can1357 4c1793b9b7 fix(security): hardened cloud import attribution and comparison honesty ...

- Failed closed when cloud pulls could not verify the project origin.
- Re-verified configuration attribution on every cloud finding detail.
- Rejected non-repository-relative Codex bundle locations.
- Refused lineage comparisons against incomplete after-scans.
- Preserved diff and working-tree targets when adding path scopes.
- Logged post-publication output failures and recovered persisted status.
- Used Bun.SHA256 directly and reused pi-ai JWT decoding.
- Shortened exported paths in interactive output.

2026-07-30 17:24:07 +02:00

..

advisor

fix(advisor): capture model identity lazily and drop duplicated release notes

2026-07-30 02:01:03 +02:00

async

fix(cli): invalidated async deliveries by generation

2026-07-27 20:09:26 +00:00

auto-thinking

fix(coding-agent): cap the local classifier and keep the Low floor

2026-07-26 05:11:53 -03:00

autolearn

fix(coding-agent): stopped post-turn maintenance turns

2026-07-16 14:55:27 +00:00

autoresearch

fix(tui): handled Kitty vim navigation sequences

2026-07-14 18:08:23 +00:00

capability

fix(mcp): kept disable precedence and stable tool collision winners

2026-07-27 16:07:23 +02:00

cleanse

feat(coding-agent/cleanse): implemented cleanse command and workflow execution

2026-07-28 10:22:17 +02:00

cli

feat(coding-agent): enabled importing foreign sessions from claude and codex

2026-07-30 00:28:40 +02:00

collab

fix(collab): detach reconciled loader on idle

2026-07-29 23:08:57 +02:00

commands

feat(coding-agent): enabled importing foreign sessions from claude and codex

2026-07-30 00:28:40 +02:00

commit

feat(coding-agent-task): implemented agent-centric flat task structure

2026-07-11 13:44:04 +02:00

config

Merge PR #7048: feat(security): add OMP-native security scan subsystem (@kmccleary3301)

2026-07-30 17:11:06 +02:00

dap

fix(coding-agent): propagate caller cancellation from threads aggregation

2026-07-26 15:45:10 +02:00

debug

feat(coding-agent): compacted oversized sse payloads in debug buffer

2026-07-24 15:20:36 +02:00

discovery

chore: reformat + rewrite changelogs

2026-07-28 11:19:34 +02:00

edit

feat(typescript-edit-benchmark): introduced empirical edit mutation planning

2026-07-30 07:45:01 +02:00

eval

fix(coding-agent/eval): bypassed environment proxies for python bridge calls

2026-07-30 16:19:48 +02:00

exa

…

exec

feat(utils): implemented windows shell resolution for bash execution

2026-07-26 20:27:16 +02:00

export

feat(hashline): implemented clipboard operations in hashline engine

2026-07-30 07:21:43 +02:00

extensibility

fix(coding-agent): add createEditTool/createWriteTool to legacy pi shim

2026-07-30 14:36:10 +00:00

goals

feat(coding-agent/goals): replaced guided goal modal workflow with interview brief

2026-07-28 08:55:49 +02:00

hindsight

chore: reorg tests

2026-07-27 16:43:53 +02:00

internal-urls

fix(coding-agent): harden native security workflow

2026-07-29 20:05:57 -07:00

irc

fix(irc): scope mid-park send gate to the owning lifecycle

2026-07-16 01:40:17 +00:00

jsonrpc

…

launch

fix(launch): reject early replay worker exits

2026-07-29 23:08:21 +02:00

lib

fix(web-search): honored configured xai transport

2026-07-15 17:44:30 +00:00

live

chore: reorg tests

2026-07-27 16:43:53 +02:00

lsp

fix(coding-agent): harden native security workflow

2026-07-29 20:05:57 -07:00

markit

fix(coding-agent): handled inline image pdf delimiters

2026-07-04 12:18:06 +00:00

mcp

Merge remote-tracking branch 'refs/remotes/pr/6535' into prep/6535

2026-07-30 01:42:24 +02:00

memories

fix(memories): preserved learned.md structure across saves

2026-07-27 16:03:29 +02:00

memory-backend

fix(memory): synchronized live backend lifecycle

2026-07-23 19:52:09 +00:00

mnemopi

fix(memory): synchronized live backend lifecycle

2026-07-23 19:52:09 +00:00

modes

Merge remote-tracking branch 'origin/main' into feat/security-native

2026-07-29 23:26:22 -07:00

plan-mode

chore: reorg tests

2026-07-27 16:43:53 +02:00

prompts

fix(security): hardened cloud import attribution and comparison honesty

2026-07-30 17:24:07 +02:00

registry

chore: promoted vibe persistence changelog entry to unreleased

2026-07-23 18:16:02 +02:00

secrets

fix(secrets): stopped buffering single-dollar streamed text

2026-07-25 23:08:54 +00:00

security

fix(security): hardened cloud import attribution and comparison honesty

2026-07-30 17:24:07 +02:00

session

refactor: standardized editing syntax by removing copy and delete operations

2026-07-30 07:42:48 +02:00

slash-commands

fix(security): hardened cloud import attribution and comparison honesty

2026-07-30 17:24:07 +02:00

ssh

chore: reorg tests

2026-07-27 16:43:53 +02:00

stt

fix(stt): preserved nearest sherpa runtime

2026-07-26 11:18:31 +00:00

subprocess

isolate eval runtimes from terminal

2026-07-13 09:57:19 -04:00

task

Merge remote-tracking branch 'origin/main' into feat/security-native

2026-07-29 20:31:08 -07:00

tiny

fix(tui): prewarm tiny-title worker off the first-submit hot path

2026-07-24 03:48:43 +00:00

tools

Merge remote-tracking branch 'origin/main' into feat/security-native

2026-07-29 23:26:22 -07:00

tts

feat(coding-agent): added live session delegation with turn-based transcript display

2026-07-24 09:16:50 +02:00

tui

fix(tui): honor padded markdown width budgets

2026-07-28 07:41:59 +00:00

utils

docs(hashline): condensed and clarified instructions in prompt documentation

2026-07-30 07:21:44 +02:00

vibe

chore: reorg tests

2026-07-27 16:43:53 +02:00

web

Merge PR #6652: feat(ai): add Exa API key login (@will-bogusz)

2026-07-30 01:26:50 +02:00

cli-commands.ts

feat(coding-agent/cleanse): implemented cleanse command and workflow execution

2026-07-28 10:22:17 +02:00

cli.ts

fix(launch): isolate legacy xterm replay

2026-07-29 23:08:21 +02:00

config.ts

…

cursor-bridge-tools.ts

fix(cursor): build the pi_edit bridge independently of the session's provider

2026-07-30 01:43:02 +02:00

cursor.ts

fix: align merged branches with current type contracts

2026-07-30 02:01:03 +02:00

index.ts

…

main.ts

fix(coding-agent): tighten startup changelog contracts

2026-07-30 01:42:01 +02:00

priority.json

config(coding-agent): extended model priority lists

2026-06-27 04:34:39 +02:00

sdk.ts

Merge remote-tracking branch 'origin/main' into feat/security-native

2026-07-29 23:26:22 -07:00

startup-splash.ts

…

system-prompt.ts

feat(security): OMP-native security subsystem (planner handoff)

2026-07-29 18:47:51 -07:00

telemetry-export.ts

fix telemetry export signals

2026-07-17 05:29:46 +02:00

thinking.ts

Merge PR #6680: feat(coding-agent): add opt-in max ceiling for auto thinking (@everton-dgn)

2026-07-30 01:48:51 +02:00

workspace-tree.ts

…