ff8a3fe9d0
fix(release): backport dependency evidence runner
2026-08-10 22:04:04 +08:00
939c18bf06
fix(release): satisfy frozen bridge lint
2026-08-10 21:39:33 +08:00
b645700f46
fix(release): proxy frozen evidence module surface
2026-08-10 21:29:41 +08:00
0350aa2ead
fix(release): resolve frozen evidence bridge
2026-08-10 21:21:49 +08:00
87fc666126
fix(release): bridge frozen dependency evidence entrypoint
2026-08-10 21:13:39 +08:00
2965190344
fix(codex): support app-server 0.147.0 ( #120594 )
...
* fix(codex): support app-server 0.147.0
* docs(codex): clarify marketplace version provenance
(cherry picked from commit b5180b6816
2026-08-08 23:11:24 +08:00
272b3098c7
fix(docs): resolve renamed plugin inventory links
2026-08-07 08:49:22 +08:00
cc1a09fbc4
chore(release): prepare 2026.8.1-beta.1
2026-08-06 23:31:47 +08:00
8fd0c65bc7
fix(release): stream JSON preparation output ( #119951 )
...
(cherry picked from commit a914682467
2026-08-06 21:58:36 +08:00
8612006433
fix(release): report seeded changelog provenance truthfully ( #119897 )
...
* fix(release): report seeded changelog provenance truthfully
* fix(release): reject legacy provenance formatting
* fix(release): enforce complete provenance records
(cherry picked from commit d73eb23b29
2026-08-06 20:52:14 +08:00
ddaf23fe5a
fix(plugins): migrate Fish Audio plugin identity ( #119900 )
...
* fix(plugins): migrate Fish Audio plugin identity
* fix(plugins): tighten Fish Audio identity migration
* fix(plugins): follow catalog selector for id replacements
* fix(plugins): reject replacement install collisions
* refactor(plugins): reuse skipped update outcomes
(cherry picked from commit 52b8f9be80
2026-08-06 20:51:22 +08:00
c37ba84f66
perf(agents): index subagent recovery ownership ( #119793 )
...
* perf(agents): benchmark indexed recovery ownership
* perf(agents): index recovery owner lookups
2026-08-06 10:08:04 +08:00
b4e82951e7
perf(agents): isolate concurrency benchmark workers ( #119749 )
2026-08-06 06:49:36 +08:00
92b4757227
fix(diagnostics): honor signal-specific OTLP protocols ( #119708 )
...
* fix(diagnostics): honor signal-specific OTLP protocols
* fix(docker): forward signal-specific OTLP protocols
2026-08-06 05:39:26 +08:00
d6233c29b9
fix(browser): preserve locale, timezone, and device overrides ( #119695 )
...
* fix(browser): make device emulation transitions atomic
* test(browser): verify device presets in packaged profile
* fix(browser): retain page emulation overrides
2026-08-05 12:29:26 -07:00
221df8cdc6
fix(testing): resolve Playwright browser cache before UI install ( #119658 )
2026-08-05 09:25:24 -07:00
113af2fcbd
fix(ci): preserve stdin through Docker heartbeat logging
2026-08-05 23:56:36 +08:00
99021d173a
perf(agents): add concurrency benchmark ( #119569 )
2026-08-05 22:23:37 +08:00
03a9e022ed
fix(managed-child): honor process groups that vanish before cleanup ( #119614 )
2026-08-05 06:57:55 -07:00
90148cf3e7
fix(tooling): balance local tsgo CPU cap ( #119542 )
2026-08-05 07:11:31 -06:00
c3d17e84f4
fix(build): select the root-help bundle that exports outputRootHelp ( #119590 )
...
Co-authored-by: clawsweeper <274271284+clawsweeper[bot]@users.noreply.github.com>
2026-08-05 21:10:48 +08:00
637de7d379
fix(scripts): reject unsafe web-fetch benchmark counts ( #119533 )
...
* fix(scripts): reject non-decimal benchmark counts
* fix(scripts): reject unsafe benchmark counts
Punchcard-Session: clear-orchard-lantern-bc
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-08-05 18:00:32 +08:00
05a03c66fe
fix: cap local tsgo CPU usage ( #119517 )
2026-08-05 15:32:43 +08:00
e35d22807e
perf(xai): lazy-load optional capability runtimes ( #119374 )
...
Punchcard-Session: coral-workshop-workshop-3f
2026-08-05 11:26:40 +08:00
1ee0564b09
fix(discord): avoid doctor runtime loading ( #119391 )
...
