fd1662f49c
fix(cli): retire invalid secret flags and prove doctor recovery ( #118926 )
...
* test(qa): add doctor CLI recovery coverage
* test(qa): secure doctor exec SecretRef proof
* test(qa): gate doctor systemd recovery proof
* test(qa): normalize doctor terminal output
* test(qa): close doctor probe sockets
* test(qa): classify doctor probe as foreign
* test(qa): track doctor probe sockets
* test(qa): retain doctor instance narrowing
* test(qa): preserve observed doctor recovery proof
* test(qa): keep doctor recovery on stable dist
* test(qa): honor Windows exec ACL blocking
* test(qa): use canonical home for systemd recovery
* test(qa): follow bounded gateway recovery
* test(qa): accept lifecycle service label
* test(qa): align doctor recovery contract
Punchcard-Session: crisp-lantern-orchard-nv
* docs(secrets): remove retired provider bypasses
Punchcard-Session: crisp-lantern-orchard-nv
* test(qa): isolate doctor recovery target
Punchcard-Session: crisp-lantern-orchard-nv
* fix(cli): retire invalid secret provider flags
Punchcard-Session: crisp-lantern-orchard-nv
* test(qa): isolate doctor supervisor mode
Punchcard-Session: crisp-lantern-orchard-nv
* fix(plugins): remove dead secret path bypass
Punchcard-Session: crisp-lantern-orchard-nv
* chore: drop release-owned changelog entry
Punchcard-Session: crisp-lantern-orchard-nv
* test(qa): isolate doctor sudo scope
Punchcard-Session: crisp-lantern-orchard-nv
* fix(secrets): remove dead path bypass
Punchcard-Session: crisp-lantern-orchard-nv
* test(qa): isolate systemd user bus
Punchcard-Session: crisp-lantern-orchard-nv
2026-08-05 11:20:23 +08:00
17ef7771a6
fix(ci): stabilize TUI PTY proof ownership ( #119420 )
...
* fix(ci): stabilize TUI PTY proof ownership
Punchcard-Session: cobalt-brook-meadow-m9
* fix(test): align TUI PTY event typings
Punchcard-Session: cobalt-brook-meadow-m9
2026-08-05 11:08:56 +08:00
392e1c0620
fix(ci): preserve cache warmer shard envelopes ( #119403 )
...
Punchcard-Session: amber-orchard-valley-s4
2026-08-05 10:20:55 +08:00
8f2850d83e
fix(ci): isolate cache warmer configs ( #119381 )
...
Punchcard-Session: amber-orchard-valley-s4
2026-08-05 09:12:28 +08:00
618fba92bf
feat(audit): add execution identity inspection ( #117034 )
...
* feat(audit): add opt-in execution identity inspection
* fix(audit): gate recovery identity retention
* fix(audit): keep recovery identity type private
* test(audit): type internal recovery fixture
* test(audit): split recovery identity coverage
* docs(audit): define operator read trust boundary
* test(qa): register identity scenario child
* fix(audit): enforce shared identity retention bounds
* fix(audit): seal public ingress identity boundary
* fix(audit): keep ingress guard lint-clean
* fix(gateway): preserve advertised method order
* chore(protocol): sync advertised method order
* fix(protocol): encode audit selector invariants
* test(audit): prove exact execution guard
* fix(audit): keep identity storage lazy
2026-08-04 20:05:15 -05:00
9518564e30
fix(ci): preserve release evidence across reruns ( #119380 )
...
Punchcard-Session: silver-valley-valley-dt
2026-08-05 08:43:25 +08:00
9ff9aac71a
fix(ci): isolate built TUI PTY fixture ( #119339 )
...
Run the built local TUI PTY lane after the other artifact checks so its real Gateway fixture has exclusive process and event-loop capacity.
Punchcard-Session: cobalt-brook-meadow-m9
2026-08-05 08:00:29 +08:00
9bfe292c86
fix(sessions): keep gateway responsive while large transcript archives are built ( #112424 )
...
* fix(sessions): keep gateway responsive during transcript archiving
* test(sessions): strengthen archive worker coverage
* fix(sessions): bound archive worker concurrency
* test(sessions): normalize rollback paths on Windows
* fix(sessions): load source archive worker on node 22
* fix(sessions): align archive fencing with session windows
* test(sessions): adapt cleanup race to archive worker
* fix(sessions): harden archive worker lifecycle
* style(sessions): format archive lifecycle tests
* fix(sessions): release writer lane during archive work
---------
Co-authored-by: Josh Lehman <josh@martian.engineering >
2026-08-04 14:40:59 -07:00
8fc4458593
fix(release): accept legacy empty core artifacts ( #119337 )
2026-08-05 04:59:55 +08:00
532580fa2b
fix(ci): retry interrupted Windows dashboard release checks ( #119095 )
2026-08-05 04:36:05 +08:00
f3dbf15ad3
fix(release): filter validation ancestry fetch ( #119334 )
2026-08-05 04:34:15 +08:00
7c93cff84a
fix(release): accept trusted extended-stable validation evidence ( #119264 )
...
