v1.67.0.0 fix: the tracker wave — XProtect self-heal, complete installs, brain-sync integrity, 31 community PRs credited - #2604

Merged

garrytan merged 127 commits into

mainfrom

garrytan/fix-wave-issues-prs

Aug 17, 2026

Commits on Aug 16, 2026

fix(test): host-config goldens self-provision .agents/.factory artifacts

garrytan
and
claude
committed
7ab2713
fix(test): exempt the live repo tree from hermetic-wiring's operator-~/.claude ban

authored and
garrytan
committed
cb8c79a
fix(gen-skill-docs): quote YAML inline scalars containing '...' (Bun strict parser breaks on bare ellipsis)

authored and
garrytan
committed
ba979db
fix(gen-skill-docs): throw when a template contains {{PREAMBLE}} twice

garrytan
and
claude
committed
480ebe4
fix(test): classify catalog-trim.test.ts as tree-mutating

garrytan
and
claude
committed
7ed17bf
fix(test): prepush hook test builds PATH with a POSIX-only separator

authored and
garrytan
committed
890fcac
fix(artifacts): sync the decision store, which no allowlist glob matched

source-utsho
authored and
garrytan
committed
de670f6
fix(windows): resolve the project slug natively when gstack-slug cannot spawn

source-utsho
authored and
garrytan
committed
dc86570
fix(security): guard brain-sync arithmetic against injected .brain-last-pull; sanitize _GBRAIN_HOST

committed
69c1b3d
fix(sync): run gstack-brain-sync through bash, not cmd.exe, on Windows

ShahriarLak
authored and
garrytan
committed
ea780fe
fix(gbrain): quote cmd.exe arguments at a single gbrain invocation seam

garrytan
and
claude
committed
4047e52
fix(brain-sync): classify queue entries, rewrite surgically, re-push stranded commits

garrytan
and
claude
committed
184cf84
fix(gbrain): make --full do a full code walk, not a delta one

ShahriarLak
authored and
garrytan
committed
4f5e351
fix(brain-cache): honest 'missing' instead of fabricated-empty digests on gbrain failure

authored and
garrytan
committed
c024a5b
fix(test): give the schema-mismatch rebuild test a load-proof budget

garrytan
and
claude
committed
c2cdf65
fix(memory-ingest): parse the current Codex response_item rollout shape

garrytan
and
claude
committed
00d0115
fix(test): refresh codex/factory ship goldens from post-#2588 regeneration

garrytan
and
claude
committed
9df6015
fix(make-pdf): boolean flags no longer swallow the next positional argument

garrytan
and
claude
committed
a118fd0
fix(repo-mode): probe GNU stat before BSD so Git Bash stops crashing

garrytan
and
claude
committed
2c07418
fix(retro): point the prior-retros context query at files /retro actually writes

garrytan
and
claude
committed
bab1923
fix(sync-gbrain): remove the capability-check page file left in the user's repo

garrytan
and
claude
committed
0f70ea8
docs(browse): warn that hover scrolls and the daemon tab persists across sessions

garrytan
and
claude
committed
9cd1e87
fix(gitattributes): pin *.txt to LF

authored and
garrytan
committed
1a1dab2
fix(setup): install every skill runtime asset for the Claude host

garrytan
and
claude
committed
0f38fee
fix(setup): alias skills install as rewritten copies, never symlinks

garrytan
and
claude
committed
663aca3
fix(setup): Windows re-runs refresh installed skills for codex/factory/opencode hosts

garrytan
and
claude
committed
52006fe
fix(uninstall): remove real-directory skill installs, gated on provenance

garrytan
and
claude
committed
c842468
feat(setup): wire --host cursor through the full install path

committed
2be9bd0
fix(settings): include command in add-event dedup key (#2382)

authored and
garrytan
committed
1dbed2c
fix(setup): render the gbrain :user variant to an out-dir — global installs stay git-clean

garrytan
and
claude
committed
9af589b
fix(redact): close the remaining #1946 fail-opens — detection coverage + one-time consent

