414616f583
fix(video): harden DashScope task and media lifecycle ( #117303 )
...
* fix(video): validate DashScope task outputs and release request guards
* fix(video): validate DashScope task outputs and release request guards
* refactor(video): use shared empty-asset validation
* fix(video): align DashScope Wan request contracts
* refactor(video): use shared empty-asset validation
* fix(video): enforce catalog modes before provider calls
* fix(video): keep model checks fallback-aware
* fix(video): centralize fallback-aware capability checks
* docs(video): document Wan 2.7 fixed audio
---------
Co-authored-by: Peter Steinberger <steipete@macos.shared >
2026-08-05 10:19:09 -07:00
221df8cdc6
fix(testing): resolve Playwright browser cache before UI install ( #119658 )
2026-08-05 09:25:24 -07:00
113af2fcbd
fix(ci): preserve stdin through Docker heartbeat logging
2026-08-05 23:56:36 +08:00
99021d173a
perf(agents): add concurrency benchmark ( #119569 )
2026-08-05 22:23:37 +08:00
03a9e022ed
fix(managed-child): honor process groups that vanish before cleanup ( #119614 )
2026-08-05 06:57:55 -07:00
e7b7d1c8cd
fix(ci): stop label-driven automation churn ( #119610 )
2026-08-05 06:53:23 -07:00
90148cf3e7
fix(tooling): balance local tsgo CPU cap ( #119542 )
2026-08-05 07:11:31 -06:00
c3d17e84f4
fix(build): select the root-help bundle that exports outputRootHelp ( #119590 )
...
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-08-05 21:10:48 +08:00
4b37a05225
fix(ci): preserve QA profile evidence on timeout ( #119572 )
...
* fix(ci): preserve QA profile timeout evidence
Punchcard-Session: silver-valley-valley-dt
* fix(ci): classify QA timeout escalation
Punchcard-Session: silver-valley-valley-dt
* fix(ci): distinguish QA watchdog expiry
Punchcard-Session: silver-valley-valley-dt
* test(ci): type QA watchdog signal expectations
Punchcard-Session: silver-valley-valley-dt
2026-08-05 21:06:35 +08:00
637de7d379
fix(scripts): reject unsafe web-fetch benchmark counts ( #119533 )
...
* fix(scripts): reject non-decimal benchmark counts
* fix(scripts): reject unsafe benchmark counts
Punchcard-Session: clear-orchard-lantern-bc
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-08-05 18:00:32 +08:00
dedfc01628
fix(test): stage live auth profiles from SQLite ( #113651 )
...
* fix(test): stage live auth from SQLite
Punchcard-Session: cobalt-cedar-timber-04
* fix(test): snapshot staged auth atomically
Punchcard-Session: cobalt-cedar-timber-04
* fix(test): fail closed on partial auth schema
Punchcard-Session: calm-cedar-river-aa
* fix(test): resolve live auth stage path lazily
Punchcard-Session: calm-cedar-river-aa
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-08-05 17:12:09 +08:00
05a03c66fe
fix: cap local tsgo CPU usage ( #119517 )
2026-08-05 15:32:43 +08:00
db8e95f70b
test(qa): cover managed OTEL runtime paths ( #118965 )
...
* test(qa): cover managed OTEL runtime paths
* test(qa): prove OTEL flush clamp
* test(qa): clean up OTEL runtime fixtures
* test(qa): share OTLP runtime support
* test(qa): harden managed OTEL install proof
* test(qa): align OTEL runtime fixtures
* test(qa): expose OTEL runtime failures
* test(qa): align OTEL runtime boundaries
* test(qa): bound fixture registry shutdown
* test(qa): isolate managed OTEL plugins
* test(qa): start managed OTEL from no plugins
* test(qa): launch managed OTEL from built dist
* test(qa): read managed plugin index from state root
* test(qa): align OTEL runtime agents and types
* test(qa): stage managed plugin packages in scratch
* test(qa): verify OTEL span ancestry
* test(qa): support multiple OTEL harness spans
* test(qa): prove OTEL delivery and preload spans
Punchcard-Session: crisp-lantern-orchard-nv
* test(qa): align OTEL delivery proof with channel boundary
Punchcard-Session: crisp-lantern-orchard-nv
* test(qa): resolve OTEL preload through fixture modules
* test(qa): isolate sampled OTEL export proof
2026-08-05 14:53:45 +08:00
fd1662f49c
fix(cli): retire invalid secret flags and prove doctor recovery ( #118926 )
...
