feat(auth): add Supabase passkey support + stabilize backend Flow startup#153

Closed

zenabot27 wants to merge 471 commits intomainfrom

test-backup

This pull request is big! We're only showing the most recent 250 commits

Commits on Mar 6, 2026

fix: deploy.yml YAML parse error from heredoc [Unit] at column 0

zenabot27
and
claude
committed
feat: mobile-friendly runner UI, preload core contracts, fix ai-chat Docker build

zenabot27
and
claude
committed
feat: add timeline/pages view modes to whale analytics + columnar layout

zenabot27
and
claude
committed
feat: add skeleton loading animations to token, NFT, home, and scheduled pages

zenabot27
and
claude
committed
fix: enrich Flow Get Transaction & Get Block outputs, fix snake_case mapping

zenabot27
and
claude
committed
feat(api): elevate rate limit for trusted origins (own websites)

zenabot27
and
claude
committed
fix: persist sidebar collapse & pin state in localStorage

zenabot27
and
claude
committed
docs: add per-project CLAUDE.md files with agent.md symlinks

zenabot27
and
claude
committed
fix: analytics KPI zeros and bridge endpoint 504

zenabot27
and
claude
committed
fix: guard localStorage access for SSR in Sidebar

zenabot27
and
claude
committed
fix: prevent iOS Safari auto-zoom when tapping editor on mobile

zenabot27
and
claude
committed
fix: double-head EVM addresses in tx args + contract identifier enrichment

zenabot27
and
claude
committed
feat(backend): add signing_secret to webhook endpoints for HMAC verification

zenabot27
and
claude
committed
feat(backend): HMAC-SHA256 sign outbound webhook deliveries

zenabot27
and
claude
committed
feat(studio): per-user FlowIndex API key provisioning and encrypted storage

zenabot27
and
claude
committed
feat(studio): wire Flow provider into deploy/undeploy webhook pipeline

zenabot27
and
claude
committed
feat(studio): HMAC-SHA256 verification for incoming FlowIndex webhooks

zenabot27
and
claude
committed
feat(studio): transform FlowIndex webhook payloads to trigger output schema

zenabot27
and
claude
committed
chore(studio): update FlowIndex env vars for per-user key model

zenabot27
and
claude
committed
fix: address code review issues (secret exposure, race condition, missing route, cleanup args)

zenabot27
and
claude
committed
ci: pass FLOWINDEX_API_URL to sim-studio container

zenabot27
and
claude
committed
fix: prevent duplicate workspace creation via race condition guard

zenabot27
and
claude
committed
fix(ai-chat): fix flowtoken symlink in Docker build

zenabot27
and
claude
committed
docs: add editor diff mode implementation plan

zenabot27
and
claude
committed
feat(runner): replace pendingAiRevert with pendingDiffs buffer for inline diff mode

zenabot27
and
claude
committed
feat(runner): add CadenceDiffEditor component for inline diff review

zenabot27
and
claude
committed
feat(runner): integrate CadenceDiffEditor into App.tsx

zenabot27
and
claude
committed
feat(runner): add diff indicators on tab bar

zenabot27
and
claude
committed
style(runner): improve diff editor button sizing and spacing

zenabot27
and
claude
committed
fix(runner): resolve DiffEditor mounting failure and improve hunk button UX

zenabot27
and
claude
committed
feat(runner): add client-side editor tools for AI assistant

zenabot27
and
claude
committed
fix(ai-chat): use local relative path for flowtoken package

zenabot27
and
claude
committed
fix(ai-chat): remove flowtoken symlink from git, add .gitignore

zenabot27
and
claude
committed
fix(ai-chat): resolve Turbopack build failure for local flowtoken package

zenabot27
and
claude
committed
fix(studio): prevent duplicate default-agent creation on page load

zenabot27
and
claude
committed
fix(runner): preserve undo history across AI diff editor transitions

zenabot27
and
claude
committed
feat(webhooks): add service-to-service auth for Studio→Backend API key provisioning

zenabot27
and
claude
committed
fix(analytics): show last aggregated day for module KPIs + add alpha banner

