Commit graph

1305 commits

Author SHA1 Message Date
dependabot[bot]
d834ce6bbe
chore(deps): bump actions/setup-node from 6.5.0 to 7.0.0
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.5.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](249970729c...8207627860)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-24 23:05:00 +00:00
Brad Groux
350faa9ff5
docs: record v6.1.2 publication evidence (#1244)
Some checks failed
CI / Build (push) Has been cancelled
CI / Lint & Type Check (push) Has been cancelled
Security Gates / CodeQL (push) Has been cancelled
Security Gates / Gitleaks (push) Has been cancelled
CI / Select Test Scope (push) Has been cancelled
CI / Security Audit (push) Has been cancelled
CI / Changed Tests (push) Has been cancelled
CI / Workspace Unit Tests (push) Has been cancelled
CI / Critical Path Coverage (push) Has been cancelled
* docs: record v6.1.2 publication evidence

* docs: refresh README for v6.1.2
2026-08-24 09:32:21 -05:00
Brad Groux
dfae7911cc
chore: release v6.1.2
* chore: prepare v6.1.2 release

* chore: refresh reviewed gitleaks fingerprints

* docs: record release gate corrections

* docs: record v6.1.2 release evidence
2026-08-24 08:39:47 -05:00
Brad Groux
3851fea93e
fix: reject unsafe URI prefixes (#1243) 2026-08-24 08:16:43 -05:00
Brad Groux
871101addc
fix: serialize task lifecycle mutations (#1241) 2026-08-24 08:09:24 -05:00
Brad Groux
e04abf96a6
fix: stabilize release validation boundaries (#1239) 2026-08-24 08:01:07 -05:00
Brad Groux
eee4dd9a2a
fix: harden input validation (#1236) 2026-08-24 07:47:20 -05:00
Brad Groux
1cdcd6ec60
fix: close sandbox metadata read race (#1235)
Some checks are pending
CI / Lint & Type Check (push) Waiting to run
CI / Changed Tests (push) Blocked by required conditions
CI / Select Test Scope (push) Waiting to run
CI / Workspace Unit Tests (push) Blocked by required conditions
CI / Critical Path Coverage (push) Blocked by required conditions
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
Security Gates / CodeQL (push) Waiting to run
Security Gates / Gitleaks (push) Waiting to run
2026-08-24 02:11:09 -05:00
Brad Groux
6ab3feb35f
fix: harden file and input handling (#1234)
* fix: harden file and input handling

* fix: keep URI scheme regex lint-safe
2026-08-24 01:58:21 -05:00
Brad Groux
0d9118ada2
fix: harden persisted record key handling (#1232)
* fix: harden persisted record key handling

* fix: avoid object-shaped untrusted writes
2026-08-24 01:56:46 -05:00
Brad Groux
7abe012f45
fix: harden request and logging boundaries (#1233) 2026-08-24 01:53:03 -05:00
Brad Groux
93ea9577d2
refactor: extract provider adapter registry (#1230) 2026-08-24 01:05:02 -05:00
Brad Groux
7cc8f253c7
refactor: centralize attempt lifecycle mutations (#1229) 2026-08-24 00:50:22 -05:00
Brad Groux
49e25838e1
ci: reserve release-grade testing for milestones (#1228) 2026-08-24 00:34:36 -05:00
Brad Groux
415f4077b9
refactor: centralize attempt completion lifecycle (#1226)
* refactor: centralize attempt completion lifecycle

* test: bind lifecycle fixture runtime manifest
2026-08-24 00:16:56 -05:00
Brad Groux
c9db917422
build: enforce Docker image contract (#1222)
* build: enforce Docker image contract

* fix: run Docker contract on durable storage

* build: restore 200 MB image contract

* build: complete container runtime contract

* chore: refresh reviewed secret fingerprint

* fix: unwrap Docker backup response

* build: exclude generated Docker context

* build: enforce platform image budgets

* chore: align Docker docs leak baseline
2026-08-23 23:49:13 -05:00
Brad Groux
d5428baec0
refactor: isolate provider runtime resolution (#1225)
* refactor: isolate provider runtime resolution

* test: cover legacy provider resolution
2026-08-23 23:44:51 -05:00
Brad Groux
25be48454b
refactor: extract Codex event interpretation (#1224)
* refactor: extract Codex event interpreter

* fix: reuse Codex event interpretation

* test: preserve dispatch coverage boundary

* test: stabilize extracted dispatch coverage

* test: await provider turn persistence

* test: align web mocks with API client
2026-08-23 22:42:27 -05:00
Brad Groux
2fa9b2ea89
refactor: extract run launch compiler (#1223) 2026-08-23 21:52:05 -05:00
Brad Groux
3a022ddc44
refactor: reduce server lint debt (#1221) 2026-08-23 21:19:43 -05:00
Brad Groux
dcdcb0f65d
refactor: isolate remaining process file IO (#1220) 2026-08-23 21:09:52 -05:00
Brad Groux
5493c022cd
refactor: route managed content through storage (#1219) 2026-08-23 21:03:20 -05:00
Brad Groux
6e3b8bfe79
fix: centralize credential-aware API requests (#1218) 2026-08-23 20:59:52 -05:00
Brad Groux
619d1bae16
chore: remove unused workspace dependencies (#1217) 2026-08-23 20:56:21 -05:00
Brad Groux
87d203d2f5
refactor: isolate operational evidence storage (#1216)
* refactor: isolate audit file storage

