feat: terminal enhancements, CI pipeline, and bug fixes - #137

Open

chihirokajiwara-AI wants to merge 64 commits into

collabs-inc:mainfrom

chihirokajiwara-AI:main

Commits on Mar 30, 2026

fix: Pre-Wave bug fixes (0.1-0.3)

chihirockjp
and
claude
committed
7e759e2
perf: conditionally load PostHog only when API key is set

chihirockjp
and
claude
committed
4d20e7a
feat: extend zoom range to 200%
chihirockjp
committed
57f4c68
security: harden browser tile webview defaults

chihirockjp
and
claude
committed
95eece3
perf: lazy-load Monaco editor and defer language workers

chihirockjp
and
claude
committed
db1bdca
feat: add zoom/pan to image tiles

chihirockjp
and
claude
committed
32fc99e
fix: restore Vite-compatible worker imports for Monaco

chihirockjp
and
claude
committed
22f9d39
fix: add missing import for setupWebviewSecurity

chihirockjp
and
claude
committed
7432881
perf: defer content creation for off-screen tiles

chihirockjp
and
claude
committed
7a10839
feat: per-workspace canvas state and session isolation

chihirockjp
and
claude
committed
d972b36
feat: add undo/redo for canvas tile operations

chihirockjp
and
claude
committed
6981d7a
fix: preserve trusted preloads in webview security handler

chihirockjp
and
claude
committed
3d62211
fix: security handler uses partition to distinguish browser tiles

chihirockjp
and
claude
committed
7d74a8f
fix: RPC tileAdd correctly creates terminal tiles

chihirockjp
and
claude
committed
89ad212
feat: per-panel zoom — zoom only the focused panel (canvas or nav)

chihirockjp
and
claude
committed
a1a629b
fix: block Chromium built-in page zoom so per-panel zoom works

chihirockjp
and
claude
committed
547f6dd
fix: fully disable Chromium page zoom, route all zoom through renderer

chihirockjp
and
claude
committed
7238554
fix: skip shortcut listener on terminal webviews to preserve key input

chihirockjp
and
claude
committed
9281e2d
revert: restore upstream index.ts to fix terminal keyboard issues

chihirockjp
and
claude
committed
2db5e6a
feat(terminal): add drag-and-drop file path insertion

chihirockjp
and
claude
committed
235e1cb
feat(terminal): add per-terminal font size zoom shortcuts

chihirockjp
and
claude
committed
ae4e894
feat(terminal): add Cmd+F search bar using @xterm/addon-search

chihirockjp
and
claude
committed
5add853
fix(terminal): handle drag-drop at shell level, not inside webview

chihirockjp
and
claude
committed
c4fabad
fix(terminal): handle drag-drop at canvas level with webview bypass

chihirockjp
and
claude
committed
1cdf5eb
fix(terminal): hit-test before restoring webview pointer-events on drop

chihirockjp
and
claude
committed
2d0ad25
fix(terminal): clear search decorations when closing via Cmd+F toggle

chihirockjp
and
claude
committed
b60060b
fix: unify drag counters and remove dead Ctrl+Shift+C/V code

chihirockjp
and
claude
committed
a5de873
feat: per-panel zoom v2 — safe approach without touching child webviews

chihirockjp
and
claude
committed
960f849
fix(terminal): unify drag-drop into single window-level handler

chihirockjp
and
claude
committed
33d89f8

Commits on May 10, 2026

fix: guard against undefined tilePath to prevent ENOENT crash

authored and
chihirokajiwara-AI
committed
d049d0a
fix: open terminal URLs in external browser instead of failing silently

authored and
chihirokajiwara-AI
committed
29987a8
ci: add CI pipeline + automated Electron release workflow

authored and
chihirokajiwara-AI
committed
c3cdb7d
fix(ci): install native deps for test, skip tmux tests in CI

authored and
chihirokajiwara-AI
committed
f58a2f5
fix(ci): use path-based test filter, mark build as non-blocking

authored and
chihirokajiwara-AI
committed
c69f4d1
fix: align tiptap versions to fix build (3.20.0 → 3.23.1)

authored and
chihirokajiwara-AI
committed
3e9bd2d
fix(ci): pin Bun 1.3.11 + exclude Electron-dependent tests + fix mock leak

