Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
94 commits
Select commit Hold shift + click to select a range
f302bc4
Refactor plan
djanogly Mar 5, 2026
691e831
unify-markdown-rendering-utility & unify-inbox-widget-notification-cues
djanogly Mar 5, 2026
f6662a5
decompose web inbox page
djanogly Mar 5, 2026
4b9c028
Archive proposals
djanogly Mar 5, 2026
2108053
modularize convex notifications domain
djanogly Mar 5, 2026
10f5c45
Harden convex types
djanogly Mar 5, 2026
c612275
archive proposals
djanogly Mar 5, 2026
1efae89
Split convex series engine
djanogly Mar 5, 2026
d8a8237
Archive proposals
djanogly Mar 5, 2026
bd310b0
Shared utility updates
djanogly Mar 5, 2026
6dcf67b
archive proposals
djanogly Mar 5, 2026
465b38e
Help center refactor
djanogly Mar 5, 2026
dc3b4d8
Archive proposals
djanogly Mar 5, 2026
05d1366
split-react-native-sdk-orchestrator & decompose-react-native-sdk-mess…
djanogly Mar 5, 2026
8b3eab6
centralize-visitor-readable-id-generator
djanogly Mar 5, 2026
bc29b26
Audience rules and type fix
djanogly Mar 5, 2026
be8f489
settings and survey decomp
djanogly Mar 5, 2026
77071fd
web and convex
djanogly Mar 5, 2026
82b832f
Reporting
djanogly Mar 5, 2026
f790616
Widget and convex auth wrapper - final high wrapper list
djanogly Mar 5, 2026
680b227
remaining slices
djanogly Mar 5, 2026
f006ac3
roadmap
djanogly Mar 5, 2026
b61d550
Convex notif triggers +
djanogly Mar 6, 2026
3b2cf56
web tour editor & outbound
djanogly Mar 6, 2026
616f01f
share outbound logic
djanogly Mar 6, 2026
5fa2c68
archive proposals and handoff context
djanogly Mar 6, 2026
4f42c85
Outbound continued
djanogly Mar 6, 2026
327e113
outbound and campaign schema refactor
djanogly Mar 6, 2026
d372f4b
convex schema
djanogly Mar 6, 2026
6f7d11d
Simplify knowledge base proposal
djanogly Mar 6, 2026
78b9d46
Fix E2E
djanogly Mar 6, 2026
85e278d
assess progress
djanogly Mar 6, 2026
3da8fd3
widget hooks
djanogly Mar 6, 2026
aeaac47
tour route part 1
djanogly Mar 7, 2026
f3efa43
tour overlay
djanogly Mar 7, 2026
500e212
series runtime
djanogly Mar 7, 2026
feb97d2
tour progress
djanogly Mar 7, 2026
2e63d31
Settings pt1
djanogly Mar 7, 2026
50814f5
messenger settings
djanogly Mar 7, 2026
48dcd6e
messenger
djanogly Mar 7, 2026
bd310e6
Pr/merge knowledge (#11)
djanogly Mar 8, 2026
da2ef41
fix convex type issues
djanogly Mar 9, 2026
0c3a0c7
Fix failing convex tests
djanogly Mar 9, 2026
0151847
fix builds. Need to work on sdk-core
djanogly Mar 9, 2026
cb1ac2a
fix sdk-core build
djanogly Mar 9, 2026
872a00e
Fix rn-sdk build
djanogly Mar 9, 2026
7573eb3
fix types for api calls in web
djanogly Mar 9, 2026
75de6a8
fix mobile and rn-sdk typecheck
djanogly Mar 9, 2026
6a1a024
fix widget typecheck
djanogly Mar 9, 2026
584383a
pnpm install
djanogly Mar 9, 2026
7423c2c
fix failing vitests except ConversationView
djanogly Mar 9, 2026
965452f
Add proposal for fixing skipped vitests
djanogly Mar 9, 2026
6beebed
Restore playwright widget tests and fix comments
djanogly Mar 10, 2026
d032dda
remove unused functions
djanogly Mar 10, 2026
c6c0053
delete temp file
djanogly Mar 10, 2026
1a15b6b
fix types
djanogly Mar 10, 2026
de7eee2
types
djanogly Mar 10, 2026
79f5e2c
fix for auth guard CI
djanogly Mar 10, 2026
10036d1
Relax CI
djanogly Mar 10, 2026
711dc3d
fix regressions + type refactor proposal
djanogly Mar 10, 2026
cdb5e18
update dependency allowlist
djanogly Mar 10, 2026
b538a50
Update todo list
djanogly Mar 10, 2026
cba2b66
Remove some unknowns and anys
djanogly Mar 10, 2026
7342af2
New refactor proposals
djanogly Mar 10, 2026
cb1868a
First convex backend cluster move away from getInternalRef(name: string)
djanogly Mar 10, 2026
f30dde2
close-repo-wide-convex-ref-hardening-gaps & introduce-widget-local-co…
djanogly Mar 10, 2026
4b1812a
web local convex wrapper hooks complete - all tests passing
djanogly Mar 11, 2026
11ac6ca
refactor RN-SDK - needs testing
djanogly Mar 11, 2026
cecd2a2
Archive Proposals
djanogly Mar 11, 2026
fba7e62
Refactor Proposals
djanogly Mar 11, 2026
f9bc0f4
Stale registry cleanup
djanogly Mar 11, 2026
ff57d7b
broaden CI linting and typechecks
djanogly Mar 11, 2026
92497f1
fix tuple issue
djanogly Mar 11, 2026
286ed94
Merge pull request #15 from opencom-org/pr/refactor-2
djanogly Mar 11, 2026
a4b3252
Stop makeFunctionReference being defined inside components (#17)
djanogly Mar 11, 2026
40d28ef
Complete proposal reduce convex ref escape hatches (#16)
djanogly Mar 11, 2026
7b8b949
update widget refactor proposal and roadmap with suggestion
djanogly Mar 11, 2026
71743f3
Expanding widget convex wrapper hooks (#18)
djanogly Mar 11, 2026
abd3bd1
Update docs (#19)
djanogly Mar 11, 2026
c02f3f1
Web local wrappers complete
djanogly Mar 11, 2026
fd2c878
Web local wrappers complete (#20)
djanogly Mar 11, 2026
e934025
sdk-core string ref replacements
djanogly Mar 11, 2026
746fd8c
Add comments explaining TS2589 error with api.x usage
djanogly Mar 11, 2026
21248b2
Merge pull request #21 from opencom-org/openspec/replace-sdk-core-str…
djanogly Mar 11, 2026
344c0d2
update convex
djanogly Mar 11, 2026
d55fed3
Merge pull request #22 from opencom-org/openspec/introduce-mobile-loc…
djanogly Mar 11, 2026
309c93d
Archive proposals
djanogly Mar 11, 2026
d4e7fed
New proposals
djanogly Mar 11, 2026
8b7fe2a
Manual edits to email capture widget (#23)
djanogly Mar 12, 2026
0929ee8
Add chat and ticket file uploads for Web & Widget (Mobile and RN-sdk …
djanogly Mar 12, 2026
e829a9d
Set up proper RAG with convex vector search (#25)
djanogly Mar 13, 2026
5307830
Address small tweaks / PR comments
djanogly Mar 13, 2026
76d1d58
CI checks
djanogly Mar 13, 2026
17f50df
explicit type for JSX element
djanogly Mar 13, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
64 changes: 63 additions & 1 deletion .github/workflows/ci.yml
Original file line number Diff line number Diff line change
Expand Up @@ -32,32 +32,94 @@ jobs:
run: pnpm install --frozen-lockfile

