Will Chen
c50527b4c0
Security Panel MVP (#1660)
TODOs:
- [x] Add documentation
- [x] e2e tests: run security review, update knowledge, and fix issue
- [x] more stringent risk rating
<!-- CURSOR_SUMMARY -->
---
> [!NOTE]
> Introduces a new Security mode with a Security Review panel that runs
reviews, edits rules, parses findings via IPC, and supports fixing
issues, with tests and prompt/runtime support.
>
> - **UI/Preview Panel**:
> - Add `security` preview mode to `previewModeAtom` and ActionHeader
(Shield button).
> - New `SecurityPanel` showing findings table (sorted by severity), run
review, fix issue flow, and edit `SECURITY_RULES.md` dialog.
> - Wire into `PreviewPanel` content switch.
> - **Hooks**:
> - `useSecurityReview(appId)`: fetch latest review via IPC.
> - `useStreamChat`: add `onSettled` callback to invoke refreshes after
streams.
> - **IPC/Main**:
> - `security_handlers`: `get-latest-security-review` parses
`<dyad-security-finding>` from latest assistant message.
> - Register handler in `ipc_host`; expose channel in `preload`.
> - `ipc_client`: add `getLatestSecurityReview(appId)`.
> - `chat_stream_handlers`: detect `/security-review`, use dedicated
system prompt, optionally append `SECURITY_RULES.md`, suppress
Supabase-not-available note in this mode.
> - **Prompts**:
> - Add `SECURITY_REVIEW_SYSTEM_PROMPT` with structured finding output.
> - **Supabase**:
> - Enhance schema query to include `rls_enabled`, split policy
`using_clause`/`with_check_clause`.
> - **E2E Tests**:
> - New `security_review.spec.ts` plus snapshots and fixture findings;
update test helper for `security` mode and findings table snapshot.
> - Fake LLM server streams security findings for `/security-review` and
increases batch size.
>
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
5022d01e22a2dd929a968eeba0da592e0aeece01. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->
2025-10-29 17:32:52 -07:00
..
2025-05-31 23:35:33 -07:00
2025-05-31 23:35:33 -07:00
2025-05-31 23:35:33 -07:00
2025-08-25 17:56:14 -07:00
2025-06-03 16:35:46 -07:00
2025-06-16 17:29:32 -07:00
2025-07-22 15:45:30 -07:00
2025-06-01 00:44:19 -07:00
2025-06-16 17:29:32 -07:00
2025-07-22 15:45:30 -07:00
2025-05-31 23:50:09 -07:00
2025-05-31 23:50:09 -07:00
2025-07-23 10:11:16 -07:00
2025-07-23 10:11:16 -07:00
2025-08-30 20:47:25 -07:00
2025-07-31 15:17:47 -07:00
2025-06-19 10:42:51 -07:00
2025-07-31 14:25:21 -07:00
2025-06-19 10:42:51 -07:00
2025-08-25 17:56:14 -07:00
2025-09-16 23:03:22 -07:00
2025-09-16 23:03:22 -07:00
2025-10-09 10:51:01 -07:00
2025-10-09 10:51:01 -07:00
2025-08-26 09:57:19 -07:00
2025-08-26 09:57:19 -07:00
2025-08-25 17:56:14 -07:00
2025-06-10 13:52:20 -07:00
2025-08-25 17:56:14 -07:00
2025-06-10 13:52:20 -07:00
2025-08-05 14:33:39 -07:00
2025-08-05 14:33:39 -07:00
2025-08-05 14:33:39 -07:00
2025-08-05 14:33:39 -07:00
2025-08-05 14:33:39 -07:00
2025-06-10 13:52:20 -07:00
2025-09-04 11:06:46 -07:00
2025-07-21 21:16:00 -07:00
2025-08-25 17:56:14 -07:00
2025-09-04 11:06:46 -07:00
2025-09-04 11:06:46 -07:00
2025-06-10 13:52:20 -07:00
2025-09-04 11:06:46 -07:00
2025-07-21 21:16:00 -07:00
2025-06-03 21:30:36 -07:00
2025-08-25 17:56:14 -07:00
2025-08-25 17:56:14 -07:00
2025-08-25 17:56:14 -07:00
2025-07-23 10:11:16 -07:00
2025-08-25 17:56:14 -07:00
2025-07-31 15:17:47 -07:00
2025-08-25 17:56:14 -07:00
2025-06-24 16:46:40 -07:00
2025-07-08 11:39:46 -07:00
2025-06-23 23:08:29 -07:00
2025-09-04 11:06:46 -07:00
2025-06-03 16:11:16 -07:00
2025-09-04 11:06:46 -07:00
2025-09-30 13:46:44 -07:00
2025-09-04 11:06:46 -07:00
2025-09-04 11:06:46 -07:00
2025-09-04 11:06:46 -07:00
2025-06-23 23:08:29 -07:00
2025-09-04 11:06:46 -07:00
2025-07-11 10:52:52 -07:00
2025-07-11 10:52:52 -07:00
