Commit Graph

61 Commits

Author SHA1 Message Date
Vincent Koc fa71a6f27b fix(qa): isolate packaged mock auth bootstrap (#126247)
* fix(qa): isolate packaged mock auth config

Punchcard-Session: frost-orchard-lantern-ze
(cherry picked from commit 648bd40a4f)

* fix(qa): scrub inherited shell startup env

* fix(qa): block exported Bash functions
2026-08-21 06:51:34 +08:00
Vincent Koc c28c279afa fix(release): keep frozen validation independent of main (#126622)
* fix(release): freeze validation tooling identity

* fix(release): enforce frozen validation contract

* fix(release): validate candidate identity in parent

* fix(ci): close release isolation gate findings
2026-08-20 04:32:38 -07:00
Dallin Romney 5169760bde fix(ci): provide isolated Telegram runtime tmp (#125625)
* fix(ci): provide isolated Telegram runtime tmp

* style(test): format Telegram QA regression
2026-08-18 07:17:37 -07:00
PollyBot13 e83a9b583d fix(ci): parse Telegram QA launcher on macOS Bash (#125294)
The Telegram release-QA workflow embeds a SUT launcher that the repository
test suite extracts and syntax-checks with the local bash. Four `[[ -v ... ]]`
probes require Bash 4.2+, so the check failed under stock macOS Bash 3.2.

Replace them with `declare -p` and `${keep_env[$key]+x}`, which parse on
Bash 3.2 and are runtime-equivalent on the Ubuntu runners. Environment
preservation and boundary-mode behavior are unchanged.

Closes #125293
2026-08-18 12:47:39 +05:30
Peter Steinberger be600d0a24 fix: restore Telegram release isolation checks (#122843)
* fix(release): repair isolated Telegram QA runtime

sticky runner/SUT suite root permits config locks without config replacement; add PS1 after attested env verification for nested login shells.

* test(node-host): own desktop teardown resets
2026-08-12 16:21:45 -07:00
Peter Steinberger 66fe424590 fix(release): trust canonical beta Telegram QA candidates (#122480)
Canonical beta branch head exact-SHA provenance; unique merged-PR attribution for GitHub web-flow signed transport; extract duplicated gate into one trusted helper.
2026-08-11 23:25:56 -07:00
Vincent Koc 0f6885141b fix(ci): use Node 24.16 for release workflows (#121967) 2026-08-11 17:11:35 +08:00
Vincent Koc c3e3f276f2 fix(release): preserve frozen candidate identity 2026-08-11 10:48:08 +08:00
Peter Steinberger 88fc335323 fix(ci): support frozen script entrypoints (#121208)
* fix(ci): support frozen script entrypoints

* fix(ci): route frozen plugin tests through package script

* fix(release): support compiled candidate test helpers

* fix(release): support compiled upgrade helpers

* fix(release): mount trusted upgrade runtime

* fix(release): preserve trusted tsx resolution
2026-08-10 10:31:21 +08:00
Peter Steinberger c70aee247e refactor(scripts): migrate JavaScript tools to TypeScript (#121005)
* refactor(scripts): migrate JavaScript tools to TypeScript

* fix(ci): keep changed-scope preflight zero-install

* fix(ci): preserve zero-install script owners

* fix(ci): complete script migration follow-through

* fix(release): keep stable closeout zero-install

* fix(scripts): preserve standalone execution boundaries

* fix(scripts): repair standalone loader boundaries

* fix(scripts): normalize gateway observation ids

* fix(scripts): keep Docker packager standalone

* test(scripts): preserve rebase cleanup helpers

* test(sessions): use tracked temp directory
2026-08-09 07:21:35 -07:00
Vincent Koc d2046614f9 fix(qa): restore Telegram release validation (#118542) 2026-08-03 17:22:29 +08:00
Dallin Romney 951f13023d fix(ci): accept attested legacy Telegram evidence (#117330)
* fix(ci): attest legacy Telegram QA evidence mode