zenabot27
and
claude
committed
feat: publish flowtoken to npm as @outblock/flowtoken

zenabot27
and
claude
committed
refactor(webhooks): unify user/team tables — drop unused Supabase team tables

zenabot27
and
claude
committed
feat(runner): LSP v2 WASM with settings toggle (#160)

zenabot27
and
claude
committed
chore: update runner bun.lock after LSP v2 migration (#162)

zenabot27
and
claude
committed
fix(webhooks): add missing signing_secret column to endpoints table

zenabot27
and
claude
committed
feat(triggers): hide webhook URL from Flow triggers

zenabot27
and
claude
committed
fix: change LSP server port from 3001 to 3002 to avoid umami conflict (#163)

zenabot27
and
claude
committed
fix(frontend): improve whale transfers table layout and add column headers

zenabot27
and
claude
committed
fix(webhooks): expand processor to publish all event types and fix bridge conditions

zenabot27
and
claude
committed
fix(workspace): prevent duplicate default-agent creation after auth redirect
zenabot27
committed
feat(ai): add agent skills system with on-demand loading

zenabot27
and
claude
committed
chore(ai): update bun.lock for @outblock/flowtoken

zenabot27
and
claude
committed
fix(ai): copy skills directory into Docker image for runtime loading

zenabot27
and
claude
committed
fix(frontend): make whale transfer section headers opaque and enlarge from/to addresses

zenabot27
and
claude
committed
feat(frontend): recognize Cadence vault type identifiers as FT tokens in tx args

zenabot27
and
claude
committed
feat: detect EVMVMBridgedToken FT transfers from wrapper-only events

zenabot27
and
claude
committed
fix: prevent /status thundering herd and homepage showing zeros on load

zenabot27
and
claude
committed
⚡️ perf: fix duplicate request and parallelize account transaction queries

zenabot27
and
claude
committed
feat: local key management & contract deploy (#165)

zenabot27
and
claude
committed
chore: update bun lockfile for wallet-core dependency (#166)

zenabot27
and
claude
committed
fix: add Bearer prefix to Lilico API Authorization header (#167)

zenabot27
and
claude
committed
fix: Lilico API uses raw token auth, not Bearer (#168)

zenabot27
and
claude
committed
feat: use FlowIndex API for key lookup, return txId fast, default secp256k1 (#169)

zenabot27
and
claude
committed
fix: pass LILICO_API_KEY from GitHub secrets to deploy (#170)

zenabot27
and
claude
committed
feat(frontend): improve public keys tab readability and add copy/search

zenabot27
and
claude
committed
fix: deduplicate smart_contracts batch to avoid duplicate key errors

zenabot27
and
claude
committed
feat: redesign KeyManager UI — streamline key creation and remove cloud keys

zenabot27
and
claude
committed
feat: add checkpoint/resume support to reprocess-worker

zenabot27
and
claude
committed
chore: update bun lockfile for boring-avatars dependency

zenabot27
and
claude
committed
feat: add wallet client-side tools to AI chat

zenabot27
and
claude
committed
fix: auto-refresh accounts on KeyManager open and fix address link URL

zenabot27
and
claude
committed
feat: add account side panel with iframe embed

zenabot27
and
claude
committed
fix: retry on concurrent duplicate key in UpsertContractRegistry

zenabot27
and
claude
committed
fix: prevent header from clipping WalletButton dropdown

zenabot27
and
claude
committed
fix: use /accounts/{bare} URL pattern for account panel iframe

zenabot27
and
claude
committed
fix: ignore concurrent duplicate-key errors in UpsertContractRegistry

zenabot27
and
claude
committed
feat: click account button opens side panel directly, add disconnect

zenabot27
and
claude
committed
feat: redesign KeyManager with Accounts/Keys tabs + export password UX

zenabot27
and
claude
committed
fix: single account button — remove duplicate WalletButton when local signer active

zenabot27
and
claude
committed
fix: strengthen system prompt to enforce editor tool usage over code blocks

