Skip to content

B
bit-pm
切换分支/标签
  1. 14 2月, 2026 7 次提交
  3. 13 2月, 2026 28 次提交
  5. 12 2月, 2026 5 次提交
    • wwwillchen-bot's avatar
      Add step to remove needs-human:review-issue label after push (#2654) · 30ed10aa
      由 wwwillchen-bot 提交于 
      ## Summary
- Updates both `pr-push.md` and `fast-push.md` commands to automatically
remove the `needs-human:review-issue` label after pushing
- This label indicates the issue needed human review before work
started, which is now complete once the PR is pushed

## Test plan
- Run `/dyad:pr-push` on a PR with the `needs-human:review-issue` label
and verify it gets removed
- Run `/dyad:fast-push` and verify the same behavior

🤖 Generated with [Claude Code](https://claude.com/claude-code)
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/2654"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->


<!-- This is an auto-generated description by cubic. -->
---
## Summary by cubic
Automatically removes the needs-human:review-issue label after pushing
in pr-push and fast-push, so issues reflect that human review is
complete. Keeps PRs and labels in sync without manual cleanup.

- **New Features**
- pr-push and fast-push run gh pr edit --remove-label
"needs-human:review-issue" after push, gracefully handling cases where
the label doesn’t exist.

<sup>Written for commit 5d9bd27c187502459b83bfde12b960a0f89c5cd5.
Summary will update on new commits.</sup>

<!-- End of auto-generated description by cubic. -->
Co-authored-by: 's avatarWill Chen <willchen90@gmail.com>
Co-authored-by: 's avatarClaude Opus 4.5 <noreply@anthropic.com>
      30ed10aa
    • Will Chen's avatar
      Relax shell injection checks in permission hooks (#2653) · 42531151
      由 Will Chen 提交于 
      ## Summary
- Add `$(cat ...)` as a safe command substitution pattern in the gh
permission hook, allowing commands like `gh api graphql -f query="$(cat
/tmp/query.graphql)" > /tmp/output.json` to passthrough instead of being
blocked
- Add safe pipe and redirect handling to the python permission hook,
allowing pytest commands with `2>&1 | tail` output formatting patterns
- Move `| cat` from blocked to allowed in python hook tests since `cat`
is a safe read-only command

#skip-bugbot

## Test plan
- [x] All gh permission hook tests pass (572 good commands, 406 bad
commands)
- [x] All python permission hook tests pass (good, bad, passthrough,
security-blocked)
- [x] npm test passes (803 tests)

🤖 Generated with [Claude Code](https://claude.com/claude-code)
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/2653"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->


<!-- This is an auto-generated description by cubic. -->
---
## Summary by cubic
Relaxed shell injection checks in GH and Python permission hooks to
allow common read-only patterns like $(cat ...), pipes to safe tools,
and simple redirects. This reduces false blocks while keeping unsafe
substitutions and pipelines guarded.

- **Bug Fixes**
- GH hook: treat $(cat ...) as a safe command substitution and
neutralize it before checks.
- Python hook: allow pipes to common text tools (e.g., tail, grep, cat)
and redirects like 2>&1 and >/dev/null.
- Tests: move python `| cat` to allowed; add cases for gh `$(cat ...)`
and pytest `2>&1 | tail`.

<sup>Written for commit b1695c6e09bdc58288197ae2ab79745947fcca59.
Summary will update on new commits.</sup>

<!-- End of auto-generated description by cubic. -->
Co-authored-by: 's avatarClaude Opus 4.6 <noreply@anthropic.com>
      42531151
    • wwwillchen-bot's avatar
      Add Claude rules review workflow (#2652) · a852505d
      由 wwwillchen-bot 提交于 
      ## Summary
- Adds a GitHub Actions workflow that reviews Claude rules files
(AGENTS.md and .mcp.json) on pull requests
- The workflow checks for proper formatting and content in configuration
files
- Helps maintain quality of agent configuration and rules

## Test plan
- PR review workflow will run on this PR
- Verify the workflow file is valid YAML and GitHub Actions syntax

#skip-bugbot

🤖 Generated with [Claude Code](https://claude.com/claude-code)
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/2652"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

<!-- This is an auto-generated description by cubic. -->
---
## Summary by cubic
Adds a weekly workflow that audits AGENTS.md and the rules/ directory
and opens a single issue with keep/update/remove recommendations and
proposed gaps. Keeps our agent guidance current and trims low‑value
rules.

