8dace97c2e
perf(test): cut workflow guard overhead ( #122038 )
...
Co-authored-by: Amp <amp@ampcode.com >
2026-08-11 06:29:08 -07:00
fd8b1fb1b9
fix(windows): preserve provider local service env overrides ( #122027 )
2026-08-11 06:28:24 -07:00
686294f9f8
test(sqlite): right-size reliability crash payloads ( #122016 )
...
* test(sqlite): right-size reliability crash payloads
* test(agents): replace hanging provider error integration
---------
Co-authored-by: Amp <amp@ampcode.com >
2026-08-11 05:26:07 -07:00
02e8470bb8
refactor: burn SDK export collision debt ( #121888 )
...
* refactor: burn SDK export collision debt
* chore: regenerate collision debt baselines
* fix: update durable delivery core import
* fix: remove stale channel metadata type import
* fix: preserve config write SDK parameter type
* fix: preserve chat metadata SDK return type
* chore: refresh plugin SDK API baseline
* test: update plugin enable mock import
* fix: remove duplicate status helper re-export
* fix: preserve strict QA runtime availability errors
2026-08-11 05:06:11 -07:00
03f56cfbc3
fix(memory): accept Windows extra-file Markdown casing ( #121976 )
...
* fix(memory): accept Windows extra-file Markdown casing
* fix(memory): keep extra-file casing policy private
2026-08-11 04:21:15 -07:00
992126e382
refactor(sessions): drop the Sqlite infix from session-accessor exports ( #121536 )
...
* refactor(sessions): drop the Sqlite infix from session-accessor exports
The storage-neutral seam completed its file->SQLite swap on 2026-07-27;
the Sqlite-infixed export names and their X-as-Y rename blocks were the
fossil of that migration, giving every accessor operation two greppable
names. Rename ~148 exports to their canonical names at the definition
sites, delete the message-cut facade (its conflict->failed mask had one
consumer, which already handles conflict), collapse the remaining pure
delegates, and keep honest SQLite-mechanics names (scope resolution,
canonical repair, in-transaction primitives, storage-row types). The main
barrel's exported surface is byte-identical. Net -203 production LOC.
Part 2 of the session-accessor dual-layer collapse (part 1: #121316 ).
* fix: repair main-breaking lint/type/test failures blocking PR CI
Three breakages landed on main that push CI's changed-scope never runs:
a caught-error cause missing in the release-validation script and two
type errors in the package-acceptance test (direct commit 1f591bba56#121508 ) started
throwing FsSafeError("not-file") for extra-path reads whose parent chain
hits a regular file, breaking the missing-file empty-text contract that
rejection unchanged.
Item 4 repairs managed-image action E2E narrowing from bad30d5a74#77017 ).
Item 5's chat-message mock repair was superseded upstream by 750d0dcd9e#121258 's cursor token contract after #77017 hard-coded pointer.
Item 7's managed-image thumbnail-path repair was superseded upstream by 750d0dcd9e#121600 's explicit command-bearing lifecycle classification.
Item 9's cron assertion repair was superseded upstream by 3cd034f7a81f591bba56cf432ec8719935ca3b30
2026-08-11 11:13:29 +00:00
2731dc24e5
fix(plugin-sdk): keep inbound reply shim through next SDK major ( #121922 )
...
* fix(plugin-sdk): honor major-gated reply shim retirement
* fix(plugin-sdk): preserve compat code literals
* chore(plugin-sdk): refresh compatibility API baseline
2026-08-11 03:18:07 -07:00
ecc6d5a9fe
fix(e2e): download non-root installer before execution
...
Download the non-root Docker smoke installer before executing it.
- preserve the existing 30-second connection and 300-second transfer limits
- clean up the temporary installer on success or failure
- prove failed downloads cannot execute partial installer content
Co-authored-by: thomas.szbay <xydigit-zt@users.noreply.github.com >
Punchcard-Session: golden-lantern-meadow-0x
2026-08-11 18:12:52 +08:00
c719cbbfe9
fix(e2e): preserve Unicode in Telegram proof tails ( #109940 )
...