* fix(release): accept trusted extended-stable validation evidence
* fix(release): document trusted candidate promotion
* docs(release): clarify validation evidence recovery
2026-08-05 04:14:30 +08:00
e99c289f3b
fix(ci): avoid duplicate Matrix release QA runs ( #119171 )
...
* fix(ci): gate reusable Matrix QA runs
* docs(ci): document Matrix release QA budget
2026-08-05 03:31:00 +08:00
cb2965ddde
fix(scripts): use direct-run helper for Windows guards ( #110877 )
...
* fix(scripts): normalize Windows direct-run guards
* test(scripts): cover direct-run routing
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-08-04 23:11:12 +08:00
b4f01afa86
test(qa): cover Canvas agent and node controls ( #119047 )
...
* test(qa): cover Canvas agent and node controls
* fix(test): activate Canvas registry before gateway startup
* fix(test): align Canvas node proof with wire contract
* fix(test): narrow Canvas node invocation frames
2026-08-04 20:42:30 +08:00
e4aab26d01
fix(cli): avoid repeated migration scans during local agent turns ( #119051 )
...
* fix(cli): avoid repeated state migration scans
* fix(build): preserve source runtime provenance
* fix(cli): persist state checkpoint before plugin convergence
* fix(cli): invalidate migration checkpoints on input changes
* fix(plugins): refresh changed doctor contracts
* fix(plugins): preserve warm Doctor contract indexes
* test(plugins): align manifest registry fixtures
* test(cli): isolate ACP process state
* fix(doctor): persist refreshed plugin indexes
* fix(doctor): verify persisted plugin index from disk
* fix(doctor): fence plugin index persistence
* fix(doctor): retain validated migration lease
* fix(plugins): canonicalize persisted build metadata
* fix(plugins): preserve config policy during install repair
2026-08-04 20:28:16 +08:00
d3557ec013
fix(ci): accept profiled partial Kova gates ( #119121 )
...
* fix(ci): accept profiled partial Kova gates
* fix(ci): scope Kova secrets to live runs
* fix(ci): require reviewed Kova refs for live runs
* fix(ci): pin cross-profile Kova repair
* fix(perf): preserve historical Kova report contracts
* fix(ci): declare Kova gate options
* fix(ci): preserve required Kova partial failures
2026-08-04 20:07:12 +08:00
c3f148f6b7
fix(plugins): preserve metadata reloads during models status ( #119183 )
...
* fix(plugins): preserve newer metadata publications
* test(plugins): type metadata snapshot fixture
2026-08-04 19:24:30 +08:00
b5d41f9005
fix(test): bound direct gateway server runs ( #119184 )
2026-08-04 03:38:39 -07:00
a7cca37838
fix(testbox): restore claims across path aliases ( #119170 )
2026-08-04 02:38:18 -07:00
4def15d5df
fix(perf): give each concurrency sample a full deadline ( #119164 )
2026-08-04 17:05:41 +08:00
da3b5edf40
fix(testbox): remove changed-gate sync residue ( #119163 )
2026-08-04 01:56:32 -07:00
4bdf9ca789
fix(tui): block terminal controls in system messages ( #118998 )
...
* fix(tui): sanitize rendered system messages
* test(tui): keep PTY safety proof within lint budget
* test(tui): clarify terminal safety PTY proof
* test(tui): de-churn terminal safety harness
* fix(tui): sanitize connection status output
* test(tui): split PTY harness support
* fix(tui): sanitize selector and footer output
* fix(tui): harden terminal display boundaries
* fix(tui): harden terminal display boundaries
* fix(tui): harden terminal output boundaries
* test(tui): repair terminal safety proof
* test(tui): harden terminal safety oracle
* test(tui): type OSC terminator candidates
* fix(tui): authenticate current terminal rendering
* fix(tui): harden terminal output safety evidence
* test(tui): keep PTY cell type internal
* test(tui): reject literal tabs in PTY oracle
* test(tui): reject literal backspace in PTY oracle
2026-08-04 16:35:41 +08:00
98feafe785
fix(scripts): prevent gateway benchmarks from stalling on probes ( #119063 )
...
