Repository navigation

Checkpoint: development → main (PR #96 correction rounds, Gate 0 ADR drafts, MVP-1) - #97

Merged

cemililik merged 148 commits into

mainfrom

development

Nov 7, 2026

Merged

Checkpoint: development → main (PR #96 correction rounds, Gate 0 ADR drafts, MVP-1)#97
cemililik merged 148 commits into
mainfrom
development

Commits on Nov 4, 2026
- fix(core): keep credential flags after a boolean -u and query keys in URL passwords masked
  
  cemililik
  and
  claude
  committed
  5a1006e
- fix(repo): tighten the dependency allowlist and pin the required checks
  
  cemililik
  and
  claude
  committed
  3cb9712
- docs(repo): record the PR #96 merge, the D64 round 1 and the triaged review lows
  
  cemililik
  and
  claude
  committed
  6155c6d
- fix(core): read a credential flag in value position as a flag
  
  cemililik
  and
  claude
  committed
  2f7224e
- fix(repo): bound dependency requirements and pin every way a required check could skip
  
  cemililik
  and
  claude
  committed
  f213d2a
- docs(repo): record the D64 round 2 and correct what it found stale
  
  cemililik
  and
  claude
  committed
  07f653e
- fix(core): make the argv and URL-password readings only add masks
  
  cemililik
  and
  claude
  committed
  4b12fec
- fix(repo): pin the hash-object batch bound, the other dependency fields and step shells
  
  cemililik
  and
  claude
  committed
  71b621d
- docs(repo): record the D64 round 3 and correct round 2's oracle claim
  
  cemililik
  and
  claude
  committed
  7a12ee6
- test(repo): tolerate a child that exits between the liveness check and the kill
  
  cemililik
  and
  claude
  committed
  93a8b03
- fix(core): leave nested URLs and escapes to the scheme scan, and keep masked flag names hidden
  
  cemililik
  and
  claude
  committed
  10e033b
- fix(repo): refuse relative candidate roots and pin batch packing and the aggregate's guards
  
  cemililik
  and
  claude
  committed
  6c7bc70
- docs(repo): record the D64 round 4 and the facts it found missing
  
  cemililik
  and
  claude
  committed
  68eb689
- fix(core): remove the comma/slash URL password reading and keep the argv rules additive
  
  cemililik
  and
  claude
  committed
  bbffecc
- docs(repo): record the removal of the URL reading and close the PR #96 correction
  
  cemililik
  and
  claude
  committed
  18ea426
- docs(repo): record the MVP-1 plan rulings
  
  cemililik
  and
  claude
  committed
  6dd3f1e
- feat(cli): show the run id in the live run view and its final summary
  
  cemililik
  and
  claude
  committed
  9458a2b
- test(cli): give the run-id summary case a complete run:completed event
  
  cemililik
  and
  claude
  committed
  fed29de
- feat(cli): add list --runs and status <runId>
  
  cemililik
  and
  claude
  committed
  9a1d3ef
- feat(core): add a pre-flight for tools whose host arm a path leaves unwired
  
  cemililik
  and
  claude
  committed
  42336ae
- feat(cli): refuse a run whose workflow grants a tool the run path cannot serve
  
  cemililik
  and
  claude
  committed
  97714f9
- docs(repo): say where each egress and os tool runs
  
  cemililik
  and
  claude
  committed
  2f5ec10
- feat(shared): add [chat].max_tokens
  
  cemililik
  and
  claude
  committed
  0330635
- feat(cli): give interactive Anthropic chat its catalog output ceiling
  
  cemililik
  and
  claude
  committed
  51c78d7
- docs(repo): record the interactive chat output default
  
  cemililik
  and
  claude
  committed
  f01611e
- test(repo): re-pin the run workload count the run-id test moved
  
  cemililik
  and
  claude
  committed
  e478336
Commits on Nov 5, 2026
- test(repo): move the run-reader outcome fixture to the 85-case workload
  
  cemililik
  and
  claude
  committed
  d5cde86
- fix(core): refuse a gate decision its gate type does not accept
  
