Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
43 commits
Select commit Hold shift + click to select a range
4e66426
Remove unused exports from the public API
mehmetozguldev Feb 15, 2026
fb7a471
Add runtime language catalog and CDN deploy pipeline
mehmetozguldev Feb 15, 2026
3e25586
Fix editor tab sync, hover lifecycle, and open-file reliability
mehmetozguldev Feb 15, 2026
acd7c67
Refactor SQLite viewer and optimize global search previews
mehmetozguldev Feb 15, 2026
d361aeb
Refresh theme system and align terminal and UI styling
mehmetozguldev Feb 15, 2026
556976a
Run docs and extensions workflows only on release events
mehmetozguldev Feb 15, 2026
6c6c65e
Update ACP backend integration
mehmetozguldev Feb 15, 2026
42cbb8f
Update AI chat UI and ACP frontend types
mehmetozguldev Feb 15, 2026
4cd6db8
Update editor syntax highlighting and LSP integration
mehmetozguldev Feb 15, 2026
30d2632
Update Git API and status commands
mehmetozguldev Feb 15, 2026
16b15ef
Update database viewer and layout components
mehmetozguldev Feb 15, 2026
0e48df8
Update settings, tabs, and window UI components
mehmetozguldev Feb 15, 2026
763f137
Update README.md
mehmetozguldev Feb 15, 2026
614010b
Fix editor view reset when switching to uncached files
mehmetozguldev Feb 16, 2026
c4e7af5
Remove GitHub Copilot integration
mehmetozguldev Feb 16, 2026
a3ad0ab
Security updates for desktop auth, autocomplete, and test coverage (#…
mehmetozguldev Feb 18, 2026
2452306
Fix memory leak, reduce I/O, parallelize extensions, add code splitti…
visualstudioblyat Feb 18, 2026
ec1798b
Add code of conduct and contributor agreement
mehmetozguldev Feb 18, 2026
d5800b5
Update broken links on documentation index
mehmetozguldev Feb 18, 2026
1b6e477
Fix deploy workflow safe.directory for VPS checkout
mehmetozguldev Feb 18, 2026
e6c03ca
Make deploy workflow stash dirty VPS worktree before pull
mehmetozguldev Feb 18, 2026
501823f
Fallback to CDN highlight query when local parser assets are unavailable
mehmetozguldev Feb 18, 2026
f3c9484
Revert "Fallback to CDN highlight query when local parser assets are …
mehmetozguldev Feb 18, 2026
fcd8acc
Merge TSX into TypeScript extension flow in marketplace and installer
mehmetozguldev Feb 18, 2026
7ec61c7
Drive Ruby/ERB detection from extension metadata
mehmetozguldev Feb 18, 2026
1c84e82
Prepare 0.4.0 release
mehmetozguldev Feb 19, 2026
85e964c
Bump version to 0.4.0
mehmetozguldev Feb 19, 2026
cde72ef
Refresh generated extensions catalog
mehmetozguldev Feb 19, 2026
0589ee2
Harden Linux release AppImage environment
mehmetozguldev Feb 19, 2026
3f425c9
Disable macOS AutoFill heuristics in webview
mehmetozguldev Feb 21, 2026
d33d5e1
Add Go and Cargo binary detection for ACP agents
mehmetozguldev Feb 22, 2026
b144bc7
Move extension content to dedicated extensions repo
mehmetozguldev Feb 23, 2026
1bd3f2f
Simplify rules and contributing docs
mehmetozguldev Feb 23, 2026
fde4375
Remove unused root files
mehmetozguldev Feb 23, 2026
8d0bdcf
Update CI workflows
mehmetozguldev Feb 23, 2026
7a5454f
Move docs from Next.js app to flat mdx files
mehmetozguldev Feb 23, 2026
ec5ae3b
Remove changelog check from release scripts
mehmetozguldev Feb 23, 2026
fc466ac
Fix macOS autofill heuristics compilation warning
mehmetozguldev Feb 23, 2026
495592c
Replace new chat button with unified agent selector in chat header
mehmetozguldev Feb 23, 2026
147875e
Remove extensions catalog check from CI
mehmetozguldev Feb 23, 2026
4140f3a
Make athas dev scripts app-only
mehmetozguldev Feb 26, 2026
838c052
Merge remote-tracking branch 'upstream/master' into codex/resolve-pr-…
kodahhhhh Feb 26, 2026
e039c39
Update auth, resolve conflicts
kodahhhhh Feb 26, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
43 changes: 0 additions & 43 deletions .editorconfig

This file was deleted.