zenabot27
and
claude
committed
fix: persist signer selection and eliminate duplicate connect buttons

zenabot27
and
claude
committed
fix: wait for WASM before restoring saved signer selection

zenabot27
and
claude
committed
fix: correctly decrypt mnemonic-based keys for signing after page refresh

zenabot27
and
claude
committed
fix: remove wasmReady gate from signer restore, fix early-fire race

zenabot27
and
claude
committed
fix: add 'none' signer state so disconnect resets to Connect button

zenabot27
and
claude
committed
feat: add signature algorithm and network selection to key creation

zenabot27
and
claude
committed
feat: add hash algorithm selector, default to secp256k1 + SHA2_256

zenabot27
and
claude
committed
feat: secure key encryption, advanced mode, fix secp256k1 signing

zenabot27
and
claude
committed
fix: close wallet modal after selecting an account

zenabot27
and
claude
committed
fix: address-based avatar colors, show balance, FCL discovery on connect

zenabot27
and
claude
committed
fix: revert separate key derivation, improve wallet UI

zenabot27
and
claude
committed
fix: poll for account address after creation instead of single retry

zenabot27
and
claude
committed
fix: rename Local Keys to Local Wallet in signer dropdown

zenabot27
and
claude
committed
fix: correct FCL authz with hash/sig algo, add clickable txid links

zenabot27
and
claude
committed
fix: match avatar name with 0x prefix to match frontend AddressLink

zenabot27
and
claude
committed
debug: add signing debug logs to diagnose signature verification failure

zenabot27
and
claude
committed
fix: correct sig algo normalization — flowindex API uses 2=secp256k1, not 3

zenabot27
and
claude
committed
fix: align signing_algorithm numbering with Flow SDK standard

zenabot27
and
claude
committed
fix: override sigAlgo based on which pubkey search found the account

zenabot27
and
claude
committed
fix: use colorsFromAddress and 0x-prefixed name for AccountPanel avatar

zenabot27
and
claude
committed
debug: add logging to decryptFromKeystore to trace mnemonic path

zenabot27
and
claude
committed
fix: dual-curve HD derivation for mnemonic keys

zenabot27
and
claude
committed
feat: share button for all users, widen AI panel to 500px

zenabot27
and
claude
committed
perf: fix duplicate account tx request and add missing composite index

zenabot27
and
claude
committed
fix: share button redirects to login for non-logged-in users

zenabot27
and
claude
committed
feat: unified button styles, custom network dropdown

zenabot27
and
claude
committed
feat: add Auto Sign toggle to signer dropdown

zenabot27
and
claude
committed
feat: auto-detect deploy vs update for contract deployment

zenabot27
and
claude
committed
feat: network-aware contract addresses for templates and FCL config

zenabot27
and
claude
committed
feat: add testnet faucet link in signer dropdown

zenabot27
and
claude
committed
fix: wire autoSign toggle to execution flow

zenabot27
and
claude
committed
fix(runner): disable auto-apply of AI code blocks by default

zenabot27
and
claude
committed
fix: re-select signer account when switching networks

zenabot27
and
claude
committed
fix: run address tx cursor index migration concurrently
zenabot27
committed
fix: re-select signer on network switch, remove debug logs

zenabot27
and
claude
committed
feat: add Flow key-indexer fallback for account discovery

zenabot27
and
claude
committed
fix: filter out low-weight keys (weight < 1000) from account discovery

zenabot27
and
claude
committed
docs: add runner codegen design + implementation plan

zenabot27
and
claude
committed
feat(runner): add cadence-codegen WASM loader

zenabot27
and
claude
committed
feat(runner): add CodegenPanel component

zenabot27
and
claude
committed
feat(runner): wire CodegenPanel into ResultPanel as Codegen tab

zenabot27
and
claude
committed
fix(runner): optimize codegen to analyze once + track WASM artifacts

zenabot27
and
claude
committed
feat(runner): add Python and Kotlin codegen support

zenabot27
and
claude
committed
fix(runner): improve codegen UX — auto-generate, lazy per-language, contract guard