garrytan
and
claude
committed
9c0de5f
feat(hooks): Stop hook closes dangling timeline entries — fail-open

garrytan
and
claude
committed
4d0e7b7
ios-qa: guard DebugBridgeTouch.m on DEBUG, not just TARGET_OS_IOS

authored and
garrytan
committed
ecfd9af
fix(ios-qa): bridges search front-most presented content first

committed
e20c29f
fix(setup-gbrain): invoke gstack-memory-ingest/gstack-gbrain-sync via bun run + .ts

committed
d889453
fix(test): update four main-side assertions to the T3 installer contracts

garrytan
and
claude
committed
5b65f91
fix: whitelist engine-locked at all three gbrain-usable gates (#2456)

committed
f9f3c98
fix: detect bearer-token thin clients via host MCP registration (#2520)

garrytan
and
claude
committed
ce4a7bb
fix: resolve GBRAIN_HOME with gbrain's parent-dir semantics (#2521)

garrytan
and
claude
committed
5854d12
fix: read project-scoped MCP registrations in gbrain detection (#2499)

garrytan
and
claude
committed
acc354f
fix: /sync-gbrain respects an existing valid .gbrain-source pin (#2417)

committed
bfa579d
fix: gstack-gbrain-install --dry-run no longer requires the network (#2540)

committed
c7faef8
feat: accept 3-digit semver + package.json version sources (#2501)

committed
d7ab20a
fix: write/repair sync npm lockfiles' version fields (#2567)

committed
c33b371
feat: subdirectory manifests + npm-valid version mirror (#2531)

committed
7b5fdab
feat: git-based version allocator when the PR queue is unreachable (#2545)

committed
da0e28e
fix: version-bump honors the .gstack/version-path pin in versionRel (#2462)

garrytan
and
claude
committed
909a9e9
fix: diff-scope glob coverage, honest exit contract, dirty-tree visibility (#2526, #2455, #2299)

garrytan
and
claude
committed
73cf0ed
fix(redact-prepush): don't re-scan commits a catch-up merge brought in

committed
4e055ca
fix(redact): parcel IDs are not phone numbers

committed
4cc19e4
test: prove the rebased force-push shape is scanned correctly (#2573)

garrytan
and
claude
committed
45fd8e2
fix(test): ratchet four skeleton-size caps for the wave's preamble growth

garrytan
and
claude
committed
ca8ee4b
docs(todos): file the v1.67 fix-wave deferrals + ZeroEntropy sunset deadline

garrytan
and
claude
committed
3c04178
deps(browse): bump playwright + playwright-core to 1.62.1 (P0 #2554 vehicle)

garrytan
and
claude
committed
2851535
fix(browse): XProtect launch-kill self-heal — classify, quarantine-clear, bounded reinstall (P0 #2554)

garrytan
and
claude
committed
822de7d
fix(browse): daemon owns signal policy — handleSIG*:false at launch sites + SIGHUP shutdown (#2220)

garrytan
and
claude
committed
25ccda9
fix(browse): absorb #2414 residuals — EPERM-alive liveness + Windows-dead test tripwires (re-derived)

committed
b3a2717
fix(browse): isProcessAlive uses signal-0 on every platform — no more tasklist probe (#1952)

garrytan
and
claude
committed
7171f10
fix(browse): windowsHide sweep — flag every residual child_process site + full-census tripwire (#2160, #2415)

garrytan
and
claude
committed
7686eb2
fix(browse): fail-fast busy-daemon semantics — never auto-kill an alive pid, add --force-restart (#2219)

garrytan
and
claude
committed
e2f70f1
fix(browse): `stop` on a dead daemon is success — never boots a daemon to stop it (#2254)

garrytan
and
claude
committed
5a6dd6b
fix(upgrade): /gstack-upgrade stops a stale daemon — deferring to a busy one (#2551)

garrytan
and
claude
committed
908c5a6
fix(browse): terminal-agent allocates from the fixed port scan range, not port:0 (#2314)

garrytan
and
claude
committed
0d4d554
fix(browse): capture daemon stdout/stderr to browse-daemon.log + Windows polyfill spawn fixes (re-derived from #2461)