Punchcard-Session: ember-brook-workshop-qc
Co-authored-by: wangmiao0668000666 <290215524+wangmiao0668000666@users.noreply.github.com >
2026-08-11 18:09:29 +08:00
f104ce8b09
refactor(agents): fold subagent lifecycle into one controller ( #121972 )
...
* refactor(agents): fold lifecycle factories into SubagentLifecycleController
* refactor(agents): make composition root explicit
* fix(agents): atomic terminal-discard for dismissed deliveries
* fix(agents): preserve lifecycle build boundaries
* fix(agents): satisfy lifecycle static gates
* refactor(agents): move lifecycle context types out of the controller module to break the architecture cycle
2026-08-11 03:06:55 -07:00
a4c7b1b7b5
refactor(agents): split embedded-agent subscribe tool handlers into concept modules ( #121974 )
2026-08-11 02:37:48 -07:00
59799d965a
fix(scripts): honor repeated response content lengths ( #110126 )
...
Punchcard-Session: clear-valley-meadow-4p
2026-08-11 17:33:57 +08:00
fa03d9b913
refactor: consolidate coercion helpers ( #121366 )
...
* refactor: consolidate coercion helpers
* fix: remove duplicate coercion imports
* fix: preserve serialized coercion guard
* chore: ratchet coercion helper carve-outs
* fix(test): keep gauntlet subprocess startup lean
* fix: preserve imported session timestamp semantics
* fix: preserve catalog timestamp string semantics
* chore: align plugin SDK surface ratchet
* fix: preserve trajectory and SDK string contracts
* fix(test): preserve QA record assertion semantics
* fix: complete standalone record guard rename
* refactor(cron): use canonical string coercion
* fix(acpx): preserve Pi timestamp parsing
* test(channels): adapt custody test harnesses
* test(telegram): classify media harness as test support
* test(acpx): split timestamp contract coverage
* test(channels): support generated custody contracts
* chore: ban the full coercion helper name set
Extends the declaration guard to all eleven consolidated helper names and
renames the cron schedule-identity readNumber wrapper to readScheduleInteger
so the banned generic name cannot regrow.
* fix(scripts): repair release-validation guard drift and lint cause
Restores the renamed isJsonRecord guard in assertTrustedWorkflowHarness after
main added isRecord call sites in parallel, and attaches the caught YAML error
as the thrown error cause (preserve-caught-error was red on main).
* fix: preserve Claude timestamp string semantics
* fix: preserve persisted timestamp string semantics
* fix: preserve date-first timestamp contracts
* fix(openai): harden delegation failure formatting
* chore: close coercion helper guard gaps
* test(openai): model non-error delegation rejection
* chore: refresh plugin SDK API contract
* fix(tasks): use canonical string field reader
* fix(ai): use canonical provider error field coercion
* fix(browser): migrate native bootstrap coercion
* docs(plugin-sdk): clarify text record export compatibility
* fix(gateway): normalize approval execution identity
* test(outbound): isolate message action poll harness
2026-08-11 00:02:18 -07:00
c8571daa2f
fix(scripts): tolerate restricted PR metadata tokens ( #121848 )
...
Amp-Thread-ID: https://ampcode.com/threads/T-019feaaa-c7ed-769e-9f29-a3612bec72e7
Co-authored-by: Amp <amp@ampcode.com >
2026-08-10 23:30:59 -07:00
5f562e65f6
refactor: burn down export name collision baseline ( #121870 )
...
* refactor(sessions): distinguish persistence owners
* refactor(config): consolidate legacy record helper
* refactor(sessions): name sqlite number coercion
* chore(scripts): ratchet export collision baseline
2026-08-10 23:10:44 -07:00
65d13cb80b
fix(ci): retry fresh artifact metadata reads ( #121876 )
2026-08-11 14:01:31 +08:00
36fbd869ed
refactor(agents): eliminate export name collisions ( #121768 )
...
* refactor(auth): consolidate profile helper owners
* refactor(agents): consolidate subagent registry reads
* refactor(agents): disambiguate runtime placement helpers
* refactor(agents): disambiguate helper exports
* chore(scripts): burn export collision debt
* test(agents): follow moved subagent read owner
2026-08-10 22:24:33 -07:00
aba8f10bc3
fix(agents): stop reporting undelivered subagent results as delivered ( #121837 )
...
