511f930d20
Some checks failed
PR Checks / Lint (push) Has been cancelled
PR Checks / Typecheck (push) Has been cancelled
PR Checks / Build (push) Has been cancelled
PR Checks / Test shard 1/4 (push) Has been cancelled
PR Checks / Test shard 2/4 (push) Has been cancelled
PR Checks / Test shard 3/4 (push) Has been cancelled
PR Checks / Test shard 4/4 (push) Has been cancelled
Strategy: reset main to upstream/main (v0.39.0) and reapply only the fork-specific patches that survive — most older patches (plugin-loader routing, heartbeat resolver, autoload, cross-spawn, scope-resolution fixes) were absorbed by upstream between v0.28.1 → v0.39.0. Surviving patches: - Dockerfile: keep single-stage Coolify-compatible build (upstream went multi-stage which breaks our bind-mount strategy for /home/s/.codex, /home/s/.claude, /usr/lib/node_modules) - packages/engine/src/sandbox-tester-gate.ts: shared Phase-3 pre-merge gate module (Opus 4.7 + OpenSandbox + Playwright smoke) - packages/engine/src/executor.ts: call runSandboxTesterGate from finalizeAlreadyReviewedTask recovery path - packages/engine/src/project-engine.ts: call applySandboxTesterGate from primary direct-merge dispatch (the path that actually fires in prod — recovery path only catches stuck tasks) - packages/dashboard/src/auth-middleware.ts: registerPluginExemptPath for webhook endpoints (Grafana, Gitea) that must bypass daemon-token - packages/dashboard/src/plugin-routes.ts: auto-register plugin-defined routes as daemon-exempt so external plugins (telemetry-watcher, gitea-issues) work out of the box Tested locally: pnpm install + pnpm -r build green, no TS errors. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>