zenabot27
and
claude
committed
feat(runner): add beta tag to Codegen tab

zenabot27
and
claude
committed
feat(runner): add "Fix with AI" button on codegen errors

zenabot27
and
claude
committed
feat(ai): add ArtifactPanelProvider and ArtifactPanel component

zenabot27
and
claude
committed
fix(ai): use null-default + throw pattern for ArtifactPanel context

zenabot27
and
claude
committed
feat(ai): wire up split-view layout with ArtifactPanel

zenabot27
and
claude
committed
feat(ai): display reasoning/thinking in deep mode messages

zenabot27
and
claude
committed
feat(ai): display web search sources in chat messages

zenabot27
and
claude
committed
feat(ai): add artifact panel triggers for large tool outputs

zenabot27
and
claude
committed
fix(ai): use chat status for reasoning isStreaming instead of content check

zenabot27
and
claude
committed
fix(ai): prevent chart auto-open on historical message mount

zenabot27
and
claude
committed
feat(runner): inline error decorations + fix all TSC errors

zenabot27
and
claude
committed
fix: NFT collection logo and banner image display in activity list

zenabot27
and
claude
committed
feat: improve public keys tab card design with inline copy

zenabot27
and
claude
committed
style: remove all rounded corners from public keys tab

zenabot27
and
claude
committed
fix: use node for ai-chat build to avoid bun segfault

zenabot27
and
claude
committed
fix(runner): restore loadWASM call convention for syntax highlighting

zenabot27
and
claude
committed
fix(ai): add prose-flow class to MessageResponse and complete markdown styles

zenabot27
and
claude
committed
fix: public key text is clickable link, copy icon has no background

zenabot27
and
claude
committed
feat(runner): add dark loading state, favicon, and meta tags

zenabot27
and
claude
committed
feat(ai): add model selector and attachment button to chat input

zenabot27
and
claude
committed
fix(runner): use FlowIndex logo as favicon, fix arg error visibility

zenabot27
and
claude
committed
fix(runner): resolve oniguruma WASM loading error

zenabot27
and
claude
committed
feat(ai): add custom markdown components matching frontend widget styling

zenabot27
and
claude
committed
feat(ai): add avatar + shimmer loading state while waiting for response

zenabot27
and
claude
committed
fix(runner): fix syntax highlighting and LSP import resolution

zenabot27
and
claude
committed
fix(ai): inject mode via custom fetch transport instead of useChat body

zenabot27
and
claude
committed
feat(runner): add WASM download progress bar with server switch option

zenabot27
and
claude
committed
feat(runner): add connect wallet modal, auto LSP mode, and status indicator

zenabot27
and
claude
committed
perf(runner): defer heavy startup work on first load
zenabot27
committed
feat: add GitHub App authentication module for runner

zenabot27
and
claude
committed
feat: add GitHub connections table and edge function endpoints

zenabot27
and
claude
committed
feat: add GitHub API routes for runner backend

zenabot27
and
claude
committed
feat: add GitHub API client and useGitHub React hook for runner

zenabot27
and
claude
committed
feat: update Docker and deployment config for runner HTTP server

zenabot27
and
claude
committed
feat: add GitHub UI components for runner (connect, commit, deploy)

zenabot27
and
claude
committed
feat: integrate GitHub components into runner App.tsx

zenabot27
and
claude
committed
fix: use GH_APP_ prefix for GitHub secrets (GITHUB_ prefix reserved)

zenabot27
and
claude
committed
fix(runner): move LSP status indicator next to title, tooltip below

zenabot27
and
claude
committed
fix: route /github/* through nginx proxy, use relative API URLs

zenabot27
and
claude
committed
fix(runner): fix account creation flow and update wallet naming

zenabot27
and
claude
committed
fix: use relative URL for GitHub install link, remove target=_blank

zenabot27
and
claude
committed
fix(ai): import LucideIcon from lucide-react, not react

zenabot27
and
claude
committed
feat: move Connect GitHub to left sidebar with icon

zenabot27
and
claude
committed
fix(runner): use official Flow logo PNG for wallet icon

