Skip to content

tesst#1912

Open
Dmagee81 wants to merge 216 commits intoAndyMik90:developfrom
Dmagee81:develop
Open

tesst#1912
Dmagee81 wants to merge 216 commits intoAndyMik90:developfrom
Dmagee81:develop

Conversation

@Dmagee81
Copy link

@Dmagee81 Dmagee81 commented Mar 3, 2026

Base Branch

  • This PR targets the develop branch (required for all feature/fix PRs)
  • This PR targets main (hotfix only - maintainers)

Description

Related Issue

Closes #

Type of Change

  • 🐛 Bug fix
  • ✨ New feature
  • 📚 Documentation
  • ♻️ Refactor
  • 🧪 Test

Area

  • Frontend
  • Backend
  • Fullstack

Commit Message Format

Follow conventional commits: <type>: <subject>

Types: feat, fix, docs, style, refactor, test, chore

Example: feat: add user authentication system

AI Disclosure

  • This PR includes AI-generated code (Claude, Codex, Copilot, etc.)

Tool(s) used:
Testing level:

  • Untested -- AI output not yet verified

  • Lightly tested -- ran the app / spot-checked key paths

  • Fully tested -- all tests pass, manually verified behavior

  • I understand what this PR does and how the underlying code works

Checklist

  • I've synced with develop branch
  • I've tested my changes locally
  • I've followed the code principles (SOLID, DRY, KISS)
  • My PR is small and focused (< 400 lines ideally)

Platform Testing Checklist

CRITICAL: This project supports Windows, macOS, and Linux. Platform-specific bugs are a common source of breakage.

  • Windows tested (either on Windows or via CI)
  • macOS tested (either on macOS or via CI)
  • Linux tested (CI covers this)
  • Used centralized platform/ module instead of direct process.platform checks
  • No hardcoded paths (used findExecutable() or platform abstractions)

If you only have access to one OS: CI now tests on all platforms. Ensure all checks pass before submitting.

CI/Testing Requirements

  • All CI checks pass on all platforms (Windows, macOS, Linux)
  • All existing tests pass
  • New features include test coverage
  • Bug fixes include regression tests

Screenshots

Before After

Feature Toggle

  • Behind localStorage flag: use_feature_name
  • Behind settings toggle
  • Behind environment variable/config
  • N/A - Feature is complete and ready for all users

Breaking Changes

Breaking: Yes / No

Details:

AndyMik90 and others added 30 commits December 22, 2025 20:20
- Add comprehensive branching strategy documentation
- Explain main, develop, feature, fix, release, and hotfix branches
- Clarify that all PRs should target develop (not main)
- Add release process documentation for maintainers
- Update PR process to branch from develop
- Expand table of contents with new sections
* refactor: restructure project to Apps/frontend and Apps/backend

- Move auto-claude-ui to Apps/frontend with feature-based architecture
- Move auto-claude to Apps/backend
- Switch from pnpm to npm for frontend
- Update Node.js requirement to v24.12.0 LTS
- Add pre-commit hooks for lint, typecheck, and security audit
- Add commit-msg hook for conventional commits
- Fix CommonJS compatibility issues (postcss.config, postinstall scripts)
- Update README with comprehensive setup and contribution guidelines
- Configure ESLint to ignore .cjs files
- 0 npm vulnerabilities

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>

* feat(refactor): clean code and move to npm

* feat(refactor): clean code and move to npm

* chore: update to v2.7.0, remove Docker deps (LadybugDB is embedded)

* feat: v2.8.0 - update workflows and configs for Apps/ structure, npm

* fix: resolve Python lint errors (F401, I001)

* fix: update test paths for Apps/backend structure

* fix: add missing facade files and update paths for Apps/backend structure

- Fix ruff lint error I001 in auto_claude_tools.py
- Create missing facade files to match upstream (agent, ci_discovery, critique, etc.)
- Update test paths from auto-claude/ to Apps/backend/
- Update .pre-commit-config.yaml paths for Apps/ structure
- Add pytest to pre-commit hooks (skip slow/integration/Windows-incompatible tests)
- Fix Unicode encoding in test_agent_architecture.py for Windows

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>

* feat: improve readme

* fix: new path

* fix: correct release workflow and docs for Apps/ restructure

- Fix ARM64 macOS build: pnpm → npm, auto-claude-ui → Apps/frontend
- Fix artifact upload paths in release.yml
- Update Node.js version to 24 for consistency
- Update CLI-USAGE.md with Apps/backend paths
- Update RELEASE.md with Apps/frontend/package.json paths

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* refactor: rename Apps/ to apps/ and fix backend path resolution

- Rename Apps/ folder to apps/ for consistency with JS/Node conventions
- Update all path references across CI/CD workflows, docs, and config files
- Fix frontend Python path resolver to look for 'backend' instead of 'auto-claude'
- Update path-resolver.ts to correctly find apps/backend in development mode

This completes the Apps restructure from PR AndyMik90#122 and prepares for v2.8.0 release.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(electron): correct preload script path from .js to .mjs

electron-vite builds the preload script as ESM (index.mjs) but the main
process was looking for CommonJS (index.js). This caused the preload to
fail silently, making the app fall back to browser mock mode with fake
data and non-functional IPC handlers.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* - Introduced `dev:debug` script to enable debugging during development.
- Added `dev:mcp` script for running the frontend in MCP mode.

These enhancements streamline the development process for frontend developers.

* refactor(memory): make Graphiti memory mandatory and remove Docker dependency

Memory is now a core component of Auto Claude rather than optional:
- Python 3.12+ is required for the backend (not just memory layer)
- Graphiti is enabled by default in .env.example
- Removed all FalkorDB/Docker references (migrated to embedded LadybugDB)
- Deleted guides/DOCKER-SETUP.md and docker-handlers.ts
- Updated onboarding UI to remove "optional" language
- Updated all documentation to reflect LadybugDB architecture

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* feat: add cross-platform Windows support for npm scripts

- Add scripts/install-backend.js for cross-platform Python venv setup
  - Auto-detects Python 3.12 (py -3.12 on Windows, python3.12 on Unix)
  - Handles platform-specific venv paths
- Add scripts/test-backend.js for cross-platform pytest execution
- Update package.json to use Node.js scripts instead of shell commands
- Update CONTRIBUTING.md with correct paths and instructions:
  - apps/backend/ and apps/frontend/ paths
  - Python 3.12 requirement (memory system now required)
  - Platform-specific install commands (winget, brew, apt)
  - npm instead of pnpm
  - Quick Start section with npm run install:all

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* remove doc

* fix(frontend): correct Ollama detector script path after apps restructure

The Ollama status check was failing because memory-handlers.ts
was looking for ollama_model_detector.py at auto-claude/ but the
script is now at apps/backend/ after the directory restructure.

This caused "Ollama not running" to display even when Ollama was
actually running and accessible.

* chore: bump version to 2.7.2

Downgrade version from 2.8.0 to 2.7.2 as the Apps/ restructure
is better suited as a patch release rather than a minor release.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* chore: update package-lock.json for Windows compatibility

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* docs(contributing): add hotfix workflow and update paths for apps/ structure

Add Git Flow hotfix workflow documentation with step-by-step guide
and ASCII diagram showing the branching strategy.

Update all paths from auto-claude/auto-claude-ui to apps/backend/apps/frontend
and migrate package manager references from pnpm to npm to match the
new project structure.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(ci): remove duplicate ARM64 build from Intel runner

The Intel runner was building both x64 and arm64 architectures,
while a separate ARM64 runner also builds arm64 natively. This
caused duplicate ARM64 builds, wasting CI resources.

Now each runner builds only its native architecture:
- Intel runner: x64 only
- ARM64 runner: arm64 only

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

---------

Co-authored-by: Alex Madera <[email protected]>
Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.5 <[email protected]>
…Mik90#141)

* feat(ollama): add real-time download progress tracking for model downloads

Implement comprehensive download progress tracking with:
- NDJSON parsing for streaming progress data from Ollama API
- Real-time speed calculation (MB/s, KB/s, B/s) with useRef for delta tracking
- Time remaining estimation based on download speed
- Animated progress bars in OllamaModelSelector component
- IPC event streaming from main process to renderer
- Proper listener management with cleanup functions

Changes:
- memory-handlers.ts: Parse NDJSON from Ollama stderr, emit progress events
- OllamaModelSelector.tsx: Display progress bars with speed and time remaining
- project-api.ts: Implement onDownloadProgress listener with cleanup
- ipc.ts types: Define onDownloadProgress listener interface
- infrastructure-mock.ts: Add mock implementation for browser testing

This allows users to see real-time feedback when downloading Ollama models,
including percentage complete, current download speed, and estimated time remaining.

* test: add focused test coverage for Ollama download progress feature

Add unit tests for the critical paths of the real-time download progress tracking:

- Progress calculation tests (52 tests): Speed/time/percentage calculations with comprehensive edge case coverage (zero speeds, NaN, Infinity, large numbers)
- NDJSON parser tests (33 tests): Streaming JSON parsing from Ollama, buffer management for incomplete lines, error handling

All 562 unit tests passing with clean dependencies. Tests focus on critical mathematical logic and data processing - the most important paths that need verification.

Test coverage:
✅ Speed calculation and formatting (B/s, KB/s, MB/s)
✅ Time remaining calculations (seconds, minutes, hours)
✅ Percentage clamping (0-100%)
✅ NDJSON streaming with partial line buffering
✅ Invalid JSON handling
✅ Real Ollama API responses
✅ Multi-chunk streaming scenarios

* docs: add comprehensive JSDoc docstrings for Ollama download progress feature

- Enhanced OllamaModelSelector component with detailed JSDoc
  * Documented component props, behavior, and usage examples
  * Added docstrings to internal functions (checkInstalledModels, handleDownload, handleSelect)
  * Explained progress tracking algorithm and useRef usage

- Improved memory-handlers.ts documentation
  * Added docstring to main registerMemoryHandlers function
  * Documented all Ollama-related IPC handlers (check-status, list-embedding-models, pull-model)
  * Added JSDoc to executeOllamaDetector helper function
  * Documented interface types (OllamaStatus, OllamaModel, OllamaEmbeddingModel, OllamaPullResult)
  * Explained NDJSON parsing and progress event structure

- Enhanced test file documentation
  * Added docstrings to NDJSON parser test utilities with algorithm explanation
  * Documented all calculation functions (speed, time, percentage)
  * Added detailed comments on formatting and bounds-checking logic

- Improved overall code maintainability
  * Docstring coverage now meets 80%+ threshold for code review
  * Clear explanation of progress tracking implementation details
  * Better context for future maintainers working with download streaming

* feat: add batch task creation and management CLI commands

- Handle batch task creation from JSON files
- Show status of all specs in project
- Cleanup tool for completed specs
- Full integration with new apps/backend structure
- Compatible with implementation_plan.json workflow

* test: add batch task test file and testing checklist

- batch_test.json: Sample tasks for testing batch creation
- TESTING_CHECKLIST.md: Comprehensive testing guide for Ollama and batch tasks
- Includes UI testing steps, CLI testing steps, and edge cases
- Ready for manual and automated testing

* chore: update package-lock.json to match v2.7.2

* test: update checklist with verification results and architecture validation

* docs: add comprehensive implementation summary for Ollama + Batch features

* docs: add comprehensive Phase 2 testing guide with checklists and procedures

* docs: add NEXT_STEPS guide for Phase 2 testing

* fix: resolve merge conflict in project-api.ts from Ollama feature cherry-pick

* fix: remove duplicate Ollama check status handler registration

* test: update checklist with Phase 2 bug findings and fixes

---------

Co-authored-by: ray <[email protected]>
Implemented promise queue pattern in PythonEnvManager to handle
concurrent initialization requests. Previously, multiple simultaneous
requests (e.g., startup + merge) would fail with "Already
initializing" error.

Also fixed parsePythonCommand() to handle file paths with spaces by
checking file existence before splitting on whitespace.

Changes:
- Added initializationPromise field to queue concurrent requests
- Split initialize() into public and private _doInitialize()
- Enhanced parsePythonCommand() with existsSync() check

Co-authored-by: Joris Slagter <[email protected]>
)

Removes the legacy 'auto-claude' path from the possiblePaths array
in agent-process.ts. This path was from before the monorepo
restructure (v2.7.2) and is no longer needed.

The legacy path was causing spec_runner.py to be looked up at the
wrong location:
- OLD (wrong): /path/to/auto-claude/auto-claude/runners/spec_runner.py
- NEW (correct): /path/to/apps/backend/runners/spec_runner.py

This aligns with the new monorepo structure where all backend code
lives in apps/backend/.

Fixes AndyMik90#147

Co-authored-by: Joris Slagter <[email protected]>
* fix: Linear API authentication and GraphQL types

- Remove Bearer prefix from Authorization header (Linear API keys are sent directly)
- Change GraphQL variable types from String! to ID! for teamId and issue IDs
- Improve error handling to show detailed Linear API error messages

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: Radix Select empty value error in Linear import modal

Use '__all__' sentinel value instead of empty string for "All projects"
option, as Radix Select does not allow empty string values.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* feat: add CodeRabbit configuration file

Introduce a new .coderabbit.yaml file to configure CodeRabbit settings, including review profiles, automatic review options, path filters, and specific instructions for different file types. This enhances the code review process by providing tailored guidelines for Python, TypeScript, and test files.

* fix: correct GraphQL types for Linear team queries

Linear API uses different types for different queries:
- team(id:) expects String!
- issues(filter: { team: { id: { eq: } } }) expects ID!

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: refresh task list after Linear import

Call loadTasks() after successful Linear import to update the kanban
board without requiring a page reload.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* cleanup

* cleanup

* fix: address CodeRabbit review comments for Linear integration

- Fix unsafe JSON parsing: check response.ok before parsing JSON to handle
  non-JSON error responses (e.g., 503 from proxy) gracefully
- Use ID! type instead of String! for teamId in LINEAR_GET_PROJECTS query
  for GraphQL type consistency
- Remove debug console.log (ESLint config only allows warn/error)
- Refresh task list on partial import success (imported > 0) instead of
  requiring full success
- Fix pre-existing TypeScript and lint issues blocking commit

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* version sync logic

* lints for develop branch

* chore: update CI workflow to include develop branch

- Modified the CI configuration to trigger on pushes and pull requests to both main and develop branches, enhancing the workflow for development and integration processes.

* fix: update project directory auto-detection for apps/backend structure

The project directory auto-detection was checking for the old `auto-claude/`
directory name but needed to check for `apps/backend/`. When running from
`apps/backend/`, the directory name is `backend` not `auto-claude`, so the
check would fail and `project_dir` would incorrectly remain as `apps/backend/`
instead of resolving to the project root (2 levels up).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: use GraphQL variables instead of string interpolation in LINEAR_GET_ISSUES

Replace direct string interpolation of teamId and linearProjectId with
proper GraphQL variables. This prevents potential query syntax errors if
IDs contain special characters like double quotes, and aligns with the
variable-based approach used elsewhere in the file.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(ui): correct logging level and await loadTasks on import complete

- Change console.warn to console.log for import success messages
  (warn is incorrect severity for normal completion)
- Make onImportComplete callback async and await loadTasks()
  to prevent potential unhandled promise rejections

Applies CodeRabbit review feedback across 3 LinearTaskImportModal usages.

* fix(hooks): use POSIX-compliant find instead of bash glob

The pre-commit hook uses #!/bin/sh but had bash-specific ** glob
pattern for staging ruff-formatted files. The ** pattern only works
in bash with globstar enabled - in POSIX sh it expands literally
and won't match subdirectories, causing formatted files in nested
directories to not be staged.

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
…_progress

When a user drags a running task back to Planning (or any other column),
the process was not being stopped, leaving a "ghost" process that
prevented deletion with "Cannot delete a running task" error.

Now the task process is automatically killed when status changes away
from in_progress, ensuring the process state stays in sync with the UI.
* feat: add UI scale feature

* refactor: extract UI scale bounds to shared constants

* fix: duplicated import
…90#154)

* fix: analyzer Python compatibility and settings integration

Fixes project index analyzer failing with TypeError on Python type hints.

Changes:
- Added 'from __future__ import annotations' to all analysis modules
- Fixed project discovery to support new analyzer JSON format
- Read Python path directly from settings.json instead of pythonEnvManager
- Added stderr/stdout logging for analyzer debugging

Resolves 'Discovered 0 files' and 'TypeError: unsupported operand type' issues.

* auto-claude: subtask-1-1 - Hide status badge when execution phase badge is showing

When a task has an active execution (planning, coding, etc.), the
execution phase badge already displays the correct state with a spinner.
The status badge was also rendering, causing duplicate/confusing badges
(e.g., both "Planning" and "Pending" showing at the same time).

This fix wraps the status badge in a conditional that only renders when
there's no active execution, eliminating the redundant badge display.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(ipc): remove unused pythonEnvManager parameter and fix ES6 import

Address CodeRabbit review feedback:
- Remove unused pythonEnvManager parameter from registerProjectContextHandlers
  and registerContextHandlers (the code reads Python path directly from
  settings.json instead)
- Replace require('electron').app with proper ES6 import for consistency

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* chore(lint): fix import sorting in analysis module

Run ruff --fix to resolve I001 lint errors after merging develop.
All 23 files in apps/backend/analysis/ now have properly sorted imports.

