[filiksyos]

Summary

• Adds Build directly to the existing codebase and website prompt actions, with ZIP download and explicitly confirmed new private GitHub export.
• Reuses the current UI and verified Supabase authentication; normal GitHub login stays read-only. Both feature flags default off, and the server requires an explicit tester allowlist.
• Bounded OpenAI/Azure source generation, no generated-code execution or automatic deployment; validates paths, project size, and secret patterns. GitHub identity is verified and existing repositories are never overwritten.
• Isolates generated state per user and prompt; uncertain mutations preserve a recovery link and are not retried automatically.
• Adds setup/safety documentation, unit/security tests, and browser regression workflow.

Branch research

Existing builder-buttons-analytics and replit branches only link to external builders. This native flow starts from current main to retain the recent cache/library fixes.

Verification

• 37 build unit/security tests passed.
• 34 library tests and 5 cache-security tests passed.
• TypeScript, focused ESLint, and production Next.js build passed.
• Independent code/security review completed; two medium findings fixed and regression-tested.
• Seven Playwright browser tests passed in GitHub CI, covering ZIP/download, explicit private export, cancellation, server errors, separate OAuth permission, uncertain export recovery, sign-out isolation, and mobile layout. The mobile test found and verified a narrow-card overflow fix.
• All three CI workflows passed on commit d0c374dad3b8df6952a8ed1a9255b74727611914: build/browser, library, sponsorship.
• Provider, auth, and GitHub operations use synthetic/mock fixtures. No real generation, new OAuth grant, or real repository-export integration test was performed.

Deliberately not production-ready

Keep this draft private-tester-only. The limiter is process-local, and GitHub repo OAuth permission is broad and stored by the existing Supabase browser session. Before broader rollout use shared rate/billing enforcement and a short-lived GitHub App flow, then perform authorized live provider/export tests. Generated code must be inspected/tested before execution.

No production merge, database change, or feature enablement.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
gitreverse	Ready	Preview	Nov 8, 2026 5:09pm UTC