* fix(agents): record intentional non-delivery truthfully
* fix(agents): stop reporting sinkless cron completions as delivered
The inactive-cron guard runs before requester-agent dispatch. Its regression now asserts the recorded intentional non-outcome before verifying that queue, gateway, and message sends remain untouched.
* test(agents): migrate announce outcome fixtures
* chore: drop changelog edit per repo policy
2026-08-10 22:04:29 -07:00
e4a6ded2d3
fix(release): scope iOS version checks to native releases ( #121863 )
2026-08-10 21:57:02 -07:00
4b46a14a54
feat(apple): show live subagent activity in chat ( #121815 )
...
* feat(apple): show live subagent activity in chat
* chore(apple): refresh native localization inventory
2026-08-10 21:50:13 -07:00
98b222ded8
feat(scripts): report aliasing re-exports ( #121849 )
2026-08-10 21:36:22 -07:00
df3e111c91
fix(ci): run policy tests for watched source changes ( #121841 )
...
* fix(ci): route source policy tests by watched paths
* chore(ci): keep policy watch table module-private
2026-08-10 21:30:21 -07:00
ee7fae8a90
fix(ui): native command settings no longer require Raw mode ( #121832 )
...
* fix(ui): render native command settings controls
Render boolean-or-auto command settings as safe On/Off/Auto controls instead of forcing Raw mode, while preserving typed config values and fail-closed handling for unsafe unions.
* fix(ui): preserve oneOf union exclusivity
2026-08-10 21:28:06 -07:00
19ed7feee1
test(ci): rebalance compact Node shards ( #121834 )
...
* test(ci): rebalance compact node shards
Amp-Thread-ID: https://ampcode.com/threads/T-019fee8d-665d-707b-a380-23f2a6a1ce03
Co-authored-by: Peter Steinberger <steipete@gmail.com >
* test(ci): guard compact planner coverage
Amp-Thread-ID: https://ampcode.com/threads/T-019fee8d-665d-707b-a380-23f2a6a1ce03
Co-authored-by: Peter Steinberger <steipete@gmail.com >
* test(ci): drop obsolete shard isolation check
Amp-Thread-ID: https://ampcode.com/threads/T-019fee8d-665d-707b-a380-23f2a6a1ce03
Co-authored-by: Peter Steinberger <steipete@gmail.com >
* test(ci): stop freezing compact shard placement
Amp-Thread-ID: https://ampcode.com/threads/T-019fee8d-665d-707b-a380-23f2a6a1ce03
Co-authored-by: Peter Steinberger <steipete@gmail.com >
---------
Co-authored-by: Amp <amp@ampcode.com >
2026-08-11 04:18:34 +00:00
73a9eed95b
refactor(audit): add canonical admitted-run context ( #120534 )
...