---------

Co-authored-by: Joris Slagter <[email protected]>
Co-authored-by: Claude Opus 4.5 <[email protected]>
* fix(core): add task persistence, terminal handling, and HTTP 300 fixes

Consolidated bug fixes from PRs AndyMik90#168, AndyMik90#170, AndyMik90#171:

- Task persistence (AndyMik90#168): Scan worktrees for tasks on app restart
  to prevent loss of in-progress work and wasted API credits. Tasks
  in .worktrees/*/specs are now loaded and deduplicated with main.

- Terminal buttons (AndyMik90#170): Fix "Open Terminal" buttons silently
  failing on macOS by properly awaiting createTerminal() Promise.
  Added useTerminalHandler hook with loading states and error display.

- HTTP 300 errors (AndyMik90#171): Handle branch/tag name collisions that
  cause update failures. Added validation script to prevent conflicts
  before releases and user-friendly error messages with manual
  download links.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(platform): add path resolution, spaces handling, and XDG support

This commit consolidates multiple bug fixes from community PRs:

- PR AndyMik90#187: Path resolution fix - Update path detection to find apps/backend
  instead of legacy auto-claude directory after v2.7.2 restructure

- PR AndyMik90#182/AndyMik90#155: Python path spaces fix - Improve parsePythonCommand() to
  handle quoted paths and paths containing spaces without splitting

- PR AndyMik90#161: Ollama detection fix - Add new apps structure paths for
  ollama_model_detector.py script discovery

- PR AndyMik90#160: AppImage support - Add XDG Base Directory compliant paths for
  Linux sandboxed environments (AppImage, Flatpak, Snap). New files:
  - config-paths.ts: XDG path utilities
  - fs-utils.ts: Filesystem utilities with fallback support

- PR AndyMik90#159: gh CLI PATH fix - Add getAugmentedEnv() utility to include
  common binary locations (Homebrew, snap, local) in PATH for child
  processes. Fixes gh CLI not found when app launched from Finder/Dock.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address CodeRabbit/Cursor review comments on PR AndyMik90#185

Fixes from code review:
- http-client.ts: Use GITHUB_CONFIG instead of hardcoded owner in HTTP 300 error message
- validate-release.js: Fix substring matching bug in branch detection that could cause false positives (e.g., v2.7 matching v2.7.2)
- bump-version.js: Remove unnecessary try-catch wrapper (exec() already exits on failure)
- execution-handlers.ts: Capture original subtask status before mutation for accurate logging
- fs-utils.ts: Add error handling to safeWriteFile with proper logging

Dismissed as trivial/not applicable:
- config-paths.ts: Exhaustive switch check (over-engineering)
- env-utils.ts: PATH priority documentation (existing comments sufficient)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address additional CodeRabbit review comments (round 2)

Fixes from second round of code review:
- fs-utils.ts: Wrap test file cleanup in try-catch for Windows file locking
- fs-utils.ts: Add error handling to safeReadFile for consistency with safeWriteFile
- http-client.ts: Use GITHUB_CONFIG in fetchJson (missed in first round)
- validate-release.js: Exclude symbolic refs (origin/HEAD -> origin/main) from branch check
- python-detector.ts: Return cleanPath instead of pythonPath for empty input edge case

Dismissed as trivial/not applicable:
- execution-handlers.ts: Redundant checkSubtasksCompletion call (micro-optimization)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
* chore: update README version to 2.7.1

Updated the version badge and download links in the README to reflect the new release version 2.7.1, ensuring users have the correct information for downloading the latest builds.

* feat(releases): add beta release system with user opt-in

Implements a complete beta release workflow that allows users to opt-in
to receiving pre-release versions. This enables testing new features
before they're included in stable releases.

Changes:
- Add beta-release.yml workflow for creating beta releases from develop
- Add betaUpdates setting with UI toggle in Settings > Updates
- Add update channel support to electron-updater (beta vs latest)
- Extract shared settings-utils.ts to reduce code duplication
- Add prepare-release.yml workflow for automated release preparation
- Document beta release process in CONTRIBUTING.md and RELEASE.md

Users can enable beta updates in Settings > Updates, and maintainers
can trigger beta releases via the GitHub Actions workflow.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* workflow update

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
* chore: update README version to 2.7.1

Updated the version badge and download links in the README to reflect the new release version 2.7.1, ensuring users have the correct information for downloading the latest builds.

* feat(releases): add beta release system with user opt-in

Implements a complete beta release workflow that allows users to opt-in
to receiving pre-release versions. This enables testing new features
before they're included in stable releases.

Changes:
- Add beta-release.yml workflow for creating beta releases from develop
- Add betaUpdates setting with UI toggle in Settings > Updates
- Add update channel support to electron-updater (beta vs latest)
- Extract shared settings-utils.ts to reduce code duplication
- Add prepare-release.yml workflow for automated release preparation
- Document beta release process in CONTRIBUTING.md and RELEASE.md

Users can enable beta updates in Settings > Updates, and maintainers
can trigger beta releases via the GitHub Actions workflow.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* workflow update

* ci(github): update Discord link and redirect feature requests to discussions

Update Discord invite link to correct URL (QhRnz9m5HE) across all GitHub
templates and workflows. Redirect feature requests from issue template
to GitHub Discussions for better community engagement.

Changes:
- config.yml: Add feature request link to Discussions, fix Discord URL
- question.yml: Update Discord link in pre-question guidance
- welcome.yml: Update Discord link in first-time contributor message

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
- Change branch reference from main to develop
- Fix contribution guide link to use full URL
- Remove hyphen from "Auto Claude" in welcome message
…tup (AndyMik90#180 AndyMik90#167) (AndyMik90#208)

This fixes critical bug where macOS users with default Python 3.9.6 couldn't use Auto-Claude because claude-agent-sdk requires Python 3.10+.

Root Cause:
- Auto-Claude doesn't bundle Python, relies on system Python
- python-detector.ts accepted any Python 3.x without checking minimum version
- macOS ships with Python 3.9.6 by default (incompatible)
- GitHub Actions runners didn't explicitly set Python version

Changes:
1. python-detector.ts:
   - Added getPythonVersion() to extract version from command
   - Added validatePythonVersion() to check if >= 3.10.0
   - Updated findPythonCommand() to skip Python < 3.10 with clear error messages

2. python-env-manager.ts:
   - Import and use findPythonCommand() (already has version validation)
   - Simplified findSystemPython() to use shared validation logic
   - Updated error message from "Python 3.9+" to "Python 3.10+" with download link

3. .github/workflows/release.yml:
   - Added Python 3.11 setup to all 4 build jobs (macOS Intel, macOS ARM64, Windows, Linux)
   - Ensures consistent Python version across all platforms during build

Impact:
- macOS users with Python 3.9 now see clear error with download link
- macOS users with Python 3.10+ work normally
- CI/CD builds use consistent Python 3.11
- Prevents "ModuleNotFoundError: dotenv" and dependency install failures

Fixes AndyMik90#180, AndyMik90#167

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Sonnet 4.5 <[email protected]>
* feat: Add OpenRouter as LLM/embedding provider

Add OpenRouter provider support for Graphiti memory integration,
enabling access to multiple LLM providers through a single API.

Changes:
Backend:
- Created openrouter_llm.py: OpenRouter LLM provider using OpenAI-compatible API
- Created openrouter_embedder.py: OpenRouter embedder provider
- Updated config.py: Added OpenRouter to provider enums and configuration
  - New fields: openrouter_api_key, openrouter_base_url, openrouter_llm_model, openrouter_embedding_model
  - Validation methods updated for OpenRouter
- Updated factory.py: Added OpenRouter to LLM and embedder factories
- Updated provider __init__.py files: Exported new OpenRouter functions

Frontend:
- Updated project.ts types: Added 'openrouter' to provider type unions
  - GraphitiProviderConfig extended with OpenRouter fields
- Updated GraphitiStep.tsx: Added OpenRouter to provider arrays
  - LLM_PROVIDERS: 'Multi-provider aggregator'
  - EMBEDDING_PROVIDERS: 'OpenAI-compatible embeddings'
  - Added OpenRouter API key input field with show/hide toggle
  - Link to https://openrouter.ai/keys
- Updated env-handlers.ts: OpenRouter .env generation and parsing
  - Template generation for OPENROUTER_* variables
  - Parsing from .env files with proper type casting

Documentation:
- Updated .env.example with OpenRouter section
  - Configuration examples
  - Popular model recommendations
  - Example configuration (AndyMik90#6)

Fixes AndyMik90#92

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <[email protected]>

* refactor: address CodeRabbit review comments for OpenRouter

- Add globalOpenRouterApiKey to settings types and store updates
- Initialize openrouterApiKey from global settings
- Update documentation to include OpenRouter in provider lists
- Add OpenRouter handling to get_embedding_dimension() method
- Add openrouter to provider cleanup list
- Add OpenRouter to get_available_providers() function
- Clarify Legacy comment for openrouterLlmModel

These changes complete the OpenRouter integration by ensuring proper
settings persistence and provider detection across the application.

* fix: apply ruff formatting to OpenRouter code

- Break long error message across multiple lines
- Format provider list with one item per line
- Fixes lint CI failure

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <[email protected]>

---------

Co-authored-by: Claude Sonnet 4.5 <[email protected]>
…Mik90#209)

Implements distributed file-based locking for spec number coordination
across main project and all worktrees. Previously, parallel spec creation
could assign the same number to different specs (e.g., 042-bmad-task and
042-gitlab-integration both using number 042).

The fix adds SpecNumberLock class that:
- Acquires exclusive lock before calculating spec numbers
- Scans ALL locations (main project + worktrees) for global maximum
- Creates spec directories atomically within the lock
- Handles stale locks via PID-based detection with 30s timeout

Applied to both Python backend (spec_runner.py flow) and TypeScript
frontend (ideation conversion, GitHub/GitLab issue import).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.5 <[email protected]>
* fix(ideation): add missing event forwarders for status sync

- Add event forwarders in ideation-handlers.ts for progress, log,
  type-complete, type-failed, complete, error, and stopped events
- Fix ideation-type-complete to load actual ideas array from JSON files
  instead of emitting only the count

Resolves UI getting stuck at 0/3 complete during ideation generation.

* fix(ideation): fix UI not updating after actions

- Fix getIdeationSummary to count only active ideas (exclude dismissed/archived)
  This ensures header stats match the visible ideas count
- Add transformSessionFromSnakeCase to properly transform session data
  from backend snake_case to frontend camelCase on ideation-complete event
- Transform raw session before emitting ideation-complete event

Resolves header showing stale counts after dismissing/deleting ideas.

* fix(ideation): improve type safety and async handling in ideation type completion

- Replace synchronous readFileSync with async fsPromises.readFile in ideation-type-complete handler
- Wrap async file read in IIFE with proper error handling to prevent unhandled promise rejections
- Add type validation for IdeationType with VALID_IDEATION_TYPES set and isValidIdeationType guard
- Add validateEnabledTypes function to filter out invalid type values and log dropped entries
- Handle ENOENT separately

* fix(ideation): improve generation state management and error handling

- Add explicit isGenerating flag to prevent race conditions during async operations
- Implement 5-minute timeout for generation with automatic cleanup and error state
- Add ideation-stopped event emission when process is intentionally killed
- Replace console.warn/error with proper ideation-error events in agent-queue
- Add resetGeneratingTypes helper to transition all generating types to a target state
- Filter out dismissed/

* refactor(ideation): improve event listener cleanup and timeout management

- Extract event handler functions in ideation-handlers.ts to enable proper cleanup
- Return cleanup function from registerIdeationHandlers to remove all listeners
- Replace single generationTimeoutId with Map to support multiple concurrent projects
- Add clearGenerationTimeout helper to centralize timeout cleanup logic
- Extract loadIdeationType IIFE to named function for better error context
- Enhance error logging with projectId,

* refactor: use async file read for ideation and roadmap session loading

- Replace synchronous readFileSync with async fsPromises.readFile
- Prevents blocking the event loop during file operations
- Consistent with async pattern used elsewhere in the codebase
- Improved error handling with proper event emission

* fix(agent-queue): improve roadmap completion handling and error reporting

- Add transformRoadmapFromSnakeCase to convert backend snake_case to frontend camelCase
- Transform raw roadmap data before emitting roadmap-complete event
- Add roadmap-error emission for unexpected errors during completion
- Add roadmap-error emission when project path is unavailable
- Remove duplicate ideation-type-complete emission from error handler (event already emitted in loadIdeationType)
- Update error log message
Adds 'from __future__ import annotations' to spec/discovery.py for
Python 3.9+ compatibility with type hints.

This completes the Python compatibility fixes that were partially
applied in previous commits. All 26 analysis and spec Python files
now have the future annotations import.

Related: AndyMik90#128

Co-authored-by: Joris Slagter <[email protected]>
…#241)

* fix: resolve Python detection and backend packaging issues

- Fix backend packaging path (auto-claude -> backend) to match path-resolver.ts expectations
- Add future annotations import to config_parser.py for Python 3.9+ compatibility
- Use findPythonCommand() in project-context-handlers to prioritize Homebrew Python
- Improve Python detection to prefer Homebrew paths over system Python on macOS

This resolves the following issues:
- 'analyzer.py not found' error due to incorrect packaging destination
- TypeError with 'dict | None' syntax on Python < 3.10
- Wrong Python interpreter being used (system Python instead of Homebrew Python 3.10+)

Tested on macOS with packaged app - project index now loads successfully.

* refactor: address PR review feedback

- Extract findHomebrewPython() helper to eliminate code duplication between
  findPythonCommand() and getDefaultPythonCommand()
- Remove hardcoded version-specific paths (python3.12) and rely only on
  generic Homebrew symlinks for better maintainability
- Remove unnecessary 'from __future__ import annotations' from config_parser.py
  since backend requires Python 3.12+ where union types are native

These changes make the code more maintainable, less fragile to Python version
changes, and properly reflect the project's Python 3.12+ requirement.
…#250)

* feat(github): add GitHub automation system for issues and PRs

Implements comprehensive GitHub automation with three major components:

1. Issue Auto-Fix: Automatically creates specs from labeled issues
   - AutoFixButton component with progress tracking
   - useAutoFix hook for config and queue management
   - Backend handlers for spec creation from issues

2. GitHub PRs Tool: AI-powered PR review sidebar
   - New sidebar tab (Cmd+Shift+P) alongside GitHub Issues
   - PRList/PRDetail components for viewing PRs
   - Review system with findings by severity
   - Post review comments to GitHub

3. Issue Triage: Duplicate/spam/feature-creep detection
   - Triage handlers with label application
   - Configurable detection thresholds

Also adds:
- Debug logging (DEBUG=true) for all GitHub handlers
- Backend runners/github module with orchestrator
- AI prompts for PR review, triage, duplicate/spam detection
- dev:debug npm script for development with logging

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(github-runner): resolve import errors for direct script execution

Changes runner.py and orchestrator.py to handle both:
- Package import: `from runners.github import ...`
- Direct script: `python runners/github/runner.py`

Uses try/except pattern for relative vs direct imports.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(github): correct argparse argument order for runner.py

Move --project global argument before subcommand so argparse can
correctly parse it. Fixes "unrecognized arguments: --project" error.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* logs when debug mode is on

* refactor(github): extract service layer and fix linting errors

Major refactoring to improve maintainability and code quality:

Backend (Python):
- Extracted orchestrator.py (2,600 → 835 lines, 68% reduction) into 7 service modules:
  - prompt_manager.py: Prompt template management
  - response_parsers.py: AI response parsing
  - pr_review_engine.py: PR review orchestration
  - triage_engine.py: Issue triage logic
  - autofix_processor.py: Auto-fix workflow
  - batch_processor.py: Batch issue handling
- Fixed 18 ruff linting errors (F401, C405, C414, E741):
  - Removed unused imports (BatchValidationResult, AuditAction, locked_json_write)
  - Optimized collection literals (set([n]) → {n})
  - Removed unnecessary list() calls
  - Renamed ambiguous variable 'l' to 'label' throughout

Frontend (TypeScript):
- Refactored IPC handlers (19% overall reduction) with shared utilities:
  - autofix-handlers.ts: 1,042 → 818 lines
  - pr-handlers.ts: 648 → 543 lines
  - triage-handlers.ts: 437 lines (no duplication)
- Created utils layer: logger, ipc-communicator, project-middleware, subprocess-runner
- Split github-store.ts into focused stores: issues, pr-review, investigation, sync-status
- Split ReviewFindings.tsx into focused components

All imports verified, type checks passing, linting clean.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <[email protected]>

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
* Add multilingual support and i18n integration

- Implemented i18n framework using `react-i18next` for translation management.
- Added support for English and French languages with translation files.
- Integrated language selector into settings.
- Updated all text strings in UI components to use translation keys.
- Ensured smooth language switching with live updates.

* Migrate remaining hard-coded strings to i18n system

- TaskCard: status labels, review reasons, badges, action buttons
- PhaseProgressIndicator: execution phases, progress labels
- KanbanBoard: drop zone, show archived, tooltips
- CustomModelModal: dialog title, description, labels
- ProactiveSwapListener: account switch notifications
- AgentProfileSelector: phase labels, custom configuration
- GeneralSettings: agent framework option

Added translation keys for en/fr locales in tasks.json, common.json,
and settings.json for complete i18n coverage.