* test(qa): add doctor CLI recovery coverage
* test(qa): secure doctor exec SecretRef proof
* test(qa): gate doctor systemd recovery proof
* test(qa): normalize doctor terminal output
* test(qa): close doctor probe sockets
* test(qa): classify doctor probe as foreign
* test(qa): track doctor probe sockets
* test(qa): retain doctor instance narrowing
* test(qa): preserve observed doctor recovery proof
* test(qa): keep doctor recovery on stable dist
* test(qa): honor Windows exec ACL blocking
* test(qa): use canonical home for systemd recovery
* test(qa): follow bounded gateway recovery
* test(qa): accept lifecycle service label
* test(qa): align doctor recovery contract
Punchcard-Session: crisp-lantern-orchard-nv
* docs(secrets): remove retired provider bypasses
Punchcard-Session: crisp-lantern-orchard-nv
* test(qa): isolate doctor recovery target
Punchcard-Session: crisp-lantern-orchard-nv
* fix(cli): retire invalid secret provider flags
Punchcard-Session: crisp-lantern-orchard-nv
* test(qa): isolate doctor supervisor mode
Punchcard-Session: crisp-lantern-orchard-nv
* fix(plugins): remove dead secret path bypass
Punchcard-Session: crisp-lantern-orchard-nv
* chore: drop release-owned changelog entry
Punchcard-Session: crisp-lantern-orchard-nv
* test(qa): isolate doctor sudo scope
Punchcard-Session: crisp-lantern-orchard-nv
* fix(secrets): remove dead path bypass
Punchcard-Session: crisp-lantern-orchard-nv
* test(qa): isolate systemd user bus
Punchcard-Session: crisp-lantern-orchard-nv
2026-08-05 11:20:23 +08:00
17ef7771a6
fix(ci): stabilize TUI PTY proof ownership ( #119420 )
...
* fix(ci): stabilize TUI PTY proof ownership
Punchcard-Session: cobalt-brook-meadow-m9
* fix(test): align TUI PTY event typings
Punchcard-Session: cobalt-brook-meadow-m9
2026-08-05 11:08:56 +08:00
392e1c0620
fix(ci): preserve cache warmer shard envelopes ( #119403 )
...
Punchcard-Session: amber-orchard-valley-s4
2026-08-05 10:20:55 +08:00
8f2850d83e
fix(ci): isolate cache warmer configs ( #119381 )
...
Punchcard-Session: amber-orchard-valley-s4
2026-08-05 09:12:28 +08:00
618fba92bf
feat(audit): add execution identity inspection ( #117034 )
...
* feat(audit): add opt-in execution identity inspection
* fix(audit): gate recovery identity retention
* fix(audit): keep recovery identity type private
* test(audit): type internal recovery fixture
* test(audit): split recovery identity coverage
* docs(audit): define operator read trust boundary
* test(qa): register identity scenario child
* fix(audit): enforce shared identity retention bounds
* fix(audit): seal public ingress identity boundary
* fix(audit): keep ingress guard lint-clean
* fix(gateway): preserve advertised method order
* chore(protocol): sync advertised method order
* fix(protocol): encode audit selector invariants
* test(audit): prove exact execution guard
* fix(audit): keep identity storage lazy
2026-08-04 20:05:15 -05:00
9518564e30
fix(ci): preserve release evidence across reruns ( #119380 )
...
Punchcard-Session: silver-valley-valley-dt
2026-08-05 08:43:25 +08:00
9ff9aac71a
fix(ci): isolate built TUI PTY fixture ( #119339 )
...