committed
c4e2233
fix: raise gbrain version-probe timeout to 10s on Windows

authored and
garrytan
committed
af23375
fix(browse): remove the dead security shield + unfed /health.security (re-derived from #2557)

committed
f4e84b4
fix(browse): capture browser-skill subprocess output via temp files, not pipes (core of #2559)

committed
be66d4f
feat(browse): allow Emulation.setEmulatedMedia on the CDP allowlist (re-derived from #2419)

committed
0cbaead
fix(browse): create node bundle output directory

ming1523
authored and
garrytan
committed
994b5f5
fix(deps): bun-patch playwright-core 1.62.1 — windowsHide at launch + taskkill (#2160, #1989)

garrytan
and
claude
committed
436adb7
fix(preamble): probe AGENTS.md for skill routing; team-init resolves GSTACK_ROOT (#2500)

committed
95b66b5
fix(resolvers): empty find must not fall through to cwd (#2483)

committed
08bff7e
fix(codex): retire deprecated web-search flag behind one CODEX_WEB_SEARCH_FLAG constant (#2525)

garrytan
and
claude
committed
a9ca914
fix(question-tuning): interpolate the absolute question-registry path (#2489)

garrytan
and
claude
committed
96c22cb
fix(resolvers): slug-canonical branch form in file-path positions (#2550, #1851)

committed
a8d9cf9
fix(ship): review fix loop stays in one invocation, bounded at 3 cycles (#2391)

garrytan
and
claude
committed
63e2b7a
feat(codex): model round-trip probe — an unusable configured model fails fast with guidance (#2477)

garrytan
and
claude
committed
73c96f9
fix(review): skip nested codex spawns when already running under a Codex host (#2519)

garrytan
and
claude
committed
ae47c29
fix(build): convert MSYS paths for Bun in the Windows server-bundle build (#2452)

committed
504409d
fix(test): update four main-side gen-skill-docs assertions to the T6 contracts

garrytan
and
claude
committed
0f6e471
fix(sync-gbrain): dream pack-capability WARN anchors to the graph phase

garrytan
and
claude
committed
87c2583
fix(setup): install office-hours into the external-host runtime roots

garrytan
and
claude
committed
f0f2838
fix(gbrain-install): name the real fix when an npm-installed bun breaks the shim

garrytan
and
claude
committed
e5610e4
docs(ios-qa): document the bridge compatibility preflight and non-SwiftPM fallback

committed
f8eecd4
fix(deps): force adm-zip past CVE-2026-39244 via an override

committed
74ddc7a
deps: remove unused puppeteer-core; bump transformers/marked/socks

garrytan
and
claude
committed
8abf7cf
chore(deps): bump the github-actions group across 1 directory with 10 updates

dependabot[bot]
authored and
garrytan
committed
a19cdd6
fix(test): scope rendered-output tripwires to repo sources; stop cdp-e2e's env leak

garrytan
and
claude
committed
4da5be2
fix(test): honest budget for the suite's one headed persistent-context launch

garrytan
and
claude
committed
fb66780
fix(test): assemble redact fixtures at runtime — the guard caught its own wave

garrytan
and
claude
committed
a2c1dff
fix(test): sync ios-qa fixture mirrors with the #2585 DEBUG-guard templates

garrytan
and
claude
committed
54ca64b
fix(slug): env-override runs never persist to the cwd cache; cache is GSTACK_HOME-aware

garrytan
and
claude
committed
5af4a03
fix(test): pin GSTACK_HOME in the slug walk-up cache tests

garrytan
and
claude
committed
bd0cdbb
fix(test): the cache-hygiene test strips ambient GSTACK_PROJECT_SLUG

garrytan
and
claude
committed
415a866
Merge remote-tracking branch 'origin/main' into garrytan/fix-wave-issues-prs
garrytan
committed
820b3cc
fix(test): ratchet ship's skeleton cap for the v1.66.1 merge union

garrytan
and
claude
committed
8a4f4dc
fix(brain-sync): throttle + bound the detector push; empty-queue fast path