* Add i18n support to dialogs and settings components

- AddFeatureDialog: form labels, validation messages, buttons
- AddProjectModal: dialog steps, form fields, actions
- RateLimitIndicator: rate limit notifications
- RateLimitModal: account switching, upgrade prompts
- AdvancedSettings: updates and notifications sections
- ThemeSettings: theme selection labels
- Updated dialogs.json locales (en/fr)

* Fix truncated 'ready' message in dialogs locales

* Fix backlog terminology in i18n locales

Change "Planning"/"Planification" to standard PM term "Backlog"

* Migrate settings navigation and integration labels to i18n

- AppSettings: nav items, section titles, buttons
- IntegrationSettings: Claude accounts, auto-switch, API keys labels
- Added settings nav/projectSections/integrations translation keys
- Added buttons.saving to common translations

* Migrate AgentProfileSettings and Sidebar init dialog to i18n

- AgentProfileSettings: migrate phase config labels, section title,
  description, and all hardcoded strings to settings namespace
- Sidebar: migrate init dialog strings to dialogs namespace with
  common buttons from common namespace
- Add new translation keys for agent profile settings and update dialog

* Migrate AppSettings navigation labels to i18n

- Add useTranslation hook to AppSettings.tsx
- Replace hardcoded section labels with dynamic translations
- Add projectSections translations for project settings nav
- Add rerunWizardDescription translation key

* Add explicit typing to notificationItems array

Import NotificationSettings type and use keyof to properly type
the notification item keys, removing manual type assertion.
…AndyMik90#266)

* ci: implement enterprise-grade PR quality gates and security scanning

* ci: implement enterprise-grade PR quality gates and security scanning

* fix:pr comments and improve code

* fix: improve commit linting and code quality

* Removed the dependency-review job (i added it)

* fix: address CodeRabbit review comments

- Expand scope pattern to allow uppercase, underscores, slashes, dots
- Add concurrency control to cancel duplicate security scan runs
- Add explanatory comment for Bandit CLI flags
- Remove dependency-review job (requires repo settings)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* docs: update commit lint examples with expanded scope patterns

Show slashes and dots in scope examples to demonstrate
the newly allowed characters (api/users, package.json)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* chore: remove feature request issue template

Feature requests are directed to GitHub Discussions
via the issue template config.yml

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address security vulnerabilities in service orchestrator

- Fix port parsing crash on malformed docker-compose entries
- Fix shell injection risk by using shlex.split() with shell=False

Prevents crashes when docker-compose.yml contains environment
variables in port mappings (e.g., '${PORT}:8080') and eliminates
shell injection vulnerabilities in subprocess execution.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <[email protected]>

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
…90#252)

* feat(github): add GitHub automation system for issues and PRs

Implements comprehensive GitHub automation with three major components:

1. Issue Auto-Fix: Automatically creates specs from labeled issues
   - AutoFixButton component with progress tracking
   - useAutoFix hook for config and queue management
   - Backend handlers for spec creation from issues

2. GitHub PRs Tool: AI-powered PR review sidebar
   - New sidebar tab (Cmd+Shift+P) alongside GitHub Issues
   - PRList/PRDetail components for viewing PRs
   - Review system with findings by severity
   - Post review comments to GitHub

3. Issue Triage: Duplicate/spam/feature-creep detection
   - Triage handlers with label application
   - Configurable detection thresholds

Also adds:
- Debug logging (DEBUG=true) for all GitHub handlers
- Backend runners/github module with orchestrator
- AI prompts for PR review, triage, duplicate/spam detection
- dev:debug npm script for development with logging

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(github-runner): resolve import errors for direct script execution

Changes runner.py and orchestrator.py to handle both:
- Package import: `from runners.github import ...`
- Direct script: `python runners/github/runner.py`

Uses try/except pattern for relative vs direct imports.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(github): correct argparse argument order for runner.py

Move --project global argument before subcommand so argparse can
correctly parse it. Fixes "unrecognized arguments: --project" error.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* logs when debug mode is on

* refactor(github): extract service layer and fix linting errors

Major refactoring to improve maintainability and code quality:

Backend (Python):
- Extracted orchestrator.py (2,600 → 835 lines, 68% reduction) into 7 service modules:
  - prompt_manager.py: Prompt template management
  - response_parsers.py: AI response parsing
  - pr_review_engine.py: PR review orchestration
  - triage_engine.py: Issue triage logic
  - autofix_processor.py: Auto-fix workflow
  - batch_processor.py: Batch issue handling
- Fixed 18 ruff linting errors (F401, C405, C414, E741):
  - Removed unused imports (BatchValidationResult, AuditAction, locked_json_write)
  - Optimized collection literals (set([n]) → {n})
  - Removed unnecessary list() calls
  - Renamed ambiguous variable 'l' to 'label' throughout

Frontend (TypeScript):
- Refactored IPC handlers (19% overall reduction) with shared utilities:
  - autofix-handlers.ts: 1,042 → 818 lines
  - pr-handlers.ts: 648 → 543 lines
  - triage-handlers.ts: 437 lines (no duplication)
- Created utils layer: logger, ipc-communicator, project-middleware, subprocess-runner
- Split github-store.ts into focused stores: issues, pr-review, investigation, sync-status
- Split ReviewFindings.tsx into focused components

All imports verified, type checks passing, linting clean.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <[email protected]>

* fixes during testing of PR

* feat(github): implement PR merge, assign, and comment features

- Add auto-assignment when clicking "Run AI Review"
- Implement PR merge functionality with squash method
- Add ability to post comments on PRs
- Display assignees in PR UI
- Add Approve and Merge buttons when review passes
- Update backend gh_client with pr_merge, pr_comment, pr_assign methods
- Create IPC handlers for new PR operations
- Update TypeScript interfaces and browser mocks

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <[email protected]>

* Improve PR review AI

* fix(github): use temp files for PR review posting to avoid shell escaping issues

When posting PR reviews with findings containing special characters (backticks,
parentheses, quotes), the shell command was interpreting them as commands instead
of literal text, causing syntax errors.

Changed both postPRReview and postPRComment handlers to write the body content
to temporary files and use gh CLI's --body-file flag instead of --body with
inline content. This safely handles ALL special characters without escaping issues.

Fixes shell errors when posting reviews with suggested fixes containing code snippets.

* fix(i18n): add missing GitHub PRs translation and document i18n requirements

Fixed missing translation key for GitHub PRs feature that was causing
"items.githubPRs" to display instead of the proper translated text.

Added comprehensive i18n guidelines to CLAUDE.md to ensure all future
frontend development follows the translation key pattern instead of
using hardcoded strings.

Also fixed missing deletePRReview mock function in browser-mock.ts
to resolve TypeScript compilation errors.

Changes:
- Added githubPRs translation to en/navigation.json
- Added githubPRs translation to fr/navigation.json
- Added Development Guidelines section to CLAUDE.md with i18n requirements
- Documented translation file locations and namespace usage patterns
- Added deletePRReview mock function to browser-mock.ts

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <[email protected]>

* fix ui loading

* Github PR fixes

* improve claude.md

* lints/tests

* fix(github): handle PRs exceeding GitHub's 20K line diff limit

- Add PRTooLargeError exception for large PR detection
- Update pr_diff() to catch and raise PRTooLargeError for HTTP 406 errors
- Gracefully handle large PRs by skipping full diff and using individual file patches
- Add diff_truncated flag to PRContext to track when diff was skipped
- Large PRs will now review successfully using per-file diffs instead of failing

Fixes issue with PR AndyMik90#252 which has 100+ files exceeding the 20,000 line limit.

* fix: implement individual file patch fetching for large PRs

The PR review was getting stuck for large PRs (>20K lines) because when we
skipped the full diff due to GitHub API limits, we had no code to analyze.
The individual file patches were also empty, leaving the AI with just
file names and metadata.

Changes:
- Implemented _get_file_patch() to fetch individual patches via git diff
- Updated PR review engine to build composite diff from file patches when
  diff_truncated is True
- Added missing 'state' field to PRContext dataclass
- Limits composite diff to first 50 files for very large PRs
- Shows appropriate warnings when using reconstructed diffs

This allows AI review to proceed with actual code analysis even when the
full PR diff exceeds GitHub's limits.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <[email protected]>

* 1min reduction

* docs: add GitHub Sponsors funding configuration

Enable the Sponsor button on the repository by adding FUNDING.yml
with the AndyMik90 GitHub Sponsors profile.

* feat(github-pr): add orchestrating agent for thorough PR reviews

Implement a new Opus 4.5 orchestrating agent that performs comprehensive
PR reviews regardless of size. Key changes:

- Add orchestrator_reviewer.py with strategic review workflow
- Add review_tools.py with subagent spawning capabilities
- Add pr_orchestrator.md prompt emphasizing thorough analysis
- Add pr_security_agent.md and pr_quality_agent.md subagent prompts
- Integrate orchestrator into pr_review_engine.py with config flag
- Fix critical bug where findings were extracted but not processed
  (indentation issue in _parse_orchestrator_output)

The orchestrator now correctly identifies issues in PRs that were
previously approved as "trivial". Testing showed 7 findings detected
vs 0 before the fix.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* i18n

* fix(github-pr): restrict pr_reviewer to read-only permissions

The PR review agent was using qa_reviewer agent type which has Bash
access, allowing it to checkout branches and make changes during
review. Created new pr_reviewer agent type with BASE_READ_TOOLS only
(no Bash, no writes, no auto-claude tools).

This prevents the PR review from accidentally modifying code or
switching branches during analysis.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(github-pr): robust category mapping and JSON parsing for PR review

The orchestrator PR review was failing to extract findings because:

1. AI generates category names like 'correctness', 'consistency', 'testing'
   that aren't in our ReviewCategory enum - added flexible mapping

2. JSON sometimes embedded in markdown code blocks (```json) which broke
   parsing - added code block extraction as first parsing attempt

Changes:
- Add _CATEGORY_MAPPING dict to map AI categories to valid enum values
- Add _map_category() helper function with fallback to QUALITY
- Add severity parsing with fallback to MEDIUM
- Add markdown code block detection (```json) before raw JSON parsing
- Add _extract_findings_from_data() helper to reduce code duplication
- Apply same fixes to review_tools.py for subagent parsing

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(pr-review): improve post findings UX with batch support and feedback

- Fix post findings failing on own PRs by falling back from REQUEST_CHANGES
  to COMMENT when GitHub returns 422 error
- Change status badge to show "Reviewed" instead of "Commented" until
  findings are actually posted to GitHub
- Add success notification when findings are posted (auto-dismisses after 3s)
- Add batch posting support: track posted findings, show "Posted" badge,
  allow posting remaining findings in additional batches
- Show loading state on button while posting

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(github): resolve stale timestamp and null author bugs

- Fix stale timestamp in batch_issues.py: Move updated_at assignment
  BEFORE to_dict() serialization so the saved JSON contains the correct
  timestamp instead of the old value

- Fix AttributeError in context_gatherer.py: Handle null author/user
  fields when GitHub API returns null for deleted/suspended users
  instead of an empty object

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(security): address all high and medium severity PR review findings

HIGH severity fixes:
- Command Injection in autofix-handlers.ts: Use execFileSync with args array
- Command Injection in pr-handlers.ts (3 locations): Use execFileSync + validation
- Command Injection in triage-handlers.ts: Use execFileSync + label validation
- Token Exposure in bot_detection.py: Pass token via GH_TOKEN env var

MEDIUM severity fixes:
- Environment variable leakage in subprocess-runner.ts: Filter to safe vars only
- Debug logging in subprocess-runner.ts: Only log in development mode
- Delimiter escape bypass in sanitize.py: Use regex pattern for variations
- Insecure file permissions in trust.py: Use os.open with 0o600 mode
- No file locking in learning.py: Use FileLock + atomic_write utilities
- Bare except in confidence.py: Log error with specific exception info
- Fragile module import in pr_review_engine.py: Import at module level
- State transition validation in models.py: Enforce can_transition_to()

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* PR followup

* fix(security): add usedforsecurity=False to MD5 hash calls

MD5 is used for generating unique IDs/cache keys, not for security purposes.
Adding usedforsecurity=False resolves Bandit B324 warnings.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(security): address all high-priority PR review findings

Fixes 5 high-priority issues from Auto Claude PR Review:

1. orchestrator_reviewer.py: Token budget tracking now increments
   total_tokens from API response usage data

2. pr_review_engine.py: Async exceptions now re-raise RuntimeError
   instead of silently returning empty results

3. batch_issues.py: IssueBatch.save() now uses locked_json_write
   for atomic file operations with file locking

4. project-middleware.ts: Added validateProjectPath() to prevent
   path traversal attacks (checks absolute, no .., exists, is dir)

5. orchestrator.py: Exception handling now logs full traceback and
   preserves exception type/context in error messages

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(security): address all high-priority PR review findings

Fixes 5 high-priority issues from Auto Claude PR Review:

1. orchestrator_reviewer.py: Token budget tracking now increments
   total_tokens from API response usage data

2. pr_review_engine.py: Async exceptions now re-raise RuntimeError
   instead of silently returning empty results

3. batch_issues.py: IssueBatch.save() now uses locked_json_write
   for atomic file operations with file locking

4. project-middleware.ts: Added validateProjectPath() to prevent
   path traversal attacks (checks absolute, no .., exists, is dir)

5. orchestrator.py: Exception handling now logs full traceback and
   preserves exception type/context in error messages

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* feat(ui): add PR status labels to list view

Add secondary status badges to the PR list showing review state at a glance:
- "Changes Requested" (warning) - PRs with blocking issues (critical/high)
- "Ready to Merge" (green) - PRs with only non-blocking suggestions
- "Ready for Follow-up" (blue) - PRs with new commits since last review

The "Ready for Follow-up" badge uses a cached new commits check from the
store, only shown after the detail view confirms new commits via SHA
comparison. This prevents false positives from PR updatedAt timestamp
changes (which can happen from comments, labels, etc).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* PR labels

* auto-claude: Initialize subtask-based implementation plan

- Workflow type: feature
- Phases: 3
- Subtasks: 6
- Ready for autonomous implementation

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
…yMik90#272)

Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.0.15 to 4.0.16.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.16/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-version: 4.0.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [@electron/rebuild](https://github.com/electron/rebuild) from 3.7.2 to 4.0.2.
- [Release notes](https://github.com/electron/rebuild/releases)
- [Commits](electron/rebuild@v3.7.2...v4.0.2)

---
updated-dependencies:
- dependency-name: "@electron/rebuild"
  dependency-version: 4.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Andy <[email protected]>
* fix(planning): accept bug_fix workflow_type alias

* style(planning): ruff format

* fix: refatored common logic

* fix: remove ruff errors

* fix: remove duplicate _normalize_workflow_type method

Remove the incorrectly placed duplicate method inside ContextLoader class.
The module-level function is the correct implementation being used.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

---------

Co-authored-by: danielfrey63 <[email protected]>
Co-authored-by: Andy <[email protected]>
Co-authored-by: AndyMik90 <[email protected]>
Co-authored-by: Claude Opus 4.5 <[email protected]>
…ow (AndyMik90#276)

When dry_run=true, the workflow skipped creating the version tag but
build jobs still tried to checkout that non-existent tag, causing all
4 platform builds to fail with "git failed with exit code 1".

Now build jobs checkout develop branch for dry runs while still using
the version tag for real releases.

Closes: GitHub Actions run #20464082726
Ashwinhegde19 and others added 22 commits January 7, 2026 21:50
…rd (AndyMik90#757) (AndyMik90#785)

Remove overflow-hidden from TaskFileExplorerDrawer container to allow
the virtualized FileTree's internal scroll container to function properly.
The overflow-hidden was clipping the scroll area, preventing users from
accessing files beyond the initially visible portion of the list.

Signed-off-by: ashwinhegde19 <[email protected]>
Co-authored-by: Andy <[email protected]>
…ndyMik90#786)

* feat: add terminal copy/paste keyboard shortcuts for Windows/Linux

Implement smart copy/paste keyboard shortcuts in terminal emulator:
- Smart CTRL+C: copies selected text or sends ^C interrupt if no selection
- CTRL+V paste: pastes clipboard contents on Windows/Linux
- Linux CTRL+SHIFT+C/V: alternative copy/paste shortcuts for Linux
- Platform detection: correctly identifies Windows/Linux/macOS
- Preserves all existing shortcuts (Ctrl+T, Ctrl+W, Ctrl+1-9, etc.)