  cemililik
  and
  claude
  committed
  fbc9c88
- fix(cli): refuse a gate decision that does not fit the gate before any engine work
  
  cemililik
  and
  claude
  committed
  feb7dc6
- docs(repo): state which decisions each human gate type accepts
  
  cemililik
  and
  claude
  committed
  4487c03
- test(cli): assert the gate refusal without an untyped matcher
  
  cemililik
  and
  claude
  committed
  8d8fd70
- test(repo): re-pin the gate workload count the decision-check test moved
  
  cemililik
  and
  claude
  committed
  1f67862
- feat(shared): add RunAlreadyTerminalError
  
  cemililik
  and
  claude
  committed
  e8b421d
- fix(db): refuse a second terminal in the durable run store
  
  cemililik
  and
  claude
  committed
  f98ec0e
- fix(core): mirror the second-terminal refusal in the in-memory run store
  
  cemililik
  and
  claude
  committed
  5e40f87
- feat(cli): reconcile interrupted runs at run/gate start and on Home open
  
  cemililik
  and
  claude
  committed
  480e04c
- docs(repo): record the liveness wiring and the second-terminal refusal
  
  cemililik
  and
  claude
  committed
  f4cbabc
- feat(cli): pick the default chat model from a keyed provider and refuse a keyless one
  
  cemililik
  and
  claude
  committed
  37ac6c4
- docs(repo): record the key-aware default chat model and the key pre-flight
  
  cemililik
  and
  claude
  committed
  cf1e355
- feat(cli): /export writes into .relavium/workflows/ and offers the run command
  
  cemililik
  and
  claude
  committed
  5b49046
- docs(repo): record where /export writes and how it picks the workflow id
  
  cemililik
  and
  claude
  committed
  a30bda1
- feat(cli): print the workflow's outputs on the human run surfaces
  
  cemililik
  and
  claude
  committed
  80f6dc9
- docs(repo): record the outputs block on the human run and logs surfaces
  
  cemililik
  and
  claude
  committed
  e3be7dd
- docs(repo): record MVP-1 1b's progress in the roadmap
  
  cemililik
  and
  claude
  committed
  723a971
- test(repo): count the session key pre-flight in the packaged chat smoke
  
  cemililik
  and
  claude
  committed
  9fc2e33
- fix(cli): give replayed log rows the one-line floor
  
  cemililik
  and
  claude
  committed
  ed953a1
- test(repo): give the compiled-CLI MCP orphan probe a synthetic key
  
  cemililik
  and
  claude
  committed
  5f2a0eb
- docs(repo): draft the eight Gate 0 ADRs
  
  cemililik
  and
  claude
  committed
  bcaf362
- fix(shared): refuse an input gate that would approve on timeout
  
  cemililik
  and
  claude
  committed
  6113911
- fix(core): leave a run whose held terminal is unwritten for the next start
  
  cemililik
  and
  claude
  committed
  19651cf
- feat(core): read back the session a workflow file was exported from
  
  cemililik
  and
  claude
  committed
  42d2d34
- fix(cli): never promise an input gate it will be approved on timeout
  
  cemililik
  and
  claude
  committed
  dc6a9c8
- fix(cli): mask output fields before serializing, and say when a value was masked
  
  cemililik
  and
  claude
  committed
  bc0341d
- fix(cli): find a session's own export from the file, and show /export in the view
  
  cemililik
  and
  claude
  committed
  f1c8416
- fix(cli): open an interactive resume whose provider lost its key
  
  cemililik
  and
  claude
  committed
  2a5dc99
- fix(cli): name the Home among the commands that recover a held terminal
  
  cemililik
  and
  claude
  committed
  b5c0d66
- docs(repo): record the MVP-1 1b round 1 fixes and its deferred lows
  
  cemililik
  and
  claude
  committed
  60bc972
- fix(cli): read an output field with its name, so a header-named key is masked
  
  cemililik
  and
  claude
  committed
  499d1fd
- fix(cli): tell an unreadable terminal outbox from an empty one
  
