6bcd4e0efe
fix(release): route core to extended-stable
...
Adapt the closed publish-plan and tarball identity checks from upstream c7810fc697
2026-07-14 08:53:27 -07:00
ad47bc72c7
fix(release): complete plugin npm preflight contract
...
Adapt the missing publish-tag and metadata-check portions of upstream 9d2d5172969eeebf7cb1
2026-07-14 08:41:57 -07:00
24a7c9bff5
fix(release): restore extended-stable plugin plan
...
Adapt the missing publication-plan portion of upstream 9d2d517296
2026-07-14 08:29:34 -07:00
403d47ab9f
fix(release): require publish-grade validation evidence
2026-07-14 07:46:03 -07:00
9a87128cea
fix(release): validate candidate installer evidence
2026-07-14 07:13:01 -07:00
4a8e527f92
chore(plugin-sdk): account for provider text reader
2026-07-14 05:07:01 -07:00
f70f268bc5
chore(plugin-sdk): refresh v6 surface budget
2026-07-14 03:56:25 -07:00
452d217984
fix(release): validate npm-only evidence versions
2026-07-14 03:44:00 -07:00
4588175df7
build(release): add release-note renderer prerequisite
2026-07-14 03:20:14 -07:00
c45dc961f5
fix(ci): validate frozen release candidates safely ( #104697 )
...
* fix(ci): validate frozen release candidates safely
* test(ci): align release workflow types
* fix(ci): validate frozen release tags safely
(cherry picked from commit dbdc61e897
2026-07-14 03:17:16 -07:00
1281148184
improve(release): reuse exact-SHA validation evidence ( #104162 )
...
* perf(release): share changelog verification snapshots
* perf(release): reuse exact-SHA validation evidence
* feat(release): checkpoint candidate workflow state
* feat(release): watch CI transitions compactly
* fix(testbox): rotate stale reusable leases
* refactor(release): move CI verifier into scripts
* fix(release): preserve verifier executable mode
* fix(testbox): force noninteractive remote hydration
* perf(testbox): skip sync for proven clean heads
* fix(testbox): keep changed gates synchronized
* fix(testbox): isolate git state probes
* fix(testbox): isolate wrapper git commands
* fix(testbox): preserve git command contracts
* fix(release): validate reused SHA evidence
* fix(release): resume serialized plugin selections
* fix(testbox): sync source on every lease reuse
* fix(release): verify from trusted workflow checkout
* fix(release): gate evidence reuse on trusted lineage
* fix(release): support legacy verifier checkouts
* fix(testbox): export CI across shell snippets
* fix(release): revalidate reused evidence before publish
* fix(release): reject untrusted reuse before lookup
* fix(release): reuse SHA-pinned root evidence
* fix(ci): allow unreleased notes in QA packages
* fix(release): satisfy script lint contracts
* fix(release): handle Unicode workflow refs safely
(cherry picked from commit c47ceb0f3d
2026-07-14 03:15:26 -07:00
089fadb2f7
fix(release): keep validation evidence immutable across reruns ( #103906 )
...
* fix(release): bind validation evidence to exact attempts
* test(release): cover exact validation attempts
(cherry picked from commit fece8c9f54
2026-07-14 03:12:05 -07:00
8dd6ce19c1
ci(release): add plugin npm artifact preflight ( #103759 )
...
* ci(release): add plugin npm preflight proof
* fix(release): bind plugin preflight package evidence
* fix(release): harden plugin preflight trust
* fix(release): bind plugin registry readback
* fix(release): retry npm packument bodies
* fix(release): retry malformed npm packuments
* fix(release): satisfy npm preflight lint
(cherry picked from commit daa653c5cc
2026-07-14 03:08:07 -07:00
e920880ca7
fix(release): make validation proof no-write ( #103737 )
...
* fix(release): make validation proof no-write
* test(release): align no-write workflow contracts
(cherry picked from commit cbe3731f77
2026-07-14 03:06:41 -07:00
5e02ed4048
fix(release): validate exact prepared npm package sets ( #102759 )
...
* fix(release): validate prepared npm package sets
Forward-port the beta3 package-set preflight, Telegram, and Parallels validation to main while preserving main's existing Bun install smoke. Recompute decoded proxy response lengths and require artifact tarballs to exactly match the verified manifest.