* feat(audit): carry canonical admitted execution context
* fix(agents): preserve admitted context across retries
* fix(worker): fence legacy launch dialect
* test(gateway): track approval temp dirs
* fix(plugin-sdk): preserve harness attempt compatibility
* fix: close delegated run authority at owner boundaries
* fix: internalize delegated authority validators
* refactor: split delegated authority proof surfaces
* refactor: centralize command admission identity
* test: claim runtime tool authority
* fix(gateway): keep lifecycle cleanup within static budgets
* fix(agents): revalidate harness policy authority
* fix(agents): fence awaited approval capability results
* test(copilot): supply required harness capability fixtures
* fix(agent): preserve scoped embedded run admission
* fix(agent): preserve keyless and worker authority
* test(agent): bind incomplete-turn authority
* docs: preserve execution authority invariants
* chore(plugin-sdk): regenerate API baseline
* fix(gateway): notify pending claim closure
* fix(gateway): revalidate delegated tool authority
* fix(plugin-sdk): keep source guard internal
* fix: close delegated authority races
* fix: revalidate delegated side effects
* fix: close harness authority projection gaps
* fix: align authority integration types
* fix: isolate settled harness finalization
* fix: fence recovery identity finalization
* fix: preserve committed session worktrees
* fix: preserve worker placement agent identity
* fix: fence active harness tool work
* fix(plugins): restore embedded run admission owner
* chore(plugin-sdk): compose integrated surface budgets
* fix(copilot): keep finalization attempt type internal
* fix(plugins): complete admission owner type imports
* test(harness): use settled finalization attempt shape
* fix(security): retain exact side-run and approval authority
* fix(security): preserve protected authority through terminal sweep
* fix(agents): follow moved recovery store owner
* fix(ci): align integrated authority owners with gates
* fix(plugins): distinguish embedded agent adapter export
* chore(plugin-sdk): regenerate API baseline after rolling integration
* refactor(gateway): keep session authority within owner budgets
* fix(gateway): keep session helpers private
* docs(plugin-sdk): name the V2 parameter subpath
* chore(integration): reconcile worker and SDK surfaces
* docs(plugin-sdk): require the V2 host API floor
* chore(plugin-sdk): regenerate after proxy-auth integration
2026-08-10 23:15:20 -05:00
8c3c8a2ab0
feat(android): show live subagent activity in chat ( #121813 )
...
* feat(android): show live subagent activity
* chore(android): mark task event handled
* fix(android): localize activity diff chips
* fix(android): reconcile dropped task activity
2026-08-10 21:08:44 -07:00
b5d5ec340f
feat(cloud-workers): add desktop apps and browser autonomy ( #121475 )
...
* feat(cloud-workers): add desktop apps and browser autonomy
provider-attested Browser/Terminal launchers, shared visible loopback CDP Browser tool, no MCP/cookies/generic command.
* feat(ui): add cloud desktop app launcher
* docs(gateway): document cloud desktop apps and browser autonomy
* perf(ui): trim desktop launcher startup copy
* refactor(ui): simplify desktop launch feedback
* perf(ui): reuse desktop app labels
* fix(ui): keep desktop launch failures actionable
* fix(crabbox): allow browser bootstrap to finish
* fix(cloud-workers): honor provider provision budgets
* fix(cloud-workers): persist browser screenshot receipts
* fix(cloud-workers): bound browser screenshot lifecycle
* fix(cloud-workers): avoid replaying desktop launches
* test(cloud-workers): isolate browser runtime integration
* refactor(cloud-workers): tighten desktop runtime boundaries
* test(cloud-workers): keep browser runtime mock synchronous
* fix(cloud-workers): break gateway type import cycle
* fix(ci): settle admitted setup sessions in tests
* build(plugin-sdk): refresh desktop app contract
* ci: refresh merge-tree validation
* build(plugin-sdk): regenerate desktop app baseline
* style(gateway): format merged method order test
2026-08-10 20:31:07 -07:00
69220fc0d4
test(macos): remove body-only view probes ( #121820 )
...
* test(macos): remove body-only view probes
* test(macos): drop retired i18n wrapper contract
2026-08-10 20:26:56 -07:00
ebfd3ba154
improve: cut CI critical path without more workers ( #121807 )
...
* test(ci): remove redundant builds from critical path
Amp-Thread-ID: https://ampcode.com/threads/T-019fee8d-665d-707b-a380-23f2a6a1ce03
Co-authored-by: Peter Steinberger <steipete@gmail.com >
* docs(ci): format runner table
Amp-Thread-ID: https://ampcode.com/threads/T-019fee8d-665d-707b-a380-23f2a6a1ce03
Co-authored-by: Peter Steinberger <steipete@gmail.com >
---------
Co-authored-by: Amp <amp@ampcode.com >
2026-08-10 20:21:20 -07:00
c87f77185d
fix(release): preserve frozen candidate identity ( #121786 )
...
* commit 'c3e3f276f2b520ffdf28e453eb464a6f4e50dfa0':
fix(release): preserve frozen candidate identity
2026-08-11 11:08:13 +08:00
c3e3f276f2
fix(release): preserve frozen candidate identity
2026-08-11 10:48:08 +08:00
f5aba54437
refactor(agents): split Claude live sessions by concept ( #121566 )
...