Implementation details:
- Added platform detection constants (isMac, isWindows, isLinux)
- Smart copy handler checks xterm.hasSelection() before copying
- Uses xterm.paste() for proper encoding handling
- Includes error handling for clipboard API failures
- Handler ordering preserves all existing keyboard shortcuts

Tests added:
- Unit tests for keyboard event handlers (9/19 passing)
- Integration tests for xterm.js + clipboard API
- E2E tests for copy/paste flows (platform-specific)

Fixes AndyMik90#38 - Terminal copy/paste not working on Windows

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

* fix: resolve test failures for terminal copy/paste functionality

- Fixed global XTerm mock setup to not interfere with test-specific mocks
- Fixed 19 failing tests in useXterm.test.ts by adding proper DOM rendering
- Fixed 7 failing tests in terminal-copy-paste.test.ts with same pattern
- Added missing Mock type import for TypeScript compatibility

Test Changes:
- Replaced arrow functions with regular functions for mock constructors
- Added ResizeObserver mock for browser API compatibility
- Created wrapper components with proper DOM rendering
- Used render() with act() instead of just renderHook()
- Fixed type assertions (vi.Mock → Mock)

All tests now pass (1297 passed, 6 skipped)
Typecheck passes
Lint passes (warnings only)

* refactor: fix linting issues in terminal copy/paste test files

E2E Test Changes (terminal-copy-paste.e2e.ts):
- Removed unused imports (_android from Playwright, writeFileSync from fs)
- Added global Navigator declaration for clipboard typing
- Replaced (window as any) with typed navigator.clipboard calls
- Removed dead helper functions (getCopyShortcutModifier, getPasteShortcutModifier)
- Replaced relative Electron path with absolute path using __dirname
- Renamed caught error 'e' to '_error' to satisfy lint rules

Integration Test Changes (terminal-copy-paste.test.ts):
- Removed unused renderHook import
- Added process.platform restoration in afterEach cleanup
- Fixed console error spy to safely coerce args[0] with String()

Unit Test Changes (useXterm.test.ts):
- Created reusable _createXTermMock factory function
- Updated test to use TestWrapper pattern consistently
- Added process.platform restoration in afterEach
- Fixed test assertion (hasSelection: false) for Windows CTRL+SHIFT+C test

All tests pass (1297 passed, 6 skipped)
Typecheck passes
Lint passes (warnings only)

* fix: replace process.platform with navigator.platform for renderer compatibility

Critical fix for runtime error: "process is not defined" in browser/renderer process.

Core Changes (useXterm.ts):
- Replaced process.platform (Node.js global) with navigator.platform (browser API)
- Platform detection now uses: navigator.platform.toLowerCase()
  - isMac: navigatorPlatform.includes('mac')
  - isWindows: navigatorPlatform.includes('win')
  - isLinux: navigatorPlatform.includes('linux')

Test Updates:
- Integration tests: Updated to mock navigator.platform instead of process.platform
  - Added beforeEach/afterEach for proper cleanup
  - Removed redundant inline cleanup code
  - Added platform mocks where needed for Windows/Linux paste handler tests
- Unit tests: Updated all process.platform references to navigator.platform
  - Changed originalPlatform to originalNavigatorPlatform
  - Updated afterEach to restore navigator.platform
  - Changed platform values: 'win32' → 'Win32', 'darwin' → 'MacIntel', 'linux' → 'Linux'
  - Removed unused _createXTermMock helper function

E2E Test Improvements:
- console.log → console.warn for clipboard accessibility message
- Improved interrupt signal assertion: toMatch(/\^C|[$#>]\s*$/)

All tests pass (1297 passed, 6 skipped)
Typecheck passes
Lint passes (warnings only)

* fix: prevent double-paste by calling event.preventDefault()

Fixed issue where pasted text appeared twice in the terminal.

Root cause: When Ctrl+V was pressed:
1. Browser's default paste behavior was triggered
2. Our handler also called xterm.paste()

Fix: Added event.preventDefault() to both paste handlers:
- CTRL+V (Windows/Linux)
- CTRL+SHIFT+V (Linux alternative)

This prevents the browser's default paste behavior, ensuring only
xterm.paste() handles the pasting operation once.

Tests still pass (26 passed)

* fix: resolve unreachable Linux handlers and improve test reliability

Critical Fix (useXterm.ts):
- Fixed unreachable CTRL+SHIFT+C/V handlers for Linux
- Root cause: Regular CTRL+C/V handlers checked isMod && key, which
  matched even when SHIFT was pressed, preventing Linux-specific
  handlers from ever executing
- Fix: Reordered checks to handle Linux shortcuts BEFORE regular shortcuts
  and added !event.shiftKey to regular copy/paste handlers

E2E Test Improvements (terminal-copy-paste.e2e.ts):
- Replaced fixed sleeps (waitForTimeout) with condition-based waits
- Removed try/catch + test.skip anti-pattern, replaced with upfront precondition checks

Unit Test Improvements (useXterm.test.ts):
- Replaced trivial platform detection tests with comprehensive behavior tests
- Added 4 new tests verifying platform-specific keyboard handling

Test Results: 1298 passed, 6 skipped

* refactor: extract XTerm mock setup into helper function

Extract repeated XTerm mock setup code into a reusable setupMockXterm() helper function. This reduces test boilerplate from ~100 lines to ~20 lines per test while maintaining identical test coverage and behavior.

Changes:
- Added setupMockXterm() helper function that handles all mock initialization
- Refactored all 20+ tests in useXterm.test.ts to use the helper
- Significantly improved code readability and maintainability

* fix(e2e): replace invalid toMatch() with toContainText() in terminal test

Replace invalid Playwright locator assertion `toMatch()` with valid `toContainText()` assertion. The `toMatch()` method does not exist for Playwright locators; `toContainText()` is the correct matcher for checking text content with regex patterns.

* refactor: extract copy/paste helpers and fix CTRL+SHIFT+C behavior

Address PR review feedback:

1. [MEDIUM] Extract copy/paste helper functions
   - Added handleCopyToClipboard() helper to eliminate duplicate copy logic
   - Added handlePasteFromClipboard() helper to eliminate duplicate paste logic
   - Both handlers now use shared helper functions

2. [MEDIUM] Fix CTRL+SHIFT+C without selection on Linux
   - Changed from returning true (let event pass through) to returning false (consume event)
   - CTRL+SHIFT+C won't send proper interrupt signal, so consuming is correct behavior

3. [LOW] Add comment for isMac variable
   - Added comment explaining isMac is declared for documentation purposes

Related: AndyMik90#38-terminal-copy-paste-is-not-working-on-windows

* refactor: remove unused isMac variable

Remove the unused isMac variable since it's not referenced in any conditional logic. The code already excludes macOS by only enabling custom paste handlers for Windows and Linux (isWindows || isLinux).

Related: AndyMik90#38-terminal-copy-paste-is-not-working-on-windows

* fix(e2e): remove non-existent electron.executablePath() API call

Remove the executablePath parameter from electron.launch() to match
the pattern used in other E2E tests (flows.e2e.ts, electron-helper.ts).

* refactor(terminal): fix platform detection and clarify comments

- Replace deprecated navigator.platform with navigator.userAgentData.platform
  with fallback to navigator.platform for older browsers
- Add TypeScript type augmentation for NavigatorUAData interface
- Fix misleading comment in handleCopyToClipboard to clarify return value
  semantics (true = copy attempted, false = no selection)
- Add requestAnimationFrame mock to useXterm test for jsdom environment

Fixes review findings for terminal copy/paste feature.

---------

Co-authored-by: StillKnotKnown <[email protected]>
Co-authored-by: Claude <[email protected]>
Co-authored-by: Andy <[email protected]>
…yMik90#808)

* fix(a11y): restore missing aria-label attributes on icon buttons

Adds aria-label attributes to icon-only buttons for screen reader accessibility:

- ChatHistorySidebar: New conversation, save/cancel edit, menu buttons
- IdeaDetailPanel: Close panel button
- IdeationHeader: Clear selection, select all, show/hide dismissed, configure,
  add more, dismiss all, regenerate buttons
- GitHub/GitLab IssueDetail: External link buttons
- GitLab MRDetail: External link button
- KanbanBoard: Toggle show archived button
- AdvancedSettings: Dismiss downgrade button
- DevToolsSettings: Browse folder buttons
- IntegrationSettings: Save/cancel rename, refresh, expand/collapse, rename, delete buttons

Also adds corresponding i18n translation keys for en and fr locales.

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(i18n): use translation keys for tooltip content

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(i18n): use translation keys for IdeaCard and IdeationHeader tooltips

Co-Authored-By: Claude Opus 4.5 <[email protected]>

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
Prevents spec creation failures when tool results exceed the default 1MB buffer limit during discovery/research phases.

Related: AndyMik90#813

Co-authored-by: StillKnotKnown <[email protected]>
* feat: add PR creation workflow for task worktrees

Adds the ability to push a worktree branch and create a GitHub Pull Request
directly from the Auto-Claude UI, instead of manually merging changes locally.

## User Flow
1. User completes a task build in an isolated worktree
2. Instead of clicking "Merge", user can click "Create PR" button
3. A dialog shows source branch → target branch (default: develop)
4. User confirms, system pushes branch and creates GitHub PR via `gh` CLI
5. PR URL is displayed and can be opened in browser

## Changes

### Backend (Python)
- Added `push_branch()` with timeout (120s) for git push
- Added `create_pull_request()` with timeout (60s) for gh CLI
- Added `push_and_create_pr()` orchestrator
- Added `--create-pr` CLI argument with handler
- Added BRANCH and LINK icons with unique ASCII fallbacks

### Frontend (TypeScript)
- Added `WorktreeCreatePRResult` type
- Added `TASK_WORKTREE_CREATE_PR` IPC channel
- Added IPC handler with 2-min timeout and EAFP pattern
- Added `createWorktreePR` preload API method
- Created reusable `CreatePRDialog` component
- Integrated PR button in `WorkspaceStatus`
- Added i18n translations (EN + FR)

## Code Review Fixes (from PR AndyMik90#606)
- All subprocess calls have timeouts (TimeoutExpired handled)
- EAFP pattern for file existence checks (no TOCTOU)
- IPC handler has timeout with process cleanup
- Icon ASCII fallbacks are unique (`[BR]` for BRANCH, `[L]` for LINK)
- All user-facing strings use i18n translation keys
- Translations added to BOTH en/*.json AND fr/*.json
- CreatePRDialog component is reusable
- Proper typed objects (no type assertions)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address PR review comments and add PR status persistence

Review comment fixes:
- Fix NameError: use args.base_branch instead of undefined base_branch (main.py)
- Add JSON output for frontend IPC consumption (main.py)
- Narrow exception handling in _extract_spec_summary to (OSError, UnicodeDecodeError)
- Narrow exception handling in _get_existing_pr_url to subprocess-specific exceptions
- Add debug logging for exception cases in worktree.py
- Add 'exit' event handler to IPC handler for robustness (worktree-handlers.ts)

Additional improvements:
- Persist PR status to both main and worktree locations
- Add CreatePR button to Worktrees page with i18n support
- Add CreatePRDialog tests (11 test cases)
- Fix i18n compliance for all new strings

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(a11y): use button instead of anchor for PR link action

Addresses review comment: anchor elements should only be used for
navigation, not for triggering actions. Using a button improves
accessibility for screen readers and keyboard users.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* refactor: address nitpick review comments

Backend (worktree.py):
- Add TypedDict types (PushBranchResult, PullRequestResult) for better type safety
- Add retry logic with exponential backoff (3 attempts) for transient network failures
- Retries on: connection errors, network issues, timeouts, reset connections

Frontend:
- Fix checkbox accessibility: add explicit id/htmlFor for draft PR checkbox
- Normalize return type in TaskDetailModal.handleCreatePR to include all fields
- Add message field to WorktreeCreatePRResult for consistency with other result types

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: remove duplicate JSON output in create-pr command

The JSON was being printed twice:
1. In workspace_commands.py handle_create_pr_command()
2. In main.py after calling handle_create_pr_command()

This caused JSON.parse to fail with "Unexpected non-whitespace
character after JSON" when the frontend tried to parse the output.

Removed the duplicate print from main.py since workspace_commands.py
already handles JSON output for frontend parsing.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: make IPC handler debug logging conditional

Debug output for MERGE and CREATE_PR handlers now only appears when:
- process.env.DEBUG === 'true', OR
- process.env.NODE_ENV === 'development'

This matches the pattern used elsewhere in the codebase
(project-initializer.ts, terminal-name-generator.ts, etc.)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address code review feedback on JSON parsing and status persistence

- Use non-greedy regex pattern to extract last complete JSON object
  from stdout, avoiding issues with multiple JSON objects or garbage
- Add validation that parsed JSON has expected shape before using
  (typeof checks for success, pr_url, already_exists, error fields)
- Await persistPlanStatus calls instead of fire-and-forget to ensure
  status is persisted before resolving the IPC handler

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: ensure parent directory exists before writing metadata

Add mkdirSync with recursive:true before writeFileSync in
updateTaskMetadataPrUrl to prevent write failures when the
parent directory doesn't exist.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* refactor: add TypedDict for push_and_create_pr return type

Add PushAndCreatePRResult TypedDict with all fields (success, pushed,
remote, branch, pr_url, already_exists, error) for static type safety.
Update push_and_create_pr method signature and return statements to
use the TypedDict constructor.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(i18n): use feminine form for PR in French translation

Change "PR créé" to "PR créée" to match French grammatical gender
(PR is feminine: "la PR").

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(i18n): use translation key for Open PR button

Replace hardcoded "Open PR" label with i18n key common:buttons.openPR
in Worktrees.tsx. Add translation keys to en/common.json and
fr/common.json.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(a11y): use semantic button for PR link in TaskMetadata

Replace anchor element with semantic button for better accessibility.
Screen readers now properly announce this as an interactive control.
The visible URL text provides an accessible label.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(a11y,i18n): use semantic button and i18n for PR status in TaskDetailModal

- Replace anchor element with semantic button for PR link
- Replace hardcoded "PR Created" with t('tasks:status.prCreated')
- Apply fix to both the completion state link and the badge

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(i18n): use translation keys for PR button in WorkspaceStatus

Add useTranslation hook and replace hardcoded strings:
- "Creating PR..." → t('taskReview:pr.actions.creating')
- "Create PR" → t('common:buttons.createPR')

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* test: scope numeric assertions to stats container in CreatePRDialog

Use within() to scope commit count and changes assertions to the
stats container, avoiding accidental matches elsewhere in the dialog.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: handle success results without prUrl in CreatePRDialog

Allow success state to render even without a URL (e.g., from the
"no JSON in output, assuming success" fallback). The PR link button
is now conditionally rendered only when prUrl is present.

This prevents the dialog from showing an empty body when the backend
returns { success: true, prUrl: undefined }.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address PR review findings for PR creation feature

Backend (worktree.py):
- Validate PR URL extraction - set pr_url to None if no valid URL found
- Add message field to TypedDicts for informative feedback
- Handle missing URL gracefully for existing PRs with message

Frontend (worktree-handlers.ts):
- Add GIT_BRANCH_REGEX and PR_CREATION_TIMEOUT_MS as module-level constants
- Add input validation for targetBranch parameter
- Add branch name validation in getTaskBaseBranch
- Fix inconsistent JSON regex pattern between success/error paths

Tests (CreatePRDialog.test.tsx):
- Add test for draft PR checkbox functionality
- Add test for 'already exists' PR state
- Add test for success without prUrl

Constants (task.ts):
- Add pr_created to TASK_STATUS_LABELS and TASK_STATUS_COLORS

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* refactor: extract helper functions from TASK_WORKTREE_CREATE_PR handler

- Extract parsePRJsonOutput() for JSON parsing with snake_case/camelCase
- Extract updateTaskStatusAfterPRCreation() for metadata updates
- Extract buildCreatePRArgs() for argument construction with validation
- Extract initializePythonEnvForPR() for Python environment setup
- Add generic withRetry() helper with exponential backoff
- Refactor inline updatePlanWithRetry() to use withRetry() helper

Addresses HIGH priority review finding about handler complexity and
MEDIUM priority finding about duplicated retry logic.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address additional PR review findings

Backend (worktree.py):
- Update PullRequestResult.pr_url and PushAndCreatePRResult.pr_url to
  allow None (str | None) for cases where PR was created but URL
  couldn't be extracted

Frontend (CreatePRDialog):
- Add data-testid="pr-stats-container" for stable test targeting
- Update test to use getByTestId instead of brittle CSS class selector

Frontend (TaskDetailModal):
- Remove hardcoded English error strings from handleCreatePR
- Propagate IPC errors directly, let CreatePRDialog use i18n fallbacks

Frontend (TaskMetadata):
- Add i18n support for "Pull Request" header label
- Add translation keys to en/tasks.json and fr/tasks.json

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: handle success default and retry validation in PR handlers

- Default success to false in parsePRJsonOutput to avoid masking failures
  when the field is missing from the JSON response
- Add validation to withRetry to ensure at least one attempt is made
  by clamping maxRetries to a minimum of 1

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(i18n): remove hardcoded error strings from Worktrees handleCreatePR

Let CreatePRDialog handle i18n fallback for undefined error values
instead of hardcoding 'Failed to create PR' and 'Unknown error'.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: reset isCreating flag when CreatePRDialog opens

Prevents stale loading state when reopening the dialog after a
previous PR creation attempt.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(test): use os.tmpdir() for cross-platform temp path matching

Tests were hardcoded to expect /tmp/ but macOS uses
/var/folders/.../T/ for temp files. Now dynamically uses
os.tmpdir() for platform-independent path matching.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* style: apply pre-commit auto-fixes

- Remove trailing whitespace from 20 files
- Fix ruff lint errors in Python files
- Apply ruff formatting

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address CodeQL and code review findings

