Merge remote-tracking branch 'origin/feat/workspace-file-explorer' into feat/tui-design-refresh

Author: elkaix

.changeset/calm-doctors-check.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Make `pythinker doctor` validate `config.toml` with the current schema in every engine mode.

.changeset/workspace-file-explorer.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": minor
+---
+
+Add a sidebar Explorer for browsing and opening workspace files.

.github/workflows/nix-build.yml

@@ -48,7 +48,7 @@ jobs:
 
       - name: Post or update PR comment
         if: steps.check.outputs.SYNC_OK == 'false' && github.event_name == 'pull_request'
-        uses: actions/github-script@v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
         env:
           COMMENT_BODY: ${{ steps.missing.outputs.body }}
         with:
@@ -151,7 +151,7 @@ jobs:
 
       - name: Post or update PR comment
         if: steps.build.outputs.BUILD_FAILED == 'true' && github.event_name == 'pull_request'
-        uses: actions/github-script@v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
         env:
           COMMENT_BODY: ${{ steps.error.outputs.body }}
         with:

.github/workflows/release.yml

@@ -160,10 +160,13 @@ jobs:
 
       - name: Mint release-bot token
         id: release-bot
-        uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # pinned from v2
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # pinned from v3.2.0
         with:
           app-id: ${{ vars.RELEASE_BOT_APP_ID }}
           private-key: ${{ secrets.RELEASE_BOT_PRIVATE_KEY }}
+          permission-contents: write
+          permission-pull-requests: write
+          permission-issues: write
 
       - name: Create Release Pull Request or Publish to npm
         id: changesets
@@ -507,7 +510,7 @@ jobs:
       # Cloning and pushing the tap needs contents and nothing else.
       - name: Mint tap token
         id: tap-token
-        uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # pinned from v2
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # pinned from v3.2.0
         with:
           app-id: ${{ vars.RELEASE_BOT_APP_ID }}
           private-key: ${{ secrets.RELEASE_BOT_PRIVATE_KEY }}

.github/workflows/update-flake-lock.yml

@@ -27,7 +27,7 @@ jobs:
         uses: DeterminateSystems/nix-installer-action@1d87d45818068401a10cf16bdc5f00b24994a83f # pinned from main
 
       - name: Update flake.lock and open PR
-        uses: DeterminateSystems/update-flake-lock@5ba4a20ae344a5edd7b97ed3002219974f4d20d7 # pinned from main
+        uses: DeterminateSystems/update-flake-lock@f21d5f4a9e57815a4941a2e7c3860f4664cb3a96 # pinned from main
         with:
           pr-title: "chore(nix): monthly flake.lock update"
           pr-labels: dependencies

apps/pythinker-code/dist-web/.web-bundle-manifest.json

@@ -1,4 +1,4 @@
 {
-  "sourceHash": "4c25680541a5da27d1f06c12171abdcee797d428d042d4583a4a6ed94d7db4e1",
-  "sourceFileCount": 410
+  "sourceHash": "f7cf5febcdf56552c8623ab242e49ecff60f2d3bb0a307d139a04c7225217ed1",
+  "sourceFileCount": 412
 }