5535 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Scott Werner	9df720aa24	Merge pull request #1057 from fabro-sh/codex/hook-documentation ... Fix hook documentation configuration examples	2026-10-20 15:44:59 -04:00
Scott Werner	dc12a9d2b5	Keep hook documentation fix documentation-only	2026-10-20 15:23:21 -04:00
Scott Werner	5cdf3abd77	Merge pull request #1056 from fabro-sh/redact/recognize-ulids ... Exempt ULIDs from entropy-based secret redaction	2026-10-20 15:20:30 -04:00
Scott Werner	0e670e9234	Exempt ULIDs from entropy-based secret redaction ... Fabro's run, session, turn, message and pair IDs are ULIDs. A ULID occasionally has enough distinct characters to cross the secret scanner's 4.5-bit entropy threshold, and the stream redaction then rewrites the Web UI link to `/runs/REDACTED` and the run branch to `fabro/run/REDACTED`. Two nightly releases in the last week failed on `attach_replays_completed_detached_run` this way, and each fix so far protected one field at a time. Teach the entropy scanner the format instead: a token that is exactly 26 uppercase Crockford base32 characters and decodes to a timestamp between 2020 and 2100 is an identifier, not a secret, and is left alone wherever it appears. Trailing `-ULID`, `_ULID` and `=ULID` segments are stripped before measuring, so `20261020-<id>` and `<secret>-<id>` are handled, and the secret in the latter is still found. The gitleaks credential patterns run on every token as before. This mirrors detect-secrets' built-in UUID filter. A secret would have to take exactly this shape and land in the date window to be missed, which is about one in a hundred of the already rare tokens encoded as 26 uppercase base32 characters. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>	2026-10-20 14:51:14 -04:00
Scott Werner	d1144615bf	Fix hook documentation configuration examples	2026-10-20 14:35:21 -04:00
Scott Werner	8f01f9f41d	Merge pull request #1054 from fabro-sh/codex/stage-occurrence-links ... Fix navigation to repeated stage occurrences	2026-10-20 13:28:03 -04:00
Scott Werner	636fff0599	Fix navigation to repeated stage occurrences	2026-10-20 13:02:46 -04:00
fabro-releases[bot]	59342f7e99	Bump version to 0.392.0-nightly.0	2026-10-20 09:36:24 +00:00
Scott Werner	7a876b5444	Merge pull request #1044 from fabro-sh/codex/restore-run-retry ... Restore Retry for terminal runs in the web UI	2026-10-19 17:26:53 -04:00
Scott Werner	65f096b00a	Restore Retry for terminal runs in the web UI	2026-10-19 13:28:44 -04:00
Scott Werner	149b240e8d	Merge pull request #1043 from fabro-sh/bot/internal-deps ... Update internal dependencies	2026-10-19 12:50:08 -04:00
github-actions[bot]	e22821f37f	Update internal dependencies to their current main	2026-10-18 06:44:02 +00:00
fabro-releases[bot]	5c90ad2e0c	Bump version to 0.389.0-nightly.0	2026-10-17 09:34:01 +00:00
github-actions[bot]	d37824413c	Update internal dependencies to their current main	2026-10-17 06:44:39 +00:00
Scott Werner	b19163e4b4	Merge pull request #1042 from fabro-sh/codex/environment-resource-roundtrip ... Preserve environment resources through editor saves	2026-10-16 15:30:27 -04:00
Scott Werner	814073f0a1	Keep resource sliders while preserving untouched settings	2026-10-16 15:18:18 -04:00
Scott Werner	79b091b035	Preserve environment resources through editor saves	2026-10-16 14:02:44 -04:00
Scott Werner	7ff4456b54	Merge pull request #1038 from fabro-sh/codex/docker-worker-cleanup ... Stop retained sandboxes after abnormal worker exit	2026-10-16 13:42:42 -04:00
Scott Werner	ed1c979841	Merge pull request #1040 from fabro-sh/codex/fix-nightly-cli-failures ... Preserve run IDs during redaction and bound dump test log volume	2026-10-16 11:13:38 -04:00
Scott Werner	bf1e14654c	Bound dump fixture event volume and verify hydrated output	2026-10-16 08:15:34 -04:00
