For engineers

Review the risky change first, with the code beside you.

Stett puts the critical changes first and brings the code, the thread and the answers into the review, so you unblock your teammates sooner. In every Team seat, and free on your own repositories.

Guided review

Review what's critical first.

Risk first, in steps, with answers beside the code. Reviews take less time and miss less.

PR OverviewNext PR

#14818WalkthroughFile by fileAll filesAI reviewSubmit reviewMerge

fix(backend/api): make v2 permissions match what each endpoint reaches

Tobias Reyeson

platform· 0/9 groups reviewed · 0/17 files reviewed ·Review required

See file treeSee PR overviewAdd review notes

Closes six permission escalation holes in v2 API endpoints where credentials could reach beyond their granted scopes.
Search now requires appropriate scopes for private content types, MCP tools that spend platform resources require USE_TOOLS, and credential deletion blocks platform-managed ones.
Auth caching prevents repeated hash verification, and comprehensive tests pin each fix in place.

In this PR

Auth Caching InfrastructureSearch Content Type PermissionsMCP Tool Permission RequirementsCredential Deletion ProtectionInvoice Sharing Permission AlignmentPublic Schema Metrics VisibilityPermission Enforcement TestsAPI Documentation UpdatesSchema Permission Definition

1.Auth Caching Infrastructure

0 of 3 files reviewed

Mark 3 files reviewed

Risk 7middleware.py

Modifies auth middleware to prevent double verification and fix rate limiting.

Worth readingFastAPI: Security dependencies↗api_key.py↗

… / api / external

global_rate_limit.py6

tenancy.py6

middleware.py7

…backend/backend/api/external/middleware.pyModified+19-2Viewed

@@ -1,12 +1,11 @@

0101 from fastapi import FastAPI, HTTPException, Security, status

0202 from fastapi.security import APIKeyHeader, HTTPAuthorizationCredentials, HTTPBearer

0303 from prisma.enums import APIKeyPermission

04−from starlette.requests import Request

04+from starlette.types import Scope

0505

0606 from backend.data.auth.api_key import validate_api_key

07−from backend.data.auth.api_key import verify_api_key_hash

0807 from backend.data.auth.base import APIAuthorizationInfo

0908 from backend.data.auth.oauth import (

1009 InvalidClientError,

1110 InvalidTokenError,

1211 validate_access_token,

@@ -15,6 +14,8 @@

)

Review in steps1/9 groups · 4/17 files

1.Auth Caching Infrastructure
3/3
2.Search Content Type Permissions
1/2
api/v2/search.pyRisk 8
tests/test_search_scopes.pyRisk 3
Mark 2 files reviewed
3.MCP Tool Permission Requirements
2 files
4.Credential Deletion Protection
1 file
5.Invoice Sharing Permission Alignment
2 files
and 4 more steps

Ask

Ask about any code. Get an answer that cites its source.

Answers from the repository and the pull request, with the file and line they came from.

Chats are saved for 90 days and are yours alone. Delete a thread any time. Answers count toward your org's daily AI operations.

PR OverviewNext PR

#14818WalkthroughFile by fileAll filesAI reviewSubmit reviewMerge

fix(backend/api): make v2 permissions match what each endpoint reaches

Tobias Reyeson

platform· 0/9 groups reviewed · 0/17 files reviewed ·Review required

See file treeSee PR overviewAdd review notes

Closes six permission escalation holes in v2 API endpoints where credentials could reach beyond their granted scopes.
Search now requires appropriate scopes for private content types, MCP tools that spend platform resources require USE_TOOLS, and credential deletion blocks platform-managed ones.
Auth caching prevents repeated hash verification, and comprehensive tests pin each fix in place.

In this PR

1.Auth Caching Infrastructure

0 of 3 files reviewed

Mark 3 files reviewed

Risk 7middleware.py

Modifies auth middleware to prevent double verification and fix rate limiting.