Run the built local TUI PTY lane after the other artifact checks so its real Gateway fixture has exclusive process and event-loop capacity.
Punchcard-Session: cobalt-brook-meadow-m9
2026-08-05 08:00:29 +08:00
9bfe292c86
fix(sessions): keep gateway responsive while large transcript archives are built ( #112424 )
...
* fix(sessions): keep gateway responsive during transcript archiving
* test(sessions): strengthen archive worker coverage
* fix(sessions): bound archive worker concurrency
* test(sessions): normalize rollback paths on Windows
* fix(sessions): load source archive worker on node 22
* fix(sessions): align archive fencing with session windows
* test(sessions): adapt cleanup race to archive worker
* fix(sessions): harden archive worker lifecycle
* style(sessions): format archive lifecycle tests
* fix(sessions): release writer lane during archive work
---------
Co-authored-by: Josh Lehman <josh@martian.engineering >
2026-08-04 14:40:59 -07:00
8fc4458593
fix(release): accept legacy empty core artifacts ( #119337 )
2026-08-05 04:59:55 +08:00
532580fa2b
fix(ci): retry interrupted Windows dashboard release checks ( #119095 )
2026-08-05 04:36:05 +08:00
f3dbf15ad3
fix(release): filter validation ancestry fetch ( #119334 )
2026-08-05 04:34:15 +08:00
7c93cff84a
fix(release): accept trusted extended-stable validation evidence ( #119264 )
...
* fix(release): accept trusted extended-stable validation evidence
* fix(release): document trusted candidate promotion
* docs(release): clarify validation evidence recovery
2026-08-05 04:14:30 +08:00
e99c289f3b
fix(ci): avoid duplicate Matrix release QA runs ( #119171 )
...
* fix(ci): gate reusable Matrix QA runs
* docs(ci): document Matrix release QA budget
2026-08-05 03:31:00 +08:00
cb2965ddde
fix(scripts): use direct-run helper for Windows guards ( #110877 )
...
* fix(scripts): normalize Windows direct-run guards
* test(scripts): cover direct-run routing
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-08-04 23:11:12 +08:00
b4f01afa86
test(qa): cover Canvas agent and node controls ( #119047 )
...
* test(qa): cover Canvas agent and node controls
* fix(test): activate Canvas registry before gateway startup
* fix(test): align Canvas node proof with wire contract
* fix(test): narrow Canvas node invocation frames
2026-08-04 20:42:30 +08:00
e4aab26d01
fix(cli): avoid repeated migration scans during local agent turns ( #119051 )
...
* fix(cli): avoid repeated state migration scans
* fix(build): preserve source runtime provenance
* fix(cli): persist state checkpoint before plugin convergence
* fix(cli): invalidate migration checkpoints on input changes
* fix(plugins): refresh changed doctor contracts
* fix(plugins): preserve warm Doctor contract indexes
* test(plugins): align manifest registry fixtures
* test(cli): isolate ACP process state
* fix(doctor): persist refreshed plugin indexes
* fix(doctor): verify persisted plugin index from disk
* fix(doctor): fence plugin index persistence
* fix(doctor): retain validated migration lease
* fix(plugins): canonicalize persisted build metadata
* fix(plugins): preserve config policy during install repair
2026-08-04 20:28:16 +08:00
d3557ec013
fix(ci): accept profiled partial Kova gates ( #119121 )
...
* fix(ci): accept profiled partial Kova gates
* fix(ci): scope Kova secrets to live runs
* fix(ci): require reviewed Kova refs for live runs
* fix(ci): pin cross-profile Kova repair
* fix(perf): preserve historical Kova report contracts
* fix(ci): declare Kova gate options
* fix(ci): preserve required Kova partial failures
2026-08-04 20:07:12 +08:00
c3f148f6b7
fix(plugins): preserve metadata reloads during models status ( #119183 )
...