authored and
chihirokajiwara-AI
committed
5c05214

Commits on May 14, 2026

chore: gitignore Serena AI cache (.serena/)
chihirockjp
committed
77de54d

Commits on Jun 15, 2026

security(deps): pin esbuild 0.28.1 via override (patches high-severity audit advisory)

authored and
chihirokajiwara-AI
committed
1a1b9ce
security(deps): bump electron 40.6.0 to 40.10.3 (patches 5 high-severity advisories)

authored and
chihirokajiwara-AI
committed
847b6e9
security(deps): override dompurify to 3.4.10 (patches moderate XSS advisories)

authored and
chihirokajiwara-AI
committed
5af6a96
security(deps): override protobufjs to 7.6.4 (patches moderate DoS advisory)

authored and
chihirokajiwara-AI
committed
79a5ac1
security(deps): override tmp to 0.2.7 (patches high path-traversal advisory)

authored and
chihirokajiwara-AI
committed
787eecf

Commits on Jun 30, 2026

security(deps): patch critical form-data + dompurify moderate (collab-electron overrides)

authored and
chihirokajiwara-AI
committed
d6ab211
security(deps): override qs to 6.15.2 (patches moderate GHSA-6rw7-vpxm-498p)

authored and
chihirokajiwara-AI
committed
7fe9b85
security(deps): override js-yaml to 4.3.0 + tar to 7.5.19

authored and
chihirokajiwara-AI
committed
14f00d2

Commits on Jul 6, 2026

security(deps): override vite/uuid/@babel-core/@opentelemetry-core/nth-check/tough-cookie in collab-electron

product-dev
authored and
chihirokajiwara-AI
committed
18d0873
security(deps): patch lodash.pick Prototype Pollution via bun patchedDependencies

authored and
chihirokajiwara-AI
committed
3b6fb3a
fix(test): register happy-dom for bun test DOM globals, add panel-manager.test.ts to CI

product-dev
authored and
chihirokajiwara-AI
committed
4eb8828
fix(deps): patch front-matter to work with js-yaml 4.3.0 override

authored and
chihirokajiwara-AI
committed
e61cd1f

Commits on Jul 7, 2026

fix(test): stub window.shellApi so canvas-viewport.test.ts can run under happy-dom

product-dev
authored and
chihirokajiwara-AI
committed
c7f0a72
ci(test): add tile-renderer/webview-factory tests to CI scope

authored and
chihirokajiwara-AI
committed
bb4b6b5

Commits on Jul 8, 2026

fix(sidecar): honor sessionSocketDir in sessionSocketPath, fix test isolation leak

authored and
chihirokajiwara-AI
committed
9fa397e
fix(ci): resolve missing bun:test type declarations in shell window tests

product-dev
authored and
chihirokajiwara-AI
committed
8ae3b43
fix(test): replace non-existent vitest import with bun:test in panel-manager.test.ts

authored and
chihirokajiwara-AI
committed
b75800b
ci: add bun audit gate, document accepted lodash.pick exception

authored and
chihirokajiwara-AI
committed
783011a
test(ipc-filesystem): extract sanitizeFileTitle, add coverage for fs:rename path-traversal guard

authored and
chihirokajiwara-AI
committed
1d2971b
test(workspace-graph): add coverage for isPathWithinDirectory boundary check

authored and
chihirokajiwara-AI
committed
4559afa
test(pty): add coverage for withOptionalFields merge helper

authored and
chihirokajiwara-AI
committed
b3354c3
fix(security): wire dead isNavigationAllowed guard into will-navigate

authored and
chihirokajiwara-AI
committed
6a8599e
security: wire dead setupPermissionHandler to deny external-content permission requests

product-dev
authored and
chihirokajiwara-AI
committed
c6eacf3
security: wire dead setupWebviewSecurity will-attach-webview lockdown

product-dev
authored and
chihirokajiwara-AI
committed
1e1501d
fix(security): isBrowserTileWebview never matched real browser tiles

product-dev
authored and
chihirokajiwara-AI
committed
86a4f8c

Commits on Jul 9, 2026

fix(test): exclude node:test-only sidecar files from bun test glob

product-dev
authored and
chihirokajiwara-AI
committed
47588e8

Commits on Jul 10, 2026

fix(test): skip Electron-only tmux tests when running outside Electron

authored and
chihirokajiwara-AI
committed
c138ba6