  cemililik
  and
  claude
  committed
  8dc9f12
- fix(cli): never call a run already recorded failed "held"
  
  cemililik
  and
  claude
  committed
  b08fd6a
- fix(cli): keep an own export's permission bits, and refuse where it cannot land
  
  cemililik
  and
  claude
  committed
  08723f0
- fix(cli): refuse /compact like a message while a resumed session has no key
  
  cemililik
  and
  claude
  committed
  2d4354e
- test(cli): pin the resume key pre-flight and the Home reconcile orders
  
  cemililik
  and
  claude
  committed
  9734475
- test(repo): resume a historical input gate that approves on timeout
  
  cemililik
  and
  claude
  committed
  ef25a7e
- docs(core): say an input gate's auto-approval fails at its deadline
  
  cemililik
  and
  claude
  committed
  ac596a3
- docs(shared): name the input-gate refusal among the frozen reader's exemptions
  
  cemililik
  and
  claude
  committed
  c2afd8b
- docs(repo): record the MVP-1 1b round 2 fixes and its deferred lows
  
  cemililik
  and
  claude
  committed
  662b023
- style(cli): collapse the session-host test's shared type import
  
  cemililik
  and
  claude
  committed
  224b8f6
- fix(cli): decide a whole-value output mask by the field's name alone
  
  cemililik
  and
  claude
  committed
  aa4e27c
- fix(cli): strip terminal controls from REPL command output on the plain and json drivers
  
  cemililik
  and
  claude
  committed
  80d935f
- test(cli): pin a refused message out of the view and an own export's replacing rewrite
  
  cemililik
  and
  claude
  committed
  e84d7c9
- docs(cli): say what reconcile settles and what an own export is not checked for
  
  cemililik
  and
  claude
  committed
  f8dd0d4
- docs(core): name the other order of the run:started to acquire race
  
  cemililik
  and
  claude
  committed
  2668481
- docs(repo): record the MVP-1 1b round 3 fixes and its deferred lows
  
  cemililik
  and
  claude
  committed
  b70f9de
- fix(cli): keep the output value under a name that is itself a secret shape
  
  cemililik
  and
  claude
  committed
  6e7314f
- fix(core): name a concurrent reconcile when a fresh run cannot take its lease
  
  cemililik
  and
  claude
  committed
  55fe542
- test(cli): say a provider without a model reaches the starter only from a direct caller
  
  cemililik
  and
  claude
  committed
  88f79b8
- docs(repo): record the MVP-1 1b round 4 fixes and its deferred lows
  
  cemililik
  and
  claude
  committed
  df685a5
- docs(repo): record the MVP-1 1b round 5 lows
  
  cemililik
  and
  claude
  committed
  ab5e46e
- docs(repo): accept MVP-1 1b and record the security sitting's lows
  
  cemililik
  and
  claude
  committed
  e11167e
- ci(repo): give the Windows headless chat smoke a fake provider key
  
  cemililik
  and
  claude
  committed
  9da0a64
- test(repo): read GnuPG's own AEAD choice in the custody test
  
  cemililik
  and
  claude
  committed
  837a57c
- fix(cli): sanitize every catalog field relavium list prints
  
  cemililik
  and
  claude
  committed
  158459a
- docs(repo): say relavium list sanitizes every catalog field
  
  cemililik
  and
  claude
  committed
  624bb2e
- fix(core): bound the run-path tool pre-flight and fail closed on new egress kinds
  
  cemililik
  and
  claude
  committed
  314ad50
- refactor(cli): wire the egress and os arms from their own unwired entries
  
  cemililik
  and
  claude
  committed
  f969d25
- fix(cli): point a paused run's summary at the command that accepts it
  
  cemililik
  and
  claude
  committed
  abe14ca
- fix(cli): show nothing pending for a finished run in status <runId>
  
  cemililik
  and
  claude
  committed
  199601b
- fix(cli): scale a chat's attempt deadline to its output cap
  