* fix(discord): publish doctor capability metadata
Punchcard-Session: amber-workshop-river-yr
* fix(doctor): read packaged channel metadata
Punchcard-Session: amber-workshop-river-yr
2026-08-05 11:05:35 +08:00
50c7444edf
fix(sessions): preserve compatible auth profiles on model changes ( #117550 )
...
* fix(model-picker): preserve compatible auth profiles
* chore(plugin-sdk): refresh API baseline
* fix(model-picker): keep profile policy core-owned
* fix(model-picker): preserve profiles across auth aliases
* chore(plugin-sdk): update public surface budgets
* fix(model-picker): honor explicit profile clearing
* fix: preserve compatible auth profiles on model changes
* perf: reuse prepared auth profile metadata
* docs(plugin-sdk): document direct model persistence fallback
* test: expose auth snapshot in directive mock
Co-authored-by: Ayaan Zaidi <hi@obviy.us >
Co-authored-by: Dinesh Suthar <dineshsld20@gmail.com >
2026-08-05 07:40:00 +05:30
618fba92bf
feat(audit): add execution identity inspection ( #117034 )
...
* feat(audit): add opt-in execution identity inspection
* fix(audit): gate recovery identity retention
* fix(audit): keep recovery identity type private
* test(audit): type internal recovery fixture
* test(audit): split recovery identity coverage
* docs(audit): define operator read trust boundary
* test(qa): register identity scenario child
* fix(audit): enforce shared identity retention bounds
* fix(audit): seal public ingress identity boundary
* fix(audit): keep ingress guard lint-clean
* fix(gateway): preserve advertised method order
* chore(protocol): sync advertised method order
* fix(protocol): encode audit selector invariants
* test(audit): prove exact execution guard
* fix(audit): keep identity storage lazy
2026-08-04 20:05:15 -05:00
9518564e30
fix(ci): preserve release evidence across reruns ( #119380 )
...
Punchcard-Session: silver-valley-valley-dt
2026-08-05 08:43:25 +08:00
9bfe292c86
fix(sessions): keep gateway responsive while large transcript archives are built ( #112424 )
...
* fix(sessions): keep gateway responsive during transcript archiving
* test(sessions): strengthen archive worker coverage
* fix(sessions): bound archive worker concurrency
* test(sessions): normalize rollback paths on Windows
* fix(sessions): load source archive worker on node 22
* fix(sessions): align archive fencing with session windows
* test(sessions): adapt cleanup race to archive worker
* fix(sessions): harden archive worker lifecycle
* style(sessions): format archive lifecycle tests
* fix(sessions): release writer lane during archive work
---------
Co-authored-by: Josh Lehman <josh@martian.engineering >
2026-08-04 14:40:59 -07:00
cb2965ddde
fix(scripts): use direct-run helper for Windows guards ( #110877 )
...
* fix(scripts): normalize Windows direct-run guards
* test(scripts): cover direct-run routing
---------
Co-authored-by: Vincent Koc <vincentkoc@ieee.org >
2026-08-04 23:11:12 +08:00
e4aab26d01
fix(cli): avoid repeated migration scans during local agent turns ( #119051 )
...
* fix(cli): avoid repeated state migration scans
* fix(build): preserve source runtime provenance
* fix(cli): persist state checkpoint before plugin convergence
* fix(cli): invalidate migration checkpoints on input changes
* fix(plugins): refresh changed doctor contracts
* fix(plugins): preserve warm Doctor contract indexes
* test(plugins): align manifest registry fixtures
* test(cli): isolate ACP process state
* fix(doctor): persist refreshed plugin indexes
* fix(doctor): verify persisted plugin index from disk
* fix(doctor): fence plugin index persistence
* fix(doctor): retain validated migration lease
* fix(plugins): canonicalize persisted build metadata
* fix(plugins): preserve config policy during install repair
2026-08-04 20:28:16 +08:00
d3557ec013
fix(ci): accept profiled partial Kova gates ( #119121 )
...
