[comp] Production Deploy by github-actions[bot] · Pull Request #3402 · trycompai/comp

github-actions · 2026-07-14T13:46:38Z

This is an automated pull request to release the candidate branch into production, which will trigger a deployment.
It was created by the [Production PR] action.

Summary by cubic

Fixes org chart refresh after upload/delete/replace/save, clears stale device-agent auth on uninstall, blocks SSRF in enterprise API calls, and hardens dependencies to reduce security findings to 15. Adds an SBOM workflow that submits the resolved Bun tree to GitHub for accurate dependency graph and Dependabot. Addresses CS-408.

Bug Fixes
- Org chart: adds onChartChange to trigger SWR revalidation after upload/delete/replace/save; isolates refresh failures so actions still succeed.
- Device agent: clears app data on uninstall (Windows electron-builder deleteAppDataOnUninstall: true; Debian after-remove.sh removes ~/.config/comp-ai-device-agent) to prevent silent auto-linking after reinstall.
- Enterprise API: prevents SSRF in task-automation calls by encoding runId and enforcing a base-origin allowlist in callEnterpriseApi.
- Auth types: makes permission merging readonly-compatible with better-auth 1.6.
- UI build: removes glob in @trycompai/ui (tsup config + exports script) for deterministic exports and to fix framework-editor builds; skips dotfiles.
Dependencies
- Security upgrades: better-auth ^1.6.13, next ^16.2.6, axios ^1.16.0; updates vitest/vite/turbo; bumps @browserbasehq/stagehand and @nestjs/swagger; tooling bumps semantic-release v25 and @semantic-release/github v12.
- Adds root overrides for vulnerable transitives and removes unused deps; regenerates bun.lock. Reduces bun audit from 165 findings (4 critical) to 15 (0 critical).
- apps/mcp-server: adds overrides for tmp ^0.2.6 and js-yaml ^4.2.0; resolves Dependabot alerts; npm audit shows 0 vulnerabilities.
- CI/SBOM: adds .github/workflows/sbom.yml to scan with Syft and submit a dependency snapshot via GitHub’s Dependency Submission API so the dependency graph/Dependabot reflect the resolved Bun tree.

^{Written for commit a25f56e. Summary will update on new commits.}

Co-authored-by: chasprowebdev <chasgarciaprowebdev@gmail.com> Co-authored-by: Mariano Fuentes <marfuen98@gmail.com>

…r replace (#3362) * fix(app): refresh SWR cache after upload, delete, and replace * fix(app): revalidate SWR cache after editor save * fix(app): isolate SWR refresh failures from upload/delete/save results --------- Co-authored-by: chasprowebdev <chasgarciaprowebdev@gmail.com> Co-authored-by: Mariano Fuentes <marfuen98@gmail.com>

vercel · 2026-07-14T13:46:44Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
app (staging)	Ready	Preview, Comment	Jul 15, 2026 3:19pm
comp-framework-editor (staging)	Ready	Preview, Comment	Jul 15, 2026 3:19pm
portal (staging)	Ready	Preview, Comment	Jul 15, 2026 3:19pm

cubic-dev-ai

1 issue found across 8 files

Confidence score: 3/5

In packages/device-agent/assets/linux/after-remove.sh, uninstall cleanup misses the device-linking token when XDG_CONFIG_HOME is set, so reinstall in those environments can incorrectly remain linked and skip sign-in; this can cause account/state leakage across installs—update removal logic to resolve each user’s effective XDG config path (or otherwise clear that token location) before merging.

Prompt for AI agents (unresolved issues)


Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="packages/device-agent/assets/linux/after-remove.sh">

<violation number="1" location="packages/device-agent/assets/linux/after-remove.sh:10">
P2: Uninstall leaves the device-linking token behind for users who set `XDG_CONFIG_HOME`, so reinstalling in that environment can still skip sign-in. Include each user's effective XDG config location (or otherwise clear the Electron `userData` directory) rather than assuming `~/.config`.</violation>
</file>

_{Reply with feedback, questions, or to request a fix.

