🛠️ Chores
-
Cleanup of GitHub source control for Agentic Coding apps
Refined the GitHub integration for Agentic Coding apps, tightening token rotation, deploy change detection, and commit message handling.
- GitHub tokens for connected installations are now refreshed by a scheduled daily rotation job that backs off and reschedules when GitHub rate limits are hit
- Deploys now record the last commit hash alongside the code hash, improving detection of pending changes when publishing an app
- Commit messages for automatic session pushes are derived from a structured commit-intent emitted by the coding agent, with a consistent
AppBuilder Commitprefix - New prompts are blocked while a session has an unresolved merge conflict, and conflicts can be resolved with “ours” or “theirs” strategies
- Git and webhook endpoints are now rate limited to protect against request floods
- Prompts now record the user who created them
-
Backwards compatibility for older Agentic Coding sandbox images
Agentic Coding sessions now verify that Git is available in the sandbox before starting the coding service.
- Sandboxes built from older images that lack Git get it installed automatically during session setup
- The check runs whenever a sandbox is created, cloned, or resumed, improving session startup reliability
-
API to retrieve Git session events for Agentic Coding sessions
Added an API endpoint that returns the Git activity history of an Agentic Coding session, making it easier to audit what happened during a session.
- Events are returned in chronological order with details, metadata, delivery ID, and creation timestamp
- Sensitive values in event metadata are automatically redacted
- Results support pagination with a maximum of 100 items per page
- Access is restricted to authorized workspace members and valid sessions
- Requests are rate limited to 60 per minute per IP