Repository navigation
Ship secure production Web deployment - #1
Open
devinhuang2001 wants to merge 9 commits into
Open
devinhuang2001 wants to merge 9 commits into
devinhuang2001 wants to merge 9 commits into
Conversation
read_file and edit_file failed with NotADirectory on any file that already existed. resolve_workspace_path used the target itself as the existing ancestor, which left an empty tail, and joining an empty path appended a trailing separator, so the tool ended up opening `<file>/`. Return the canonical ancestor as-is when there is no tail. Paths for files that do not exist yet are unchanged.
Stable clippy now reports these four traits as a duplicate #[must_use]: async_trait already marks the generated boxed futures, so the lint is a false positive on the macro expansion. Allow it at the four definitions; the extra `unknown_lints` entry keeps clippy versions that predate the lint quiet. No behaviour change.
Stable clippy now reports these four traits as a duplicate #[must_use]: async_trait already marks the generated boxed futures, so the lint is a false positive on the macro expansion. Allow it at the four definitions; the extra `unknown_lints` entry keeps clippy versions that predate the lint quiet. No behaviour change.
devinhuang2001
marked this pull request as ready for review
October 9, 2026 17:09
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changed
Why
The previous repository represented an older local-only prototype. The current workspace was functionally complete for local use, but exposing its unauthenticated AppServer would have made the DeepSeek key, sessions, file tools, and Shell tools reachable from the public internet. This change establishes a single-user production boundary and a reproducible deployment/release path.
User impact
Windows users keep one-click desktop/Web startup. Public Web users receive an access-token gate and must configure
DEEPSEEK_API_KEY,DEEPCODER_ACCESS_TOKEN, and the exact allowed Origin. Session and workspace data can persist under/var/data.Validation
cargo fmt --all --checkcargo clippy --workspace --all-targets -- -D warningscargo check --workspacecargo test --workspacecargo build --release -p deepcoder-cli -p deepcoder-desktopnpm cinpm audit --audit-level=moderate— 0 vulnerabilitiesnpm test— 10/10 passingVITE_DEEPCODER_REQUIRE_AUTH=true npm run buildbash -n deploy/entrypoint.shStartDeepCoderWeb.ps1 -ValidateOnlyGitHub CI will independently build the production Docker image and re-run the platform matrix.