* refactor(agents): split claude-live-session into concept modules
* refactor(agents): delete duplicated live-session helpers
* fix(agents): fence live-session close during pending spawn
* chore(lint): ratchet max-lines baseline after live-session split
* style(agents): satisfy lint on live-session split modules
* fix(agents): fence live session close state
* refactor(agents): extract Claude live turn timeouts
* fix(agents): preserve exec policy after Claude live split
* test(agents): complete Claude live policy session fixture
2026-08-10 19:39:16 -07:00
fada067277
feat(browser): add zero-click Chrome extension bootstrap ( #121586 )
...
* feat(browser): add zero-click extension bootstrap
Pre-register deterministic path-derived extension IDs and install a strict native messaging host.
Keep the popup and options UI minimal while removing the obsolete copilot and page-share flows.
* fix(browser): satisfy native bootstrap CI guards
* test(browser): isolate native bootstrap Chrome roots
* test(browser): flush native bootstrap profile before status
* test(browser): seed Linux native bootstrap identity
* fix(browser): preserve native bootstrap upgrade safety
Allow immutable root-owned package inputs while keeping mutable state, manifests, and launchers user-owned. Preserve all retired copilot keys whenever active or unrecognized recovery custody remains.
* fix(browser): preserve pending copilot custody
Retired cleanup now removes copilot state only when the durable registry is exactly empty. Any session, archive, malformed value, future shape, or read failure preserves every retired key.
* fix(browser): guard native bootstrap upgrades
Fail closed while retired copilot custody remains and make discard durable across partial failures.
Require exact launcher-embedded origins and repair full launcher drift without accepting mismatched registrations.
* fix(browser): remove stale layout export
* chore(release): leave changelog to release flow
2026-08-10 19:31:13 -07:00
d6f70a96cb
fix(plugins): native commands execute the selected plugin ( #121544 )
...
* fix(plugins): preserve selected command identity
* test(telegram): use scoped command registries
* test(telegram): isolate command runtime fixtures
* test(telegram): warm native command runtime
* refactor(plugins): keep command metadata private
* fix(plugins): accept synchronous command handlers
* fix(plugins): scope command drain bypass to live execution
* test(telegram): use scoped command registry fixtures
* test(telegram): isolate native menu runtime fixtures
* test(telegram): isolate login session store
* test(telegram): surface login flow failures
* test(telegram): preload native login module
* test(telegram): scope native command registries
* fix(plugins): complete command dispatch contracts
* fix(plugins): break command dispatch import cycles
* fix(plugins): stabilize command dispatch contracts
* fix(channels): keep plugin dispatch options internal
* fix(plugins): keep command dispatch carrier opaque
* test(channels): align delivery adapter fixtures
* test(delivery): align custody ownership coverage
* test(delivery): align latest queue reconciliation
* test(channels): drop obsolete delivery wrappers
* fix(plugins): rebind channel reload starts
* fix(plugins): scope command catalog reloads
* fix(ci): align current runtime contracts
* chore(plugin-sdk): refresh API baseline
2026-08-10 19:30:47 -07:00
bdd35432dd
perf(checks): accelerate fresh changed gates ( #121805 )
2026-08-10 21:30:24 -05:00
498433a58a
test(ui): remove output-root wrapper seam ( #121794 )
2026-08-10 19:04:03 -07:00
ba58803997
fix(models): repair local model no-auth and overflow handling ( #121790 )
...
Preserve the internal null Authorization marker when resolving local no-auth provider headers, avoid classifying LM Studio prompt-template guidance as context overflow, and rebuild ai/llm-core package sources during pnpm dev/watch.
2026-08-10 18:52:00 -07:00
abb856ece4
fix(release): restore frozen beta validation ( #121791 )
...
Punchcard-Session: coral-summit-brook-8j
2026-08-10 18:45:42 -07:00
dd2aedf08f
refactor: burn export name collision debt ( #121767 )
...