* fix(ci): accept profiled partial Kova gates
* fix(ci): scope Kova secrets to live runs
* fix(ci): require reviewed Kova refs for live runs
* fix(ci): pin cross-profile Kova repair
* fix(perf): preserve historical Kova report contracts
* fix(ci): declare Kova gate options
* fix(ci): preserve required Kova partial failures
2026-08-04 20:07:12 +08:00
b5d41f9005
fix(test): bound direct gateway server runs ( #119184 )
2026-08-04 03:38:39 -07:00
a7cca37838
fix(testbox): restore claims across path aliases ( #119170 )
2026-08-04 02:38:18 -07:00
4def15d5df
fix(perf): give each concurrency sample a full deadline ( #119164 )
2026-08-04 17:05:41 +08:00
da3b5edf40
fix(testbox): remove changed-gate sync residue ( #119163 )
2026-08-04 01:56:32 -07:00
98feafe785
fix(scripts): prevent gateway benchmarks from stalling on probes ( #119063 )
...
* fix(scripts): bound gateway benchmark probes
* fix(scripts): bound concurrency response deadlines
* fix(perf): preserve benchmark socket reuse
2026-08-04 16:23:45 +08:00
b1f2aae303
fix: prevent live updater from leaving Gateway offline indefinitely ( #119116 )
...
* fix(updater): bound maintenance commands
* fix(updater): bound post-kill cleanup
* fix(updater): fail closed on unverified Windows cleanup
* fix(updater): constrain unverifiable Windows commands
* fix(scripts): satisfy managed child return contract
2026-08-04 01:59:59 -06:00
12beeb7b29
test(qa): cover packaged browser profiles ( #119043 )
2026-08-04 11:13:05 +08:00
b4faa5aa5e
chore(gateway): cover update and setup RPCs
...
* test(gateway): cover update and setup RPCs
* test(gateway): cover target wizard lifecycle
* test(gateway): normalize QA fixture ownership
* test(gateway): include historical dist closure
* test(gateway): isolate historical update fixture
* test(qa): align target wizard lifecycle proof
* test(qa): read structured gateway call errors
2026-08-04 09:15:55 +08:00
ee397f0c59
test(qa): prove ClawHub catalog discovery ( #118934 )
...
* test(qa): prove ClawHub catalog discovery
* test(qa): use shared temp cleanup
2026-08-04 09:07:35 +08:00
a85d3bbc5c
test(qa): prove container health endpoints ( #119012 )
2026-08-04 08:49:51 +08:00
15b23cfc2d
fix(docker): use authenticated gateway health command ( #118996 )
...
* fix(docker): use authenticated gateway health command
* test(docker): prove documented compose health command
2026-08-04 07:10:36 +08:00
06b5f0b2ff
test(qa): cover CLI onboarding and plugin install sources ( #118882 )
...
* test(qa): cover CLI onboarding and plugin sources
* test(qa): assert npm file plugin source
* test(qa): redact onboarding password assertion
* test(qa): retain onboarding evidence log
2026-08-04 06:54:42 +08:00
c83dcc2bc0
fix(security): harden network tool output at canonical owner boundaries ( #118984 )
...
* fix(security): bound external tool content at its canonical owner boundary
* fix(plugin-sdk): document supported security boundary and restore facade parity
2026-08-03 15:34:33 -07:00
3d65ea2a1b
fix(googlechat): align doctor policy ownership with canonical account configuration ( #118972 )
...
* fix(googlechat): align doctor policy ownership with canonical account configuration
* test(googlechat): align generated channel metadata and typed doctor fixtures
2026-08-03 15:23:16 -07:00
1d446ad2cc
fix(plugins): remove stale load paths during uninstall ( #118930 )
...
* test(qa): prove marketplace plugin updates
* fix(plugins): clean exact install load paths on uninstall
* fix(ci): register marketplace lifecycle assertions
2026-08-03 21:57:54 +00:00
554a6f3bbf
feat(sms): add Twilio MMS support ( #118664 )
...
* feat(sms): add Twilio MMS support
* fix(sms): harden hosted media bearer handling
* fix(sms): discard staged media before dispatch
* fix(sms): close staged media cleanup races
* fix(sms): finalize MMS metadata and race proof
* fix(media): bind local reads to authorized descriptors
* fix(sms): close MMS review gaps
* fix(media): make inbound root matching type-safe
* fix(media): route bounded reads through fs-safe facade
* test(media): satisfy async lint contracts
2026-08-04 05:46:37 +08:00
aa3628ce66
fix(scripts): honor last repeated CLI flag value ( #118710 )
...
Co-authored-by: Tak Hoffman <781889+Takhoffman@users.noreply.github.com >
2026-08-03 16:40:33 -05:00
5b1b1e0632
test(qa): cover CLI distribution workflows ( #118948 )
2026-08-04 05:09:39 +08:00
Vincent Koc