Next/v0.1.2 - #16
Conversation
Render ResourcePage floating repository source metadata with the repository URL as a link and the repository-root path as plain text. This gives readers useful source context without implying a pinned branch, commit, or file URL for floating current-source bindings.
- preserve workingAccessUrl and floating repository locators on first payload ResourcePage models - validate extracted-source floating repository locators by URL and repository-root path - resolve canonical and extraction source panels through allowed floating repository checkouts - keep mesh-owned floating source candidate roots inside the configured workspace boundary - fill v0.1.2 release notes and fix the live-server branch fixture mount example - add focused coverage for floating extracted sources and mesh-owned path-policy boundaries
|
Warning Rate limit exceeded
You’ve run out of usage credits. Purchase more in the billing tab. ⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Path: .coderabbit.yaml Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (31)
📝 WalkthroughWalkthroughThis PR extends the Weave weave pipeline to support repository-backed source payloads via optional ChangesRepository source floating locator support
Possibly related PRs
Estimated code review effort🎯 3 (Moderate) | ⏱️ ~25 minutes Poem
🚥 Pre-merge checks | ✅ 3 | ❌ 2❌ Failed checks (1 warning, 1 inconclusive)
✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@src/runtime/weave/pages.ts`:
- Around line 1035-1047: The code builds an <a href> from repositoryUrl inside
the rows.push block (variables repositoryUrl, repositoryPathFromRoot) without
validating its scheme; update this rendering so you first validate
repositoryUrl's scheme (e.g., using a URL parse or regex) and only emit an <a
href="..."> when the scheme is http or https; if the scheme is invalid, render
the escaped repositoryUrl as plain text (or an anchor without an executable
href) and ensure any anchor you do emit includes safe attributes
(rel="noreferrer noopener" and target="_blank" if desired). Locate the rows.push
block around repositorySourceFloatingLocator and change the html/value
generation to perform this validation and conditional rendering instead of
directly interpolating repositoryUrl into href.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Path: .coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: 25faaeb9-79ed-4732-bda2-0ec5706ef04a
📒 Files selected for processing (11)
documentation/notes/release-notes.v0.1.2.mddocumentation/notes/wd.general-guidance.mddocumentation/notes/wu.environment-variables.mdsrc/core/weave/weave.tssrc/core/weave/weave_test.tssrc/runtime/operational/local_path_policy.tssrc/runtime/operational/local_path_policy_test.tssrc/runtime/weave/pages.tssrc/runtime/weave/pages_test.tssrc/runtime/weave/weave.tstests/integration/weave_test.ts
Codecov Report❌ Patch coverage is 📢 Thoughts on this report? Let us know! |
- expand v0.1.2 release notes with source locator, ResourcePage, caching, timing, and validation details - add focused CLI reference pages for weave, validate, version, generate, mesh, integrate, extract, payload, knop, set, target, and root-designator commands - document WEAVE_LOG_DIR, WEAVE_TIMING, WEAVE_GENERATED_AT, and host-local policy environment behavior - apply formatter cleanup to touched weave runtime/source files
- skip ResourcePage rewrites when only the generated timestamp footer changes - surface timestamp-only generate skips in runtime results, operational logs, and CLI output - add current-state-only overwriteExistingState support for explicit payload release targets - cover generate, validate, duplicate release-state, overwrite, and CLI rerun behavior
- link expanded CLI, environment, and logging docs from v0.1.2 release notes - add user-facing logging documentation - format local path policy for the source quality gate - verify deno task ci
Summary by CodeRabbit
New Features
WEAVE_TIMINGenvironment variableBug Fixes
Documentation