  cemililik
  and
  claude
  committed
  272e099
- docs(repo): record the MVP-1 1a milestone review fixes and its deferred lows
  
  cemililik
  and
  claude
  committed
  52de04b
- test(cli): let the deadline wiring guard accept the chat's test timer seam
  
  cemililik
  and
  claude
  committed
  fbcd73e
- style(cli): format the list run row and the seedRun cancel line
  
  cemililik
  and
  claude
  committed
  d8762a2
Commits on Nov 6, 2026
- fix(cli): point a resumed run's restored gate at relavium status
  
  cemililik
  and
  claude
  committed
  dc05e20
- test(cli): pin status's history-identifier sanitizers and finished-run rendering
  
  cemililik
  and
  claude
  committed
  faf28ed
- docs(repo): record the MVP-1 1a review round 2 fix and its deferred lows
  
  cemililik
  and
  claude
  committed
  32d1a8a
- fix(cli): print the command that continues each pending human gate in status
  
  cemililik
  and
  claude
  committed
  84a758e
- docs(repo): record the MVP-1 1a review round 3 fix and its deferred lows
  
  cemililik
  and
  claude
  committed
  8e7f41f
- fix(cli): show a decided human gate's step as completed in status
  
  cemililik
  and
  claude
  committed
  e1e42a0
- docs(repo): record the MVP-1 1a review round 4 fix and its deferred lows
  
  cemililik
  and
  claude
  committed
  3354dda
- docs(repo): accept MVP-1 after a clean 1a milestone review round 5
  
  cemililik
  and
  claude
  committed
  843924a
- refactor(cli): clear the SonarCloud findings on the checkpoint PR
  
  cemililik
  and
  claude
  committed
  a417a57
- docs(repo): withhold Remember for a credential-shaped command and fix code spans
  
  cemililik
  and
  claude
  committed
  077650a
- fix(core): keep reconcile from relabelling a held or just-started run
  
  cemililik
  and
  claude
  committed
  315e76f
- fix(db): report when each interrupted run started
  
  cemililik
  and
  claude
  committed
  c496587
- test(db): give each media-temporary worker's first stage a cold-start budget
  
  cemililik
  and
  claude
  committed
  ce8cb12
- fix(cli): read the effect journal when the Home reconciles crashed runs
  
  cemililik
  and
  claude
  committed
  bf80877
- fix(cli): make a bare Enter reject a gate card, and close a card a deadline decided
  
  cemililik
  and
  claude
  committed
  a0733a0
- fix(cli): replace an own export only if it is still the file that was checked
  
  cemililik
  and
  claude
  committed
  3f00c4d
- fix(cli): print run and step status on one line in status, list and logs
  
  cemililik
  and
  claude
  committed
  bec3b99
- ci(repo): say what release.yml's dispatch and environment comments actually guarantee
  
  cemililik
  and
  claude
  committed
  d61488d
- docs(core): say a run-path pre-flight tool cannot succeed, not that it certainly fails one way
  
  cemililik
  and
  claude
  committed
  e37f911
- docs(repo): record the PR #97 review, its fixes, rulings and recorded lows
  
  cemililik
  and
  claude
  committed
  126488c
- test(repo): pin the usage permanent inventory at 447 cases
  
  cemililik
  and
  claude
  committed
  13979d6
- fix(core): bound reconcile's TTL grace on both sides and pin the own-run guard again
  
  cemililik
  and
  claude
  committed
  775fe8d
- fix(cli): keep the own-export identity check sound on coarse filesystem clocks
  
  cemililik
  and
  claude
  committed
  c842f01
- test(cli): pin the logs run-id floor and keep reconcile tests testing their subject
  
  cemililik
  and
  claude
  committed
  6b32bfe
- test(repo): pin the usage permanent inventory at 448 cases
  
  cemililik
  and
  claude
  committed
  0bd1814
- docs(repo): fix ADR-0118's grant label and record D64 round 1 of the PR #97 correction
  
  cemililik
  and
  claude
  committed
  7382389
- fix(cli): compare the own export's bytes too before replacing it
  