* fix(ci): attest Telegram QA evidence contract

* refactor(ci): narrow Telegram evidence compatibility
2026-08-01 19:54:39 +08:00
Dallin Romney 4edc0e9d9e fix(ci): pass target SHA to Telegram evidence finalizer (#116331) 2026-07-30 17:31:45 +08:00
Dallin Romney 2e26244cec fix(ci): support legacy Telegram release candidates (#116305)
* fix(ci): support legacy Telegram release candidates

* fix(ci): bound Telegram legacy evidence exception
2026-07-30 16:52:31 +08:00
Dallin Romney 6e60f48bad fix(ci): accept one verified Telegram SUT launch (#116267) 2026-07-30 14:42:46 +08:00
Dallin Romney 47a21192fd fix(ci): let trusted Telegram QA stage runtime (#116252) 2026-07-30 13:45:01 +08:00
Dallin Romney 7fe920a7d0 fix(ci): grant Telegram QA runtime scratch access (#115659) 2026-07-29 14:42:43 +08:00
Dallin Romney aca7b59526 refactor: make Telegram release workflow tests behavioral (#114023)
* refactor: make Telegram release workflow tests behavioral

* test: fix Telegram release workflow CI
2026-07-29 13:23:35 +08:00
Peter Steinberger 29ca63221f fix(ci): keep Telegram release scratch in isolated runtime (#114026)
* fix(ci): export Telegram candidate artifacts dir

* style(test): format Telegram QA assertion
2026-07-26 01:04:38 -04:00
Dallin Romney af4acfee63 fix(ci): retain frozen-candidate QA runtime scratch (#114018)
* fix(ci): preserve frozen candidate QA artifact scratch

* docs(ci): clarify QA artifact staging contract
2026-07-25 21:28:57 -07:00
Dallin Romney 26b7bb822b fix(ci): validate frozen release candidates with compatible harnesses (#113628)
* fix(ci): keep release harnesses compatible with frozen candidates

* style: format release Telegram workflow test
2026-07-25 04:45:29 -07:00
Peter Steinberger 1564c0719f ci: pin exact action version comments (#113386) 2026-07-24 12:05:51 -07:00
Peter Steinberger 6c3d8fc1b0 ci(release): honor candidate pnpm pin (#113110) 2026-07-23 11:32:04 -07:00
Peter Steinberger acd92f6a3d chore(deps): refresh repository dependencies (#112453)
* build(deps): update QA broker dependency

* build(deps): refresh repository dependencies

* build(deps): reconcile rebased shrinkwraps

* test(plugins): remove stale loader test state

* test(deps): stabilize updated dependency coverage

* fix(swift): use caller-isolated TaskLocal overload

* build(deps): regenerate rebased shrinkwraps

* test(msteams): preserve DNS validation in fetch helper

* fix(deps): avoid vulnerable optional image stack

* test(deps): validate generated LRU override

* refactor(ui): extract chat resizable divider

* test(ui): update divider ownership path

* fix(matrix): retain restart-compatible SDK

* style(cron): format update test
2026-07-23 16:17:13 +00:00
Peter Steinberger 6522ce37d9 fix(release): unblock Telegram QA and Copilot media proof (#112972)
* fix(release): build Telegram candidate with private QA

* fix(copilot): preserve offloaded prompt images
2026-07-23 04:43:53 -04:00
Peter Steinberger e76c9aac30 fix(release): allow isolated Telegram private QA (#112935)
* fix(release): forward private QA flags to Telegram SUT

* test(ui): update catalog activity state owner
2026-07-23 02:17:48 -04:00
Dallin Romney a195d6fcee fix(release): invoke frozen Telegram CLI directly (#112874) 2026-07-23 13:08:33 +09:00
Dallin Romney 67ef07863f fix(release): support frozen candidate contracts (#112841) 2026-07-23 12:03:11 +09:00
Peter Steinberger 2a52e45e2b fix(ci): avoid flaky commit pulls lookup 2026-07-17 00:52:44 +01:00
Peter Steinberger d6a33b539f fix(ci): retry Telegram provenance API reads 2026-07-17 00:29:04 +01:00
Alix-007 0b7f4ccb72 fix(ci): bound Telegram QA OIDC requests (#108701) 2026-07-16 01:49:15 -07:00
Peter Steinberger c8bc82817c fix(ci): accept normalized admin release permission 2026-07-14 12:52:37 +01:00
Vincent Koc bf81e589ac fix(ci): bound Telegram gateway diagnostics (#105645) 2026-07-12 22:02:22 +02:00
Peter Steinberger 67d7bf1037 ci(release): deduplicate Telegram routing proofs (#105613) 2026-07-12 21:07:24 +02:00
Peter Steinberger 1634d849c7 fix(ci): allow empty success diagnostics (#105569)
* fix(ci): allow empty success diagnostics