5 changes: 5 additions & 0 deletions .github/PULL_REQUEST_TEMPLATE.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,4 +22,9 @@

Closes # Fixes #

## Checklist

- [ ] I have read and will follow the [Code of Conduct](../CODE_OF_CONDUCT.md).
- [ ] I have read and agree to the
[Contributor License and Feedback Agreement](../CONTRIBUTOR_LICENSE_AND_FEEDBACK_AGREEMENT.md).

43 changes: 0 additions & 43 deletions .github/workflows/bun.yml

This file was deleted.

45 changes: 36 additions & 9 deletions .github/workflows/rust.yml → .github/workflows/ci.yml
Original file line number Diff line number Diff line change
@@ -1,25 +1,52 @@
name: Rust CI
name: CI

on:
push:
branches: [main, master]
branches: [master]
pull_request:
branches: [main, master]
branches: [master]
workflow_dispatch:

concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true

env:
CARGO_TERM_COLOR: always

jobs:
check:
# Don't run on forks
bun:
if: github.repository == 'athasdev/athas'
name: Bun — typecheck, lint
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4

- name: Setup Bun
uses: oven-sh/setup-bun@v2
with:
bun-version: latest

- name: Cache Bun dependencies
uses: actions/cache@v4
with:
path: ~/.bun/install/cache
key: ${{ runner.os }}-bun-${{ hashFiles('**/bun.lock') }}
restore-keys: |
${{ runner.os }}-bun-

- name: Install dependencies
run: bun install

- name: Run typecheck
run: bun typecheck

- name: Run biome check
run: bun check

rust:
Comment on lines +16 to +44

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}

Copilot Autofix

AI 28 days ago

In general, the fix is to explicitly declare a minimal permissions: block in the workflow file so that the GITHUB_TOKEN used by the jobs is limited to the least privileges required. For CI workflows that only check out code, restore caches, install dependencies, and run checks, contents: read is typically sufficient; no write or admin scopes are needed.

The best way to fix this workflow without changing functionality is to add a root-level permissions: block setting contents: read. This applies to all jobs (bun and rust), since neither job performs write operations back to GitHub. Concretely, in .github/workflows/ci.yml, add:

permissions:
  contents: read

between the concurrency: section (line 10–12) and the jobs: section (line 14). No additional imports or definitions are required because this is pure workflow configuration. We do not need per-job permissions blocks unless different jobs require different scopes, which they do not here.


Suggested changeset 1
.github/workflows/ci.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,6 +11,9 @@
   group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
   cancel-in-progress: true
 
+permissions:
+  contents: read
+
 jobs:
   bun:
     if: github.repository == 'athasdev/athas'
EOF
@@ -11,6 +11,9 @@
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true

permissions:
contents: read

jobs:
bun:
if: github.repository == 'athasdev/athas'
Copilot is powered by AI and may make mistakes. Always verify output.
if: github.repository == 'athasdev/athas'
name: check format and cargo check
name: Rust — fmt, cargo check
runs-on: ubuntu-latest
env:
CARGO_TERM_COLOR: always
steps:
- uses: actions/checkout@v4

Expand Down
27 changes: 0 additions & 27 deletions .github/workflows/deploy.yml

This file was deleted.

32 changes: 0 additions & 32 deletions .github/workflows/docs.yml

This file was deleted.

42 changes: 0 additions & 42 deletions .github/workflows/extensions-index.yml

This file was deleted.

59 changes: 47 additions & 12 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,22 +19,46 @@
matrix:
include:
- platform: 'macos-latest'
os: 'macos'
args: '--target aarch64-apple-darwin'
target: 'aarch64-apple-darwin'
- platform: 'macos-latest'
os: 'macos'
args: '--target x86_64-apple-darwin'
target: 'x86_64-apple-darwin'
- platform: 'ubuntu-22.04'
os: 'linux'
args: ''
target: ''
- platform: 'ubuntu-22.04-arm'
os: 'linux'
args: ''
target: ''
- platform: 'windows-latest'
os: 'windows'
args: ''
target: ''
- platform: 'windows-latest'
os: 'windows'
args: '--target aarch64-pc-windows-msvc'
target: 'aarch64-pc-windows-msvc'

runs-on: ${{ matrix.platform }}
timeout-minutes: 40
steps:
- uses: actions/checkout@v4