Worth readingFastAPI: Security dependencies↗api_key.py↗

… / api / external

global_rate_limit.py6

tenancy.py6

middleware.py7

…backend/backend/api/external/middleware.pyModified+19-2Viewed

@@ -1,12 +1,11 @@

0101 from fastapi import FastAPI, HTTPException, Security, status

0202 from fastapi.security import APIKeyHeader, HTTPAuthorizationCredentials, HTTPBearer

0303 from prisma.enums import APIKeyPermission

04−from starlette.requests import Request

04+from starlette.types import Scope

0505

0606 from backend.data.auth.api_key import validate_api_key

07−from backend.data.auth.api_key import verify_api_key_hash

0807 from backend.data.auth.base import APIAuthorizationInfo

0908 from backend.data.auth.oauth import (

1009 InvalidClientError,

1110 InvalidTokenError,

1211 validate_access_token,

@@ -15,6 +14,8 @@

)

AskPR #14818

What changed since my last review?

Two commits since your approval on Oct 9, both in the auth group.

backend/api/external/middleware.py:4 swaps the Starlette Request import for Scope, so the middleware runs for WebSocket routes too. tests/test_permissions.py:88 adds the case. Nothing touched the schema or the docs.

Read the diff of 2 files and the timeline. Not a review: submit one from the top bar.

Is any thread still open?

One. On middleware.py:4 a reviewer asked whether Scope also covers WebSocket auth. The author pointed at the new test but did not resolve the thread.

Read 1 thread.

Earlier chats

How does the rate limit apply to MCP tools · Yesterday

Where is the API key hashed · Oct 8

Ask a follow-up⌘I

31 of 40 answers left today

simple-ai / billingOverviewCodePull requests38Issues112Discussions9

mainbilling / lib / billing / retry.tsCodeAskExpand

Explorer

lib

billing

invoice.ts

retry.ts

types.ts

webhooks.ts

jobs

queue.ts

worker.ts

app

prisma

package.json

README.md

1// Retries are idempotent: the same payment key is reused.

2import { scheduleJob } from "../jobs/queue";

3import type { Invoice } from "./types";

5const BACKOFF_MINUTES = [5, 30, 180, 720];

7export async function retryInvoice(invoice: Invoice, attempt: number) {

8 if (attempt >= BACKOFF_MINUTES.length) {

9 return markFailed(invoice, "retries exhausted");

10 }

11 const delay = BACKOFF_MINUTES[attempt] * 60_000;

12 return scheduleJob("invoice.retry", {

13 invoiceId: invoice.id,

14 paymentKey: invoice.paymentKey,

15 attempt: attempt + 1,

16 runAt: Date.now() + delay,

17 });

18}

20export function markFailed(invoice: Invoice, reason: string) {

21 // A failed invoice keeps its payment key so a manual retry is still safe.

22 return updateInvoice(invoice.id, {

23 status: "failed",

24 failedAt: new Date(),

25 failureReason: reason,

26 });

27}

main27 linesTypeScriptCached by commit 3f1c9a2

Code

Read the code behind a review without cloning it.

Every repository gets an Overview and a Code tab. Jump from a diff to the whole file, pinned to the commit you are reviewing.

Inbox828PRs669Issues24Discussions27Releases79Other29Later6Saved4

Act now4it waits on you and nothing else blocks it

simple-ai/platform#4812feat(web): usage page with invoice history

Open

feat(web): usage page with invoice history #4812

sam-ortizopened 2 hours ago23 files +1,284 -969 commentsAll 7 checks passed

jholliscommented 8m ago

frontend/src/app/settings/usage/UsageChart.tsx:54

@simple-ai/web the chart refetches usage on every hover. Can you check the query key before this merges?

The invoice table looks good to me. One nit on the date filter below.