* fix(scripts): bound gateway benchmark probes
* fix(scripts): bound concurrency response deadlines
* fix(perf): preserve benchmark socket reuse
2026-08-04 16:23:45 +08:00
b1f2aae303
fix: prevent live updater from leaving Gateway offline indefinitely ( #119116 )
...
* fix(updater): bound maintenance commands
* fix(updater): bound post-kill cleanup
* fix(updater): fail closed on unverified Windows cleanup
* fix(updater): constrain unverifiable Windows commands
* fix(scripts): satisfy managed child return contract
2026-08-04 01:59:59 -06:00
ae21f3c00c
fix(daemon): skip unlabeled launchd plists ( #119091 )
2026-08-04 01:31:25 -06:00
45643863d7
fix(test): isolate shared state between test files ( #118781 )
...
* fix(test): isolate session suspension state
* fix(test): isolate nonzero worker exit coverage
* fix(test): keep suspension reset generations monotonic
* fix(test): isolate archived session UI mocks
* fix(deps): patch fast-uri and undici advisories
* fix(test): isolate stateful UI suites
2026-08-04 15:26:22 +08:00
3ac7083213
improve(qa): cover vision channel offload ( #118862 )
...
* test(qa): cover vision channel offload
* test(qa): harden vision channel offload coverage
2026-08-04 14:57:03 +08:00
e0799199b3
test(qa): cover sandboxed exec behavior ( #119053 )
2026-08-04 14:36:03 +08:00
3f2fb7e365
test(qa): cover gateway plugin approvals ( #119128 )
2026-08-04 14:07:29 +08:00
8ad2e06a9d
fix: preserve live updater failure diagnostics ( #119096 )
2026-08-03 23:30:17 -06:00
12beeb7b29
test(qa): cover packaged browser profiles ( #119043 )
2026-08-04 11:13:05 +08:00
7f766550a1
test(qa): prove agent tool approval controls ( #119029 )
2026-08-04 11:02:17 +08:00
6b66866fe8
test(qa): prove agent session scope continuity ( #119032 )
2026-08-04 09:52:39 +08:00
fc1913defe
test(qa): prove workspace mutation tools ( #119021 )
2026-08-04 09:52:31 +08:00
ada473e560
test(qa): cover agent session streaming ( #119028 )
2026-08-04 09:24:44 +08:00
5a59bb07b3
test(qa): cover sandbox workspace isolation ( #119038 )
2026-08-04 09:21:54 +08:00
b4faa5aa5e
chore(gateway): cover update and setup RPCs
...
* test(gateway): cover update and setup RPCs
* test(gateway): cover target wizard lifecycle
* test(gateway): normalize QA fixture ownership
* test(gateway): include historical dist closure
* test(gateway): isolate historical update fixture
* test(qa): align target wizard lifecycle proof
* test(qa): read structured gateway call errors
2026-08-04 09:15:55 +08:00
ee397f0c59
test(qa): prove ClawHub catalog discovery ( #118934 )
...
* test(qa): prove ClawHub catalog discovery
* test(qa): use shared temp cleanup
2026-08-04 09:07:35 +08:00
6419711eb3
test(qa): cover direct tool invocation ( #119025 )
2026-08-04 09:01:46 +08:00
945597bb81
test(qa): cover agent session reconnect dedupe ( #119013 )
2026-08-04 08:25:06 +08:00
1520b839f3
test(qa): prove gateway chat RPCs ( #118988 )
2026-08-04 08:19:14 +08:00
2de88241a4
test(qa): prove packaged plugin lifecycle transitions ( #118973 )
2026-08-04 08:13:58 +08:00
85af36dbf6
improve(tui): prove CLI entrypoints under real PTY ( #118990 )
...
* test(tui): cover CLI entrypoints under PTY
* test(tui): require built CLI in PTY evidence
2026-08-04 08:07:17 +08:00
2039b87d85
test(qa): cover media audio selection fallback ( #118859 )
2026-08-04 07:53:49 +08:00
31a6d096a1
test(qa): cover guarded media fetch boundaries ( #118857 )
2026-08-04 07:18:40 +08:00
9dfc74e0cb
test(qa): cover music generation controls ( #118901 )
2026-08-04 07:12:05 +08:00
482a63337f
test(qa): cover core vision routing ( #118861 )
2026-08-04 07:11:24 +08:00
e110b56007
test(qa): cover Gateway usage and memory APIs ( #118995 )
2026-08-04 07:10:56 +08:00
3bbc4ad085
test(qa): cover managed gateway service lifecycle ( #118855 )
2026-08-04 07:07:27 +08:00
Vincent Koc