* fix(release): lock fixture registry proxy origin
(cherry picked from commit 0535679083
2026-07-14 02:56:25 -07:00
93ca33704b
feat(update): support extended-stable package updates ( #99811 )
...
* feat(update): add extended-stable channel contract
* feat(update): implement extended-stable package flow
* docs(update): document extended-stable behavior
* fix(update): preserve extended-stable preflight guarantees
* fix(update): reject extended-stable Git repair
* fix(update): support loopback extended-stable canaries
* fix(update): preserve scoped package roots
(cherry picked from commit d214622320
2026-07-14 02:43:39 -07:00
d21c485f00
fix(installer): use supported Node 22 patch
...
(cherry picked from commit de63d91e4b
2026-07-14 02:42:58 -07:00
eaeb408205
fix(release): validate Claude smoke response exactly
...
(cherry picked from commit 79189a2cb1
2026-07-14 02:42:29 -07:00
8ea7470508
fix(release): avoid token-shaped Claude live probe ( #103994 )
...
(cherry picked from commit b71e0c78f0
2026-07-14 02:42:29 -07:00
b5a09dc300
fix(release): harden Claude CLI live probe
...
(cherry picked from commit ff5d3d06fb
2026-07-14 02:42:29 -07:00
0a9400bb74
test(release): align codex guardian proof with auth mode
...
(cherry picked from commit abdae27b7a
2026-07-14 02:42:09 -07:00
5921671d39
fix(secrets): harden exec provider diagnostics ( #105082 )
...
(cherry picked from commit b6c171901e
2026-07-14 02:24:09 -07:00
8d13a35d51
fix(channels): tombstone corrupt ingress rows ( #105259 )
...
* fix(infra): guard channel ingress queue parseJson against corrupted JSON
* fix(infra): fix type assertion in ingress queue test
* fix(infra): use tagged parse result and validate payload before claiming
* fix(infra): remove unnecessary non-null assertion in ingress queue test
* fix(infra): scan corrupt ingress rows in claimNext
* test(gateway): avoid typed empty mock call tuple access
* fix(infra): tombstone corrupt ingress rows on duplicate enqueue and stale recovery
Two P1 gaps: enqueue() threw on duplicate when the existing row had corrupt
payload_json, and recoverStaleClaims() silently skipped corrupt claimed rows,
leaving them invisible to recovery. Both paths now tombstone the unrecoverable
row as failed with reason "corrupt_payload" and return a proper result.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
* fix(infra): resolve lint shadow and await-thenable in recoverStaleClaims
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com >
* fix(channels): tombstone corrupt ingress rows
* test(channels): use explicit placeholder claim tokens
* refactor(channels): name claim token values
* refactor(channels): keep claim projection direct
* fix(channels): preserve active ingress claims
* fix(channels): make corrupt recovery policy-aware
* refactor(channels): name corrupt claim token
* fix(channels): bound corrupt ingress reconciliation
* fix(channels): paginate pending ingress by key
* refactor(telegram): return live owner check directly
* build(plugin-sdk): refresh public export budget
---------
Co-authored-by: Pick-cat <huang.ting3@xydigit.com >
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
(cherry picked from commit a824078101
2026-07-14 02:22:12 -07:00
c8c43e4e10
fix(doctor): keep automated repair from moving approval state ( #103353 )
...
* fix(doctor): isolate automated cross-state imports
* test(update): cover isolated doctor finalization
(cherry picked from commit cd9db5ed9a
2026-07-14 02:10:23 -07:00
cf6f4c9537
fix(telegram): bound Bot API response reads to prevent OOM ( #97271 )
...
* fix(telegram): bound Bot API response reads to prevent OOM
* fix(scripts): make proof-telegram-bound.mjs lint-clean
---------
Co-authored-by: NIO <nocodet@mail.com >
(cherry picked from commit a07d59e014
2026-07-14 01:55:13 -07:00
0a4d0daa8c
fix(parallels): stabilize Windows beta smoke transport
2026-06-28 11:47:10 -07:00
d42b864219
fix(qa): accept pnpm separator for lab up ( #96246 )
2026-06-24 10:22:56 +08:00
da15cf48bf
fix(maint): keep PR landing on squash
2026-06-24 09:28:03 +08:00
4d034639ad
fix(crabbox): require Xcode for macOS proof
2026-06-24 09:01:42 +08:00
cd7e3df1ea
fix(macos): drop Textual from chat packaging
...