- Extract escapeForRegex helper in claude-integration-handler.test.ts
  to deduplicate regex-escaping logic and avoid ReDoS false-positive
- Anchor regex pattern in CreatePRDialog.test.tsx to prevent arbitrary
  host matching (CodeQL security alert)
- Remove unused ExternalLink import from TaskCard.tsx
- Add defensive window.electronAPI check in CreatePRDialog handleOpenPR
  to avoid runtime errors in test/misconfigured environments

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address CodeQL and code review findings

Frontend:
- Fix CodeQL regex anchor issue in CreatePRDialog.test.tsx by using
  data-testid="pr-link-button" instead of URL regex pattern
- Add data-testid to PR link button in CreatePRDialog.tsx
- Add defensive window.electronAPI?.openExternal check in TaskCard.tsx

Backend:
- Add CreatePRResult TypedDict for type-safe return values
- Wrap push_and_create_pr call in try/except for clean JSON output
  on exceptions instead of unhandled tracebacks

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* feat: add frontend validation for PR creation form

- Add client-side validation for branch names and PR titles
- Validate git branch name format (alphanumeric, hyphens, underscores, slashes)
- Ensure PR title is not empty
- Provide immediate user feedback before backend submission
- Add localized error messages in English and French

* refactor: improve error handling and import organization in PR creation

- Clean up CreatePRResult error structure: separate user-friendly 'message' from technical 'error' field
- Move get_existing_build_worktree import to module-level imports for consistency
- Remove redundant local import inside handle_create_pr_command function
- Improve API clarity by providing both user messages and technical error details

* refactor: properly convert PushAndCreatePRResult to CreatePRResult in CLI handler

- Convert raw PushAndCreatePRResult to expected CreatePRResult shape
- Map fields appropriately: success, pr_url, already_exists, error, message
- Maintain type safety by returning declared CreatePRResult instead of raw result
- Preserve all essential information while conforming to API contract
- Improve code maintainability and type correctness

* feat: include push and branch details in CreatePRResult

- Add pushed, remote, and branch fields to CreatePRResult type
- Include push status, remote name, and branch name in CLI result
- Provide complete operation details for frontend consumption
- Enhance API with comprehensive PR creation status information
- Maintain backward compatibility while adding useful metadata

* fix: improve type safety and i18n consistency for task status

- Add isValidDropColumn type guard in KanbanBoard.tsx to preserve
  literal types from TASK_STATUS_COLUMNS instead of using unsafe cast
- Replace duplicate CheckCircle2 with GitPullRequest icon in
  TaskDetailModal PR button for visual consistency with TaskCard
- Normalize pr_created i18n key to columns.pr_created namespace
- Add pr_created translation keys to en/fr tasks.json columns section
- Update all hardcoded status.prCreated references to use mapping

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: remove duplicate PR Created badges and unused import

- Remove unused ExternalLink import from TaskDetailModal.tsx
- Fix duplicate badge rendering for pr_created status in both TaskCard and TaskDetailModal
- Consolidate to single badge showing 'PR Created' for completed PR tasks

* refactor: extract status badge variant logic and use i18n for completion text

- Extract complex badge variant ternary into getStatusBadgeVariant helper function in TaskDetailModal
- Replace hardcoded 'Task completed' with i18n translation t('tasks:status.complete')
- Update getStatusBadgeVariant in TaskCard to return 'success' for pr_created status
- Use getStatusBadgeVariant consistently instead of hardcoded variant in pr_created conditional

* fix: use optional chaining for electronAPI in PR URL button

- Update TaskDetailModal PR URL button onClick to use window.electronAPI?.openExternal
- Matches the pattern used in TaskCard.tsx handleViewPR function
- Prevents runtime errors when electronAPI is undefined

* fix: add URL validation for parsed PR URLs

Add isValidGitHubUrl() helper to validate PR URLs are valid
https://github.com or *.github.com URLs before using them.
This improves robustness by filtering out invalid URLs.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* refactor: extract WorktreeCreatePROptions into named exported type

Extract the inline options object from createWorktreePR signature into
a reusable named type. Updated all callers and related declarations to
use the new type for consistency across components.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: use WorktreeCreatePROptions type and add defensive optional chaining

- Update createWorktreePR implementation to use WorktreeCreatePROptions
  instead of inline type (matches interface declaration)
- Add optional chaining for window.electronAPI?.openExternal in Worktrees
- Remove unused ExternalLink import from Worktrees component

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address PR review findings for code quality

- Extract retry helper functions in worktree.py for DRY network error handling
- Fix broad 'http' retry condition to exclude auth errors (401, 403)
- Add Windows taskkill fallback for forceful process termination
- Import CreatePRResult from worktree.py instead of duplicating TypedDict
- Move import to top of worktree.py following Python conventions
- Return result object from updateTaskStatusAfterPRCreation for better state tracking
- Add PR title validation (printable chars, 256 char max)
- Use WorktreeCreatePROptions type consistently in handler

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address PR review findings - dedupe retry logic and support GH Enterprise URLs

- Refactor push_branch and create_pull_request to use _with_retry helper
  instead of duplicated retry loops (addresses code duplication issue)
- Update isValidGitHubUrl to accept any HTTPS URL with /pull/\d+ path
  to support GitHub Enterprise instances with custom domains

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(ui): relax isValidGitHubUrl validation for GH Enterprise support

- Remove /pull/\d+ path requirement that was too strict
- Only require HTTPS protocol and non-empty hostname
- Allows GitHub Enterprise URLs with custom domains to be parsed correctly

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address CodeRabbit feedback for PR creation

- Fix undefined base_branch variable in CLI main.py with proper auto-detection
- Improve event handling in worktree-handlers.ts with comprehensive exit event support
- Fix dynamic retry count in error messages instead of hardcoded '3 attempts'
- Use get_git_executable() and handle FileNotFoundError in push_branch method
- Move debug_warning import to module level for better performance
- Ensure all error messages reflect actual retry counts used

* fix: address additional PR review feedback

- main.py: Simplify PR creation by passing pr_target directly to handler,
  letting WorktreeManager._detect_base_branch handle detection internally
- worktree.py: Fix _with_retry type signature to match actual tuple return,
  use get_git_executable() for proper git path resolution, move debug_warning
  import to top of file
- worktree-handlers.ts: Extract duplicated close/exit callback logic into
  handleCreatePRProcessExit helper function
- workspace_commands.py: Remove redundant json import (CodeQL fix)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(test): clear GIT_INDEX_FILE in temp_git_repo fixture

Pre-commit sets GIT_INDEX_FILE to a relative path (.git/index.pre-commit)
which causes git commands in temp repos to fail with "index file open
failed: Not a directory" because the relative path resolves against
the main repo instead of the temp repo.

The fix saves and clears GIT_INDEX_FILE before creating the temp repo,
then restores it in a finally block to ensure cleanup.

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: use proper base branch fallback for PR creation target

The worktree status handlers were incorrectly determining baseBranch
by checking the current HEAD branch in the main project directory.
This caused the PR creation dialog to pre-populate the target branch
with the user's current feature branch instead of main/develop.

Added getEffectiveBaseBranch() helper that properly determines the
base branch using this priority:
1. Task metadata baseBranch (from task_metadata.json)
2. Project settings mainBranch
3. Git detection (main/master branch existence)
4. Fallback to 'main'

Fixed three handlers:
- TASK_WORKTREE_STATUS
- TASK_WORKTREE_DIFF
- List worktrees helper

Co-Authored-By: Claude Opus 4.5 <[email protected]>

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
Co-authored-by: Andy <[email protected]>
* fix: automate auto labeling based on comments

* resolve comments

* fix approved workflow to auto label

* enhance yml

* fix: improve error handling and align verdicts with backend outputs

- Replace broad catch blocks with proper 404-only suppression, log
  warnings for network/auth/rate-limit errors using core.warning
- Update VERDICTS map: rename REJECTED to BLOCKED with 'AC: Blocked'
  label to match backend outputs
- Remove unused RE_REVIEW entry (manual-only, no backend output)
- Simplify APPROVED regex by removing unused 🟢 emoji
- Remove unconditional CI status reset from require-re-review job
  to avoid race conditions with update-ci-status job
- Add null safety checks (e && e.status) for consistent error handling

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address security vulnerabilities and improve workflow robustness

Security fixes:
- Remove non-[bot] usernames from TRUSTED_BOT_ACCOUNTS (spoofing vulnerability)
- Verify bot account type via comment.user.type === 'Bot' (authorization bypass)
- Tighten parseVerdict regex patterns using \s* instead of .* wildcards

Robustness improvements:
- Throw errors instead of warning on label removal failures (prevents conflicting labels)
- Remove try-catch from fetchCheckRuns to let retries handle transient failures
- Implement pagination for check runs (>100 checks support)
- Implement pagination for PR files (>100 files support)
- Update status to 'Checking' when checks are incomplete (prevents stale labels)

Documentation:
- Document intentional STATUS_LABELS/REVIEW_LABELS duplication across jobs

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: add pagination for check runs in check-status-command job

Replace single-page listForRef call with github.paginate to handle
repositories with >100 check runs on a single commit.

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: sync REVIEW_LABELS and improve error handling in require-re-review

- Add missing 'AC: Reviewed' to REVIEW_LABELS in check-status-command job
  to match update-review-status job and avoid maintenance confusion
- Change removeLabel error handling in require-re-review to throw on
  non-404 errors, preventing 'AC: Approved' and 'AC: Needs Re-review'
  from coexisting when label removal fails

Co-Authored-By: Claude Opus 4.5 <[email protected]>

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
Co-authored-by: Andy <[email protected]>
AndyMik90#751)

* feat(github): enhance PR merge readiness checks with branch state validation

- Added support for checking if a PR branch is behind the base branch, introducing a new warning state for "Branch Out of Date."
- Updated the verdict generation logic to classify this state as a soft blocker (NEEDS_REVISION) rather than a hard blocker.
- Enhanced the merge readiness interface to include an `isBehind` property for better frontend integration.
- Updated relevant services and handlers to accommodate the new branch state checks, ensuring accurate feedback during PR reviews.

This improves the user experience by providing clearer guidance on necessary actions for PRs that are not up to date with the base branch.

* fix: address PR feedback for branch-behind detection

- Fix HIGH: Handle MERGE_WITH_CHANGES verdict when branch is behind
- Fix MEDIUM: Extract duplicated reasoning strings to shared constants
  (BRANCH_BEHIND_BLOCKER_MSG, BRANCH_BEHIND_REASONING in models.py)
- Fix LOW: Remove unreachable dead code for branch-behind checks in
  orchestrator.py and parallel_orchestrator_reviewer.py
- Consolidate low-severity suggestions note into the active branch-behind path

Co-authored-by: CodeRabbit <[email protected]>

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
)

* feat: add Claude Code changelog link to version notifiers

Add link to Claude Code Changelog in both:
- Claude Code CLI status badge popover
- App Update Notification dialog

The link opens https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md
in external browser, allowing users to check what's new in Claude Code.

Also converts AppUpdateNotification to use i18n translations.

Fixes AndyMik90#817

* refactor: improve AppUpdateNotification code quality

- Extract CLAUDE_CODE_CHANGELOG_URL to named constant
- Remove unused "common" namespace from useTranslation hook

---------

Co-authored-by: StillKnotKnown <[email protected]>
Fixes AndyMik90#684

## Problem
Users reported `ModuleNotFoundError: No module named 'pydantic_core._pydantic_core'`
when running the packaged macOS app. This occurred because:

1. pydantic-core includes a compiled C extension (_pydantic_core.so)
2. During packaging, pip could attempt to build from source if no binary wheel found
3. Source builds could fail silently without a C compiler
4. The package would be marked as "installed" but missing the critical extension
5. pydantic_core was not in the critical packages verification list

## Solution
This fix implements two changes:

1. **Force binary wheels for pydantic packages**
   - Added `--only-binary pydantic,pydantic-core` to pip install args
   - Prevents silent source build failures
   - Ensures compiled extensions are properly included

2. **Add pydantic_core to critical packages verification**
   - Added to both download-python.cjs verification checks (lines 712, 815)
   - Added to python-env-manager.ts verification (line 129)
   - Ensures packaging fails fast if pydantic_core is missing

## Testing
The fix ensures that:
- Packaging will fail if pydantic binary wheels aren't available
- Both build-time and runtime verification check for pydantic_core
- Users won't receive a broken package with missing dependencies

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Sonnet 4.5 <[email protected]>
Co-authored-by: StillKnotKnown <[email protected]>
Co-authored-by: Alex <[email protected]>
Co-authored-by: Andy <[email protected]>
…90#803)

* feat: Add Sentry environment variables to build process in CI workflows

- Integrated SENTRY_DSN, SENTRY_TRACES_SAMPLE_RATE, and SENTRY_PROFILES_SAMPLE_RATE as environment variables in the build steps of both beta-release.yml and release.yml workflows.
- This enhancement ensures that Sentry monitoring is properly configured during application builds across different platforms (macOS, Windows, Linux).

This change improves error tracking and performance monitoring capabilities for the application.

* fix: add Sentry env vars to Package steps

The package:* npm scripts internally run electron-vite build,
overwriting the previous build that had Sentry configuration.
This adds SENTRY_DSN, SENTRY_TRACES_SAMPLE_RATE, and
SENTRY_PROFILES_SAMPLE_RATE to all Package steps in both
release.yml and beta-release.yml workflows.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
Co-authored-by: Alex <[email protected]>
)

* feat: Add Sentry environment variables to build process in CI workflows

- Integrated SENTRY_DSN, SENTRY_TRACES_SAMPLE_RATE, and SENTRY_PROFILES_SAMPLE_RATE as environment variables in the build steps of both beta-release.yml and release.yml workflows.
- This enhancement ensures that Sentry monitoring is properly configured during application builds across different platforms (macOS, Windows, Linux).

This change improves error tracking and performance monitoring capabilities for the application.

* ci(release): add Azure Trusted Signing for Windows builds

Integrate Azure Trusted Signing to sign Windows executables during
release and beta-release workflows. This removes SmartScreen warnings
for users downloading Auto-Claude on Windows.

- Add OIDC authentication with Azure (no client secret needed)
- Sign .exe files after packaging using azure/trusted-signing-action
- Use North Europe endpoint (neu.codesigning.azure.net)
- Conditionally skip signing if Azure credentials not configured

Required GitHub secrets: AZURE_TENANT_ID, AZURE_CLIENT_ID,
AZURE_SUBSCRIPTION_ID, AZURE_SIGNING_ACCOUNT, AZURE_CERTIFICATE_PROFILE

* fix(ci): move AZURE_CLIENT_ID to job-level env for condition evaluation

- Move AZURE_CLIENT_ID from step-level to job-level env block so it's
  available when GitHub Actions evaluates step-level `if:` conditions
- Update azure/trusted-signing-action from v0.5.1 to v0.5.11
- Remove redundant step-level env blocks

Fixes conditional checks that were always evaluating to false because
step-level env vars aren't processed until after if conditions are evaluated.

Co-authored-by: CodeRabbit <[email protected]>
Co-authored-by: Cursor Bot <[email protected]>

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(ci): use base64 encoding for SHA512 checksums in latest.yml

- Use System.Security.Cryptography.SHA512 to compute hash bytes
- Convert hash to base64 (electron-builder expected format) instead of hex
- Update regex pattern to match base64 characters [A-Za-z0-9+/=]
- Add -NoNewline to Set-Content to preserve YAML formatting

Fixes auto-update checksum verification that was broken because
Get-FileHash outputs hex while electron-updater expects base64.

Co-authored-by: CodeRabbit <[email protected]>
Co-authored-by: Cursor Bot <[email protected]>

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(ci): add signing verification and use HTTPS for timestamp server

- Add signature verification step using Get-AuthenticodeSignature
  - Fails build if signing fails silently (prevents unsigned releases)
  - Logs certificate subject, issuer, and thumbprint on success
- Change timestamp server from HTTP to HTTPS for better security

Addresses remaining feedback from Auto Claude PR Review:
- NEW-005/NEW-006: Missing verification that signing succeeded
- NEW-001/NEW-002: Timestamp server uses unencrypted HTTP

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(ci): add error handling and multi-exe support to checksum regeneration

- Add $ErrorActionPreference = "Stop" for strict error handling
- Fail build if no exe files found in dist folder
- Fail build if latest.yml not found
- Fail build if checksum replacement didn't change content (regex mismatch)
- Log all exe files found and their hashes for debugging
- Show clear error messages with ::error:: prefix for GitHub Actions

Addresses NF-003/NF-004 (multiple exe handling) and NF-005/NF-006 (error handling)
from Auto Claude PR Review.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
…ndyMik90#822)

* fix(github): use selectedPR from hook to restore Files changed list

The hook useGitHubPRs returns a selectedPR that includes full PR details
including the files array and changedFiles count. GitHubPRs.tsx was ignoring
this and doing its own lookup in the prs array (which only contains list-view
PRs without file details). This caused the Files changed list to appear empty
in the PR detail view.

Fixes ACS-173

* fix(github): add null-safe fallbacks for PR additions/deletions counts

The GitHub API may return null for additions, deletions, and changed_files
fields in certain edge cases (e.g., draft PRs, PRs with no diff yet).
Add null-safe fallbacks (?? 0) to ensure the frontend always receives
numeric values instead of null.