Scott Werner	0d7dae01f0	Preserve protected JSON fields during secret redaction	2026-10-16 08:15:34 -04:00
fabro-releases[bot]	5a3a952bed	Bump version to 0.388.0-nightly.0	2026-10-16 09:36:10 +00:00
Scott Werner	e975dcffc6	Merge pull request #674 from fkukuck/feat/markdown-file-preview ... feat(web): preview Markdown run files	2026-10-15 13:58:26 -04:00
Scott Werner	e87e0df84d	fix(web): show deleted Markdown files as diffs	2026-10-15 13:49:23 -04:00
Scott Werner	55d3d3dec5	Stop retained sandboxes after abnormal worker exit	2026-10-15 12:39:36 -04:00
Scott Werner	18eb72c857	Merge pull request #1036 from fabro-sh/bot/internal-deps ... Update Pebble dependencies	2026-10-15 12:33:20 -04:00
Scott Werner	e78b9a0bf6	Merge branch 'main' into bot/internal-deps	2026-10-15 12:19:31 -04:00
Scott Werner	ebb1f0bbb8	Merge pull request #1035 from fabro-sh/codex/petri-skill-boundary ... Preserve workflow context when expanding skills	2026-10-15 11:55:16 -04:00
fabro-releases[bot]	ae3180c320	Bump version to 0.387.0-nightly.0	2026-10-15 09:36:29 +00:00
github-actions[bot]	50cce2ceaf	Update internal dependencies to their current main	2026-10-15 06:50:11 +00:00
Scott Werner	daf82929a0	Adopt Petri skill expansion boundaries	2026-10-14 17:34:34 -04:00
Scott Werner	ac84eccfcc	Merge pull request #1034 from fabro-sh/codex/run-client-headers ... Restore run session headers using scoped model clients	2026-10-14 16:21:13 -04:00
Scott Werner	db7bf083cd	Update lithos-llm for client-scoped headers	2026-10-14 15:38:17 -04:00
Scott Werner	c9d5db8d47	Merge pull request #1032 from fabro-sh/codex/restore-stall-watchdog ... Restore graph-wide stall watchdog enforcement	2026-10-14 13:43:40 -04:00
Scott Werner	e12a6633b7	Include stall fixture in workflow inventory snapshot	2026-10-14 13:27:17 -04:00
Scott Werner	8780cb1bf6	Scope run model clients with session headers	2026-10-14 12:44:52 -04:00
Scott Werner	560687e76b	Restore graph-wide stall watchdog in Fabro execution	2026-10-14 11:20:00 -04:00
Scott Werner	7c020a0d92	Merge pull request #1031 from fabro-sh/bot/internal-deps ... Update internal dependencies	2026-10-14 10:59:43 -04:00
fabro-releases[bot]	f2f9388e9c	Bump version to 0.386.0-nightly.0	2026-10-14 09:41:28 +00:00
github-actions[bot]	054c94ef2c	Update internal dependencies to their current main	2026-10-14 06:49:40 +00:00
Scott Werner	de7ad06de5	Merge pull request #1030 from fabro-sh/bot/internal-deps ... Update internal dependencies	2026-10-13 13:58:53 -04:00
Scott Werner	10e0884079	Merge pull request #1024 from fabro-sh/codex/run-git-identity ... Propagate run Git identity to commands and agents	2026-10-13 13:46:11 -04:00
github-actions[bot]	f6e5e99bbe	Update internal dependencies to their current main	2026-10-13 15:44:57 +00:00
Scott Werner	f8ce54cafc	Merge pull request #1029 from fabro-sh/codex/internal-deps-github-token-20261013 ... Use GitHub Actions token for internal dependency PRs	2026-10-13 11:15:34 -04:00
Scott Werner	3288fd7022	Use GitHub Actions token for internal dependency PRs	2026-10-13 10:42:42 -04:00
fabro-releases[bot]	3fffde2134	Bump version to 0.385.0-nightly.0	2026-10-13 09:40:31 +00:00
Scott Werner	d5b5435c11	Merge pull request #996 from fabro-sh/preserve-subagent-usage ... Keep subagent usage when an agent stage completes	2026-10-12 16:12:20 -04:00
Scott Werner	04addf9204	Merge pull request #1026 from fabro-sh/codex/settings-migration-permissions ... Preserve Unix file permissions during settings migrations	2026-10-12 16:07:28 -04:00
Scott Werner	9e0e356112	Fail the umask permissions test when its child runs no tests ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-12 15:49:46 -04:00
Scott Werner	59f175d876	Merge pull request #1027 from fabro-sh/codex/refresh-host-crash-fix ... Refresh sandbox-driver for Local worker crash cleanup	2026-10-12 15:44:04 -04:00