* refactor(tasks): disambiguate lifecycle helpers
* refactor(channels): clarify account and id helpers
* refactor(media): separate SDK facades from cores
* refactor(auto-reply): consolidate command helpers
* refactor(cli): disambiguate registration helpers
* refactor(gateway): clarify runtime and test helpers
* chore(scripts): burn resolved collision debt
* fix(refactor): update remaining core callers
* fix(refactor): update remaining UI callers
* chore(plugin-sdk): refresh API baseline
2026-08-10 18:17:13 -07:00
32894a3ba5
feat: start sessions from registered projects ( #121465 )
...
* feat(gateway): add project registry sessions
* fix(gateway): authorize project branch discovery
* test(gateway): reuse worktree test imports
* fix(protocol): register projects schema owner
* fix(gateway): gate project paths by write scope
* feat(control-ui): register projects from folder browser
* refactor(gateway): extract session diff baseline preparation
* fix(gateway): honor admin scope in project listings
2026-08-10 17:56:12 -07:00
96b0cf95ef
fix(gateway): restore restart preflight compatibility ( #121757 )
...
* fix(gateway): restore restart preflight compatibility
* ci(protocol): preserve restored method vintages
* chore: defer compatibility note to release
2026-08-10 16:43:27 -07:00
a2dc90765c
test(bench): trim shared helper duplicates ( #121745 )
2026-08-10 16:34:59 -07:00
7e03fe3ba0
Merge commit '546bb29055b3e204b981dc27d4375c4d7679c7dd' into HEAD
...
* commit '546bb29055b3e204b981dc27d4375c4d7679c7dd':
fix(release): support frozen validation tooling
2026-08-11 07:34:47 +08:00
546bb29055
fix(release): support frozen validation tooling
2026-08-11 07:20:44 +08:00
c6b9be2646
fix(release): run plugin tooling against source checkout ( #121762 )
2026-08-10 16:16:33 -07:00
1ced7441eb
refactor(agents): move announce, completion, recovery, and registry families into concept directories ( #121553 )
...
* refactor(agents): move announce family into subagents/announce/
* refactor(agents): move completion and main-session recovery families
* refactor(agents): move registry family into subagents/registry
* refactor(agents): update registry state type imports
* style(agents): format moved subagent imports
* test(agents): preserve isolated registry test routing
* fix(scripts): recognize relocated subagent announce seams
2026-08-10 16:06:39 -07:00
a770218518
refactor: consolidate duplicate helpers ( #121431 )
...
* refactor(agents): consolidate session slug creation
* refactor(commands): consolidate config validation
* refactor(infra): consolidate stale pid termination
* refactor(tui): reuse canonical sleep helper
* chore(scripts): burn resolved entries from collision baseline
* fix(refactor): preserve cross-platform helper contracts
* fix(plugin-sdk): keep approval helper private
* chore(scripts): burn resolved wrapper shadowing entry
* chore(scripts): refresh wrapper shadowing baseline
* test(agents): target canonical session slug helper
* chore(plugin-sdk): refresh API baseline
2026-08-10 15:57:24 -07:00
18e5b0e3e3
test(web): trim duplicate provider test surfaces ( #121727 )
2026-08-10 15:44:54 -07:00
105038e658
ci: mirror Docker release images to Vercel registry ( #120058 )
...
* ci: publish release images to Vercel registry
* ci: publish beta images to Vercel registry
* fix(ci): allow beta Vercel dispatch
* fix(ci): publish VCR-compatible image indexes
* fix(ci): allow VCR readiness propagation
* fix(ci): use Sandbox as VCR readiness proof
* fix(ci): promote clean VCR channel indexes
* fix(release): harden VCR publication
* fix(release): bind VCR publishing to verified inputs
* fix(test): follow script declaration migration
* fix(release): isolate VCR mirroring
* test(release): align VCR secret ownership
2026-08-10 14:45:05 -07:00
9935ca3b30
fix(approvals): bind native requests to channel accounts ( #121673 )
...
Native approval delivery and resolution now stay bound to the originating or explicitly targeted channel account. Unbound requests fail closed across multiple eligible accounts; trusted reviewer-less SDK callers remain compatible.
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
2026-08-11 01:42:41 +05:30
Peter Steinberger