* refactor: isolate notification file storage

* refactor: centralize JSON service storage

* refactor: isolate operational file reads

* refactor: route maintenance IO through storage
2026-08-23 20:56:16 -05:00
Brad Groux
ce9bc5c750
refactor: isolate telemetry file storage (#1214) 2026-08-23 20:45:12 -05:00
Brad Groux
72ace38440
refactor: isolate operational metadata storage (#1213) 2026-08-23 20:36:58 -05:00
Brad Groux
97ac04b968
test: isolate tracked ignore guard (#1212) 2026-08-23 20:29:14 -05:00
Brad Groux
2cbfd3b215
fix: stop ignoring tracked storage paths (#1211) 2026-08-23 20:23:07 -05:00
Brad Groux
8ca792ad87
refactor: move task persistence behind storage (#1210)
* refactor: move task persistence behind storage

* test: cover task repository edge cases

* fix: harden task slug normalization
2026-08-23 20:09:39 -05:00
Brad Groux
8a294be775
refactor: move chat persistence behind storage (#1209)
Some checks failed
CI / Select Test Scope (push) Waiting to run
CI / Lint & Type Check (push) Waiting to run
CI / Changed Tests (push) Blocked by required conditions
CI / Workspace Unit Tests (push) Blocked by required conditions
CI / Critical Path Coverage (push) Blocked by required conditions
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
Security Gates / CodeQL (push) Waiting to run
Security Gates / Gitleaks (push) Waiting to run
Desktop Artifacts / Unsigned macOS Artifact (push) Has been cancelled
Desktop Artifacts / Unsigned Linux Artifacts (push) Has been cancelled
Desktop Artifacts / Unsigned Windows Artifacts (push) Has been cancelled
* refactor: move chat persistence behind storage

* test: cover chat storage error paths

* fix: bind chat filesystem sinks
2026-08-23 19:37:18 -05:00
Brad Groux
392e65d551
refactor: move workflow runs behind storage (#1207) 2026-08-23 19:09:57 -05:00
Brad Groux
a38d42c005
refactor: move workflow execution files behind storage (#1206) 2026-08-23 18:52:07 -05:00
Brad Groux
36e079e83c
refactor: move reflection state behind storage (#1205) 2026-08-23 18:40:45 -05:00
Brad Groux
c6fca49cf7
refactor: move scheduler state behind storage (#1204) 2026-08-23 18:34:12 -05:00
Brad Groux
3bcf48fb5f
refactor: move lifecycle hooks behind storage (#1203) 2026-08-23 18:27:56 -05:00
Brad Groux
454850db9e
refactor: move transition hooks config behind storage (#1202) 2026-08-23 18:21:27 -05:00
Brad Groux
7fd9fd1360
refactor: move agent permissions behind storage (#1201) 2026-08-23 18:14:23 -05:00
Brad Groux
f5e361ab8f
refactor: move error analyses behind storage (#1200) 2026-08-23 18:07:20 -05:00
Brad Groux
06e1343958
refactor: move ceremony state behind storage (#1199)
* refactor: move ceremony state behind storage

* test: cover transient ceremony storage
2026-08-23 18:01:11 -05:00
Brad Groux
0c1f5b35f1
refactor: move delegation state behind storage (#1198)
* refactor: move delegation state behind storage

* test: cover delegation symlink guard on Linux

* fix: keep delegation symlink handling deterministic

* test: verify delegation file identity races
2026-08-23 17:49:59 -05:00
Brad Groux
0c0764c449
refactor: move conflict files behind storage (#1197)
* refactor: move conflict files behind storage

* fix: inspect conflict targets before writing
2026-08-23 17:24:27 -05:00
Brad Groux
5a1e0d0d1a
refactor: move broadcasts behind storage repository (#1196) 2026-08-23 17:08:52 -05:00
Brad Groux
06d7fa61f8
refactor: move workflow definitions behind storage (#1195)
* refactor: move workflow definitions behind storage

* fix: normalize workflow metadata descriptions

* test: cover workflow storage failure paths
2026-08-23 16:57:49 -05:00
Brad Groux
14b6d591a5
refactor: move scheduled deliverables file I/O behind storage (#1194) 2026-08-23 16:29:18 -05:00
Brad Groux
2b28b51a73
refactor: move status history file I/O behind storage (#1193) 2026-08-23 16:20:39 -05:00
Brad Groux
2912e116c0
refactor: move progress persistence behind repository (#1192) 2026-08-23 15:54:49 -05:00
Brad Groux
91623dba84
refactor: remove activity service filesystem fallback (#1191) 2026-08-23 15:28:38 -05:00
Brad Groux
542d6dd760
build: enforce service filesystem boundary (#1190) 2026-08-23 15:23:14 -05:00
Brad Groux
2a581a451a
fix: centralize runtime state under DATA_DIR (#1184)
* fix: centralize runtime state paths

* chore: realign reviewed secret fingerprint

* test: cover legacy security migration

* test: isolate centralized runtime paths

* fix: address runtime path review findings

* test: include runtime health in critical coverage

* chore: realign deployment secret fingerprint

* test: stabilize provider coverage

* test: cover reflection job storage

* test: secure health route temp files
2026-08-23 15:02:07 -05:00