zenabot27
and
claude
committed
chore: rename sidebar button to just "GitHub"

zenabot27
and
claude
committed
fix(ai): remove tooltip prop that requires TooltipProvider wrapper

zenabot27
and
claude
committed
fix: use octokit.request for listing installation repos

zenabot27
and
claude
committed
fix: add explicit any types for octokit response maps

zenabot27
and
claude
committed
fix(runner): rename Flow Wallet back to FCL Wallet

zenabot27
and
claude
committed
feat(ai-chat): port frontend widget toolbar design

zenabot27
and
claude
committed
fix: use octokit.request() for all GitHub API calls, add create repo

zenabot27
and
claude
committed
refactor: skip directory step, remove create-repo feature

zenabot27
and
claude
committed
fix(ai-chat): fix tool calls, markdown styling, and list rendering

zenabot27
and
claude
committed
feat(ai-chat): replace shimmer loading with shiny text effect

zenabot27
and
claude
committed
refactor(ai-chat): use frontend widget styles for markdown and tool calls

zenabot27
and
claude
committed
fix: use unique constraint instead of partial index, grant service_role

zenabot27
and
claude
committed
fix: persist github installation_id to skip re-install flow

zenabot27
and
claude
committed
feat: auto-resume reprocess jobs on backend startup

zenabot27
and
claude
committed
chore: trigger deploy
zenabot27
committed
feat(runner): route ConnectModal create/import buttons to KeyManager mode

zenabot27
and
claude
committed
fix: pass connection to pullFiles after connect to avoid stale state

zenabot27
and
claude
committed
trigger deploy
zenabot27
committed
chore: trigger deploy
zenabot27
committed
feat(api): add RPC fallback for transaction lookup when not in DB

zenabot27
and
claude
committed
fix(api): add RPC fallback to contract list endpoint for un-indexed contracts

zenabot27
and
claude
committed
feat(runner): inline wallet creation in ConnectModal with progress steps

zenabot27
and
claude
committed
fix: handle empty GitHub repos gracefully, fix pullFiles race condition

zenabot27
and
claude
committed
fix(runner): use ref for localKeys in createAccount/refreshAccounts

zenabot27
and
claude
committed
fix: normalize repo path, handle empty repos and GitHub HTML errors

zenabot27
and
claude
committed
feat(api): add /admin/backfill-contracts endpoint for RPC-based contract backfill

zenabot27
and
claude
committed
fix: detect new files for empty repos, auto-pull on page load

zenabot27
and
claude
committed
fix: support initial commit to empty repos, add hasPulled tracking

zenabot27
and
claude
committed
fix: use inline content for empty repo commits, fix double-slash paths

zenabot27
and
claude
committed
fix: use Contents API for initial commit to empty repos

zenabot27
and
claude
committed
fix(runner): fix stale closure in useLocalKeys with direct ref mutation

zenabot27
and
claude
committed
feat(runner): show derived private keys and BIP44 path when revealing mnemonic

zenabot27
and
claude
committed
docs: add auto-deploy design for Vercel-like contract deployment

zenabot27
and
claude
committed
docs: add auto-deploy implementation plan (17 tasks)

zenabot27
and
claude
committed
feat: add runner_deploy_environments migration

zenabot27
and
claude
committed
feat: add runner_deployments migration

zenabot27
and
claude
committed
feat: add environment, deployment, and update edge function endpoints

zenabot27
and
claude
committed
feat: add GitHub Secrets write API for deploy credentials

zenabot27
and
claude
committed
feat: multi-environment workflow template with dry-run and rollback

zenabot27
and
claude
committed
feat: add webhook receiver and WebSocket deploy event broadcasting

zenabot27
and
claude
committed
feat: add promote (PR creation) and workflow dispatch routes

zenabot27
and
claude
committed
feat: add deploy environment, secrets, and event hooks to frontend

zenabot27
and
claude
committed
feat: add deploy settings, deploy panel UI and integrate into App

zenabot27
and
claude
committed
fix: webhook signature verification - require header, use raw body

