Commit Graph
2 Commits
Author SHA1 Message Date
f0b1d44c7e Add Site Studio canvas extension (#2117)
* Add Site Studio canvas extension

Site Studio is a canvas extension for planning, drafting, and tracking a
personal website section by section. It gives you and your agent a shared
dashboard with a status board, an autosaving content editor (with AI-draft
and [Sample: ...] placeholders), and a live feed of every change and milestone.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address Copilot review feedback

Robustness, prototype-pollution safety, and accessibility fixes from the
Copilot code review on #2117:

- Add "ai_request" to VALID_CHANGE_TYPES so log_change accepts the change
  type the server itself emits (e.g. /api/request-generation).
- Bound the git branch lookup with timeout + maxBuffer so a hung git can't
  block the extension process and canvas UI.
- Serialize state persistence via a promise queue and snapshot state
  synchronously, so concurrent mutations can't clobber newer state on disk.
- Enforce a maximum request body size in readBodyJson to avoid unbounded
  memory use on the loopback server.
- Guard the /events handler against a missing/closed instance instead of
  throwing when servers.get(instanceId) is undefined.
- Reject unsafe field names (__proto__, prototype, constructor) in
  upsertSectionContent and use an own-property check in deleteSectionContent
  to prevent prototype pollution.
- Make the "Generate with AI" info tooltip reachable by keyboard and screen
  readers (focusable, labelled) instead of mouse-hover only.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: ayangupt <ayangupt@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-06-30 09:10:16 +10:00
9c87c1bb64 Upgrade agentic workflows from gh-aw v0.72.1 to v0.80.9 (#2092)
- Recompile all 6 workflow lock files with gh-aw v0.80.9
- Update gh-aw-actions/setup v0.72.1 → v0.80.9
- Update actions/checkout v6.0.2 → v7.0.0
- Refresh container image pins across all workflows
- Fix learning-hub-updater.md: add missing permissions.contents: read
  (root cause of safe_outputs 'Failed to apply bundle' failures)
- Update dispatcher SKILL.md and agentic-workflows agent
- Update actions-lock.json and copilot-setup-steps.yml

Fixes: #2077 (learning-hub-updater), #2080 (cli-for-beginners-sync)
Part of: #2076

Co-authored-by: Ayan Gupta <ayangupta@Ayans-MacBook-Pro.local>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-06-23 11:25:54 +10:00