* docs(agents): guard non-main PR landing
2026-07-12 18:57:42 +01:00
Peter Steinberger 7c5b66a1e4 fix(ci): wait for Telegram credential capacity (#105535)
* fix(ci): wait for Telegram credential capacity

* test(ci): align Telegram credential wait contract
2026-07-12 18:19:13 +01:00
Peter Steinberger c41326e320 fix(ci): retain safe Telegram trace milestones (#105521) 2026-07-12 17:37:14 +01:00
Peter Steinberger 7517a62386 fix(ci): capture live Telegram model proof (#105499) 2026-07-12 16:47:40 +01:00
Peter Steinberger eaedcdcd4e fix(ci): retain Telegram candidate diagnostics (#105472)
* fix(ci): retain Telegram candidate diagnostics

* fix(ci): stream redacted Telegram diagnostics
2026-07-12 16:10:41 +01:00
Peter Steinberger eb9bd4e457 fix(ci): retain failed Telegram QA evidence (#105367)
* fix(ci): retain failed Telegram QA evidence

* docs(agents): clarify gh jq boundary

* docs(agents): require full checkout SHAs

* docs(agents): quote zsh Git object refs
2026-07-12 14:09:07 +01:00
Peter Steinberger 42d34eb4c8 fix(ci): pass Telegram target ref to identity gate (#105362) 2026-07-12 13:32:27 +01:00
Peter Steinberger b1fcd7c178 fix(ci): keep LTS Telegram QA model compatible (#105348)
* fix(ci): keep LTS Telegram QA model compatible

* fix(ci): probe Telegram QA model contract

* style(ci): format Telegram QA contract test

* docs(agents): note review checkout order

* docs(agents): clarify rg option order
2026-07-12 13:18:37 +01:00
Peter Steinberger 4efe056d32 fix(ci): stop Telegram release checks from fetching history (#105219)
* fix(ci): bound Telegram provenance lookups

* docs(agents): note linked worktree invocations
2026-07-12 10:18:39 +01:00
Peter Steinberger 5b29c37137 ci: accept trusted unsigned release merge heads (#104838) 2026-07-11 20:42:03 -07:00
Peter Steinberger dbdc61e897 fix(ci): validate frozen release candidates safely (#104697)
* fix(ci): validate frozen release candidates safely

* test(ci): align release workflow types

* fix(ci): validate frozen release tags safely
2026-07-11 14:10:41 -07:00
Peter Steinberger fa77fe10d5 chore: migrate active GPT-5.5 references to GPT-5.6 (#104452)
* chore(models): migrate active GPT-5.5 references

* test(workboard): expect GPT-5.6 Sol default

* chore: keep release notes in PR body

* test(models): align picker fixtures with Sol default

* test: update PDF default model expectation

* test(qa): migrate thinking smoke to Luna

* test(gateway): align mock catalog with Sol default

* ci: retrigger exact-head PR checks

* test(gateway): document default catalog invariant
2026-07-11 06:30:57 -07:00
Peter Steinberger a4ee15a851 fix(release): validate Telegram launcher syntax (#104455) 2026-07-11 05:13:44 -07:00
Peter Steinberger 651aab87f3 fix(release): wait for Telegram proc visibility (#104439) 2026-07-11 04:40:27 -07:00
Peter Steinberger 93fcfa40ee fix(release): wait for Telegram proc marker (#104418) 2026-07-11 04:12:44 -07:00
Peter Steinberger 591bb49d67 fix(release): tolerate exited Telegram proc probe (#104400) 2026-07-11 03:40:56 -07:00