Fix all with cubic | Re-trigger cubic}

cubic-dev-ai · 2026-07-14T13:53:25Z

+  remove|purge)
+    for home in /root /home/*; do
+      [ -d "$home" ] || continue
+      config_dir="$home/.config/comp-ai-device-agent"


P2: Uninstall leaves the device-linking token behind for users who set XDG_CONFIG_HOME, so reinstalling in that environment can still skip sign-in. Include each user's effective XDG config location (or otherwise clear the Electron userData directory) rather than assuming ~/.config.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At packages/device-agent/assets/linux/after-remove.sh, line 10: <comment>Uninstall leaves the device-linking token behind for users who set `XDG_CONFIG_HOME`, so reinstalling in that environment can still skip sign-in. Include each user's effective XDG config location (or otherwise clear the Electron `userData` directory) rather than assuming `~/.config`.</comment> <file context> @@ -0,0 +1,18 @@ + remove|purge) + for home in /root /home/*; do + [ -d "$home" ] || continue + config_dir="$home/.config/comp-ai-device-agent" + if [ -d "$config_dir" ]; then + rm -rf "$config_dir" </file context>

Reduce `bun audit` findings from 165 (4 critical / 58 high) to 44 (0 critical / 17 high) by bumping direct deps and adding root overrides for transitive ones. bun.lock regenerated via `bun install`. Direct bumps (vulnerable instance was the direct dep): - better-auth 1.4.22 -> ^1.6.13 (CVE-2026-53512, CVSS 9.1 OAuth refresh-token replay; mcp/oidcProvider plugin is enabled in apps/api) - next ->^16.2.6 (middleware/proxy bypass, SSRF, DoS) - axios ->^1.16.0 (proxy-auth credential leak, prototype pollution) - vitest ->^3.2.6, vite ->^6.4.3, turbo ->^2.10.5 Root overrides for transitive vulns (backcompat-safe versions only): axios, vitest/@vitest/{coverage-v8,ui}, form-data, ws, semver, hono, @hono/node-server, multer, systeminformation, tmp, dompurify, ip-address, postcss, prismjs, qs, effect, protobufjs, linkify-it, mermaid, shell-quote, vite. undici intentionally NOT overridden: discord.js/@discordjs/rest pin undici@6 and use its internals; forcing v7 would break them at runtime. Verified: all production/source code typechecks clean across every workspace. Remaining typecheck errors are pre-existing .spec.ts test debt on main (unchanged source + unchanged jest/@types/node/trigger). Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