* fix(macos): drop Textual from chat packaging
* fix(macos): declare concurrency extras dependency
2026-06-24 08:31:05 +08:00
b93eeceac0
build(ios): attach app review notes PDF
2026-06-23 19:18:51 -05:00
96cee6cb64
refactor: route live model reads through session accessor ( #96206 )
2026-06-23 16:52:22 -07:00
5839ef519a
refactor: migrate command session persistence to accessor ( #96204 )
...
* refactor: migrate command session writes to accessor
* refactor: narrow command session persistence params
2026-06-23 16:52:11 -07:00
ae433525f0
refactor(gateway): add alias mutation accessor ( #96213 )
...
* refactor: add gateway alias mutation accessor
* test: align gateway session entry mocks
2026-06-23 16:51:36 -07:00
6f2869c296
refactor: migrate agent session accessors ( #96182 )
...
* refactor: migrate agent session accessor writes
* refactor: move subagent orphan lookup to reconciliation
* test: align session accessor mocks
2026-06-23 16:31:43 -07:00
9512294e8f
fix: bridge ACP metadata to session accessors ( #96195 )
...
* fix: bridge ACP metadata to session accessors
* fix: simplify ACP accessor key ownership
* fix: bind ACP metadata after session canonicalization
2026-06-23 16:14:53 -07:00
8a7b3c755a
fix(memory-core): migrate dreaming cleanup lifecycle ( #96193 )
...
* fix(memory-core): migrate dreaming cleanup lifecycle
* fix(sessions): resolve lifecycle session files explicitly
* fix(ci): refresh dreaming lifecycle proof ratchets
2026-06-23 16:08:44 -07:00
f8ed4de460
refactor: add abort target session accessor ( #96201 )
...
* refactor: add abort target session accessor
* refactor: centralize command abort session lookup
* fix: keep abort runtime path best effort
* fix: preserve abort target identity on persistence failure
* fix: remember abort target when persistence is skipped
* fix: abort runtime before metadata persistence
* fix: preserve abort target fallback typing
* fix: avoid stale abort memory fallback
* fix: keep abort accessor ratchet narrow
* fix: type abort persistence test mock
* fix: align abort accessor ratchet test
2026-06-23 16:06:04 -07:00
b08d901dd2
fix: route gateway history through session accessor target ( #96179 )
2026-06-23 14:42:43 -07:00
a8f387ba19
refactor: route plugin host hook state through accessor ( #96191 )
...
* refactor: route plugin host hook state through accessor
* refactor: hide session accessor store internals
2026-06-23 14:38:40 -07:00
132d70bfb3
refactor: migrate bundled transcript target lookups ( #89911 )
2026-06-23 14:32:21 -07:00
252673d5b1
fix(qa): bootstrap raw macos package scripts
2026-06-23 22:51:04 +02:00
cc981f8a73
ci: build iOS app for iOS changes
2026-06-24 04:32:08 +08:00
c24d266b2d
refactor: use accessor-backed transcript corpus for memory ( #96162 )
...
* refactor: ratchet memory transcript corpus access
* test: use narrow runtime config snapshot import
* test: update plugin sdk surface budgets
* refactor: split memory transcript corpus module
2026-06-23 12:37:44 -07:00
d095d98a02
fix(qa): reject duplicate rpc rtt controls
2026-06-23 18:00:53 +02:00
dc9c11be91
fix(qa): reject duplicate plugin gauntlet controls
2026-06-23 17:37:53 +02:00
b8811b7dde
fix(qa): reject duplicate gateway cpu controls
2026-06-23 17:30:37 +02:00
0850d83de1
fix(qa): reject duplicate model resolution perf controls
2026-06-23 17:24:41 +02:00
b22ae2a4da
fix(qa): reject duplicate model bench controls
2026-06-23 17:18:47 +02:00
a822c9abaa
fix(qa): reject duplicate gateway restart controls
2026-06-23 17:13:39 +02:00
Dallin Romney