- name: Lint
id: lint
continue-on-error: true
run: pnpm lint

- name: Typecheck
id: typecheck
continue-on-error: true
run: pnpm typecheck

- name: Convex raw auth guard
id: convex_auth_guard
continue-on-error: true
run: pnpm security:convex-auth-guard

- name: Convex validator any guard
id: convex_any_guard
continue-on-error: true
run: pnpm security:convex-any-args-gate

- name: Secret scan gate
id: secret_scan
continue-on-error: true
run: pnpm security:secret-scan

- name: Security headers policy check
id: headers_check
continue-on-error: true
run: pnpm security:headers-check

- name: Convex backend tests
run: pnpm --filter @opencom/convex test
id: convex_tests
continue-on-error: true
run: pnpm test:convex

- name: Web production build
id: web_build
continue-on-error: true
run: pnpm --filter @opencom/web build

- name: Dependency audit gate
id: dependency_audit
continue-on-error: true
run: node scripts/ci-audit-gate.js

- name: Summarize check results
if: always()
run: |
failures=0

report_blocking() {
name="$1"
outcome="$2"
if [ "$outcome" = "success" ]; then
echo "::notice::$name passed"
elif [ "$outcome" = "skipped" ]; then
echo "::warning::$name skipped"
else
echo "::error::$name failed"
failures=1
fi
}

report_warning() {
name="$1"
outcome="$2"
if [ "$outcome" = "success" ]; then
echo "::notice::$name passed"
elif [ "$outcome" = "skipped" ]; then
echo "::warning::$name skipped"
else
echo "::warning::$name failed (warning only)"
fi
}

report_blocking "Lint" "${{ steps.lint.outcome }}"
report_blocking "Typecheck" "${{ steps.typecheck.outcome }}"
report_blocking "Convex raw auth guard" "${{ steps.convex_auth_guard.outcome }}"
report_blocking "Convex validator any guard" "${{ steps.convex_any_guard.outcome }}"
report_blocking "Secret scan gate" "${{ steps.secret_scan.outcome }}"
Comment on lines +109 to +113

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Action required

7. Any-args gate nonblocking 🐞 Bug ⛨ Security

.github/workflows/ci.yml runs the Convex v.any() guard with continue-on-error and then reports it
via report_warning, so the job does not fail even when the gate script exits with code 1. This
allows undocumented or expired v.any() validator usage to merge without CI blocking.
Agent Prompt
### Issue description
The CI workflow downgrades the `pnpm security:convex-any-args-gate` step to warning-only, so violations no longer fail the `checks` job even though the script exits with code 1.

### Issue Context
This removes enforcement for the repository’s v.any() exception registry policy and allows undocumented/expired exceptions to land without CI blocking.

### Fix Focus Areas
- .github/workflows/ci.yml[49-52]
- .github/workflows/ci.yml[109-113]

ⓘ Copy this prompt and use it to remediate the issue with your preferred AI generation tools

report_blocking "Security headers policy check" "${{ steps.headers_check.outcome }}"
report_blocking "Convex backend tests" "${{ steps.convex_tests.outcome }}"
report_blocking "Web production build" "${{ steps.web_build.outcome }}"
report_blocking "Dependency audit gate" "${{ steps.dependency_audit.outcome }}"

if [ "$failures" -ne 0 ]; then
exit 1
fi

e2e:
runs-on: ubuntu-latest
timeout-minutes: 45
Expand Down
Loading
Loading