Commit graph

1336 commits

Author SHA1 Message Date
Brad Groux
ec1c714fa3 test: preserve lint warning budget 2026-08-30 06:39:48 -05:00
Brad Groux
00728911ed feat: activate governed recurring automations 2026-08-30 06:39:48 -05:00
Brad Groux
7bbd3561e9
Merge pull request #1284 from BradGroux/fix/admission-read-lock-1283
fix: serialize admission repository reads
2026-08-30 06:39:40 -05:00
Brad Groux
ef86d99a5e fix: serialize admission repository reads 2026-08-30 06:35:37 -05:00
Brad Groux
b261505409
Merge pull request #1282 from BradGroux/fix/admission-snapshot-writes-1281
fix: complete admission snapshot appends
2026-08-30 06:19:59 -05:00
Brad Groux
918b69af24 test: cover admission append failures 2026-08-30 06:13:21 -05:00
Brad Groux
9f298c5390 fix: complete admission snapshot appends 2026-08-30 06:07:07 -05:00
Brad Groux
62fcee5cdb
feat: govern active Run Access transitions (#1279)
* feat: govern active run access changes

* fix: classify Run Access CLI permissions

* test: cover Run Access CLI states
2026-08-30 05:43:44 -05:00
Brad Groux
f361367d3c
Merge pull request #1278 from BradGroux/feat/artifact-previews-1250
feat: add governed artifact previews
2026-08-30 05:17:06 -05:00
Brad Groux
70f66a82e0
Merge pull request #1277 from BradGroux/feat/run-file-provenance-1251
feat: add causal run file provenance
2026-08-30 05:16:41 -05:00
Brad Groux
269a41431d test: cover provenance lookup failures 2026-08-30 05:09:51 -05:00
Brad Groux
ee9c47f07c fix: preserve preview coverage boundary 2026-08-30 05:09:01 -05:00
Brad Groux
092966359d fix: close provenance release gates 2026-08-30 05:01:01 -05:00
Brad Groux
f8cec7c618 Merge remote-tracking branch 'origin/main' into feat/artifact-previews-1250
# Conflicts:
#	web/src/components/task/AgentRunTimelinePanel.tsx
#	web/src/components/task/TaskWorkView.tsx
2026-08-30 04:49:42 -05:00
Brad Groux
ae9c18a45b Merge remote-tracking branch 'origin/main' into feat/run-file-provenance-1251
# Conflicts:
#	cli/src/__tests__/agents-runtime-capabilities.test.ts
#	cli/src/commands/agents.ts
#	docs/CLI-GUIDE.md
#	docs/testing/critical-path-coverage.json
#	server/src/__tests__/routes/phase-transitions.test.ts
#	server/src/routes/agents.ts
#	web/src/__tests__/agent-run-timeline-mantine.test.tsx
#	web/src/hooks/useAgent.ts
2026-08-30 04:49:42 -05:00
Brad Groux
61468620e7
feat: add deterministic automation drafts (#1276)
* feat: add deterministic automation drafts

* test: include automation draft input evidence

* test: cover automation draft persistence and API

* fix: harden automation draft persistence
2026-08-30 04:46:14 -05:00
Brad Groux
8dc7ecd66a
feat: add effective Run Access summary (#1275)
* feat: add effective run access summary

* docs: classify Run Access CLI permission

* test: cover Run Access CLI rendering

* test: cover Run Access failures
2026-08-30 04:45:54 -05:00
Brad Groux
bdd5f885ad feat: add governed artifact previews 2026-08-30 04:45:29 -05:00
Brad Groux
907d46e394 feat: add causal run file provenance 2026-08-30 04:19:54 -05:00
Brad Groux
8135942eed
fix: reveal secondary actions for keyboard and touch (#1272)
* fix: reveal secondary actions for keyboard and touch

* test: await mobile status persistence
2026-08-30 03:59:33 -05:00
Brad Groux
f3c26088ae
feat: add governed file-backed work products (#1270)
* feat: add governed file-backed work products

* test: cover file work product delivery paths

* test: cover work product artifact persistence

* fix: harden artifact file handling

* fix: harden work product artifact boundaries

* test: cover artifact source replacement
2026-08-30 03:59:19 -05:00
Brad Groux
8aa4e0bd9e
Merge pull request #1273 from BradGroux/fix/macos-window-help-menus-1258
feat: add standard macOS Window and Help menus
2026-08-30 03:27:22 -05:00
Brad Groux
676f2d98f5
Merge pull request #1274 from BradGroux/fix/intentional-motion-contract-1259
fix: constrain shared interface motion
2026-08-30 03:27:02 -05:00
Brad Groux
60485cd6df
test: make desktop port coverage concurrency-safe (#1263) 2026-08-30 02:53:11 -05:00
Brad Groux
838663cfc2 fix: constrain shared interface motion 2026-08-30 02:52:25 -05:00
Brad Groux
1db163d695 feat: add standard macOS Window and Help menus 2026-08-30 02:49:21 -05:00
Brad Groux
45becddee9
fix: announce authentication validation errors (#1271) 2026-08-30 02:46:34 -05:00
Brad Groux
57406a0769
test: stabilize workflow recovery coverage (#1265) 2026-08-30 02:41:02 -05:00
Brad Groux
37faba4b26
test: stabilize mobile responsive assertions (#1267) 2026-08-30 02:33:14 -05:00
Brad Groux
cffefe8500
test(e2e): keep auth routing out of Vite source modules (#1269)
* test(e2e): wait for DOM-ready navigation