Team8m ago

simple-ai/platform#4820Webhook retries stall after the worker restartsAssigned11m ago

simple-ai/platform#4790RFC: per-workspace API rate limitsReply20m ago

simple-ai/design-system#605fix(dialog): return focus to the trigger on closeReview1h ago

Watching41waits on the author, CI or other reviewers

dvoss, yukit and 11 others have the ball on 41 subjectsMark all done

Bots18folded per repo

dependabot 12 in simple-ai/platform, renovate 6 in simple-ai/simple-jsMark all done

Inbox

Know what waits on you, and why.

Pull requests, issues and discussions in one inbox. Clear what's done in a click and bookmark what you will come back to.

Issues and discussions

Read the paragraph, not the thread.

Each issue and discussion opens with a short briefing: the problem, where it stands and what blocks it.

simple-ai / simple-js

CodePull requestsIssues168Discussions

AI PicksAll open168Needs triage7Bugs41Stale52Closed1.6k

Quick win

ci: canary publish job fails after enabling npm provenance

No labels or owner · Needs triage

High priority

verifyWebhook() fails behind proxies that re-encode the body

Bug report, 26 reactions · Triage

Jump back in

Retries resend POST requests without the idempotency key

27 comments so far · pick up the thread

LabelsAssigneeNewestSearch

Needs triage7

#1852ci: canary publish job fails with E422 after enabling npm provenance on release.ymlNeeds triage

1mo ago

#1813Found broken `/docs/webhooks/verify` link in README. Please fix!Needs triage

4mo ago

#1796createClient() throws `process is not defined` on Vercel Edge runtimeNeeds triage3

6mo ago

#1781Found broken `/guides/pagination/cursors` link. Please fix!Needs triage1

2mo ago

#1702Expose `retryAfter` on RateLimitError so callers can back offNeeds triage

11mo ago

Backlog73

See pricing

For engineers

Review the risky change first, with the code beside you.

Stett puts the critical changes first and brings the code, the thread and the answers into the review, so you unblock your teammates sooner. In every Team seat, and free on your own repositories.

Guided review

Review what's critical first.

Risk first, in steps, with answers beside the code. Reviews take less time and miss less.

PR OverviewNext PR

#14818WalkthroughFile by fileAll filesAI reviewSubmit reviewMerge

fix(backend/api): make v2 permissions match what each endpoint reaches

Tobias Reyeson

platform· 0/9 groups reviewed · 0/17 files reviewed ·Review required

See file treeSee PR overviewAdd review notes

Closes six permission escalation holes in v2 API endpoints where credentials could reach beyond their granted scopes.
Search now requires appropriate scopes for private content types, MCP tools that spend platform resources require USE_TOOLS, and credential deletion blocks platform-managed ones.
Auth caching prevents repeated hash verification, and comprehensive tests pin each fix in place.

In this PR

1.Auth Caching Infrastructure

0 of 3 files reviewed

Mark 3 files reviewed

Risk 7middleware.py

Modifies auth middleware to prevent double verification and fix rate limiting.

Worth readingFastAPI: Security dependencies↗api_key.py↗

… / api / external

global_rate_limit.py6

tenancy.py6

middleware.py7

…backend/backend/api/external/middleware.pyModified+19-2Viewed

@@ -1,12 +1,11 @@

0101 from fastapi import FastAPI, HTTPException, Security, status

0202 from fastapi.security import APIKeyHeader, HTTPAuthorizationCredentials, HTTPBearer

0303 from prisma.enums import APIKeyPermission

04−from starlette.requests import Request

04+from starlette.types import Scope

0505

0606 from backend.data.auth.api_key import validate_api_key

07−from backend.data.auth.api_key import verify_api_key_hash

0807 from backend.data.auth.base import APIAuthorizationInfo

0908 from backend.data.auth.oauth import (

1009 InvalidClientError,

1110 InvalidTokenError,

1211 validate_access_token,

@@ -15,6 +14,8 @@

)

Review in steps1/9 groups · 4/17 files

1.Auth Caching Infrastructure
3/3
2.Search Content Type Permissions
1/2
api/v2/search.pyRisk 8
tests/test_search_scopes.pyRisk 3
Mark 2 files reviewed
3.MCP Tool Permission Requirements
2 files
4.Credential Deletion Protection
1 file
5.Invoice Sharing Permission Alignment
2 files
and 4 more steps

Ask

Ask about any code. Get an answer that cites its source.

