7 Commits

Include renames

Author	SHA1	Message	Date
fred	54adbd2b3d	review fixes: seeded-auth hard gate, ci.yml build serialization, assets 404 ... - M1: E2E_REQUIRE_SEEDED_AUTH=1 in the CI e2e step makes login failures hard failures (loginAs throws, guards disabled, globalSetup refuses a pre-populated DB); auth.spec redirect test asserts outright under the flag; non-admin /admin test is now a real authorization assertion - M2: ci.yml build step depends_on test — never two concurrent turbo builds on the shared workspace - M3: unknown /assets/* paths 404 from the SPA catch-all instead of serving index.html with an immutable cache header; spec arm added - minors: e2e step gets when: *image_build_when, health poll uses GATEWAY_PORT + AbortSignal.timeout, BETTER_AUTH_SECRET generated per run (no literal in tree), failure echoes artifact path, dev-guide documents the gate, stale verify-release comment fixed	2026-08-27 09:52:28 -05:00
fred	311b4dda59	ci(web): Phase P6 — vite build in PR CI + headless E2E gate on trunk publishes (#1445) ... - ci.yml: build step (vite build via turbo) runs on every PR pipeline after test - publish.yml: e2e step boots the gateway from built dist (HOME/cwd-isolated throwaway PGlite) and runs the Playwright suite headless inside mcr.microsoft.com/playwright:v1.58.2-noble against the SPA bundle served exactly as production serves it; both kaniko publishes now gate on e2e - serve-spa.ts: strip query strings before asset resolution; immutable cache-control for hashed assets (onSend hook); e2e spec covers both - e2e suite hardened: globalSetup seeds admin+member through real bootstrap/better-auth APIs (Origin header for CSRF), loginAs waits for the post-login redirect (fixes 27-skipped race), stale #152-era assertions rewritten to the current command-driven UI, strict-mode violations fixed with level-1 heading queries and .or() auto-retrying locators - verify-release mirrors the new build stage; playwright artifacts ignored	2026-08-27 09:30:38 -05:00
fredandgate-merge-01	24294d3b77	fix(git-tools): issue-view shows comment bodies and names the real tea failure (#1357) (#1365) ... Co-authored-by: fred <[email protected]>	2026-08-22 00:23:22 +00:00
fredandgate-merge-01	888a6ad29b	fix(#1356): tea login resolution fails closed on a declared git identity (#1361) ... Co-authored-by: fred <[email protected]>	2026-08-21 23:04:31 +00:00
ops-01	2508f0aa99	fix(merge): round-2 CI failures — pipefail sites, verify:release mirror, format ... Pipeline 2534 (018d96a), two test-step failures plus the format failure root-caused by rev-code-01 (id 202): 1. pipefail-early-exit.test.mjs: main's window wrote the test but never wired scripts/*.test.mjs into its own CI, so its tools/install.sh pipes were never executed against it; next's test wiring runs them and flags two load-bearing pipes. Both rewritten pipefail-safe via process substitution (newest_matching_file ls|head, check_fleet_transport sed|head|tr|awk). Test now 7/7 locally. 2. verify-release.test.mjs: merge kept main's 9-command ci.yml sanitization but next's 4-command canonical stage. Canonical updated to mirror ci.yml exactly (9=9, order verified). upgrade-guard checked equal (4=4). 3. format: docs/reports/quality/1099-pipefail-sweep.md (from main f158be8) prettier-formatted under pinned 3.8.1. Enumeration guard re-verified: population 60, enumerated 45, excluded 16.	2026-08-19 17:27:30 -05:00
fargo	245e0c427d	feat(quality-rails): typed evaluator absorbs QC-19/QC-20; verify-release wiring (RI-3-002, #1275) (#1308)	2026-08-18 17:54:47 +00:00
jarvis	d8e0aec950	feat(ri-050): bind next publication to exact-commit terminal verification — RI-1-001 (#1275) (#1277) ... Squash-merged by topher (jarvis principal) via break-glass: pr-merge.sh hard-codes main-only merge targets and cannot express this repo's next trunk. Gates: CI 2476 green at head 46784c8d, review 177 APPROVED (fred) at pinned head. First gated publish: every publish step now depends on verify-release at the exact commit.	2026-08-18 03:57:43 +00:00