* test(e2e): scope auth routing to API requests
2026-08-30 02:22:08 -05:00
dependabot[bot]
f178299d35
chore(deps): bump the production-dependencies group with 4 updates (#1246)
Bumps the production-dependencies group with 4 updates: [eslint](https://github.com/eslint/eslint), [@openai/codex-sdk](https://github.com/openai/codex/tree/HEAD/sdk/typescript), [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `eslint` from 10.8.1 to 10.9.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](https://github.com/eslint/eslint/compare/v10.8.1...v10.9.0)

Updates `@openai/codex-sdk` from 0.148.0 to 0.149.0
- [Commits](https://github.com/openai/codex/commits/rust-v0.149.0/sdk/typescript)

Updates `@vitejs/plugin-react` from 6.0.5 to 6.1.0
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.1.0/packages/plugin-react)

Updates `vite` from 8.2.1 to 8.2.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite)

---
updated-dependencies:
- dependency-name: eslint
  dependency-version: 10.9.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@openai/codex-sdk"
  dependency-version: 0.149.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: vite
  dependency-version: 8.2.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-30 01:03:23 -05:00
dependabot[bot]
cd0d708a0b
chore(deps): bump actions/setup-node from 6.5.0 to 7.0.0 (#1245)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.5.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](249970729c...8207627860)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-30 01:02:58 -05:00
Brad Groux
350faa9ff5
docs: record v6.1.2 publication evidence (#1244)
Some checks failed
CI / Build (push) Has been cancelled
CI / Lint & Type Check (push) Has been cancelled
Security Gates / CodeQL (push) Has been cancelled
Security Gates / Gitleaks (push) Has been cancelled
CI / Select Test Scope (push) Has been cancelled
CI / Security Audit (push) Has been cancelled
CI / Changed Tests (push) Has been cancelled
CI / Workspace Unit Tests (push) Has been cancelled
CI / Critical Path Coverage (push) Has been cancelled
* docs: record v6.1.2 publication evidence

* docs: refresh README for v6.1.2
2026-08-24 09:32:21 -05:00
Brad Groux
dfae7911cc
chore: release v6.1.2
* chore: prepare v6.1.2 release

* chore: refresh reviewed gitleaks fingerprints

* docs: record release gate corrections

* docs: record v6.1.2 release evidence
2026-08-24 08:39:47 -05:00
Brad Groux
3851fea93e
fix: reject unsafe URI prefixes (#1243) 2026-08-24 08:16:43 -05:00
Brad Groux
871101addc
fix: serialize task lifecycle mutations (#1241) 2026-08-24 08:09:24 -05:00
Brad Groux
e04abf96a6
fix: stabilize release validation boundaries (#1239) 2026-08-24 08:01:07 -05:00
Brad Groux
eee4dd9a2a
fix: harden input validation (#1236) 2026-08-24 07:47:20 -05:00
Brad Groux
1cdcd6ec60
fix: close sandbox metadata read race (#1235)
Some checks are pending
CI / Lint & Type Check (push) Waiting to run
CI / Changed Tests (push) Blocked by required conditions
CI / Select Test Scope (push) Waiting to run
CI / Workspace Unit Tests (push) Blocked by required conditions
CI / Critical Path Coverage (push) Blocked by required conditions
CI / Build (push) Waiting to run
CI / Security Audit (push) Waiting to run
Security Gates / CodeQL (push) Waiting to run
Security Gates / Gitleaks (push) Waiting to run
2026-08-24 02:11:09 -05:00
Brad Groux
6ab3feb35f
fix: harden file and input handling (#1234)
* fix: harden file and input handling

* fix: keep URI scheme regex lint-safe
2026-08-24 01:58:21 -05:00
Brad Groux
0d9118ada2
fix: harden persisted record key handling (#1232)
* fix: harden persisted record key handling

* fix: avoid object-shaped untrusted writes
2026-08-24 01:56:46 -05:00
Brad Groux
7abe012f45
fix: harden request and logging boundaries (#1233) 2026-08-24 01:53:03 -05:00
Brad Groux
93ea9577d2
refactor: extract provider adapter registry (#1230) 2026-08-24 01:05:02 -05:00
Brad Groux
7cc8f253c7
refactor: centralize attempt lifecycle mutations (#1229) 2026-08-24 00:50:22 -05:00
Brad Groux
49e25838e1
ci: reserve release-grade testing for milestones (#1228) 2026-08-24 00:34:36 -05:00
Brad Groux
415f4077b9
refactor: centralize attempt completion lifecycle (#1226)
* refactor: centralize attempt completion lifecycle

* test: bind lifecycle fixture runtime manifest
2026-08-24 00:16:56 -05:00
Brad Groux
c9db917422
build: enforce Docker image contract (#1222)
* build: enforce Docker image contract

* fix: run Docker contract on durable storage

* build: restore 200 MB image contract

* build: complete container runtime contract

* chore: refresh reviewed secret fingerprint

* fix: unwrap Docker backup response

* build: exclude generated Docker context

* build: enforce platform image budgets

* chore: align Docker docs leak baseline
2026-08-23 23:49:13 -05:00
Brad Groux
d5428baec0
refactor: isolate provider runtime resolution (#1225)
* refactor: isolate provider runtime resolution

* test: cover legacy provider resolution
2026-08-23 23:44:51 -05:00
Brad Groux
25be48454b
refactor: extract Codex event interpretation (#1224)
* refactor: extract Codex event interpreter

* fix: reuse Codex event interpretation

* test: preserve dispatch coverage boundary

* test: stabilize extracted dispatch coverage

* test: await provider turn persistence

* test: align web mocks with API client
2026-08-23 22:42:27 -05:00
Brad Groux
2fa9b2ea89
refactor: extract run launch compiler (#1223) 2026-08-23 21:52:05 -05:00