…ritical→0) (#3406) * fix(deps): remediate dependency security vulnerabilities (165 -> 16) Comprehensive dependency-security pass. Reduces `bun audit` from 165 findings (4 critical / 58 high) to 16 (0 critical / 10 high / 3 moderate / 3 low). All changes stay within declared version ranges; bun.lock is a clean regeneration. Direct bumps (vulnerable instance was the direct dep): - better-auth 1.4.22 -> ^1.6.13 (CVE-2026-53512, CVSS 9.1 OAuth refresh-token replay; mcp/oidcProvider plugin is enabled in apps/api) - next -> ^16.2.6 (middleware/proxy bypass, SSRF, DoS) - axios -> ^1.16.0 (proxy-auth credential leak, prototype pollution) - vitest -> ^3.2.6, vite -> ^6.4.3, turbo -> ^2.10.5 Dead-dep removal (unused, referenced by no script): - gitmoji -> cascade-drops request, tough-cookie@2.5.0, tar@2.2.2, node-gyp@3 - semantic-release-discord + -notifier -> drops discord.js/@discordjs/rest (which pinned undici@6 and blocked patching it). The real release->Discord notification is a separate webhook GitHub Action (no npm deps) - untouched. Parent bumps (newer parent pulls a patched child): - @browserbasehq/stagehand -> ^3.7.0 (drops langchain + langsmith) - @nestjs/swagger -> ^11.4.5 (patched js-yaml 4.3.0) Overrides for transitive vulns (backcompat-safe, verified): - axios, form-data, ws, semver, hono, @hono/node-server, multer, systeminformation, tmp, dompurify, ip-address, postcss, prismjs, qs, effect, protobufjs, linkify-it, mermaid, shell-quote, vite, @opentelemetry/core, @sigstore/core, markdown-it, @babel/core - @tiptap/* pinned 3.22.1 (lockstep; the lockfile regen floated the transitive @tiptap/* apart from @tiptap/react@3.22.1) undici NOT force-overridden across majors (discord.js path removed; the lockfile regen floats v6->6.27.0 and v7->7.28.0 within ranges instead). Verified: full `turbo build` (20/20) + typecheck (0 production errors) across all apps; apps/api Dockerfile.multistage builds clean and boots past module-load (better-auth 1.6 loads; stops only at the expected SECRET_KEY env guard). openapi.json intentionally untouched (no API files changed). Remaining 16 are all dev/build-time or no-upstream-fix: tar (electron-builder/giget/npm-bundled), minimatch (npm-bundled), esbuild (dev-server only), uuid (exceljs, no v8 fix), sigstore (release CI), cookie (disjoint majors), @ai-sdk/provider-utils (low, via stagehand). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * fix(app): make permissions readonly-compatible for better-auth 1.6 better-auth 1.6 types role `statements` as readonly tuples (ExactRoleStatements = { readonly [P]: readonly [...] }), so casting `role.statements as Record<string, string[]>` (mutable) is an invalid conversion and fails `next build`'s TypeScript check on Vercel: Type 'readonly ["read"]' cannot be assigned to the mutable type 'string[]' Widen `mergePermissions`'s `source` param to `Record<string, readonly string[]>` (it only reads, never mutates) and cast to the readonly type. Verified against better-auth@1.6.23 dist types; the only `.statements` cast in the app (other Record<string,string[]> casts are on JSON/any). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

…16→15) (#3408) * chore(deps): bump semantic-release to v25, @semantic-release/github to v12 Clears the sigstore dev/CI-only advisory (16→15). Both are dev-only release-tooling deps; release.yml already runs Node 22 (satisfies semantic-release@25 engines). syncpack intentionally left at ^13.0.4 — v15 silently ignores .syncpackrc.json's lintRules.forbiddenDependencies (supply-chain guard) and dependencyTypes, so it is not a safe drop-in. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(ui): build without the glob package (fixes framework-editor build) The semantic-release bump perturbed the dependency graph enough to shift bun's hoisting so that packages/ui's tsup build loaded an ESM brace-expansion@5 against a CJS balanced-match@1.0.2 (no named 'balanced' export), crashing @trycompai/ui#build on Vercel (framework-editor). Root cause is a latent fragility: packages/ui pulled 'glob' into its build in two places — tsup.config.ts (ESM import evaluated by bundle-require) and scripts/generate-exports.cjs. glob→minimatch→brace-expansion's balanced-match resolution is hoisting-dependent, so any dep-graph change can trip it. Remove glob from the ui build entirely: - tsup.config.ts: pass entry globs directly; tsup expands them via tinyglobby (picomatch/fdir), no brace-expansion. - generate-exports.cjs: manual recursive fs.readdirSync walk (withFileTypes, Node>=10; sorted for deterministic output). Verified: turbo build 20/20; dist file list + generated exports content unchanged (exports now alphabetical, deterministic across rebuilds). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(ui): skip dotfiles in generate-exports to match glob semantics The manual readdirSync walk enumerated every entry, whereas the previous glob.sync('**/*.js') excluded dotfiles/dot-directories by default (dot:false). Skip dot-prefixed entries so a stray .something.js or .hidden/ in dist/ can't leak into package.exports. No change to current output (dist has no dotfiles). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

