + tenant
|
2026-05-17 19:17:22 -07:00 |
|
|
|
cd062bd30d
|
fix(deploy): use explicit ssh:// scheme and port 222 for gitea clone urls in coolify
|
2026-05-16 13:54:17 -07:00 |
|
|
|
67855b94c2
|
fix(ai): upgrade deploy mechanism to use explicit ssh deploy keys rather than http basic auth to solve gitea cloning bugs
|
2026-05-16 13:30:14 -07:00 |
|
|
|
cdddaced30
|
fix(ai): implement two-stage loop detection to warn before hard-stopping (Fix 11)
|
2026-05-16 12:59:16 -07:00 |
|
|
|
c06ab8650b
|
fix(ai): relax fs_edit line number enforcement to allow safe oldString replacements
|
2026-05-16 12:54:15 -07:00 |
|
|
|
f053567741
|
fix(ai): sync auto-commit with streamed result to surface commit SHA to UI (Fix 10)
|
2026-05-16 12:26:54 -07:00 |
|