Also added debug logging to inspect the raw API response for troubleshooting.

Related to ACS-173

* refactor: standardize selected item pattern across issues/PRs hooks

This addresses PR review findings about inconsistent patterns:

1. Fix UI flicker in useGitHubPRs hook
   - Don't clear previous PR details when switching PRs
   - Preserve previous details during fetch to avoid empty state

2. Add selectedIssue to useGitLabIssues hook
   - Return computed selectedIssue instead of manual lookup
   - Update GitLabIssues.tsx to use hook-provided value

3. Add selectedIssue to useGitHubIssues hook
   - Return computed selectedIssue instead of manual lookup
   - Update GitHubIssues.tsx to use hook-provided value

Related to ACS-173

* fix(pr): prevent stale data and race conditions when switching PRs

Fixes two HIGH priority issues from PR review:

1. Stale PR data when switching between PRs
   - Validate that selectedPRDetails.number matches selectedPRNumber
   - Added useMemo wrapper for consistency with other hooks
   - Previously, old PR data (with its file list) was briefly shown
     under new PR's header until fetch completed

2. Race condition for out-of-order API responses
   - Track current PR being fetched in module-level variable
   - Only update selectedPRDetails if response matches current PR
   - Prevents stale responses from overwriting newer data

Related to ACS-173

* refactor(pr): address code quality issues from PR review

Fixes 4 issues identified during PR review:

1. Replace module-level mutable variable with per-hook ref
   - Removed module-level currentFetchPRNumber variable
   - Added currentFetchPRNumberRef using useRef inside hook
   - Prevents shared state across hook instances

2. Fix fetchPRs useCallback dependency array
   - Removed setNewCommitsCheckAction from dependencies
   - Function doesn't reference it, so it wasn't needed

3. Remove async modifier from fire-and-forget functions
   - runReview and runFollowupReview don't await anything
   - Store functions return void, not Promise
   - Updated interface to reflect void return type

4. Normalize API response to camelCase in handler layer
   - Updated checkNewCommits handler comment for clarity
   - Removed defensive fallbacks and "as any" casts in hook
   - Data is now properly camelCased by the handler

Related to ACS-173

---------

Co-authored-by: StillKnotKnown <[email protected]>
Co-authored-by: Alex <[email protected]>
…flip-flop bug (AndyMik90#824)

* chore: update .gitignore to include auto-generated files and security logs

- Added entries for .security-key and logs/security/ to ignore auto-generated files and security logs.

* fix(ACS-51): prevent task workflow from halting after planning stage

Root cause: Frontend accepted incomplete plan data (empty phases array)
during spec creation, which overwrote subtask state and left tasks stuck.

Changes:
- Add validatePlanData() to reject incomplete plans in task-store
- Add reloadPlanForIncompleteTask() hook for resume functionality
- Enhance logging in project-store for plan loading diagnostics
- Add comprehensive unit tests for plan validation edge cases
- Add integration tests for task lifecycle IPC events
- Add E2E test specs for full task workflow

The fix ensures incomplete plans are rejected while the backend's
validation/auto-fix pipeline completes, preserving UI state until
valid data arrives.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix(ACS-55, ACS-71): ensure Kanban state transitions render correctly

ACS-55: Task card was showing "planning" even after moving to "coding" phase
- Phase transitions now bypass the 16ms batching window and apply immediately
- Added debug logging when sequence number checks drop out-of-order updates
- This ensures intermediate phases (planning→coding→qa) are never coalesced

ACS-71: Task immediately moved to Human Review with zero subtasks
- Exit handler now checks if subtasks exist before moving to human_review
- Added validateStatusTransition() function to prevent invalid state changes
- Blocks human_review when no subtasks exist (task still in planning)
- Blocks phase regression from coding back to planning

Changes:
- agent-events-handlers.ts: Added validation function, fixed exit handler
- useIpc.ts: Phase changes bypass batching, apply immediately
- task-store.ts: Added logging for dropped out-of-order updates

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: prevent status flip-flop between Human Review and AI Review

When a task completed, `updateTaskFromPlan` would override the correct
'human_review' status with 'ai_review' when all subtasks were complete,
causing tasks to flip between statuses on refresh.

Root cause: The function only checked for "active" phases (planning, coding,
qa_review, qa_fixing). When phase was 'complete' or 'idle', it would
recalculate status from subtasks and set 'ai_review'.

Fix:
- Add 'complete' and 'failed' as terminal phases that skip recalculation
- Respect explicit 'human_review' status from plan file
- Never downgrade from 'human_review' to 'ai_review'

This completes the Kanban state management fixes for ACS-51, ACS-55, ACS-71.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: add missing SubtaskStatus import to task-store

The SubtaskStatus type was used but not imported, causing TypeScript
compilation to fail in CI.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: use secure temp directories in tests to fix CodeQL alerts

Replace hardcoded /tmp/ paths with mkdtempSync for secure temp directory
creation. This prevents TOCTOU (time-of-check-time-of-use) attacks by
using randomly generated directory names.

Files fixed:
- e2e/task-workflow.spec.ts
- __tests__/integration/task-lifecycle.test.ts

Resolves CodeQL "Insecure temporary file" high severity alerts.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address PR review findings for Kanban state management

- Fix reloadPlanForIncompleteTask to update Zustand store after reload
- Extend flip-flop prevention to include pr_created and done statuses
- Use wouldPhaseRegress() utility instead of hardcoded phase checks
- Gate debug logging with debugLog utility for production
- Fix unsafe type assertion for plan status
- Remove redundant gitignore entry (logs/security/)
- Add test coverage for terminal phase and status preservation

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* chore: address follow-up PR review suggestions (5 LOW severity)

- Add ExecutionPhase type cast after type guard check
- Use crypto.randomUUID() for stronger subtask ID generation
- Add optional chaining for defensive coding in useTaskDetail
- Clarify comment about phase bypass batching behavior
- Fix misleading test comment about human_review preservation
- Update test regex to accept both UUID and fallback ID formats

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* chore: address final 3 LOW severity suggestions from CodeRabbit

- Remove unused electronAPI variable in task-lifecycle test
- Add comment explaining defensive fallback for description field
- Rename test to clarify status recalculation skip behavior

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
…yMik90#849)

* fix(ui): display subtask titles instead of UUIDs in TaskSubtasks

The Subtasks tab was rendering raw UUIDs instead of human-readable
titles for each subtask row. This made the list hard to scan and
undermined usability.

Changed:
- Display subtask.title instead of subtask.id in row header
- Added fallback to 'Untitled subtask' for edge cases
- Updated tooltip to show full title for truncated text

Fixes AndyMik90#844

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: use i18n translation for untitled subtask fallback

- Add 'subtasks.untitled' translation key to en/tasks.json
- Add French translation to fr/tasks.json
- Update TaskSubtasks.tsx to use useTranslation hook
- Replace hardcoded 'Untitled subtask' with t('tasks:subtasks.untitled')

Addresses CodeRabbit and Auto Claude PR review feedback.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

---------

Co-authored-by: Test User <[email protected]>
Co-authored-by: Claude Opus 4.5 <[email protected]>
…ths (AndyMik90#827)

* fix: improve Claude CLI detection with Windows where.exe fallback

- Add where.exe as fallback detection method on Windows (step 4)
- Enables detection of Claude CLI in non-standard paths (e.g., nvm-windows)
- where.exe searches PATH + Windows Registry + current directory
- Add 8 comprehensive unit tests (6 sync + 2 async)
- Update JSDoc comments to reflect new detection priority

Fixes issue where Claude CLI installed via nvm-windows or other
non-standard locations cannot be detected by standard PATH search.
The where.exe utility is universally available on Windows and provides
more comprehensive executable resolution than basic PATH checks.

Signed-off-by: yc13 <[email protected]>

* fix: prefer .cmd/.exe extensions when where.exe returns multiple paths

When where.exe finds multiple paths for the same executable (e.g., both
'claude' and 'claude.cmd'), we now prefer paths with .cmd or .exe extensions
since Windows requires extensions to execute files.

This fixes Claude CLI detection for nvm-windows installations where the
executable is installed as claude.cmd but where.exe returns the extensionless
path first.

Signed-off-by: yc13 <[email protected]>

* fix: use execSync for .cmd/.bat files to handle paths with spaces on Windows

Root cause: execFileSync cannot handle paths with spaces in .cmd/.bat files,
even with shell:true. Windows requires shell to execute batch files.

Solution:
- Add shouldUseShell() utility to detect .cmd/.bat files
- Use execSync (not execFileSync) for .cmd/.bat files with quoted paths
- Use getSpawnOptions() for spawn() calls in env-handlers.ts
- Add comprehensive unit tests (15 test cases)

Technical details:
- execFileSync + shell:true: FAILS with space in path
- execSync with quoted path: WORKS correctly
- spawn with getSpawnOptions(): WORKS correctly

Files changed:
- env-utils.ts: Add shouldUseShell() and getSpawnOptions()
- cli-tool-manager.ts: Use execSync/execAsync for .cmd/.bat validation
- env-handlers.ts: Use getSpawnOptions() for spawn calls
- env-utils.test.ts: Add 15 unit tests

Fixes issue where Claude CLI in paths like 'D:\Program Files\nvm4w\nodejs\claude.cmd'
fails with error: 'D:\Program' is not recognized as internal or external command.

Signed-off-by: g1331 <[email protected]>

* fix: address PR review feedback - remove unused imports and fix comment numbering

- Remove unused imports (execFile, app, execSync, mockDirent)
- Fix duplicate step numbering in Claude CLI detection comments (5→6, 6→7)
- Add exec mock to child_process for async validation support
- Add shouldUseShell and getSpawnOptions mocks for Windows .cmd handling

* fix: make Windows AppData test cross-platform compatible

Use path component checks instead of full path string matching
to handle different path separators on different host OSes
(path.join uses host OS separator, not mocked process.platform)

* fix: address PR review security findings and code quality issues

Security fixes (HIGH):
- Add double quote ("), caret (^) to isSecurePath() dangerous chars
- Add Windows environment variable expansion pattern (%VAR%) detection
- Apply isSecurePath() validation to user-configured claudePath on Windows

Bug fixes (MEDIUM):
- Include .bat extension in where.exe result preference regex

Code quality (LOW):
- Export existsAsync from env-utils.ts, remove duplicate in cli-tool-manager.ts
- Remove unused test placeholder (it.skip for user config tests)
- Add existsAsync mock to env-utils mock in test file

All changes reviewed via Codex security audit.

* fix: add requestAnimationFrame polyfill for jsdom test environment

The terminal-copy-paste.test.ts uses jsdom environment and imports
useXterm hook which calls requestAnimationFrame for initial terminal
fit. jsdom doesn't provide this function by default, causing CI
failure on Linux.

This adds requestAnimationFrame/cancelAnimationFrame mocks to the
test setup file, matching the existing scrollIntoView polyfill pattern.

* fix: allow parentheses in Windows paths for Program Files (x86) locations

Remove standalone parentheses () from isSecurePath() dangerous character
detection. Parentheses are safe in Windows paths when properly quoted with
double quotes, and are required to support standard installation locations
like 'C:\Program Files (x86)\Claude\claude.exe'.

Security analysis:
- $() command substitution still blocked ($ character is in blocklist)
- &|<> command separators still blocked
- " quote breaking still blocked
- %VAR% expansion still blocked
- All other shell metacharacters still blocked

The code always uses double-quoted paths when shell:true, making
parentheses safe as literal characters in cmd.exe context.

Signed-off-by: g1331 <[email protected]>

---------

Signed-off-by: yc13 <[email protected]>
Signed-off-by: g1331 <[email protected]>
Co-authored-by: Andy <[email protected]>
* fix(ui): persist staged task state across app restarts

Previously, when a task was staged and the app restarted, the UI showed
the staging interface again instead of recognizing the task was already
staged. This happened because the condition order checked worktree
existence before checking the stagedInMainProject flag.

Changes:
- Fix condition priority in TaskReview.tsx to check stagedInMainProject
  before worktreeStatus.exists
- Add 'Mark Done Only' button to mark task complete without deleting
  worktree
- Add 'Review Again' button to clear staged state and re-show staging UI
- Add TASK_CLEAR_STAGED_STATE IPC handler to reset staged flags in
  implementation plan files
- Add handleReviewAgain callback in useTaskDetail hook

* feat(ui): add worktree cleanup dialog when marking task as done

When dragging a task to the 'done' column, if the task has a worktree:
- Shows a confirmation dialog asking about worktree cleanup
- Staged tasks: Can 'Keep Worktree' or 'Delete Worktree & Mark Done'
- Non-staged tasks: Must delete worktree or cancel (to prevent losing work)

Also fixes a race condition where discardWorktree sent 'backlog' status
before persistTaskStatus('done') could execute, causing task to briefly
appear in Done then jump back to Planning.

Added skipStatusChange parameter to discardWorktree IPC to prevent this.

* fix(frontend): Address PR AndyMik90#800 feedback - type errors, TOCTOU race, and i18n

- Fix TypeScript error in KanbanBoard by using isValidDropColumn type guard
  instead of incorrect includes() cast with TaskStatus
- Fix TOCTOU race condition in clearStagedState handler by using EAFP
  pattern (try/catch) instead of existsSync before read/write
- Fix task data refresh in handleReviewAgain by calling loadTasks after
  clearing staged state to reflect updated task data
- Add workspaceError reset in handleReviewAgain
- Add missing i18n translation keys for kanban worktree cleanup dialog
  (en/fr: worktreeCleanupTitle, worktreeCleanupStaged, worktreeCleanupNotStaged,
  keepWorktree, deleteWorktree)
- Remove unused Trash2 import and WorktreeStatus type import
- Remove unused worktreeStatus prop from StagedInProjectMessage

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
AndyMik90#765)

* refactor(ui): extract shared task form components for consistent modal sizing

Create shared components to unify TaskCreationWizard, TaskEditDialog, and
TaskDetailModal with consistent full-height modal sizing.

New shared components in task-form/:
- TaskModalLayout: Full-height modal matching TaskDetailModal (95vw, max-w-5xl)
- TaskFormFields: Common form fields (description, title, profile, classification)
- ClassificationFields: Task classification 2x2 grid dropdowns
- useImageUpload: Hook for image paste/drop handling

Benefits:
- All 3 task modals now have identical dimensions and positioning
- Reduced code duplication (1,938 → 1,651 lines total)
- TaskCreationWizard: 1,176 → 623 lines (47% reduction)
- TaskEditDialog: 762 → 293 lines (62% reduction)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address PR review feedback for task form components

- Fix HIGH: Pass descriptionRef from TaskCreationWizard to TaskFormFields
  to fix broken @ mention autocomplete positioning
- Fix MEDIUM: Add i18n translations for all hardcoded strings in:
  - ClassificationFields.tsx
  - TaskFormFields.tsx
  - TaskModalLayout.tsx
  - TaskCreationWizard.tsx (modal, draft, buttons, git options)
  - TaskEditDialog.tsx
- Fix MEDIUM: Correct isAutoProfile logic to only set true when
  profileId === 'auto' (not for all profiles with phase configs)
- Fix MEDIUM: Update handleAutocompleteSelect signature to accept
  optional fullPath parameter
- Fix LOW: Add proper setTimeout cleanup in useImageUpload.ts
- Fix LOW: Use queueMicrotask instead of setTimeout in
  handleAutocompleteSelect for cursor position restoration
- Fix LOW: Move fetch functions inside useEffect to fix
  exhaustive-deps warning
- Add English and French translations for all new i18n keys

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address all i18n violations and logic bug in task form components

i18n Fixes:
- Replace hardcoded error messages in TaskCreationWizard with translation keys
- Replace hardcoded error messages in TaskEditDialog with translation keys
- Use translated default placeholder in TaskFormFields
- Internationalize classification dropdown labels (category, priority,
  complexity, impact) using translation keys instead of hardcoded constants
- Add errorMessages parameter to useImageUpload hook for i18n support
- Pass translated error messages from TaskFormFields to useImageUpload

Logic Bug Fix:
- Fix image removal persistence in TaskEditDialog - always set attachedImages
  to persist removal when all images are deleted (was only set when length > 0)

Translation Updates:
- Add all missing translation keys to en/tasks.json and fr/tasks.json:
  - form.errors.* (descriptionRequired, maxImagesReached, etc.)
  - form.descriptionPlaceholder
  - form.classification.values.* (all classification option labels)
  - wizard.descriptionPlaceholder, wizard.errors.*
  - edit.errors.*

Other:
- Log image processing errors to console for debugging (CMT-001)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address memory leak and performance issues in task form components

- Add isMounted flag to useEffect in TaskCreationWizard to prevent state
  updates after component unmount (CMT-QUALITY-001)
- Wrap errorMessages merge in useMemo in useImageUpload to prevent
  unnecessary useCallback invalidation on re-renders (CMT-PERF-001)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: include phaseModels and phaseThinking in hasChanges check

TaskEditDialog's hasChanges logic was missing phaseModels and phaseThinking
comparisons, which could cause silent data loss when users only modified
phase configuration without changing other fields.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: preserve phaseModels and phaseThinking when editing non-autoProfile tasks