…3411) Fixes CodeQL js/request-forgery (alert #116, critical). callEnterpriseApi builds `new URL(endpoint, enterpriseApiUrl)` then fetches it; getAutomationRunStatus interpolated a user-provided runId straight into the endpoint path (`/api/tasks-automations/runs/${runId}`), so a crafted runId could inject path segments into the request URL. - Encode the user value in the path (encodeURIComponent(runId)). - Add an origin allowlist guard in callEnterpriseApi: resolve the URL against the configured enterprise API base and reject anything whose origin differs, so no caller can redirect the request to another host. Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

… (#3412) apps/mcp-server is a standalone npm project (excluded from the bun workspaces). Three open Dependabot alerts, all dev-scope transitives: - #59 (high) + #58 (low): tmp path traversal / symlink write — tmp@0.0.33 via external-editor; patched in tmp>=0.2.6 - #71 (moderate): js-yaml quadratic-complexity DoS — js-yaml@4.1.1 via @eslint/eslintrc; patched in js-yaml>=4.2.0 Add npm overrides (caret-pinned to stay within the safe major): - tmp ^0.2.6 -> resolves 0.2.7 (fileSync API is stable, external-editor works) - js-yaml ^4.2.0 -> resolves 4.3.0 (satisfies eslintrc's ^4.1.1; NOT floated to v5, which would be an unvetted breaking major) Verified: npm audit 0 vulnerabilities; mcp-server build + lint pass. (bun.lock is gitignored and regenerated from package-lock.json at build.) Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

cubic-dev-ai

1 issue found across 1 file (changes from recent commits).

Prompt for AI agents (unresolved issues)


Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="apps/app/src/app/(app)/[orgId]/tasks/[taskId]/automation/[automationId]/actions/task-automation-actions.ts">

<violation number="1" location="apps/app/src/app/(app)/[orgId]/tasks/[taskId]/automation/[automationId]/actions/task-automation-actions.ts:64">
P1: A redirect from an enterprise endpoint still bypasses this origin check because `fetch` follows redirects by default. Disable redirects or validate each redirect target so this helper cannot reach another host after the initial request.</violation>
</file>

_{Tip: Review your code locally with the cubic CLI to iterate faster.

Fix all with cubic | Re-trigger cubic}

cubic-dev-ai · 2026-07-15T15:00:10Z

+  // SSRF guard: `endpoint` and params can carry user-derived values, so pin the
+  // request to the configured enterprise API origin — never allow it to be
+  // redirected to another host.
+  if (url.origin !== baseUrl.origin) {


P1: A redirect from an enterprise endpoint still bypasses this origin check because fetch follows redirects by default. Disable redirects or validate each redirect target so this helper cannot reach another host after the initial request.

Prompt for AI agents

Check if this issue is valid — if so, understand the root cause and fix it. At apps/app/src/app/(app)/[orgId]/tasks/[taskId]/automation/[automationId]/actions/task-automation-actions.ts, line 64: <comment>A redirect from an enterprise endpoint still bypasses this origin check because `fetch` follows redirects by default. Disable redirects or validate each redirect target so this helper cannot reach another host after the initial request.</comment> <file context> @@ -55,7 +55,15 @@ async function callEnterpriseApi<T>( + // SSRF guard: `endpoint` and params can carry user-derived values, so pin the + // request to the configured enterprise API origin — never allow it to be + // redirected to another host. + if (url.origin !== baseUrl.origin) { + throw new EnterpriseApiError('Invalid enterprise API endpoint', 400); + } </file context>

@v0

…M/Dependabot) (#3413) * ci: submit resolved bun tree to GitHub dependency graph (accurate SBOM) GitHub does not natively parse bun.lock, so its dependency graph, exported SBOM, and Dependabot only see declared package.json ranges plus the npm package-lock.json in apps/mcp-server — they are blind to the bun dependency tree and to our overrides. Syft parses bun.lock with fully resolved versions, so this workflow scans the repo with Syft (anchore/sbom-action) and submits the result via GitHub's Dependency Submission API. After it runs on main, GitHub's own Export SBOM and Dependabot reflect the real bun tree; the SBOM is also uploaded as a workflow artifact. Runs on main (when lockfiles/manifests change), weekly, and on demand. Needs contents:write for the submission API. No run: steps / no untrusted input, so no workflow-injection surface. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * ci(security): pin anchore/sbom-action to a commit SHA The action runs with contents:write (Dependency Submission API), so the mutable @v0 tag is a supply-chain risk — a retag or repo compromise would run altered third-party code with our write token. Pin to the full commit SHA of v0.24.0 (Syft v1.42.3, which parses bun.lock). Bump SHA + comment together to upgrade. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