- **New Features**
- Adds .github/workflows/claude-rules-review.yml running Mondays at
13:00 UTC and via manual trigger.
- Uses anthropics/claude-code-action@v1 in direct mode with restricted
tools and a 30‑minute timeout (model set via claude_args).
- Closes any prior agent-review issues before creating a new summary;
ensures documentation and agent-review labels exist.
- Requires CLAUDE_CODE_OAUTH_TOKEN; uses GITHUB_TOKEN; shallow clone to
last 200 commits; minimal permissions (contents: read, issues: write).

<sup>Written for commit 820abfb2c8cc30ece2743ac71f021e371d250c23.
Summary will update on new commits.</sup>

<!-- End of auto-generated description by cubic. -->

---------
Co-authored-by: 's avatarWill Chen <willchen90@gmail.com>
Co-authored-by: 's avatarClaude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: 's avatarclaude[bot] <41898282+claude[bot]@users.noreply.github.com>
Co-authored-by: 's avatarcubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
      a852505d
    • Will Chen's avatar
      Add ci2 runner to nightly cleanup workflow (#2645) · 4b686b29
      由 Will Chen 提交于 
      ## Summary
- Extend the nightly disk cleanup workflow to run on both ci1 and ci2
self-hosted macOS runners
- Update the guard step to accept ci2 as a valid runner name

## Test plan
- Verify the workflow file syntax is correct
- The nightly cleanup will run on both ci1 and ci2 runners

🤖 Generated with [Claude Code](https://claude.com/claude-code)
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/2645"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->

<!-- This is an auto-generated description by cubic. -->
---
## Summary by cubic
Extend the nightly disk cleanup to run on both ci1 and ci2 using a
strategy matrix with fail-fast: false so each runner executes
independently. Removed the guard step and related conditions, and
updated comments to reflect both runners.

<sup>Written for commit d1a2a3d4d8d1392960aabf536afb152a9db89698.
Summary will update on new commits.</sup>

<!-- End of auto-generated description by cubic. -->

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Low risk CI workflow change that only affects scheduled cleanup
execution on self-hosted runners; main risk is increased load or
unexpected cleanup behavior now running on `ci2` as well.
> 
> **Overview**
> Expands the nightly macOS runner disk cleanup workflow to run on both
self-hosted runners `ci1` and `ci2` by switching the job to a matrix
strategy and targeting `runs-on: ${{ matrix.runner }}`.
> 
> Removes the previous runner-name guard and conditional step execution
so the cleanup script always runs for each matrix runner invocation.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
d1a2a3d4d8d1392960aabf536afb152a9db89698. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------
Co-authored-by: 's avatarClaude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: 's avatarclaude[bot] <41898282+claude[bot]@users.noreply.github.com>
      4b686b29
    • wwwillchen-bot's avatar
      Add telemetry sampling for non-Pro users (#2642) · aceda415
      由 wwwillchen-bot 提交于 
      ## Summary
- Store Dyad Pro status in localStorage for telemetry access
- Sample 10% of events for non-Pro users (error events always sent)
- Pro users continue to send all events

## Test plan
- Verify telemetry events are sampled correctly for non-Pro users
- Confirm error events are always sent regardless of Pro status
- Test Pro users still send all events

🤖 Generated with [Claude Code](https://claude.com/claude-code)
<!-- devin-review-badge-begin -->

---

<a href="https://app.devin.ai/review/dyad-sh/dyad/pull/2642"
target="_blank">
  <picture>
<source media="(prefers-color-scheme: dark)"
srcset="https://static.devin.ai/assets/gh-open-in-devin-review-dark.svg?v=1">
<img
src="https://static.devin.ai/assets/gh-open-in-devin-review-light.svg?v=1"
alt="Open with Devin">
  </picture>
</a>
<!-- devin-review-badge-end -->


<!-- This is an auto-generated description by cubic. -->
---
## Summary by cubic
Adds telemetry sampling for non‑Pro users to reduce event volume while
keeping error visibility. Stores Dyad Pro status in localStorage; Pro
users keep sending all events.

- **New Features**
- Save Dyad Pro status in localStorage (dyadProStatus) and expose
isDyadProUser().
- Sample PostHog events for non‑Pro: send 10% of non‑error events;
always send errors.
  - No change for Pro users; all events continue to be sent.

<sup>Written for commit 685922c99bc83c6c1d3c6e58a99761037894bc2b.
Summary will update on new commits.</sup>

<!-- End of auto-generated description by cubic. -->
Co-authored-by: 's avatarWill Chen <willchen90@gmail.com>
Co-authored-by: 's avatarClaude Opus 4.5 <noreply@anthropic.com>
      aceda415