When editing a task with custom model/thinkingLevel that isn't an autoProfile,
the dialog was resetting phaseModels and phaseThinking to defaults instead of
preserving the task's actual values from metadata. This could cause data loss.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
* fix QA validation back to coding

* fix/worktree-branch-selection

* fix/workspace-merge

* fix/cleanup-worktree-after-done

* fix: address PR review feedback

- Fix workspace.py: move git add and resolved_files tracking inside content check blocks
- Fix workspace.py: add warning when merge-base fails (fall back to semantic analysis)
- Batch git add operations for efficiency
- Remove debug useEffect and console.log statements from KanbanBoard.tsx
- Consolidate duplicate handleStatusChange functions into single handler
- Remove debug console.log from WorktreeCleanupDialog.tsx
- Add i18n translations for WorktreeCleanupDialog (en/fr)
- Make _get_base_branch_from_metadata public (keep alias for compatibility)
- Add toast notification for worktree cleanup failures
- Add 30s timeout to git execFileSync calls for protection

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: return failure when git add fails in direct copy path

When git add fails after writing files in the diverged_but_no_conflicts
direct copy path, now returns success: False with error details instead
of silently returning success: True with files listed as resolved.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address LOW severity PR review findings

- Add debug logging when branch name fallback is used (NEW-004)
- Add retry button to worktree cleanup dialog on failure (NEW-003)
- Add error state propagation to WorktreeCleanupDialog
- Add French translation for retry button

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address remaining PR review findings for better code quality

- NEW-002: Add warning when branch deletion uses fallback pattern
  - Track when fallback branch name is used
  - Log specific warning if fallback pattern fails to match actual branch
  - Helps identify potential orphaned branches needing manual cleanup

- NEW-003: Propagate actual error from forceCompleteTask
  - Change return type from boolean to PersistStatusResult
  - Show actual backend error in dialog instead of generic message
  - Improves debugging and user experience

- CMT-LINT: Change console.log to console.warn in worktree cleanup
  - Aligns with ESLint config (no-console rule)
  - Debug logging now uses appropriate log level

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: prevent requestAnimationFrame test flakiness in useXterm.test.ts

- Use fake timers (vi.useFakeTimers) to control async behavior
- Clear timers in afterEach before restoring mocks to prevent callbacks
  from firing after requestAnimationFrame mock is torn down
- Replace setTimeout promises with vi.advanceTimersByTimeAsync
- Add cancelAnimationFrame mock for completeness

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: use subshells in pre-commit to prevent worktree corruption

Wrap both Python and frontend check sections in subshells to isolate
directory changes (cd commands) and prevent git worktree HEAD corruption
during pre-commit hook execution.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: use console.warn for limbo state log message

Change console.log to console.warn for the limbo state recovery message
to match project logging standards.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: add worktree context preservation to pre-commit hook

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: address PR review findings for code quality

- NEW-005 MEDIUM: Track skipped files in workspace.py direct-copy path
  - Add skipped_files list to track files that fail to copy
  - Include skipped_count in stats and skipped_files in result
  - Return success: False when files are skipped
  - Print warning about skipped files for user visibility

- QUAL-001 LOW: Add .catch() to handleDragEnd async calls
  - Prevent unhandled promise rejections in drag-and-drop

- TEST-001 LOW: Isolate requestAnimationFrame mock in useXterm.test.ts
  - Move mock setup into beforeAll/afterAll hooks
  - Store and restore original functions for proper test isolation

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

* fix: add path traversal protection to worktree path functions

Add defense-in-depth validation to findTaskWorktree() and
findTerminalWorktree() to prevent directory traversal attacks.

- Add isPathWithinBase() helper to validate resolved paths
- Validate that specId/name doesn't escape project directory
- Return null and log error if path traversal is detected
- Both new and legacy path locations are validated

This addresses CodeRabbit security review finding about ensuring
worktree paths stay within the project root before git operations.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <[email protected]>

---------

Co-authored-by: Claude Opus 4.5 <[email protected]>
Co-authored-by: Test User <[email protected]>
…90#889)

* fix: properly quote Windows .cmd/.bat paths in spawn() calls

Fixes Claude Code detection failure when Windows username contains spaces
(e.g., C:\Users\First Last\AppData\Roaming\npm\claude.cmd).

When spawn() is called with shell:true for .cmd/.bat files, the command
path must be quoted to prevent the shell from breaking at spaces. Without
quoting, a path like "C:\Users\First Last\..." is parsed as:
  - Command: "C:\Users\First"
  - Args: "Last\..."

Changes:
- Add getSpawnCommand() to wrap .cmd/.bat paths in quotes on Windows
- Update spawn() calls to use getSpawnCommand() for proper quoting
- Add comprehensive tests for getSpawnCommand() with space handling

Fixes ACS-176

* refactor: make shouldUseShell/getSpawnCommand robust to already-quoted paths

- shouldUseShell() now correctly detects .cmd/.bat extensions even when
  the path is already wrapped in quotes
- getSpawnCommand() is now idempotent - calling it multiple times or with
  an already-quoted command returns the same result
- Both functions now trim whitespace before processing

This makes the public API more robust to edge cases and prevents issues
if callers accidentally pass quoted commands.

* refactor: make getSpawnCommand consistently trim whitespace on all platforms

Previously, getSpawnCommand() only trimmed whitespace for Windows shell
cases (.cmd/.bat files) but returned the original untrimmed command for
non-shell cases (macOS/Linux). This caused inconsistent behavior.

Now getSpawnCommand() always returns a trimmed value regardless of platform,
ensuring consistent whitespace handling for all callers.

Also added tests to verify whitespace trimming on macOS and Linux platforms.

* fix: address PR review findings for getSpawnCommand

- Add quote stripping for non-.cmd/.bat files (.exe, extensionless) to
  prevent returning quoted commands with shell:false
- Update validateClaude/validateClaudeAsync to use getSpawnCommand()
  instead of manual quoting (DRY principle)
- Add tests for quote-stripping behavior on .exe and extensionless files

These changes make getSpawnCommand() more robust and ensure consistent
behavior across all file types, while eliminating duplicate quoting logic.

* test: add getSpawnCommand mock to cli-tool-manager tests

The env-utils mock in cli-tool-manager.test.ts was missing getSpawnCommand,
causing tests to fail when validateClaude() tried to call it.

Added getSpawnCommand mock that mirrors the actual implementation:
- On Windows: quotes .cmd/.bat files idempotently
- For other files: returns trimmed value (strips quotes if present)

---------

Co-authored-by: StillKnotKnown <[email protected]>
Co-authored-by: Andy <[email protected]>
…with in-progress review (ACS-200) (AndyMik90#890)

* fix(github-prs): show running review state when switching back to PR with in-progress review (ACS-200)

Fixes issue where navigating away from a PR with an in-progress AI review
and switching back would hide the running review state. The user had to
click "Followup Review" to reveal the in-progress review.

Root cause: prStatus computation checked reviewResult before isReviewing.
Since reviewResult is null during an active review, it returned 'not_reviewed'
status, hiding the running review.

Solution: Check isReviewing FIRST before reviewResult in the prStatus
computation. Also add 'reviewing' to the PRStatus type union.

Test coverage:
- PRDetail.test.tsx: 20 tests for prStatus computation logic
- ReviewStatusTree.test.tsx: 21 tests for component handling

Note: Pre-existing TypeScript errors with @lydell/node-pty block typecheck hook.
Tests pass via vitest (41 tests passed).

* fix: add @preload path alias and fix TypeScript errors in test files

- Add @preload/* path alias to tsconfig.json for @preload/api modules
- Add @ts-ignore for useGitHubPRs imports (vitest resolves correctly)
- Fix implicit any type in filter callback

* fix: change @ts-ignore to @ts-expect-error and remove unused imports

- Use @ts-expect-error instead of @ts-ignore for ESLint compliance
- Remove unused imports (renderHook, act, useState, vi, beforeEach)

* fix(acs-200): ensure PR review state consistency when switching PRs

Fixes a bug where switching between PRs would show stale review results
from the previously selected PR.

Root cause: Two different sources of truth for PR review state:
- Hook derived reviewResult, isReviewing, reviewProgress
- Component locally computed previousReviewResult and startedAt

Changes:
- Add previousReviewResult and startedAt to hook's return values
- Remove local computation in GitHubPRs.tsx
- All review state now comes from single source (hook's selectedPRReviewState)
- Add startedAt prop to all ReviewStatusTree tests

Related to: PR review started timestamp fix (same data flow issue)

Files modified:
- useGitHubPRs.ts: Add previousReviewResult/startedAt to interface and return
- GitHubPRs.tsx: Use hook values instead of local computation
- ReviewStatusTree.test.tsx: Add startedAt prop to all test cases

* fix(test): remove unused container variables in ReviewStatusTree tests

---------

Co-authored-by: StillKnotKnown <[email protected]>
Co-authored-by: Andy <[email protected]>
Removes monorepo codebase to improve maintainability

Eliminates the entire codebase, including backend, frontend, libraries, and design system packages, as part of a structural refactor.

Supports improved readability and maintainability by clearing out previous architecture, likely in preparation for a new, cleaner code structure or repository reorganization.
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Mar 3, 2026

Important

Review skipped

Too many files!

This PR contains 295 files, which is 145 over the limit of 150.

📥 Commits

Reviewing files that changed from the base of the PR and between 60c4890 and e4b7d84.

⛔ Files ignored due to path filters (5)
  • .design-system/package-lock.json is excluded by !**/package-lock.json, !**/package-lock.json
  • .design-system/pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
  • .design-system/public/vite.svg is excluded by !**/*.svg
  • .github/assets/Auto-Claude-Kanban.png is excluded by !**/*.png
  • .github/assets/Auto-Claude-roadmap.png is excluded by !**/*.png
📒 Files selected for processing (295)
  • .claude/commands/setup-statusline.md
  • .design-system/.gitignore
  • .design-system/REFACTORING_SUMMARY.md
  • .design-system/package.json
  • .design-system/postcss.config.js
  • .design-system/src/App.tsx
  • .design-system/src/App.tsx.backup
  • .design-system/src/App.tsx.original
  • .design-system/src/animations/constants.ts
  • .design-system/src/animations/index.ts
  • .design-system/src/components/Avatar.tsx
  • .design-system/src/components/Badge.tsx
  • .design-system/src/components/Button.tsx
  • .design-system/src/components/Card.tsx
  • .design-system/src/components/Input.tsx
  • .design-system/src/components/ProgressCircle.tsx
  • .design-system/src/components/Toggle.tsx
  • .design-system/src/components/index.ts
  • .design-system/src/demo-cards/CalendarCard.tsx
  • .design-system/src/demo-cards/IntegrationsCard.tsx
  • .design-system/src/demo-cards/MilestoneCard.tsx
  • .design-system/src/demo-cards/ProfileCard.tsx
  • .design-system/src/demo-cards/ProjectStatusCard.tsx
  • .design-system/src/demo-cards/TeamMembersCard.tsx
  • .design-system/src/demo-cards/index.ts
  • .design-system/src/lib/icons.ts
  • .design-system/src/lib/utils.ts
  • .design-system/src/main.tsx
  • .design-system/src/styles.css
  • .design-system/src/theme/ThemeSelector.tsx
  • .design-system/src/theme/constants.ts
  • .design-system/src/theme/index.ts
  • .design-system/src/theme/types.ts
  • .design-system/src/theme/useTheme.ts
  • .design-system/tsconfig.json
  • .design-system/vite.config.ts
  • .github/FUNDING.yml
  • .github/ISSUE_TEMPLATE/docs.yml
  • .github/ISSUE_TEMPLATE/question.yml
  • .github/PULL_REQUEST_TEMPLATE.md
  • .github/dependabot.yml
  • .github/release-drafter.yml
  • .github/workflows/beta-release.yml
  • .github/workflows/build-prebuilds.yml
  • .github/workflows/ci.yml
  • .github/workflows/discord-release.yml
  • .github/workflows/issue-auto-label.yml
  • .github/workflows/lint.yml
  • .github/workflows/pr-auto-label.yml
  • .github/workflows/pr-status-check.yml
  • .github/workflows/pr-status-gate.yml
  • .github/workflows/prepare-release.yml
  • .github/workflows/quality-security.yml
  • .github/workflows/release.yml
  • .github/workflows/stale.yml
  • .github/workflows/test-on-tag.yml
  • .github/workflows/validate-version.yml
  • .github/workflows/welcome.yml
  • .gitignore
  • .husky/commit-msg
  • .husky/pre-commit
  • .pre-commit-config.yaml
  • .secretsignore.example
  • .vscode/launch.json
  • .vscode/settings.json
  • CHANGELOG.md
  • CLA.md
  • CLAUDE.md
  • CONTRIBUTING.md
  • LICENSE
  • README.md
  • RELEASE.md
  • apps/backend/.env.example
  • apps/backend/.gitignore
  • apps/backend/agent.py
  • apps/backend/agents/README.md
  • apps/backend/agents/__init__.py
  • apps/backend/agents/base.py
  • apps/backend/agents/coder.py
  • apps/backend/agents/memory_manager.py
  • apps/backend/agents/planner.py
  • apps/backend/agents/session.py
  • apps/backend/agents/test_refactoring.py
  • apps/backend/agents/tools_pkg/__init__.py
  • apps/backend/agents/tools_pkg/models.py
  • apps/backend/agents/tools_pkg/registry.py
  • apps/backend/agents/tools_pkg/tools/__init__.py
  • apps/backend/agents/tools_pkg/tools/memory.py
  • apps/backend/agents/tools_pkg/tools/progress.py
  • apps/backend/agents/tools_pkg/tools/qa.py
  • apps/backend/agents/utils.py
  • apps/backend/analysis/__init__.py
  • apps/backend/analysis/analyzer.py
  • apps/backend/analysis/analyzers/__init__.py
  • apps/backend/analysis/analyzers/base.py
  • apps/backend/analysis/analyzers/context/__init__.py
  • apps/backend/analysis/analyzers/context/api_docs_detector.py
  • apps/backend/analysis/analyzers/context/auth_detector.py
  • apps/backend/analysis/analyzers/context/env_detector.py
  • apps/backend/analysis/analyzers/context/migrations_detector.py
  • apps/backend/analysis/analyzers/context/monitoring_detector.py
  • apps/backend/analysis/analyzers/context/services_detector.py
  • apps/backend/analysis/analyzers/context_analyzer.py
  • apps/backend/analysis/analyzers/database_detector.py
  • apps/backend/analysis/analyzers/framework_analyzer.py
  • apps/backend/analysis/analyzers/port_detector.py
  • apps/backend/analysis/analyzers/project_analyzer_module.py
  • apps/backend/analysis/analyzers/route_detector.py
  • apps/backend/analysis/analyzers/service_analyzer.py
  • apps/backend/analysis/ci_discovery.py
  • apps/backend/analysis/insight_extractor.py
  • apps/backend/analysis/project_analyzer.py
  • apps/backend/analysis/risk_classifier.py
  • apps/backend/analysis/security_scanner.py
  • apps/backend/analyzer.py
  • apps/backend/auto_claude_tools.py
  • apps/backend/ci_discovery.py
  • apps/backend/cli/__init__.py
  • apps/backend/cli/batch_commands.py
  • apps/backend/cli/build_commands.py
  • apps/backend/cli/followup_commands.py
  • apps/backend/cli/main.py
  • apps/backend/cli/spec_commands.py
  • apps/backend/cli/utils.py
  • apps/backend/cli/workspace_commands.py
  • apps/backend/client.py
  • apps/backend/commit_message.py
  • apps/backend/context/__init__.py
  • apps/backend/context/builder.py
  • apps/backend/context/categorizer.py
  • apps/backend/context/constants.py
  • apps/backend/context/graphiti_integration.py
  • apps/backend/context/keyword_extractor.py
  • apps/backend/context/main.py
  • apps/backend/context/models.py
  • apps/backend/context/pattern_discovery.py
  • apps/backend/context/search.py
  • apps/backend/context/serialization.py
  • apps/backend/context/service_matcher.py
  • apps/backend/core/agent.py
  • apps/backend/core/auth.py
  • apps/backend/core/client.py
  • apps/backend/core/debug.py
  • apps/backend/core/model_config.py
  • apps/backend/core/phase_event.py
  • apps/backend/core/progress.py
  • apps/backend/core/simple_client.py
  • apps/backend/core/workspace.py
  • apps/backend/core/workspace/README.md
  • apps/backend/core/workspace/__init__.py
  • apps/backend/core/workspace/display.py
  • apps/backend/core/workspace/finalization.py
  • apps/backend/core/workspace/git_utils.py
  • apps/backend/core/workspace/models.py
  • apps/backend/core/workspace/setup.py
  • apps/backend/core/worktree.py
  • apps/backend/critique.py
  • apps/backend/debug.py
  • apps/backend/graphiti_config.py
  • apps/backend/graphiti_providers.py
  • apps/backend/ideation/__init__.py
  • apps/backend/ideation/analyzer.py
  • apps/backend/ideation/config.py
  • apps/backend/ideation/formatter.py
  • apps/backend/ideation/generator.py
  • apps/backend/ideation/output_streamer.py
  • apps/backend/ideation/phase_executor.py
  • apps/backend/ideation/prioritizer.py
  • apps/backend/ideation/project_index_phase.py
  • apps/backend/ideation/runner.py
  • apps/backend/ideation/types.py
  • apps/backend/implementation_plan/__init__.py
  • apps/backend/implementation_plan/enums.py
  • apps/backend/implementation_plan/factories.py
  • apps/backend/implementation_plan/phase.py
  • apps/backend/implementation_plan/plan.py
  • apps/backend/implementation_plan/subtask.py
  • apps/backend/implementation_plan/verification.py
  • apps/backend/init.py
  • apps/backend/insight_extractor.py
  • apps/backend/integrations/graphiti/__init__.py
  • apps/backend/integrations/graphiti/config.py
  • apps/backend/integrations/graphiti/memory.py
  • apps/backend/integrations/graphiti/migrate_embeddings.py
  • apps/backend/integrations/graphiti/providers.py
  • apps/backend/integrations/graphiti/providers_pkg/__init__.py
  • apps/backend/integrations/graphiti/providers_pkg/embedder_providers/__init__.py
  • apps/backend/integrations/graphiti/providers_pkg/embedder_providers/google_embedder.py
  • apps/backend/integrations/graphiti/providers_pkg/embedder_providers/ollama_embedder.py
  • apps/backend/integrations/graphiti/providers_pkg/exceptions.py
  • apps/backend/integrations/graphiti/providers_pkg/factory.py
  • apps/backend/integrations/graphiti/providers_pkg/llm_providers/__init__.py
  • apps/backend/integrations/graphiti/providers_pkg/llm_providers/anthropic_llm.py
  • apps/backend/integrations/graphiti/providers_pkg/llm_providers/azure_openai_llm.py
  • apps/backend/integrations/graphiti/providers_pkg/llm_providers/google_llm.py
  • apps/backend/integrations/graphiti/providers_pkg/llm_providers/ollama_llm.py
  • apps/backend/integrations/graphiti/providers_pkg/llm_providers/openrouter_llm.py
  • apps/backend/integrations/graphiti/providers_pkg/models.py
  • apps/backend/integrations/graphiti/providers_pkg/utils.py
  • apps/backend/integrations/graphiti/providers_pkg/validators.py
  • apps/backend/integrations/graphiti/queries_pkg/__init__.py
  • apps/backend/integrations/graphiti/queries_pkg/client.py
  • apps/backend/integrations/graphiti/queries_pkg/graphiti.py
  • apps/backend/integrations/graphiti/queries_pkg/kuzu_driver_patched.py
  • apps/backend/integrations/graphiti/queries_pkg/queries.py
  • apps/backend/integrations/graphiti/queries_pkg/schema.py
  • apps/backend/integrations/graphiti/queries_pkg/search.py
  • apps/backend/integrations/graphiti/test_graphiti_memory.py
  • apps/backend/integrations/graphiti/test_ollama_embedding_memory.py
  • apps/backend/integrations/graphiti/test_provider_naming.py
  • apps/backend/integrations/linear/__init__.py
  • apps/backend/integrations/linear/config.py
  • apps/backend/integrations/linear/updater.py
  • apps/backend/linear_config.py
  • apps/backend/linear_integration.py
  • apps/backend/linear_updater.py
  • apps/backend/memory/__init__.py
  • apps/backend/memory/codebase_map.py
  • apps/backend/memory/graphiti_helpers.py
  • apps/backend/memory/main.py
  • apps/backend/memory/paths.py
  • apps/backend/memory/patterns.py
  • apps/backend/memory/sessions.py
  • apps/backend/memory/summary.py
  • apps/backend/merge/__init__.py
  • apps/backend/merge/ai_resolver.py
  • apps/backend/merge/ai_resolver/README.md
  • apps/backend/merge/ai_resolver/__init__.py
  • apps/backend/merge/ai_resolver/claude_client.py
  • apps/backend/merge/ai_resolver/context.py
  • apps/backend/merge/ai_resolver/parsers.py
  • apps/backend/merge/ai_resolver/prompts.py
  • apps/backend/merge/ai_resolver/resolver.py
  • apps/backend/merge/auto_merger.py
  • apps/backend/merge/auto_merger/__init__.py
  • apps/backend/merge/auto_merger/context.py
  • apps/backend/merge/auto_merger/helpers.py
  • apps/backend/merge/auto_merger/merger.py
  • apps/backend/merge/auto_merger/strategies/__init__.py
  • apps/backend/merge/auto_merger/strategies/base_strategy.py
  • apps/backend/merge/auto_merger/strategies/hooks_strategy.py
  • apps/backend/merge/auto_merger/strategies/import_strategy.py
  • apps/backend/merge/auto_merger/strategies/ordering_strategy.py
  • apps/backend/merge/auto_merger/strategies/props_strategy.py
  • apps/backend/merge/compatibility_rules.py
  • apps/backend/merge/conflict_analysis.py
  • apps/backend/merge/conflict_explanation.py
  • apps/backend/merge/conflict_resolver.py
  • apps/backend/merge/file_evolution.py
  • apps/backend/merge/file_evolution/baseline_capture.py
  • apps/backend/merge/file_evolution/evolution_queries.py
  • apps/backend/merge/file_evolution/modification_tracker.py
  • apps/backend/merge/file_evolution/tracker.py
  • apps/backend/merge/file_merger.py
  • apps/backend/merge/file_timeline.py
  • apps/backend/merge/git_utils.py
  • apps/backend/merge/install_hook.py
  • apps/backend/merge/merge_pipeline.py
  • apps/backend/merge/models.py
  • apps/backend/merge/orchestrator.py
  • apps/backend/merge/prompts.py
  • apps/backend/merge/semantic_analysis/__init__.py
  • apps/backend/merge/semantic_analysis/comparison.py
  • apps/backend/merge/semantic_analysis/js_analyzer.py
  • apps/backend/merge/semantic_analysis/models.py
  • apps/backend/merge/semantic_analysis/python_analyzer.py
  • apps/backend/merge/semantic_analysis/regex_analyzer.py
  • apps/backend/merge/semantic_analyzer.py
  • apps/backend/merge/timeline_git.py
  • apps/backend/merge/timeline_persistence.py
  • apps/backend/merge/timeline_tracker.py
  • apps/backend/merge/tracker_cli.py
  • apps/backend/merge/types.py
  • apps/backend/ollama_model_detector.py
  • apps/backend/phase_config.py
  • apps/backend/planner_lib/__init__.py
  • apps/backend/planner_lib/context.py
  • apps/backend/planner_lib/main.py
  • apps/backend/planner_lib/utils.py
  • apps/backend/prediction/__init__.py
  • apps/backend/prediction/checklist_generator.py
  • apps/backend/prediction/formatter.py
  • apps/backend/prediction/main.py
  • apps/backend/prediction/memory_loader.py
  • apps/backend/prediction/models.py
  • apps/backend/prediction/patterns.py
  • apps/backend/prediction/predictor.py
  • apps/backend/prediction/risk_analyzer.py
  • apps/backend/progress.py
  • apps/backend/project/__init__.py
  • apps/backend/project/command_registry.py
  • apps/backend/project/command_registry/README.md
  • apps/backend/project/command_registry/__init__.py
  • apps/backend/project/command_registry/cloud.py
  • apps/backend/project/command_registry/code_quality.py

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@CLAassistant
Copy link

CLAassistant commented Mar 3, 2026

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
4 out of 6 committers have signed the CLA.

✅ StillKnotKnown
✅ AndyMik90
✅ MaximStone
✅ g1331
❌ Dmagee81
❌ aslaker
You have signed the CLA already but the status is still pending? Let us recheck it.

Copy link
Contributor

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🎉 Thanks for your first PR!

A maintainer will review it soon. Please make sure:

  • Your branch is synced with develop
  • CI checks pass
  • You've followed our contribution guide

Welcome to the Auto Claude community!

@gemini-code-assist
Copy link
Contributor

Summary of Changes

Hello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request executes a sweeping deletion of nearly all existing project files. It systematically removes the entire design system, build configurations, CI/CD pipelines, Git hooks, and core documentation. Furthermore, substantial components of the backend agent framework, including environment configurations and agent-specific modules, have been eliminated. The changes fundamentally reset the repository's content, suggesting a complete overhaul or a test operation.

Highlights

  • Comprehensive File Deletion: This pull request removes a vast majority of the repository's files, effectively resetting its content.
  • Design System Removal: The entire .design-system directory, encompassing UI components, theming, animations, and build configurations, has been deleted.
  • Project Configuration and Documentation Cleanup: All .github workflows, issue/PR templates, Dependabot, Release Drafter configurations, Git hooks (.husky), and core project documentation (CLA.md, CLAUDE.md, CONTRIBUTING.md, LICENSE, README.md, RELEASE.md) have been removed.
  • Backend Agent Framework Elimination: Significant portions of the apps/backend directory, including environment examples, gitignore, and key agent modules (agent.py, agents/coder.py, agents/memory_manager.py, agents/planner.py), have been deleted.
Changelog
  • .claude/commands/setup-statusline.md
    • Removed file.
  • .design-system/.gitignore
    • Removed file.
  • .design-system/REFACTORING_SUMMARY.md
    • Removed file.
  • .design-system/package-lock.json
    • Removed file.
  • .design-system/package.json
    • Removed file.
  • .design-system/pnpm-lock.yaml
    • Removed file.
  • .design-system/postcss.config.js
    • Removed file.
  • .design-system/public/vite.svg
    • Removed file.
  • .design-system/src/App.tsx
    • Removed file.
  • .design-system/src/App.tsx.backup
    • Removed file.
  • .design-system/src/App.tsx.original
    • Removed file.
  • .design-system/src/animations/constants.ts
    • Removed file.
  • .design-system/src/animations/index.ts
    • Removed file.
  • .design-system/src/components/Avatar.tsx
    • Removed file.
  • .design-system/src/components/Badge.tsx
    • Removed file.
  • .design-system/src/components/Button.tsx
    • Removed file.
  • .design-system/src/components/Card.tsx
    • Removed file.
  • .design-system/src/components/Input.tsx
    • Removed file.
  • .design-system/src/components/ProgressCircle.tsx
    • Removed file.
  • .design-system/src/components/Toggle.tsx
    • Removed file.
  • .design-system/src/components/index.ts
    • Removed file.
  • .design-system/src/demo-cards/CalendarCard.tsx
    • Removed file.
  • .design-system/src/demo-cards/IntegrationsCard.tsx
    • Removed file.
  • .design-system/src/demo-cards/MilestoneCard.tsx
    • Removed file.
  • .design-system/src/demo-cards/ProfileCard.tsx
    • Removed file.
  • .design-system/src/demo-cards/ProjectStatusCard.tsx
    • Removed file.
  • .design-system/src/demo-cards/TeamMembersCard.tsx
    • Removed file.
  • .design-system/src/demo-cards/index.ts
    • Removed file.
  • .design-system/src/lib/icons.ts
    • Removed file.
  • .design-system/src/lib/utils.ts
    • Removed file.
  • .design-system/src/main.tsx
    • Removed file.
  • .design-system/src/styles.css
    • Removed file.
  • .design-system/src/theme/ThemeSelector.tsx
    • Removed file.
  • .design-system/src/theme/constants.ts
    • Removed file.
  • .design-system/src/theme/index.ts
    • Removed file.
  • .design-system/src/theme/types.ts
    • Removed file.
  • .design-system/src/theme/useTheme.ts
    • Removed file.
  • .design-system/tsconfig.json
    • Removed file.
  • .design-system/vite.config.ts
    • Removed file.
  • .github/FUNDING.yml
    • Removed file.
  • .github/ISSUE_TEMPLATE/docs.yml
    • Removed file.
  • .github/ISSUE_TEMPLATE/question.yml
    • Removed file.
  • .github/PULL_REQUEST_TEMPLATE.md
    • Removed file.
  • .github/dependabot.yml
    • Removed file.
  • .github/release-drafter.yml
    • Removed file.
  • .gitignore
    • Removed file.
  • .husky/commit-msg
    • Removed file.
  • .husky/pre-commit
    • Removed file.
  • .pre-commit-config.yaml
    • Removed file.
  • .secretsignore.example
    • Removed file.
  • CHANGELOG.md
    • Removed file.
  • CLA.md
    • Removed file.
  • CLAUDE.md
    • Removed file.
  • CONTRIBUTING.md
    • Removed file.
  • LICENSE
    • Removed file.
  • README.md
    • Removed file.
  • RELEASE.md
    • Removed file.
  • apps/backend/.env.example
    • Removed file.
  • apps/backend/.gitignore
    • Removed file.
  • apps/backend/agent.py
    • Removed file.
  • apps/backend/agents/README.md
    • Removed file.
  • apps/backend/agents/init.py
    • Updated __init__.py to explicitly import sync_spec_to_source for CodeQL analysis and renamed sync_plan_to_source to sync_spec_to_source in exports and dynamic imports.
  • apps/backend/agents/coder.py
    • Removed file.
  • apps/backend/agents/memory_manager.py
    • Removed file.
  • apps/backend/agents/planner.py
    • Removed file.
Ignored Files
  • Ignored by pattern: .github/workflows/** (16)
    • .github/workflows/beta-release.yml
    • .github/workflows/build-prebuilds.yml
    • .github/workflows/ci.yml
    • .github/workflows/discord-release.yml
    • .github/workflows/issue-auto-label.yml
    • .github/workflows/lint.yml
    • .github/workflows/pr-auto-label.yml
    • .github/workflows/pr-status-check.yml
    • .github/workflows/pr-status-gate.yml
    • .github/workflows/prepare-release.yml
    • .github/workflows/quality-security.yml
    • .github/workflows/release.yml
    • .github/workflows/stale.yml
    • .github/workflows/test-on-tag.yml
    • .github/workflows/validate-version.yml
    • .github/workflows/welcome.yml
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces a massive number of file deletions that appear to be highly destructive to the project. It removes the project's license, README, .gitignore, all CI/CD and pre-commit hooks, the entire design system, and core backend agent logic. These changes will break the build, render the project unusable, and create serious legal issues regarding licensing. This PR seems to be a mistake and should be closed immediately. If this is an intentional large-scale refactoring, it is incomplete and has been submitted in a broken state.

I am having trouble creating individual review comments. Click here to see my feedback.

.gitignore (1-165)

critical

The root .gitignore file has been deleted. This is a critical issue that will cause generated files, build artifacts, environment files (.env), and IDE settings to be tracked by Git. This will bloat the repository and can lead to sensitive information like API keys being accidentally committed.

LICENSE (1-661)

critical

The project's license file (AGPL-3.0) has been deleted. This is a critical issue as it removes the open-source licensing terms under which the software is distributed and contributions are accepted. Without a license, the project becomes proprietary by default, which has significant legal implications for all users and contributors.

apps/backend/agents/init.py (39)

critical

This file is modified to rename sync_plan_to_source to sync_spec_to_source. However, this change is part of a much larger, broken refactoring. This __init__.py file attempts to lazy-load functions and constants from several other modules in this directory (base.py, coder.py, memory_manager.py, planner.py) that are all being deleted in this same pull request. This will lead to multiple ModuleNotFoundError exceptions at runtime, rendering the entire agents package unusable.

apps/backend/agents/base.py (1-15)

critical

This file is deleted, but apps/backend/agents/__init__.py still attempts to import from it via its lazy-loading mechanism. This will cause a ModuleNotFoundError at runtime when AUTO_CONTINUE_DELAY_SECONDS or HUMAN_INTERVENTION_FILE are accessed, breaking the application.

apps/backend/agents/coder.py (1-516)

critical

This file, which contains the core run_autonomous_agent logic, has been deleted. However, apps/backend/agents/__init__.py still attempts to lazy-load from it. This will cause a ModuleNotFoundError at runtime, breaking the main functionality of the backend.

.pre-commit-config.yaml (1-140)

high

The deletion of the pre-commit configuration, along with the Husky hooks, removes all automated quality checks that run before commits. This includes Python and TypeScript linting, formatting, and running tests. Removing these checks significantly increases the risk of introducing bugs, inconsistencies, and style violations into the codebase.

Comment on lines +173 to 183
metavar="TITLE",
help="With --create-pr: custom PR title (default: generated from spec name)",
)
parser.add_argument(
"--pr-draft",
action="store_true",
help="With --create-pr: create as draft PR",
)

# Merge options
parser.add_argument(
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: The application will fail to start due to an import from workspace_commands.py, a file that was deleted in this PR.
Severity: CRITICAL

Suggested Fix

Restore the workspace_commands.py file that was deleted from the apps/backend/cli/ directory. Alternatively, if the functionality is no longer required, remove the import statement for handle_create_pr_command and its usage within apps/backend/cli/main.py.

Prompt for AI Agent
Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.

Location: apps/backend/cli/main.py#L154-L183

Potential issue: The file `apps/backend/cli/main.py` attempts to import
`handle_create_pr_command` from `./workspace_commands`. However, the file
`apps/backend/cli/workspace_commands.py` was deleted as part of this pull request. This
will cause a `ModuleNotFoundError` when the application's `main.py` module is loaded,
preventing the entire CLI application from starting. The import is unconditional, and
the code that calls the missing function is triggered by the `--create-pr` argument,
ensuring the failure will occur.

Did we get this right? 👍 / 👎 to inform future reviews.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.