Answers from the repository and the pull request, with the file and line they came from.

Chats are saved for 90 days and are yours alone. Delete a thread any time. Answers count toward your org's daily AI operations.

PR OverviewNext PR

#14818WalkthroughFile by fileAll filesAI reviewSubmit reviewMerge

fix(backend/api): make v2 permissions match what each endpoint reaches

Tobias Reyeson

platform· 0/9 groups reviewed · 0/17 files reviewed ·Review required

See file treeSee PR overviewAdd review notes

Closes six permission escalation holes in v2 API endpoints where credentials could reach beyond their granted scopes.
Search now requires appropriate scopes for private content types, MCP tools that spend platform resources require USE_TOOLS, and credential deletion blocks platform-managed ones.
Auth caching prevents repeated hash verification, and comprehensive tests pin each fix in place.

In this PR

1.Auth Caching Infrastructure

0 of 3 files reviewed

Mark 3 files reviewed

Risk 7middleware.py

Modifies auth middleware to prevent double verification and fix rate limiting.

Worth readingFastAPI: Security dependencies↗api_key.py↗

… / api / external

global_rate_limit.py6

tenancy.py6

middleware.py7

…backend/backend/api/external/middleware.pyModified+19-2Viewed

@@ -1,12 +1,11 @@

0101 from fastapi import FastAPI, HTTPException, Security, status

0202 from fastapi.security import APIKeyHeader, HTTPAuthorizationCredentials, HTTPBearer

0303 from prisma.enums import APIKeyPermission

04−from starlette.requests import Request

04+from starlette.types import Scope

0505

0606 from backend.data.auth.api_key import validate_api_key

07−from backend.data.auth.api_key import verify_api_key_hash

0807 from backend.data.auth.base import APIAuthorizationInfo

0908 from backend.data.auth.oauth import (

1009 InvalidClientError,

1110 InvalidTokenError,

1211 validate_access_token,

@@ -15,6 +14,8 @@

)

AskPR #14818

What changed since my last review?

Two commits since your approval on Oct 9, both in the auth group.

Read the diff of 2 files and the timeline. Not a review: submit one from the top bar.

Is any thread still open?

One. On middleware.py:4 a reviewer asked whether Scope also covers WebSocket auth. The author pointed at the new test but did not resolve the thread.

Read 1 thread.

Earlier chats

How does the rate limit apply to MCP tools · Yesterday

Where is the API key hashed · Oct 8

Ask a follow-up⌘I

31 of 40 answers left today

simple-ai / billingOverviewCodePull requests38Issues112Discussions9

mainbilling / lib / billing / retry.tsCodeAskExpand

Explorer

lib

billing

invoice.ts

retry.ts

types.ts

webhooks.ts

jobs

queue.ts

worker.ts

app

prisma

package.json

README.md

1// Retries are idempotent: the same payment key is reused.

2import { scheduleJob } from "../jobs/queue";

3import type { Invoice } from "./types";

5const BACKOFF_MINUTES = [5, 30, 180, 720];

7export async function retryInvoice(invoice: Invoice, attempt: number) {

8 if (attempt >= BACKOFF_MINUTES.length) {

9 return markFailed(invoice, "retries exhausted");

10 }

11 const delay = BACKOFF_MINUTES[attempt] * 60_000;

12 return scheduleJob("invoice.retry", {

13 invoiceId: invoice.id,

14 paymentKey: invoice.paymentKey,

15 attempt: attempt + 1,

16 runAt: Date.now() + delay,

17 });

18}

20export function markFailed(invoice: Invoice, reason: string) {

21 // A failed invoice keeps its payment key so a manual retry is still safe.

