codeflash-internal/js/cf-webapp
HeshamHM28 a805f4cfbf revert: rollback PR #2601 and dependent fixes to ec39cd51
Reverts the following commits from main:
- d7a8b8f2 perf: fix CI build + lazy-load heavy libs + parallelize DB queries (#2601)
- 48b5e2b4 fix: make tree-sitter WASM build failure non-fatal when cache exists (#2602)
- c372b6bc Merge pull request #2603 from codeflash-ai/fix/deploy-build-common
- b656bb1d fix: cf-api deploy broken by pnpm workspace migration
- c1b0076c fix: align TypeScript versions to deduplicate @prisma/client in pnpm
- 09ed4d4b fix: use redirect instead of throw for auth failures during prerender
- 71127055 fix: redirect remaining auth throws that crash prerendering

PR #2601 introduced 18 bugs including 5 authorization bypass vulnerabilities:
- Cross-org data access via forged currentOrganizationId cookie
- Cross-repo/cross-org member role escalation and deletion (unscoped lookups)
- Missing replayTests/concolicTests in approval flow
- repository_id filter silently broken for personal accounts
- Tests mocking wrong Prisma method ($queryRawUnsafe vs $queryRaw)

The subsequent PRs (#2602, #2603, and follow-up commits) were dependent
fixes for issues caused by #2601 and are reverted together.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-13 18:59:11 +00:00
..
.playwright-mcp feat: add server action timing and expand PostHog analytics (#2552) 2026-04-04 11:34:53 -05:00
public revert: rollback PR #2601 and dependent fixes to ec39cd51 2026-04-13 18:59:11 +00:00
src revert: rollback PR #2601 and dependent fixes to ec39cd51 2026-04-13 18:59:11 +00:00
.env.example revert: rollback PR #2601 and dependent fixes to ec39cd51 2026-04-13 18:59:11 +00:00
.gitignore observability v2 toggle (#2378) 2026-02-07 15:50:12 -05:00
.prettierignore consistency in formatting across ide & js projs (#1499) 2025-03-04 23:52:45 +00:00
.prettierrc consistency in formatting across ide & js projs (#1499) 2025-03-04 23:52:45 +00:00
components.json Reformat 2023-12-04 17:54:33 -08:00
eslint.config.mjs Upgrade Next.js 14 → 16, React 18 → 19, and dependencies (#2385) 2026-04-02 22:38:01 -05:00
LANDING_PAGE_PERFORMANCE.md perf: Sentry-driven optimizations across all services (#2593) 2026-04-10 15:39:44 -05:00
next.config.mjs revert: rollback PR #2601 and dependent fixes to ec39cd51 2026-04-13 18:59:11 +00:00
package-lock.json revert: rollback PR #2601 and dependent fixes to ec39cd51 2026-04-13 18:59:11 +00:00
package.json revert: rollback PR #2601 and dependent fixes to ec39cd51 2026-04-13 18:59:11 +00:00
postcss.config.js Reformat 2023-12-04 17:54:33 -08:00
prisma.config.ts revert: rollback PR #2601 and dependent fixes to ec39cd51 2026-04-13 18:59:11 +00:00
README.md Webapp Authentication and API Key Token generation (#36) 2023-12-03 15:25:53 -08:00
roadmap.png feat: add server action timing and expand PostHog analytics (#2552) 2026-04-04 11:34:53 -05:00
sentry.server.config.ts feat: add observability stack (OTel, Sentry tuning, Prisma logging, bundle-analyzer) (#2547) 2026-04-04 11:27:10 -05:00
tailwind.config.js Lots of small layout tweaks, making wrapping responsive 2024-06-14 17:35:43 -07:00
tailwind.config.ts perf: Sentry-driven optimizations across all services (#2593) 2026-04-10 15:39:44 -05:00
tsconfig.json Upgrade Next.js 14 → 16, React 18 → 19, and dependencies (#2385) 2026-04-02 22:38:01 -05:00
vitest.config.ts test: add test coverage for server actions and withTiming (#2553) 2026-04-04 11:35:19 -05:00

This is a Next.js project bootstrapped with create-next-app.

Getting Started

First, run the development server:

npm run dev
# or
yarn dev
# or
pnpm dev
# or
bun dev

Open http://localhost:3000 with your browser to see the result.

You can start editing the page by modifying app/page.tsx. The page auto-updates as you edit the file.

This project uses next/font to automatically optimize and load Inter, a custom Google Font.

Learn More

To learn more about Next.js, take a look at the following resources:

You can check out the Next.js GitHub repository - your feedback and contributions are welcome!

Deploy on Vercel

The easiest way to deploy your Next.js app is to use the Vercel Platform from the creators of Next.js.

Check out our Next.js deployment documentation for more details.