2025-07-11 10:52:52 -07:00
2025-07-11 10:52:52 -07:00
2025-06-05 23:29:52 -07:00
2025-06-05 23:29:52 -07:00
2025-06-05 23:29:52 -07:00
2025-06-05 23:29:52 -07:00
2025-06-18 17:17:29 -07:00
2025-09-30 13:46:44 -07:00
2025-06-16 17:29:32 -07:00
2025-10-13 19:10:04 -07:00
2025-10-13 19:10:04 -07:00
2025-06-17 16:59:26 -07:00
2025-06-17 16:59:26 -07:00
2025-06-17 16:59:26 -07:00
2025-06-17 16:59:26 -07:00
2025-06-17 16:59:26 -07:00
2025-07-17 15:54:08 -07:00
2025-06-17 16:59:26 -07:00
2025-06-17 16:59:26 -07:00
2025-08-18 10:41:22 -07:00
2025-06-02 21:39:51 -07:00
2025-06-16 17:29:32 -07:00
2025-06-02 21:39:51 -07:00
2025-08-25 17:56:14 -07:00
2025-06-02 21:39:51 -07:00
2025-06-16 17:29:32 -07:00
2025-05-29 00:03:51 -07:00
2025-06-16 17:29:32 -07:00
2025-09-19 15:43:39 -07:00
2025-09-22 15:50:18 -07:00
2025-09-30 17:05:18 -07:00
2025-08-25 17:56:14 -07:00
2025-10-29 09:43:19 -07:00
2025-06-02 22:35:55 -07:00
2025-06-02 22:35:55 -07:00
2025-06-02 22:35:55 -07:00
2025-06-02 22:35:55 -07:00
2025-06-02 22:35:55 -07:00
2025-06-02 22:35:55 -07:00
2025-08-18 22:21:27 -07:00
2025-06-24 16:46:40 -07:00
2025-06-23 22:53:55 -07:00
2025-08-25 17:56:14 -07:00
2025-09-03 14:17:50 -07:00
2025-07-30 16:03:17 -07:00
2025-07-30 16:03:17 -07:00
2025-07-02 15:43:26 -07:00
2025-07-02 15:43:26 -07:00
2025-10-23 10:18:55 -07:00
2025-10-23 10:18:55 -07:00
2025-07-02 15:43:26 -07:00
2025-08-25 17:56:14 -07:00
2025-08-25 17:56:14 -07:00
2025-07-02 15:43:26 -07:00
2025-07-02 15:43:26 -07:00
2025-08-25 17:56:14 -07:00
2025-08-25 17:56:14 -07:00
2025-07-02 15:43:26 -07:00
2025-08-25 17:56:14 -07:00
2025-07-02 15:43:26 -07:00
2025-08-25 17:56:14 -07:00
2025-08-18 13:25:11 -07:00
2025-08-18 13:25:11 -07:00
2025-08-18 13:25:11 -07:00
2025-06-02 17:36:36 -07:00
2025-06-02 17:36:36 -07:00
2025-06-02 15:53:06 -07:00
2025-05-31 23:35:33 -07:00
2025-05-31 23:35:33 -07:00
2025-07-23 10:11:16 -07:00
2025-07-23 10:11:16 -07:00
2025-06-25 15:34:11 -07:00
2025-06-02 15:20:35 -07:00
2025-05-31 21:15:41 -07:00
2025-05-31 21:15:41 -07:00
2025-10-29 17:32:52 -07:00
2025-10-29 17:32:52 -07:00
2025-10-29 17:32:52 -07:00
2025-10-29 17:32:52 -07:00
2025-06-24 16:46:40 -07:00
2025-06-11 13:05:27 -07:00
2025-06-11 13:05:27 -07:00
2025-06-11 13:05:27 -07:00
2025-06-11 13:05:27 -07:00
2025-06-11 13:05:27 -07:00
2025-08-25 17:56:14 -07:00
2025-06-11 13:05:27 -07:00
2025-06-11 13:05:27 -07:00
2025-06-11 13:05:27 -07:00
2025-06-24 12:50:02 -07:00
2025-08-25 17:56:14 -07:00
2025-06-11 13:05:27 -07:00
2025-06-24 12:50:02 -07:00
2025-06-24 16:46:40 -07:00
2025-08-20 14:16:07 -07:00
2025-08-20 14:16:07 -07:00
2025-08-20 14:16:07 -07:00
2025-09-04 11:06:46 -07:00
2025-10-14 15:34:42 -07:00
2025-06-24 16:46:40 -07:00
2025-06-04 23:07:59 -07:00
2025-06-04 23:07:59 -07:00
2025-06-04 23:07:59 -07:00
2025-06-02 21:31:47 -07:00
2025-06-02 21:31:47 -07:00
2025-06-02 21:31:47 -07:00
2025-06-04 21:37:05 -07:00
2025-06-04 21:37:05 -07:00
2025-07-23 10:11:16 -07:00
2025-07-23 10:11:16 -07:00
2025-07-23 10:11:16 -07:00
2025-07-23 10:11:16 -07:00
2025-07-23 10:11:16 -07:00
2025-07-23 10:11:16 -07:00
2025-07-23 10:11:16 -07:00
2025-07-23 10:11:16 -07:00
2025-07-02 16:50:31 -07:00
2025-07-23 10:11:16 -07:00
2025-07-23 10:11:16 -07:00
2025-09-04 11:06:46 -07:00
2025-07-23 10:11:16 -07:00
2025-09-04 11:06:46 -07:00
2025-07-23 10:11:16 -07:00
2025-09-04 11:06:46 -07:00
2025-10-28 11:36:20 -07:00
2025-10-28 11:36:20 -07:00
2025-10-28 11:36:20 -07:00
2025-10-28 11:36:20 -07:00
2025-10-28 11:36:20 -07:00
2025-10-28 11:36:20 -07:00
2025-10-28 11:36:20 -07:00
2025-10-28 11:36:20 -07:00
2025-10-28 11:36:20 -07:00
2025-10-28 11:36:20 -07:00
2025-10-28 11:36:20 -07:00
2025-06-05 22:26:17 -07:00
2025-06-05 22:26:17 -07:00
2025-06-05 22:26:17 -07:00