22 return updateInvoice(invoice.id, {

23 status: "failed",

24 failedAt: new Date(),

25 failureReason: reason,

26 });

27}

main27 linesTypeScriptCached by commit 3f1c9a2

Code

Read the code behind a review without cloning it.

Every repository gets an Overview and a Code tab. Jump from a diff to the whole file, pinned to the commit you are reviewing.

Inbox828PRs669Issues24Discussions27Releases79Other29Later6Saved4

Act now4it waits on you and nothing else blocks it

simple-ai/platform#4812feat(web): usage page with invoice history

Open

feat(web): usage page with invoice history #4812

sam-ortizopened 2 hours ago23 files +1,284 -969 commentsAll 7 checks passed

jholliscommented 8m ago

frontend/src/app/settings/usage/UsageChart.tsx:54

@simple-ai/web the chart refetches usage on every hover. Can you check the query key before this merges?

The invoice table looks good to me. One nit on the date filter below.

Team8m ago

simple-ai/platform#4820Webhook retries stall after the worker restartsAssigned11m ago

simple-ai/platform#4790RFC: per-workspace API rate limitsReply20m ago

simple-ai/design-system#605fix(dialog): return focus to the trigger on closeReview1h ago

Watching41waits on the author, CI or other reviewers

dvoss, yukit and 11 others have the ball on 41 subjectsMark all done

Bots18folded per repo

dependabot 12 in simple-ai/platform, renovate 6 in simple-ai/simple-jsMark all done

Inbox

Know what waits on you, and why.

Pull requests, issues and discussions in one inbox. Clear what's done in a click and bookmark what you will come back to.

Issues and discussions

Read the paragraph, not the thread.

Each issue and discussion opens with a short briefing: the problem, where it stands and what blocks it.

simple-ai / simple-js

CodePull requestsIssues168Discussions

AI PicksAll open168Needs triage7Bugs41Stale52Closed1.6k

Quick win

ci: canary publish job fails after enabling npm provenance

No labels or owner · Needs triage

High priority

verifyWebhook() fails behind proxies that re-encode the body

Bug report, 26 reactions · Triage

Jump back in

Retries resend POST requests without the idempotency key

27 comments so far · pick up the thread

LabelsAssigneeNewestSearch

Needs triage7

#1852ci: canary publish job fails with E422 after enabling npm provenance on release.ymlNeeds triage

1mo ago

#1813Found broken `/docs/webhooks/verify` link in README. Please fix!Needs triage

4mo ago

#1796createClient() throws `process is not defined` on Vercel Edge runtimeNeeds triage3

6mo ago

#1781Found broken `/guides/pagination/cursors` link. Please fix!Needs triage1

2mo ago

#1702Expose `retryAfter` on RateLimitError so callers can back offNeeds triage

11mo ago

Backlog73

See pricing

For engineers

Review the risky change first, with the code beside you.

Stett puts the critical changes first and brings the code, the thread and the answers into the review, so you unblock your teammates sooner. In every Team seat, and free on your own repositories.

Guided review

Review what's critical first.

Risk first, in steps, with answers beside the code. Reviews take less time and miss less.

PR OverviewNext PR

#14818WalkthroughFile by fileAll filesAI reviewSubmit reviewMerge

fix(backend/api): make v2 permissions match what each endpoint reaches

Tobias Reyeson

platform· 0/9 groups reviewed · 0/17 files reviewed ·Review required

See file treeSee PR overviewAdd review notes

Closes six permission escalation holes in v2 API endpoints where credentials could reach beyond their granted scopes.
Search now requires appropriate scopes for private content types, MCP tools that spend platform resources require USE_TOOLS, and credential deletion blocks platform-managed ones.
Auth caching prevents repeated hash verification, and comprehensive tests pin each fix in place.

In this PR

1.Auth Caching Infrastructure

0 of 3 files reviewed

Mark 3 files reviewed

Risk 7middleware.py

Modifies auth middleware to prevent double verification and fix rate limiting.