  cemililik
  and
  claude
  committed
  5bf9849
- docs(repo): say the own-export check compares the file's bytes
  
  cemililik
  and
  claude
  committed
  ca84510
- fix(cli): let Ctrl-C at the rejection reason cancel the run again
  
  cemililik
  and
  claude
  committed
  0208b23
- docs(repo): say Ctrl-C at the rejection reason cancels the run
  
  cemililik
  and
  claude
  committed
  105c75a
- test(core): pin a start just inside reconcile's future-skew bound
  
  cemililik
  and
  claude
  committed
  471a33e
- docs(repo): keep export-2's re-check inside the changed-file contract
  
  cemililik
  and
  claude
  committed
  82db354
- fix(cli): compare the own export's stat fields before reading it
  
  cemililik
  and
  claude
  committed
  aeb7e4c
- fix(cli): give the logs skipped-row note's seq the one-line floor
  
  cemililik
  and
  claude
  committed
  02a64f4
- test(repo): pin the usage permanent inventory at 449 cases
  
  cemililik
  and
  claude
  committed
  f23d4ac
- fix(cli): say no answer from the terminal was recorded
  
  cemililik
  and
  claude
  committed
  bc55186
- docs(repo): fix ADR-0118's label and ADR-0120's escape after D64 round 2
  
  cemililik
  and
  claude
  committed
  4f25989
- fix(cli): prompt no later gate after a card closes under the user
  
  cemililik
  and
  claude
  committed
  cbe3906
- test(cli): pin the own-export swap at open and the legacy card's Enter
  
  cemililik
  and
  claude
  committed
  3b8e550
- fix(cli): give gate list's ids and status's attempt the one-line floor
  
  cemililik
  and
  claude
  committed
  37acc0f
- test(core): pin reconcile's per-run outbox re-read and its claim release
  
  cemililik
  and
  claude
  committed
  1570864
- docs(repo): close ADR-0120's approval escape and record D64 round 3
  
  cemililik
  and
  claude
  committed
  2d7f071
- fix(cli): clear a gate's pause when it resumes
  
  cemililik
  and
  claude
  committed
  cdb41ca
- test(cli): pin that the own-export check refuses what it never opens
  
  cemililik
  and
  claude
  committed
  e979f3d
- fix(cli): give gate's notices and gate list's empty line the one-line floor
  
  cemililik
  and
  claude
  committed
  d538599
- test(core): pin that reconcile leaves a young run before any claim
  
  cemililik
  and
  claude
  committed
  5410bbe
- docs(repo): show line-end whitespace and endings in ADR-0120's approvals
  
  cemililik
  and
  claude
  committed
  882a2ff
- test(cli): pin the own export's stat times and gate's resolved-id notice
  
  cemililik
  and
  claude
  committed
  90bb0d9
- docs(repo): keep ADR-0120's masks from hiding code and state CR LF files
  
  cemililik
  and
  claude
  committed
  673a5ea
- test(repo): pin gate.test.ts at 76 cases in the secrets controls
  
  cemililik
  and
  claude
  committed
  c461cd3
- docs(repo): state ADR-0120's approval escape as a starting set
  
  cemililik
  and
  claude
  committed
  2cc865c
- docs(repo): say the secrets controls pin 76 gate cases
  
  cemililik
  and
  claude
  committed
  d20d414
Commits on Nov 7, 2026
- fix(cli): start a gate card's cleanup notice only when the card is aborted
  
  cemililik
  and
  claude
  committed
  69e95d7
- test(cli): pin each own-export stat field without the filesystem clock
  
  cemililik
  and
  claude
  committed
  010b21c
- docs(core): say the re-read under the claim keeps a repair off a held run
  
  cemililik
  and
  claude
  committed
  38b7223
- docs(repo): say a card closed under the user parks the run's later gates
  
  cemililik
  and
  claude
  committed
  72dee66

Commits

Commits on Nov 4, 2026

Commits on Nov 5, 2026

Commits on Nov 6, 2026