* fix(plugins): preserve newer metadata publications
* test(plugins): type metadata snapshot fixture
2026-08-04 19:24:30 +08:00
b5d41f9005
fix(test): bound direct gateway server runs ( #119184 )
2026-08-04 03:38:39 -07:00
a7cca37838
fix(testbox): restore claims across path aliases ( #119170 )
2026-08-04 02:38:18 -07:00
4def15d5df
fix(perf): give each concurrency sample a full deadline ( #119164 )
2026-08-04 17:05:41 +08:00
da3b5edf40
fix(testbox): remove changed-gate sync residue ( #119163 )
2026-08-04 01:56:32 -07:00
4bdf9ca789
fix(tui): block terminal controls in system messages ( #118998 )
...
* fix(tui): sanitize rendered system messages
* test(tui): keep PTY safety proof within lint budget
* test(tui): clarify terminal safety PTY proof
* test(tui): de-churn terminal safety harness
* fix(tui): sanitize connection status output
* test(tui): split PTY harness support
* fix(tui): sanitize selector and footer output
* fix(tui): harden terminal display boundaries
* fix(tui): harden terminal display boundaries
* fix(tui): harden terminal output boundaries
* test(tui): repair terminal safety proof
* test(tui): harden terminal safety oracle
* test(tui): type OSC terminator candidates
* fix(tui): authenticate current terminal rendering
* fix(tui): harden terminal output safety evidence
* test(tui): keep PTY cell type internal
* test(tui): reject literal tabs in PTY oracle
* test(tui): reject literal backspace in PTY oracle
2026-08-04 16:35:41 +08:00
98feafe785
fix(scripts): prevent gateway benchmarks from stalling on probes ( #119063 )
...
* fix(scripts): bound gateway benchmark probes
* fix(scripts): bound concurrency response deadlines
* fix(perf): preserve benchmark socket reuse
2026-08-04 16:23:45 +08:00
b1f2aae303
fix: prevent live updater from leaving Gateway offline indefinitely ( #119116 )
...
* fix(updater): bound maintenance commands
* fix(updater): bound post-kill cleanup
* fix(updater): fail closed on unverified Windows cleanup
* fix(updater): constrain unverifiable Windows commands
* fix(scripts): satisfy managed child return contract
2026-08-04 01:59:59 -06:00
ae21f3c00c
fix(daemon): skip unlabeled launchd plists ( #119091 )
2026-08-04 01:31:25 -06:00
45643863d7
fix(test): isolate shared state between test files ( #118781 )
...
* fix(test): isolate session suspension state
* fix(test): isolate nonzero worker exit coverage
* fix(test): keep suspension reset generations monotonic
* fix(test): isolate archived session UI mocks
* fix(deps): patch fast-uri and undici advisories
* fix(test): isolate stateful UI suites
2026-08-04 15:26:22 +08:00
3ac7083213
improve(qa): cover vision channel offload ( #118862 )
...
* test(qa): cover vision channel offload
* test(qa): harden vision channel offload coverage
2026-08-04 14:57:03 +08:00
e0799199b3
test(qa): cover sandboxed exec behavior ( #119053 )
2026-08-04 14:36:03 +08:00
3f2fb7e365
test(qa): cover gateway plugin approvals ( #119128 )
2026-08-04 14:07:29 +08:00
8ad2e06a9d
fix: preserve live updater failure diagnostics ( #119096 )
2026-08-03 23:30:17 -06:00
12beeb7b29
test(qa): cover packaged browser profiles ( #119043 )
2026-08-04 11:13:05 +08:00
7f766550a1
test(qa): prove agent tool approval controls ( #119029 )
2026-08-04 11:02:17 +08:00
6b66866fe8
test(qa): prove agent session scope continuity ( #119032 )
2026-08-04 09:52:39 +08:00
fc1913defe
test(qa): prove workspace mutation tools ( #119021 )
2026-08-04 09:52:31 +08:00
ada473e560
test(qa): cover agent session streaming ( #119028 )
2026-08-04 09:24:44 +08:00
5a59bb07b3
test(qa): cover sandbox workspace isolation ( #119038 )
2026-08-04 09:21:54 +08:00
Peter Steinberger