Worth readingFastAPI: Security dependencies↗api_key.py↗

… / api / external

global_rate_limit.py6

tenancy.py6

middleware.py7

…backend/backend/api/external/middleware.pyModified+19-2Viewed

@@ -1,12 +1,11 @@

0101 from fastapi import FastAPI, HTTPException, Security, status

0202 from fastapi.security import APIKeyHeader, HTTPAuthorizationCredentials, HTTPBearer

0303 from prisma.enums import APIKeyPermission

04−from starlette.requests import Request

04+from starlette.types import Scope

0505

0606 from backend.data.auth.api_key import validate_api_key

07−from backend.data.auth.api_key import verify_api_key_hash

0807 from backend.data.auth.base import APIAuthorizationInfo

0908 from backend.data.auth.oauth import (

1009 InvalidClientError,

1110 InvalidTokenError,

1211 validate_access_token,

@@ -15,6 +14,8 @@

)

Review in steps1/9 groups · 4/17 files

1.Auth Caching Infrastructure
3/3
2.Search Content Type Permissions
1/2
api/v2/search.pyRisk 8
tests/test_search_scopes.pyRisk 3
Mark 2 files reviewed
3.MCP Tool Permission Requirements
2 files
4.Credential Deletion Protection
1 file
5.Invoice Sharing Permission Alignment
2 files
and 4 more steps

Ask

Ask about any code. Get an answer that cites its source.

Answers from the repository and the pull request, with the file and line they came from.

Chats are saved for 90 days and are yours alone. Delete a thread any time. Answers count toward your org's daily AI operations.

PR OverviewNext PR

#14818WalkthroughFile by fileAll filesAI reviewSubmit reviewMerge

fix(backend/api): make v2 permissions match what each endpoint reaches

Tobias Reyeson

platform· 0/9 groups reviewed · 0/17 files reviewed ·Review required

See file treeSee PR overviewAdd review notes

Closes six permission escalation holes in v2 API endpoints where credentials could reach beyond their granted scopes.
Search now requires appropriate scopes for private content types, MCP tools that spend platform resources require USE_TOOLS, and credential deletion blocks platform-managed ones.
Auth caching prevents repeated hash verification, and comprehensive tests pin each fix in place.

In this PR

1.Auth Caching Infrastructure

0 of 3 files reviewed

Mark 3 files reviewed

Risk 7middleware.py

Modifies auth middleware to prevent double verification and fix rate limiting.

Worth readingFastAPI: Security dependencies↗api_key.py↗

… / api / external

global_rate_limit.py6

tenancy.py6

middleware.py7

…backend/backend/api/external/middleware.pyModified+19-2Viewed

@@ -1,12 +1,11 @@

0101 from fastapi import FastAPI, HTTPException, Security, status

0202 from fastapi.security import APIKeyHeader, HTTPAuthorizationCredentials, HTTPBearer

0303 from prisma.enums import APIKeyPermission

04−from starlette.requests import Request

04+from starlette.types import Scope

0505

0606 from backend.data.auth.api_key import validate_api_key

07−from backend.data.auth.api_key import verify_api_key_hash

0807 from backend.data.auth.base import APIAuthorizationInfo

0908 from backend.data.auth.oauth import (

1009 InvalidClientError,

1110 InvalidTokenError,

1211 validate_access_token,

@@ -15,6 +14,8 @@

)

AskPR #14818

What changed since my last review?

Two commits since your approval on Oct 9, both in the auth group.

Read the diff of 2 files and the timeline. Not a review: submit one from the top bar.

Is any thread still open?

One. On middleware.py:4 a reviewer asked whether Scope also covers WebSocket auth. The author pointed at the new test but did not resolve the thread.

Read 1 thread.