zenabot27
and
claude
committed
feat: add GITHUB_APP_WEBHOOK_SECRET and SUPABASE_SERVICE_ROLE_KEY to runner deploy

zenabot27
and
claude
committed
fix: update server lockfile for libsodium-wrappers

zenabot27
and
claude
committed
fix: stop GitHub popup on every page load, fix env upsert DB error

zenabot27
and
claude
committed
perf: lazy-load holders, transfers, and prices on token detail page

zenabot27
and
claude
committed
fix: remove CREATE INDEX CONCURRENTLY from migration schema

zenabot27
and
claude
committed
feat: add railway.toml for ai-chat Dockerfile path

zenabot27
and
claude
committed
docs: add deploy dashboard design doc

zenabot27
and
claude
committed
docs: add deploy dashboard implementation plan (10 tasks)

zenabot27
and
claude
committed
feat: add react-router, split editor/deploy routes

zenabot27
and
claude
committed
feat: add runner_verified_addresses table for address binding

zenabot27
and
claude
committed
feat: add address verification endpoints to edge function

zenabot27
and
claude
committed
feat: add FlowIndex API client, address hook, and address sidebar

zenabot27
and
claude
committed
feat: add contract cards grid and deploy dashboard layout

zenabot27
and
claude
committed
feat: add contract detail page with stats, charts, events, and dependencies

zenabot27
and
claude
committed
feat: integrate CD pipeline into deploy dashboard contract detail

zenabot27
and
claude
committed
chore: remove unused DeployStatus import from editor

zenabot27
and
claude
committed
fix: configure FCL on deploy page so wallet popup works

zenabot27
and
claude
committed
feat: auto-load local key accounts, manual address input, deploy badges

zenabot27
and
claude
committed
fix: make editor/deploy nav tabs consistent on both pages

zenabot27
and
claude
committed
feat(runner): FlowIndex API with RPC fallback, rich contract metadata, boring avatars

zenabot27
and
claude
committed
feat(runner): deploy dashboard — dependency graph, source viewer, Vercel-style cards

zenabot27
and
claude
committed
feat(runner): contract detail — holders pie chart, NFT gallery, transactions, sidebar layout

zenabot27
and
claude
committed
feat(runner): redesign transactions tab with colored tags, status badges

zenabot27
and
claude
committed
feat(runner): live tx animation, scripts tab, seconds in timeAgo

zenabot27
and
claude
committed
feat(runner): rename Scripts tab to Common Tx, add Shiki syntax highlighting

zenabot27
and
claude
committed
feat(runner): redesign holders header with KPI cards + pie chart, fix boring avatars

zenabot27
and
claude
committed
feat(runner+ai): add AI Audit [Beta] tab with streaming Opus 4.6 analysis

zenabot27
and
claude
committed
refactor(runner): use @ai-sdk/react useChat for AuditTab streaming

zenabot27
and
claude
committed
fix(runner): widen audit findings sidebar from w-72 to w-96

zenabot27
and
claude
committed
fix: add missing evm_address column to nft_collections

zenabot27
and
claude
committed
fix(ai): use stepCountIs instead of maxSteps for AI SDK v6 compat

zenabot27
and
claude
committed
fix(ai): add nginx location for /api/runner-audit endpoint

zenabot27
and
claude
committed
fix(runner): replace useChat with raw SSE parsing for audit streaming

zenabot27
and
claude
committed
fix(runner): correct SSE event field names for audit streaming

zenabot27
and
claude
committed
refactor(runner): switch audit back to useChat with correct part types

zenabot27
and
claude
committed
fix(runner): use raw SSE parsing for audit streaming with correct field names

zenabot27
and
claude
committed
feat(runner): render audit stream parts sequentially with animated markdown

zenabot27
and
claude
committed
fix(runner): force-flush state on tool-output-available, add debug logging

zenabot27
and
claude
committed
debug(runner): log all SSE event types and JSON parse errors in audit

zenabot27
and
claude
committed
feat(runner): show tool input streaming progress + analyzing state

zenabot27
and
claude
committed