garrytan
and
claude
committed
4bc5b4c
fix(version-bump): JSON version-paths get the npm translation; honest recovery messages

garrytan
and
claude
committed
65fd3e8
fix(extension): remove the orphaned security-banner block; repair two dead CSS tokens

garrytan
and
claude
committed
dcc6e9e
fix(brain-sync): detector pushes only when ALL unpushed commits are its own; lock released on every exit

garrytan
and
claude
committed
6bcd2dd
fix(version-bump): version-path and package-json-path pins cannot escape the repository

garrytan
and
claude
committed
e86dcd6
fix(browse): port allocator range actually stays below the ephemeral floor; terminal-agent retries a raced bind

garrytan
and
claude
committed
c10a973
fix(codex-probe): bash-native watchdog when no timeout binary exists; negative-cache the deterministic model 400

garrytan
and
claude
committed
998aeb8
fix(browse): xprotect heal resolves the install root via os.homedir and keeps guidance on a failed retry

garrytan
and
claude
committed
6430197
fix(make-pdf): --strict and --confidential join BOOLEAN_FLAGS; the guard test derives the set from source

garrytan
and
claude
committed
f808782
docs(todos): file the v1.67 adversarial-review residuals + coverage-audit test-gap backlog

garrytan
and
claude
committed
2f65558
v1.67.0.0: version bump (MINOR — full-tracker fix wave, pre-approved)

garrytan
and
claude
committed
160c73c
docs(changelog): v1.67.0.0 release summary + itemized changes with contributor credits

garrytan
and
claude
committed
e7c464e
docs(todos): mark the 2026-08-14 tracker-audit waves shipped in v1.67; re-file the four residuals

garrytan
and
claude
committed
166ac2c
fix(uninstall): provenance-gate the shape-2 and cursor sweeps; document the alias-name coupling

garrytan
and
claude
committed
4a95ce6
fix(redact): env.kv stops flagging cacheKey-style names; prepush exclusion scoped to the push remote

garrytan
and
claude
committed
412ad5c
fix(browse): honest probe budget, bounded daemon log, single refusal source, liveness + reinstall coverage

garrytan
and
claude
committed
aa6c738
fix(hooks): timeline Stop hook reads a 256KB tail instead of the whole file

garrytan
and
claude
committed
45b7298
fix(setup): Windows runtime-asset copies prune nested gitignored build output

garrytan
and
claude
committed
2f8638a
fix(upgrade): migrations see the real install dir; stash can no longer resurrect stale renders

garrytan
and
claude
committed
68006e2
fix(browse): stop --force-restart kills the live daemon directly instead of booting a fresh one

garrytan
and
claude
committed
a5b6522
fix(hooks): timeline repair counts started vs completed per key instead of set-masking

garrytan
and
claude
committed
8c1192d
fix(setup): Windows refresh bypass no longer deletes a user's own skill dirs

garrytan
and
claude
committed
77374d1
fix(render): a failed brain-aware render can no longer vanish the installed skill set

garrytan
and
claude
committed
594ecf8
test+docs: codex probe cache invalidation coverage, make-pdf --no-* structural pin, file the review-batch deferrals

garrytan
and
claude
committed
084e2ed
fix(test): package.json version check accepts the decision-11 npm translation

garrytan
and
claude
committed
730327e
docs: sync project documentation with the v1.67.0.0 fix wave

garrytan
and
claude
committed
8cc379b
docs(browse): findAvailablePort comment matches the 49151 range cap

garrytan
and
claude
committed
415beed
fix(ci-image): the dependency layer carries patches/ — bun install needs the patch files the lock declares

garrytan
and
claude
committed
fe20340
fix(codex-probe): cache signature uses GNU-first stat with numeric validation

garrytan
and
claude
committed
49c1fed
fix(test): first cross-platform run of the wave's tests — Linux tmp portability + Windows-lane truthfulness

garrytan
and
claude
committed
4c335c9
fix(ci-image): stage patches/ into the narrow build context in all three workflows

garrytan
and
claude
committed
85fbd00