Repository navigation
Conversation
…, Windows anchors) Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
…thout migrations Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
…ript components Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
…gest bookmarklet Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
…nsole Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
…ples Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
… build Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
…rrow the App token Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
…HTTP tests Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
- dependabot: jose is no longer ignored. Its exact pin plus CODEOWNERS review controls bumps, and a JWT library must receive security PRs. - workflow-policy: PACKAGE_CODE also matches pip3, python[3] -m pip, yarn, pnpm and bun. The write-permission rule is now a strict subset of the privileged-job rule, so it is merged into it. - dependency-review: drop the checkout; the action reads the diff from the API. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
The live test only observes the bind address and the database source, so its name no longer claims VELO_*/TRUST_* are checked over HTTP. The buildChildEnv unit test covers the full allowlist. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
…ailer rule - W1 plan: tick Tasks 1-9 (98 steps); Task 10 stays open for the owner. - Hand-off W2: fail-closed boot needs a pre-listen hook; move projectRoot/isMainModule before deleting with-app-env.mjs. - Hand-off W7: document npm start's 0.0.0.0:3000 default vs dev 127.0.0.1:8080. - Task 10: merge_group note for codeql and dependency-review. - Roadmap: the commit trailer names the model that executed the task. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
|
You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool. What Enabling Code Scanning Means:
For more information about GitHub Code Scanning, check out the documentation. |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
…ot ignore check Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
W1: Foundation (stacked on W0)
Plan:
docs/superpowers/plans/2026-09-23-w1-foundation.md, Tasks 1–9. Task 10 is owner-only repository settings.node-serverbuild, dev server on loopback (VELO_DEV_HOST/VELO_DEV_PORT), and a build step that no longer runs migrations.--max-warnings 0.evalandnew Functionare banned, and so isconsole.*in server code.ci.ymlruns unit tests on Ubuntu and Windows, and averifyjob runs typecheck, lint, build, migrations twice, and HTTP tests against Postgres.Local results: typecheck and lint are clean;
npm testhas 0 failures;buildpasses;test:httppasses. This is the first CI run. Merge only when every required check is green.🤖 Generated with Claude Code