release: v0.7.0 stable — promote develop to main #5

Merged

Muyue merged 5 commits from develop into main 2026-04-27 09:24:20 +00:00

Conversation 0 Commits 5 Files Changed 25 +1717 -147

Muyue commented 2026-04-27 09:23:40 +00:00

Owner

Copy Link

Promotion bêta → stable

Bêtas validées sur develop :

• v0.6.0-beta.1 — audit + 7 fonctionnalités (BMAD, réflexion avancée, WSL quick-launch, agents WSL/cwd…)
• v0.7.0-beta.1 — tests pilotés par l'IA (onglet Tests + outil browser_test)

Merge ce PR pour que ci-main.yml :

• tag v0.7.0 stable
• build les 6 binaires (linux/macos/windows × amd64/arm64)
• crée la Publication Gitea avec changelog généré + checksums
• mette à jour CHANGELOG.md automatiquement

Aucun fix supplémentaire dans ce PR — c'est un fast-forward propre.

## Promotion bêta → stable Bêtas validées sur `develop` : - v0.6.0-beta.1 — audit + 7 fonctionnalités (BMAD, réflexion avancée, WSL quick-launch, agents WSL/cwd…) - v0.7.0-beta.1 — tests pilotés par l'IA (onglet Tests + outil `browser_test`) Merge ce PR pour que `ci-main.yml` : - tag `v0.7.0` stable - build les 6 binaires (linux/macos/windows × amd64/arm64) - crée la **Publication** Gitea avec changelog généré + checksums - mette à jour `CHANGELOG.md` automatiquement Aucun fix supplémentaire dans ce PR — c'est un fast-forward propre.

Muyue added 5 commits 2026-04-27 09:23:40 +00:00

release: v0.6.0 — security audit fixes + 7 new features ... 6a7b4d8001

Audit corrections (security, concurrency, stability):
- chat_engine: bound resp.Choices[0] access, release tool slot per-iteration
- conversation_multi: synchronous save under existing lock (was racy fire-and-forget)
- workflow/engine: short-circuit on failed deps (no more infinite busy-wait); track failed/skipped status
- handlers_workflow: rune-aware truncate for plan goal (UTF-8 safe)
- server: CORS limited to localhost origins (was wildcard)
- handlers_info / terminal: mask API keys and SSH passwords as "***" in GET responses; preserve stored secret if "***" sent on update
- terminal: sshpass uses -e + SSHPASS env var (was both -p and -e)
- handlers_chat: MaxBytesReader 50 MB on /api/chat
- image_cache: 10 MB cap per image
- handlers_config: font size <= 72; profile-save unmarshal errors propagated
- handlers_info: /lsp/auto-install ProjectDir restricted to user home
- Shell.jsx: parenthesized resize-condition (operator precedence)
- orchestrator_test: CleanAIResponse capitalization (fixes failing vet)

New features:
- platform: detect OS name (Debian, Ubuntu, Windows 11, macOS X.Y) and inject in Studio system prompt next to the date
- agents: default timeout 30 min for crush_run/claude_run (cap also 30 min)
- agents: new cwd, wsl_distro, wsl_user params; on Windows hosts launch via "wsl -d <distro> -u <user> --cd <cwd> --"
- agents: new claude_run tool (mirror of crush_run for Claude Code CLI)
- terminal: list installed WSL distros individually in new-tab menu (Windows only)
- studio: system prompt rewritten around BMAD-METHOD personas + mandatory delegation template
- studio: "Réflexion avancée" toggle — inactive provider produces a preliminary report injected as [RAPPORT PRÉALABLE] context for the active provider
- studio: "Historique compressé" toggle — collapses past tool calls to last action only, with "Tout afficher" expansion

feat: AI-driven browser tests — Tests tab + browser_test agent tool ... c820d55710

New feature: give Studio's AI control of any browser tab to test buttons,
read the console, and report which buttons work / fail.

Backend (internal/api/browser_test.go, ~480 LOC):
- WebSocket endpoint /api/ws/browser-test, auth by single-use 5-min token
- BrowserTestStore: session map (capped at 16, LRU evict), token store
- REST: /api/test/snippet (issues token + JS snippet), /api/test/sessions,
  /api/test/console/{id}
- Agent tool 'browser_test' wired into the registry, with actions:
  list_clickables / click / eval / console / current_url / type / wait /
  summary. click returns the console_delta produced during the click.
- Embedded JS runner: opens WS, hooks console + window.onerror +
  unhandledrejection, dispatches dispatcher commands, replies with
  correlation IDs, watches for URL changes.

Frontend:
- New Tests tab (web/src/components/Tests.jsx): snippet copy + connected
  sessions list + live console viewer
- App.jsx: 5th tab + Ctrl+4 shortcut (Config moves to Ctrl+5)
- api/client.js: getTestSnippet / getTestSessions / getTestConsole

Studio prompt:
- internal/agent/prompts/studio_system.md: added browser_test entry to the
  tools table + <browser_test_strategy> section explaining the recommended
  loop (summary → list_clickables → click → check console_delta → report)

Versioning:
- v0.6.0 → v0.7.0
- CHANGELOG.md: full entry under v0.7.0

Merge pull request 'release: v0.6.0 — security audit fixes + 7 new features' (#3) from release/v0.6.0 into develop ... 0d1d8d3ec3

Reviewed-on: #3

fix(ci): rename browser_test.go → browsertest.go ... 6d2f174ae8

The suffix _test.go makes Go treat the file as a test file (only
compiled during 'go test'), so server.go could not see the exported
BrowserTestStore / NewBrowserTestStore / RegisterBrowserTestTool and
the four handler methods at build time. Rename to a non-test name
keeps the same package-level visibility but compiles into the regular
api package.

Merge pull request 'release: v0.7.0 — Tests pilotés par l'IA' (#4) from release/v0.7.0 into develop ... dbb97cc164

Reviewed-on: #4

Muyue merged commit 991878939b into main 2026-04-27 09:24:20 +00:00

Muyue referenced this issue from a commit 2026-04-27 09:24:21 +00:00

Merge pull request 'release: v0.7.0 stable — promote develop to main' (#5) from develop into main

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

Muyue

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Muyue/MuyueWorkspace#5