Repository navigation

Prepare 1.7.10: preserve historical memory and repair hosted client flows - #270

Merged

Coding-Dev-Tools merged 52 commits into

mainfrom

codex/release-1-7-10-reconciled

Oct 25, 2026

Merged

Prepare 1.7.10: preserve historical memory and repair hosted client flows#270
Coding-Dev-Tools merged 52 commits into
mainfrom
codex/release-1-7-10-reconciled

Commits on Oct 14, 2026
- feat(security): add fail-closed host file protection engine and Command Code hook
  Coding-Dev-Tools
  committed
  7be1c90
Commits on Oct 19, 2026
Commits on Oct 20, 2026
- Fix policy aliases and legacy hook upgrades
  Codex Release Audit
  committed
  ffaff5b
- Refresh offline evidence for policy and installer fixes
  Codex Release Audit
  committed
  c050d73
- Pin README evidence links to the fresh source commit
  Codex Release Audit
  committed
  a337adc
- Align PyPI README contract with immutable evidence links
  Codex Release Audit
  committed
  d541828
- release: complete 1.7.10 changelog, pin file-protection link, drop pip cache from publish jobs
  
  ArtificialSight
  and
  claude
  committed
  76b6d02
- security: make the Command Code file guard enforce real tool ids and fail closed; linear Spec Studio heading regex
  
  ArtificialSight
  and
  claude
  committed
  859bdc9
- core: hydrate browse versions, reject empty supersede intervals, skip closure backfill on current schema
  
  ArtificialSight
  and
  claude
  committed
  dae4566
- core: report the closure observation limit as a caller error (ValueError + IntegrityError subclass)
  
  ArtificialSight
  and
  claude
  committed
  2d8cfc7
- docs: list eval.evidence_contracts in the AGENTS.md gate instead of a duplicate spec_crawl line
  
  ArtificialSight
  and
  claude
  committed
  7370b6c
- security: deny unverifiable Windows file-guard targets (device, UNC, alternate data streams)
  
  ArtificialSight
  and
  claude
  committed
  38e779b
- docs: note the file guard's canonical tool ids and Windows denials in the 1.7.10 changelog
  
  ArtificialSight
  and
  claude
  committed
  8f50b4f
- Refresh offline evidence for the release-review fixes
  
  ArtificialSight
  and
  claude
  committed
  75ed192
- Pin README evidence links to the release-review evidence commit
  
  ArtificialSight
  and
  claude
  committed
  4f1ab1f
Commits on Oct 21, 2026
- fix(pi): raise the hono override to 4.13.13 for GHSA-5r4p-p66f-jhc7
  
  ArtificialSight
  and
  claude
  committed
  d9d7c47
Commits on Oct 23, 2026
- fix(history): bound why/timeline candidate scanning to one window
  opencode-agent
  committed
  9ff19e5
- fix(dashboard): only auto-issue the loopback session on tokenless instances
  opencode-agent
  committed
  e346936
- fix(sync): reserve closure capacity for locally authored observations
  opencode-agent
  committed
  38b162f
- fix(sources): reject UNC and device roots before any resolution or stat
  opencode-agent
  committed
  c819962
- fix(file-guard): fail closed on unverifiable targets and tool-id variants
  opencode-agent
  committed
  4714e60
- test(release): bind artifact checks to the candidate version and manifest
  opencode-agent
  committed
  69021d4
- fix(sources): stop treating Windows creation time as a content change
  opencode-agent
  committed
  0a13cea
- docs: record the 1.7.10 review fixes and refresh the offline evidence
  opencode-agent
  committed
  9d0c61e
- docs: pin the README evidence links to the refreshed artifact commit
  opencode-agent
  committed
  dd15bd1
- fix(history): annotate the fallback argument list for the type gate
  opencode-agent
  committed
  6f06016
- docs: regenerate the offline evidence after the history type fix
  opencode-agent
  committed
  f0c7f2a
- docs: re-pin the README evidence links to the regenerated artifact commit
  opencode-agent
  committed
  5a22f9d
- docs: point the benchmark reproduction commands at the current artifact
  opencode-agent
  committed
  9b059c6
- docs: pin the README evidence links to the corrected reproduction commands
  opencode-agent
  committed
  790f159
- test(closure): cover the empty-interval supersession guard
  opencode-agent
  committed
  b805c92
- fix(dashboard): keep the one-shot URL token until the browser exchange runs
  opencode-agent
  committed
  edc1741
- ci: refresh the Pi audit lockfile for the ip-address advisory
  opencode-agent
  committed
  bd4c54e
- Harden memory concurrency, isolate MCP worker execution, and block Windows UNC path leaks
  Coding-Dev-Tools
  committed
  5bb2895
- