Commit Graph

  • 822de7d0c3 fix(browse): XProtect launch-kill self-heal — classify, quarantine-clear, bounded reinstall (P0 #2554) Garry Tan 2026-08-16 09:01:52 -07:00
  • 2851535f3b deps(browse): bump playwright + playwright-core to 1.62.1 (P0 #2554 vehicle) Garry Tan 2026-08-16 08:52:40 -07:00
  • 341d7be27c Merge remote-tracking branch 'origin/main' into garrytan/contributor-security-sweep Garry Tan 2026-08-16 10:22:49 -07:00
  • 3c04178590 docs(todos): file the v1.67 fix-wave deferrals + ZeroEntropy sunset deadline Garry Tan 2026-08-16 10:15:56 -07:00
  • d2d0ffdf59 harden(browse): constant-time bearer-token comparison in validateAuth Garry Tan 2026-08-16 10:14:33 -07:00
  • 93fefbdccd fix(ship): scope the App Store Connect key to one app and disclose it at exit Garry Tan 2026-08-16 10:14:33 -07:00
  • b029fbf80f docs(egress): state truncation/deletion of the ledger are out of scope Garry Tan 2026-08-16 10:14:33 -07:00
  • 33a55562f7 fix(ios-qa): compile the private-API touch bridge out of Release builds Garry Tan 2026-08-16 10:14:33 -07:00
  • 3c93aef0ff fix(browse): restore Bun.spawn exited/drain/OOM-cap contract on Node polyfill Garry Tan 2026-08-16 10:14:32 -07:00
  • 4992a48c57 fix(browse): write self-contained .gstack/.gitignore unconditionally Garry Tan 2026-08-16 10:14:32 -07:00
  • 57a1d957f4 fix(redact): block real all-caps URL passwords, not just shape-match Garry Tan 2026-08-16 10:14:32 -07:00
  • ca8ee4bd7e fix(test): ratchet four skeleton-size caps for the wave's preamble growth Garry Tan 2026-08-16 10:09:27 -07:00
  • 45fd8e2e3d test: prove the rebased force-push shape is scanned correctly (#2573) Garry Tan 2026-08-16 09:49:09 -07:00
  • 4cc19e4712 fix(redact): parcel IDs are not phone numbers Garry Tan 2026-08-16 09:46:29 -07:00
  • 4e055ca202 fix(redact-prepush): don't re-scan commits a catch-up merge brought in Garry Tan 2026-08-16 09:45:35 -07:00
  • 73cf0ed69a fix: diff-scope glob coverage, honest exit contract, dirty-tree visibility (#2526, #2455, #2299) Garry Tan 2026-08-16 09:44:09 -07:00
  • 909a9e9577 fix: version-bump honors the .gstack/version-path pin in versionRel (#2462) Garry Tan 2026-08-16 09:36:29 -07:00
  • da0e28e686 feat: git-based version allocator when the PR queue is unreachable (#2545) Garry Tan 2026-08-16 09:34:36 -07:00
  • 7b5fdab8cb feat: subdirectory manifests + npm-valid version mirror (#2531) Garry Tan 2026-08-16 09:31:48 -07:00
  • c33b371f25 fix: write/repair sync npm lockfiles' version fields (#2567) Garry Tan 2026-08-16 09:25:35 -07:00
  • d7ab20ac06 feat: accept 3-digit semver + package.json version sources (#2501) Garry Tan 2026-08-16 09:22:09 -07:00
  • c7faef885b fix: gstack-gbrain-install --dry-run no longer requires the network (#2540) Garry Tan 2026-08-16 09:09:37 -07:00
  • bfa579d4ea fix: /sync-gbrain respects an existing valid .gbrain-source pin (#2417) Garry Tan 2026-08-16 09:08:45 -07:00
  • acc354fcfa fix: read project-scoped MCP registrations in gbrain detection (#2499) Garry Tan 2026-08-16 09:07:06 -07:00
  • 5854d122d3 fix: resolve GBRAIN_HOME with gbrain's parent-dir semantics (#2521) Garry Tan 2026-08-16 08:56:42 -07:00
  • ce4a7bbb7e fix: detect bearer-token thin clients via host MCP registration (#2520) Garry Tan 2026-08-16 08:51:03 -07:00
  • f9f3c9801a fix: whitelist engine-locked at all three gbrain-usable gates (#2456) Garry Tan 2026-08-16 08:46:56 -07:00
  • 5b65f91a8c fix(test): update four main-side assertions to the T3 installer contracts Garry Tan 2026-08-16 10:01:27 -07:00
  • 1cab5e1108 v1.66.1.0 feat: content binding — evidence ledger, wtree staleness, tracker trust envelope, fail-closed hooks (#2603) Garry Tan 2026-08-16 09:53:31 -07:00
  • d889453686 fix(setup-gbrain): invoke gstack-memory-ingest/gstack-gbrain-sync via bun run + .ts Garry Tan 2026-08-16 09:44:10 -07:00
  • e20c29f5c2 fix(ios-qa): bridges search front-most presented content first Garry Tan 2026-08-16 09:42:07 -07:00
  • ecfd9af9d6 ios-qa: guard DebugBridgeTouch.m on DEBUG, not just TARGET_OS_IOS Sebastian Totté 2026-08-15 19:58:44 +01:00
  • 4d0e7b7c2a feat(hooks): Stop hook closes dangling timeline entries — fail-open Garry Tan 2026-08-16 09:35:36 -07:00
  • 9c0de5fed1 fix(redact): close the remaining #1946 fail-opens — detection coverage + one-time consent Garry Tan 2026-08-16 09:32:28 -07:00
  • 9af589bb73 fix(setup): render the gbrain :user variant to an out-dir — global installs stay git-clean Garry Tan 2026-08-16 09:27:07 -07:00
  • 1dbed2c01f fix(settings): include command in add-event dedup key (#2382) Greg Jackson 2026-08-01 19:00:35 +01:00
  • 2be9bd0660 feat(setup): wire --host cursor through the full install path Garry Tan 2026-08-16 09:18:54 -07:00
  • c84246845e fix(uninstall): remove real-directory skill installs, gated on provenance Garry Tan 2026-08-16 09:11:25 -07:00
  • 52006feac4 fix(setup): Windows re-runs refresh installed skills for codex/factory/opencode hosts Garry Tan 2026-08-16 09:08:13 -07:00
  • 663aca3b05 fix(setup): alias skills install as rewritten copies, never symlinks Garry Tan 2026-08-16 09:05:52 -07:00
  • 0f38feee78 fix(setup): install every skill runtime asset for the Claude host Garry Tan 2026-08-16 09:00:34 -07:00
  • 1a1dab2c5a fix(gitattributes): pin *.txt to LF Mike Laniak 2026-08-11 17:40:15 -05:00
  • 9cd1e875ea docs(browse): warn that hover scrolls and the daemon tab persists across sessions Garry Tan 2026-08-16 09:23:31 -07:00
  • 2fc873bf06 docs: guard reflects the hard-deny tier; changelog stats current #2603 garrytan/binding-polarity-wave Garry Tan 2026-08-16 09:22:20 -07:00
  • 0f70ea827c fix(sync-gbrain): remove the capability-check page file left in the user's repo Garry Tan 2026-08-16 09:22:12 -07:00
  • bab192391f fix(retro): point the prior-retros context query at files /retro actually writes Garry Tan 2026-08-16 09:21:29 -07:00
  • 2c07418ee1 fix(repo-mode): probe GNU stat before BSD so Git Bash stops crashing Garry Tan 2026-08-16 09:20:14 -07:00
  • 207a94ef0c docs: doc-review fixes — new bins in README table, careful claims precise Garry Tan 2026-08-16 09:19:45 -07:00
  • a118fd0c89 fix(make-pdf): boolean flags no longer swallow the next positional argument Garry Tan 2026-08-16 09:19:12 -07:00
  • 9df6015130 fix(test): refresh codex/factory ship goldens from post-#2588 regeneration Garry Tan 2026-08-16 09:12:32 -07:00
  • 0c160e2a0e docs: update project documentation for v1.66.1.0 Garry Tan 2026-08-16 09:12:09 -07:00
  • 00d0115ac7 fix(memory-ingest): parse the current Codex response_item rollout shape Garry Tan 2026-08-16 09:07:27 -07:00
  • 876763827a test: assemble the fixture PAT by concatenation (no live-format literal) Garry Tan 2026-08-16 09:05:54 -07:00
  • c2cdf65176 fix(test): give the schema-mismatch rebuild test a load-proof budget Garry Tan 2026-08-16 09:04:36 -07:00
  • c024a5b347 fix(brain-cache): honest 'missing' instead of fabricated-empty digests on gbrain failure Stefan Andrei 2026-08-15 23:45:25 +03:00
  • 4f5e351143 fix(gbrain): make --full do a full code walk, not a delta one ShahriarLak 2026-07-31 01:07:56 +01:00
  • 184cf84ca9 fix(brain-sync): classify queue entries, rewrite surgically, re-push stranded commits Garry Tan 2026-08-16 09:00:55 -07:00
  • 26e157bed3 test: pin golden fixtures from --host all generation Garry Tan 2026-08-16 08:59:49 -07:00
  • 7c90368229 fix: adversarial review fixes (Claude pass, 14 findings, 1 verified-live critical) Garry Tan 2026-08-16 08:54:14 -07:00
  • 4047e52bc6 fix(gbrain): quote cmd.exe arguments at a single gbrain invocation seam Garry Tan 2026-08-16 08:54:06 -07:00
  • ea780fed61 fix(sync): run gstack-brain-sync through bash, not cmd.exe, on Windows ShahriarLak 2026-08-10 21:16:04 +01:00
  • 69c1b3d88a fix(security): guard brain-sync arithmetic against injected .brain-last-pull; sanitize _GBRAIN_HOST Garry Tan 2026-08-16 08:47:06 -07:00
  • dc8657006f fix(windows): resolve the project slug natively when gstack-slug cannot spawn H M Ibtihal Utsho 2026-08-14 00:10:17 -04:00
  • de670f69c8 fix(artifacts): sync the decision store, which no allowlist glob matched H M Ibtihal Utsho 2026-08-14 00:10:17 -04:00
  • 232a912afb chore: bump version and changelog (v1.66.1.0) Garry Tan 2026-08-16 08:41:40 -07:00
  • 08d76a8e3b test: re-pin codex/factory golden fixtures post-regeneration Garry Tan 2026-08-16 08:41:39 -07:00
  • 890fcacde5 fix(test): prepush hook test builds PATH with a POSIX-only separator Lucky Wenapere 2026-08-13 03:00:33 +01:00
  • 7ed17bf76d fix(test): classify catalog-trim.test.ts as tree-mutating Garry Tan 2026-08-16 08:38:24 -07:00
  • 480ebe4f26 fix(gen-skill-docs): throw when a template contains {{PREAMBLE}} twice Garry Tan 2026-08-16 08:38:06 -07:00
  • 5d6804cb61 fix: red-team review fixes (9 findings, 2 critical) Garry Tan 2026-08-16 08:35:56 -07:00
  • ba979dbd6f fix(gen-skill-docs): quote YAML inline scalars containing '...' (Bun strict parser breaks on bare ellipsis) Stefan Andrei 2026-08-15 23:46:29 +03:00
  • cb8c79ac77 fix(test): exempt the live repo tree from hermetic-wiring's operator-~/.claude ban Stefan Andrei 2026-08-15 23:32:33 +03:00
  • 7ab271318b fix(test): host-config goldens self-provision .agents/.factory artifacts Garry Tan 2026-08-16 08:33:04 -07:00
  • a171029e6b fix: pre-landing review fixes (27 specialist findings, 3 critical) Garry Tan 2026-08-16 08:19:14 -07:00
  • 2398fb7295 fix(tests): scratch-repo fixtures never invoke the operator's gpg Garry Tan 2026-08-16 07:52:14 -07:00
  • 79e4174efd Merge remote-tracking branch 'origin/main' into garrytan/binding-polarity-wave Garry Tan 2026-08-16 00:01:22 -07:00
  • c2d12cd6b5 fix(careful): trim HIGH-tier + project-pattern docs under the size budget Garry Tan 2026-08-16 00:01:15 -07:00
  • 2e3ba307d8 chore(binding-wave): drift tripwire, golden fixtures, TODOS follow-ups Garry Tan 2026-08-15 23:33:15 -07:00
  • f9a9716ad2 feat(security): trust envelope for tracker text at every model-context ingress Garry Tan 2026-08-15 23:31:17 -07:00
  • 4836f0d1e3 feat(evidence): verification-evidence ledger mechanizes /ship's IRON LAW Garry Tan 2026-08-15 23:24:50 -07:00
  • 8e4a4f7c3d feat(review): content-addressed staleness via working-tree fingerprint Garry Tan 2026-08-15 23:17:02 -07:00
  • 455c805125 fix(hooks): fail-closed freeze + shared extractor + careful HIGH tier Garry Tan 2026-08-15 23:12:19 -07:00
  • 410b4928e7 v1.66.0.0 feat: test/evals/CI speedup — 90s truthful free suite, diff-billed evals, required Linux lane (#2593) Garry Tan 2026-08-15 22:20:30 -07:00
  • e41dffbfd8 docs: file the systemic in-shard-concurrency follow-up behind the timeout-flake family #2593 garrytan/test-evals-ci-speedup Garry Tan 2026-08-15 22:08:23 -07:00
  • 308f19c4f8 test(evals): document-release budget 180s -> 300s — same contention ratchet, receipts in-file Garry Tan 2026-08-15 22:07:59 -07:00
  • 18698b964e test(evals): review-dashboard-via budget 300s -> 360s — third ratchet of the same contention story Garry Tan 2026-08-15 21:51:56 -07:00
  • c12ca0696d test(evals): scope-gate assertion carries its evidence tail; file the detector-flake TODO Garry Tan 2026-08-15 21:22:04 -07:00
  • 5c67b11978 evals: Opus pin on the spec AUQ-matrix entry — D1a regressor, receipts in-file Garry Tan 2026-08-15 20:59:27 -07:00
  • 9c2d44253d test(windows): round-4 curation (spawnSkill env, symlink fixtures) + shard-log artifact Garry Tan 2026-08-15 18:43:01 -07:00
  • 9dc468a6de test(windows): round-3 curation — seven files the round-2 wedge had been truncating Garry Tan 2026-08-15 18:39:01 -07:00
  • fccec3f1a2 docs: file the two Windows-lane follow-ups (browser-manager wedge, skill-census symlinks) Garry Tan 2026-08-15 18:34:09 -07:00
  • e3cb0416ee test(windows): curate skill-census + browser-manager-unit; surface unhandled errors in the epilogue Garry Tan 2026-08-15 18:33:40 -07:00
  • f7f402106d test(windows): curate the seven POSIX-bound files the expanded lane surfaced; fix flag-utils path embedding Garry Tan 2026-08-15 18:17:15 -07:00
  • 9a9ead29e4 ci(evals): per-row retry override — two receipted rows keep the third attempt Garry Tan 2026-08-15 18:00:45 -07:00
  • ae11a68e71 test(browse): delete the sidepanel security-DOM suite — it tests UI removed in v1.14 Garry Tan 2026-08-15 17:58:28 -07:00
  • fed7dce20f test(browse): sidepanel DOM suite launches with --no-sandbox on CI + console capture Garry Tan 2026-08-15 17:48:21 -07:00
  • 8169b30a80 fix(test-runner): bun's headerless failure recap can't invent a phantom failing file Garry Tan 2026-08-15 17:48:21 -07:00
  • aca5061274 ci(free-tests): run the suite under xvfb-run Garry Tan 2026-08-15 17:40:55 -07:00
  • 7508c92e3a test: first-Linux-run environment fixes — bun-only PATH shim, claude gate, darwin-scoped pdf gates Garry Tan 2026-08-15 17:40:55 -07:00
  • dedcd3f4f0 fix(test-runner): strip GHA ::group:: wrappers before file attribution Garry Tan 2026-08-15 17:40:54 -07:00