Earlier chats

How does the rate limit apply to MCP tools · Yesterday

Where is the API key hashed · Oct 8

Ask a follow-up⌘I

31 of 40 answers left today

simple-ai / billingOverviewCodePull requests38Issues112Discussions9

mainbilling / lib / billing / retry.tsCodeAskExpand

Explorer

lib

billing

invoice.ts

retry.ts

types.ts

webhooks.ts

jobs

queue.ts

worker.ts

app

prisma

package.json

README.md

1// Retries are idempotent: the same payment key is reused.

2import { scheduleJob } from "../jobs/queue";

3import type { Invoice } from "./types";

5const BACKOFF_MINUTES = [5, 30, 180, 720];

7export async function retryInvoice(invoice: Invoice, attempt: number) {

8 if (attempt >= BACKOFF_MINUTES.length) {

9 return markFailed(invoice, "retries exhausted");

10 }

11 const delay = BACKOFF_MINUTES[attempt] * 60_000;

12 return scheduleJob("invoice.retry", {

13 invoiceId: invoice.id,

14 paymentKey: invoice.paymentKey,

15 attempt: attempt + 1,

16 runAt: Date.now() + delay,

17 });

18}

20export function markFailed(invoice: Invoice, reason: string) {

21 // A failed invoice keeps its payment key so a manual retry is still safe.

22 return updateInvoice(invoice.id, {

23 status: "failed",

24 failedAt: new Date(),

25 failureReason: reason,

26 });

27}

main27 linesTypeScriptCached by commit 3f1c9a2

Code

Read the code behind a review without cloning it.

Every repository gets an Overview and a Code tab. Jump from a diff to the whole file, pinned to the commit you are reviewing.

Inbox828PRs669Issues24Discussions27Releases79Other29Later6Saved4

Act now4it waits on you and nothing else blocks it

simple-ai/platform#4812feat(web): usage page with invoice history

Open

feat(web): usage page with invoice history #4812

sam-ortizopened 2 hours ago23 files +1,284 -969 commentsAll 7 checks passed

jholliscommented 8m ago

frontend/src/app/settings/usage/UsageChart.tsx:54

@simple-ai/web the chart refetches usage on every hover. Can you check the query key before this merges?

The invoice table looks good to me. One nit on the date filter below.

Team8m ago

simple-ai/platform#4820Webhook retries stall after the worker restartsAssigned11m ago

simple-ai/platform#4790RFC: per-workspace API rate limitsReply20m ago

simple-ai/design-system#605fix(dialog): return focus to the trigger on closeReview1h ago

Watching41waits on the author, CI or other reviewers

dvoss, yukit and 11 others have the ball on 41 subjectsMark all done

Bots18folded per repo

dependabot 12 in simple-ai/platform, renovate 6 in simple-ai/simple-jsMark all done

Inbox

Know what waits on you, and why.

Pull requests, issues and discussions in one inbox. Clear what's done in a click and bookmark what you will come back to.

Issues and discussions

Read the paragraph, not the thread.

Each issue and discussion opens with a short briefing: the problem, where it stands and what blocks it.

simple-ai / simple-js

CodePull requestsIssues168Discussions

AI PicksAll open168Needs triage7Bugs41Stale52Closed1.6k

Quick win

ci: canary publish job fails after enabling npm provenance

No labels or owner · Needs triage

High priority

verifyWebhook() fails behind proxies that re-encode the body

Bug report, 26 reactions · Triage

Jump back in

Retries resend POST requests without the idempotency key

27 comments so far · pick up the thread

LabelsAssigneeNewestSearch

Needs triage7

#1852ci: canary publish job fails with E422 after enabling npm provenance on release.ymlNeeds triage

1mo ago

#1813Found broken `/docs/webhooks/verify` link in README. Please fix!Needs triage

4mo ago

#1796createClient() throws `process is not defined` on Vercel Edge runtimeNeeds triage3

6mo ago

#1781Found broken `/guides/pagination/cursors` link. Please fix!Needs triage1

2mo ago

#1702Expose `retryAfter` on RateLimitError so callers can back offNeeds triage

11mo ago

Backlog73

See pricing