- name: Free disk space (Linux only)
if: matrix.os == 'linux'
run: |
echo "Disk usage before cleanup:"
df -h
sudo rm -rf /usr/share/dotnet /opt/ghc /usr/local/lib/android /opt/hostedtoolcache/CodeQL || true
sudo docker system prune -af || true
sudo apt-get clean
echo "Disk usage after cleanup:"
df -h

- name: Setup Bun
uses: oven-sh/setup-bun@v2
with:
Expand All @@ -45,13 +69,10 @@
with:
targets: ${{ matrix.target }}

- name: Add additional Rust targets
if: matrix.target != ''
run: rustup target add ${{ matrix.target }}


- name: Cache Rust dependencies
uses: Swatinem/rust-cache@v2
with:
cache-on-failure: true

- name: Cache Bun dependencies
uses: actions/cache@v4
Expand All @@ -61,17 +82,21 @@
restore-keys: |
${{ runner.os }}-bun-

- name: Install dependencies (ubuntu only)
if: matrix.platform == 'ubuntu-22.04'
- name: Install dependencies (Linux only)
if: matrix.os == 'linux'
run: |
sudo apt-get update
sudo apt-get install -y libwebkit2gtk-4.0-dev libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf
sudo apt-get install -y libwebkit2gtk-4.0-dev libwebkit2gtk-4.1-dev libappindicator3-dev librsvg2-dev patchelf libfuse2

- name: Configure AppImage runtime (Linux only)
if: matrix.os == 'linux'
run: echo "APPIMAGE_EXTRACT_AND_RUN=1" >> "$GITHUB_ENV"

- name: Install frontend dependencies
run: bun install

- name: Import Apple Certificate (macOS only)
if: matrix.platform == 'macos-latest'
if: matrix.os == 'macos'
env:
APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
APPLE_CERT_PASSWORD: ${{ secrets.APPLE_CERT_PASSWORD }}
Expand Down Expand Up @@ -102,9 +127,9 @@
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
APPLE_ID: ${{ secrets.APPLE_ID }}
APPLE_PASSWORD: ${{ secrets.APPLE_PASSWORD }}
APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
APPLE_ID: ${{ matrix.os == 'macos' && secrets.APPLE_ID || '' }}
APPLE_PASSWORD: ${{ matrix.os == 'macos' && secrets.APPLE_PASSWORD || '' }}
APPLE_TEAM_ID: ${{ matrix.os == 'macos' && secrets.APPLE_TEAM_ID || '' }}
with:
tagName: v__VERSION__
releaseName: 'Athas v__VERSION__'
Expand All @@ -123,3 +148,13 @@
prerelease: false
includeUpdaterJson: true
args: ${{ matrix.args }}

deploy-docs:
runs-on: ubuntu-latest
steps:
- name: Trigger docs rebuild on www
uses: peter-evans/repository-dispatch@v3
with:
token: ${{ secrets.WWW_DEPLOY_TOKEN }}
repository: athasdev/www
event-type: docs-updated
Comment on lines +153 to +160

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {}

Copilot Autofix

AI 28 days ago

In general, the problem is fixed by explicitly declaring the least-privilege permissions needed for each job (or at the workflow root). For this workflow, publish-tauri already has permissions: contents: write, but deploy-docs has no permissions and therefore inherits potentially broad defaults. Since deploy-docs only triggers a repository-dispatch event on another repository using a custom token and does not appear to need any repository access via GITHUB_TOKEN, we can safely lock GITHUB_TOKEN down to contents: read (or even permissions: {}; however, contents: read matches common minimal guidance).

The best minimal, non-breaking fix is to add a permissions block under the deploy-docs job definition (around line 152–153) with read-only contents access. No imports or additional methods are required since this is just a YAML configuration change in .github/workflows/release.yml.

Concretely:

  • Edit .github/workflows/release.yml.
  • Under jobs: deploy-docs:, add:
    permissions:
      contents: read
  • Leave the rest of the job steps unchanged.

Suggested changeset 1
.github/workflows/release.yml

Autofix patch

Autofix patch
Run the following command in your local git repository to apply this patch
cat << 'EOF' | git apply
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -150,6 +150,8 @@
           args: ${{ matrix.args }}
 
   deploy-docs:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - name: Trigger docs rebuild on www
EOF
@@ -150,6 +150,8 @@
args: ${{ matrix.args }}

deploy-docs:
permissions:
contents: read
runs-on: ubuntu-latest
steps:
- name: Trigger docs rebuild on www
Copilot is powered by AI and may make mistakes. Always verify output.
Loading
Loading