mirror of
https://github.com/simstudioai/sim.git
synced 2026-08-30 17:05:18 +08:00
Waleed
91a9c20acc
.npmrc set ignore-scripts=true globally, which overrode Bun's trustedDependencies allowlist and blocked every lifecycle script — including the repo's own root scripts. isolated-vm therefore shipped unbuilt and each contributor had to npm rebuild it by hand. The .npmrc line landed in the May 2025 Bun migration, seven months before isolated-vm was introduced. Two later commits added isolated-vm to trustedDependencies (root, then apps/sim) and both were silently inert. - delete .npmrc; lifecycle policy now lives solely in root trustedDependencies - add isolated-vm to root trustedDependencies - drop the workspace-level trustedDependencies from apps/sim (Bun only reads the root list, so it never had any effect) - drop the .npmrc entry from CODEOWNERS Naming any package in trustedDependencies replaces Bun's curated default-trust list, so only isolated-vm and sharp may run install scripts. Docker is unaffected — all three Dockerfiles pass --ignore-scripts explicitly and rebuild isolated-vm against the Node ABI by hand.
40 lines
2.0 KiB
Plaintext
40 lines
2.0 KiB
Plaintext
# Copilot/Mothership chat streaming entrypoints and replay surfaces.
|
|
/apps/sim/app/api/copilot/chat/ @simstudioai/mothership
|
|
/apps/sim/app/api/copilot/confirm/ @simstudioai/mothership
|
|
/apps/sim/app/api/copilot/chats/ @simstudioai/mothership
|
|
/apps/sim/app/api/mothership/chat/ @simstudioai/mothership
|
|
/apps/sim/app/api/mothership/chats/ @simstudioai/mothership
|
|
/apps/sim/app/api/mothership/execute/ @simstudioai/mothership
|
|
/apps/sim/app/api/v1/copilot/chat/ @simstudioai/mothership
|
|
|
|
# Server-side stream orchestration, persistence, and protocol.
|
|
/apps/sim/lib/copilot/chat/ @simstudioai/mothership
|
|
/apps/sim/lib/copilot/async-runs/ @simstudioai/mothership
|
|
/apps/sim/lib/copilot/request/ @simstudioai/mothership
|
|
/apps/sim/lib/copilot/generated/ @simstudioai/mothership
|
|
/apps/sim/lib/copilot/constants.ts @simstudioai/mothership
|
|
/apps/sim/lib/core/utils/sse.ts @simstudioai/mothership
|
|
|
|
# Stream-time tool execution, confirmations, resource persistence, and handlers.
|
|
/apps/sim/lib/copilot/tool-executor/ @simstudioai/mothership
|
|
/apps/sim/lib/copilot/tools/ @simstudioai/mothership
|
|
/apps/sim/lib/copilot/persistence/ @simstudioai/mothership
|
|
/apps/sim/lib/copilot/resources/ @simstudioai/mothership
|
|
|
|
# Client-side stream consumption, hydration, and reconnect.
|
|
/apps/sim/app/workspace/*/home/hooks/index.ts @simstudioai/mothership
|
|
/apps/sim/app/workspace/*/home/hooks/use-chat.ts @simstudioai/mothership
|
|
/apps/sim/app/workspace/*/home/hooks/preview/ @simstudioai/mothership
|
|
/apps/sim/app/workspace/*/home/hooks/stream/ @simstudioai/mothership
|
|
/apps/sim/hooks/queries/tasks.ts @simstudioai/mothership
|
|
|
|
# Dependency manifests and package-manager config. Any change here — adding,
|
|
# removing, or bumping a dependency, or altering install/security settings —
|
|
# requires review to guard against supply-chain risk. (CODEOWNERS gates file
|
|
# changes, the closest proxy GitHub offers for "new dependency added".)
|
|
package.json @simstudioai/deps
|
|
**/package.json @simstudioai/deps
|
|
bun.lock @simstudioai/deps
|
|
**/bun.lock @simstudioai/deps
|
|
bunfig.toml @simstudioai/deps
|