github-actions Bot and others added 3 commits July 14, 2026 03:09

chore: merge release v3.101.2 back to main [skip ci]

f41f006

fix(device-agent): implement the installer-cleanup fix (#3381)

0f7581b

Co-authored-by: chasprowebdev <chasgarciaprowebdev@gmail.com> Co-authored-by: Mariano Fuentes <marfuen98@gmail.com>

github-actions Bot added prod-deploy automated-pr labels Jul 14, 2026

vercel Bot deployed to staging – app July 14, 2026 13:49 View deployment

vercel Bot deployed to staging – comp-framework-editor July 14, 2026 13:50 View deployment

cubic-dev-ai Bot reviewed Jul 14, 2026

View reviewed changes

vercel Bot deployed to staging – comp-framework-editor July 14, 2026 14:13 View deployment

vercel Bot had a problem deploying to staging – app July 14, 2026 14:14 Failure

vercel Bot deployed to staging – portal July 14, 2026 14:15 View deployment

vercel Bot deployed to staging – portal July 14, 2026 15:03 View deployment

vercel Bot deployed to staging – app July 14, 2026 15:03 View deployment

vercel Bot had a problem deploying to staging – comp-framework-editor July 14, 2026 15:04 Failure

vercel Bot deployed to staging – comp-framework-editor July 15, 2026 14:45 View deployment

vercel Bot deployed to staging – app July 15, 2026 14:45 View deployment

vercel Bot deployed to staging – portal July 15, 2026 14:45 View deployment

vercel Bot temporarily deployed to staging – portal July 15, 2026 14:51 Inactive

vercel Bot deployed to staging – app July 15, 2026 14:54 View deployment

vercel Bot deployed to staging – comp-framework-editor July 15, 2026 14:57 View deployment

vercel Bot deployed to staging – portal July 15, 2026 14:58 View deployment

vercel Bot deployed to staging – app July 15, 2026 14:58 View deployment

cubic-dev-ai Bot reviewed Jul 15, 2026

View reviewed changes

vercel Bot deployed to staging – comp-framework-editor July 15, 2026 15:17 View deployment

vercel Bot deployed to staging – app July 15, 2026 15:19 View deployment

vercel Bot deployed to staging – portal July 15, 2026 15:19 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[comp] Production Deploy#3402

[comp] Production Deploy#3402
github-actions[bot] wants to merge 9 commits into
releasefrom
main

github-actions Bot commented Jul 14, 2026 •

edited by cubic-dev-ai Bot

Loading

Uh oh!

vercel Bot commented Jul 14, 2026 •

edited

Loading

Uh oh!

cubic-dev-ai Bot left a comment

Uh oh!

cubic-dev-ai Bot Jul 14, 2026 •

edited

Loading

Uh oh!

cubic-dev-ai Bot left a comment

Uh oh!

cubic-dev-ai Bot Jul 15, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

github-actions Bot commented Jul 14, 2026 • edited by cubic-dev-ai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by cubic

Uh oh!

vercel Bot commented Jul 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cubic-dev-ai Bot Jul 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cubic-dev-ai Bot Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

github-actions Bot commented Jul 14, 2026 •

edited by cubic-dev-ai Bot

Loading

vercel Bot commented Jul 14, 2026 •

edited

Loading

cubic-dev-ai Bot Jul 14, 2026 •

edited

Loading

cubic-dev-ai Bot Jul 15, 2026 •

edited

Loading