Repository navigation
Production hardening and redesign - #1
Merged
Merged
Conversation
- Dependency overrides for undici, postcss and deepmerge-ts: npm audit now reports 0 vulnerabilities without major-version upgrades - Schema: org quotas and suspension, session versioning and account fields, rate-limit buckets, security event log, invitations, monthly spend ledger, executor heartbeats, and hot-path indexes - Boot-time environment validation with production rules - Role-permission matrix shared by all server modules - next.config: standalone output, security headers, no X-Powered-By, server-action body limit - docs/PRODUCTION.md (contracts and ownership) and docs/DESIGN.md
Accounts and authentication: - Self-serve sign-up (open/invite/closed), team invitations, member roles and removal, change password, sign out everywhere - Sign-in throttling and lockout per account and per IP, constant-time on every path, demo workspace refused unless DEMO_MODE - Short sliding sessions with an absolute cap, revocable via a session version, secret rotation support, security audit log Platform security: - Postgres-backed rate limiter shared across instances - Nonce-based CSP plus static security headers - Client-safe error messages with a log reference; secret redaction - Credential vault bound to org and name, with key rotation - Live URL fetching restricted to hosts the run actually discovered - Poll and download routes hardened Engine guardrails: - Role checks, monthly spend caps, per-worker and per-org run limits, fair scheduling across organizations, platform ceilings on blueprints Operations: - Runs execute in a dedicated worker process in every environment; the web server only enqueues (npm run dev starts both) - Graceful shutdown returns leases without consuming a retry - Health and readiness endpoints, structured logging, retention sweeps - Dockerfile, compose stack, CI pipeline, deployment and security docs Design foundation: - New tokens, type scale, motion and materials; frosted global top nav replacing the sidebar; restyled shared components and primitives
Rebuilds every page on the new design system: large confident typography instead of boxes and badges, one blue accent, pill buttons with a single primary per view, hairline rows, generous whitespace and dot-plus-word statuses. - New public landing page at "/" with an original product showcase built from real markup, plus redesigned sign-in, sign-up and invite pages and an Open Graph image - Workforce leads with one "needs you" band that shows the full email payload, including recipients, before anything is approved - Hire flow reads as a conversation ending in a candidate profile - Worker profile uses a local nav across its nine tabs; run detail, deliverables and jobs render work as readable documents - Settings becomes an account area: workspace and budget, members and invitations, security (password, sessions, recent events), AI providers and tool credentials - Build output is excluded from linting
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.