Repository navigation
feat(core): comprehensive Evalium platform release, infrastructure doctor, and hardening - #91
Merged
Merged
Conversation
- Add production-grade Google OAuth 2.0 / OpenID Connect login - Support canonical identity mapping based on Google sub to OAuthIdentity - Implement single-use HMAC-SHA256 signed CSRF state with 10-minute expiry - Add Open Redirect protection, OIDC nonce validation, and JWKS token verification - Preserve existing email/password and API key authentication flows - Auto-provision default organization, workspace, and scoped session key - Add official Google Login button and OAuth callback route in frontend - Add comprehensive 25-case test suite including 12 adversarial security attacks
…ier, and fix WCAG AA contrast
…or SQLite/Postgres
…s, and typing errors
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Overview
This pull request consolidates all uncommitted platform enhancements, infrastructure tooling, security hardening, and branding alignment across the Evalium repository. The work is organized into 10 focused, logical commits spanning infrastructure, backend services, enterprise auth, multi-language SDKs, CLI tools, frontend shell enhancements, and development tooling.
Changes by Commit
1. feat(infra): add environment doctor script and runtime pin files (8a69ca1)
scripts/check_environment.pywith multi-component system diagnostics covering Python, Node.js, Docker, PostgreSQL, Redis, and Celery connectivity.backend/tests/test_environment_doctor.py..node-version(22.16.0),.nvmrc(22.16.0),.python-version(3.12.0), and.java-version(17).2. docs: rebrand platform references and documentation to Evalium (a545eb0)
README.md,CONTRIBUTING.md,MAINTAINERS.md,GOVERNANCE.md,CODE_OF_CONDUCT.md,SECURITY.md,SUPPORT.md,ROADMAP.md,docs/PRD.md,docs/CONTRIBUTOR_ISSUES_CATALOG.md, anddocs/deployment_guide.md.3. fix(backend): harden database connection pool, redis lifecycle, and secrets fallback (a569020)
pool_pre_ping=True,pool_recycle=1800,pool_timeout=30,max_overflow=20) to prevent stale connections during idle windows.backend/app/core/redis.py.backend/app/core/secrets.pyto gracefully handle missing secret stores in non-production environments.backend/app/main.py.4. fix(migrations): standardize batch mode operations and foreign keys for SQLite/Postgres (8131a26)
f1a2b3c4d5e6,f2a3b4c5d6e7,h4a5b6c7d8e9,i5b6c7d8e9f0) with SQLite-compatiblebatch_alter_tablecontexts.5. fix(auth): resolve Google OAuth token exchange error and streamline auth redirect (31d87e9)
google_oauth_service.py.backend/app/api/v1/router.py,frontend/src/pages/Connect.tsx, andfrontend/src/pages/Landing.tsx.6. fix(backend): fix dataset router path checks, job telemetry properties, and typing errors (63adfb1)
backend/app/datasets/routers/dataset.pyto guardjob.file_pathbefore evaluatingos.path.basename.backend/app/datasets/services/benchmark.py.experiment.started_atis None inbackend/app/datasets/services/experiment.py.hostname,active_tasks_count,completed_tasks_count,failed_tasks_count) toWorkermodel inbackend/app/jobs/models/job.py.datetime.utcnow()calls with timezone-awaredatetime.now(timezone.utc).7. feat(cli): enhance evalforge CLI command handling and update developer examples (00b976d)
cli/evalforge_cli/main.py.cli/pyproject.toml.examples/curl_api_walkthrough.sh,examples/python_quickstart.py,examples/run_cli_eval.sh,examples/typescript_quickstart.ts, andexamples/README.md.8. feat(sdk): synchronize SDK versions, error models, and packaging metadata (3e4f4a9)
sdk/python/evalforge/__init__.py,client.py,exceptions.py,pyproject.toml, andREADME.md.sdk/java/pom.xml.sdk/typescript/package.json.9. feat(frontend): update shell navigation, apply theme tokens, and refine utilities (7438578)
frontend/src/layouts/WorkspaceShell.tsxnavigation items and active states.frontend/src/index.css.Overview.tsx,SettingsPages.tsx, and utility helper functions.package.jsonandplaywright.config.ts.10. chore(tooling): configure trunk linters, docker compose prod, and lock dependencies (ada3413)
prettier,taplo,black,ruff,yamllint) in.trunk/trunk.yaml.css.lint.unknownAtRules: "ignore"in.vscode/settings.jsonfor Tailwind directives.docker-compose.prod.ymlanddocker-compose.yml..markdownlint.yamlconfiguration.backend/requirements.lock.Verification and Testing
Automated Unit & Integration Tests:
pytest backend/tests/test_developer_platform.py backend/tests/test_jobs.pypassed with 14/14 tests passing.backend/tests/test_environment_doctor.pypassed with all assertions satisfied.Static Analysis & Type Checking:
Code Formatting & Linters: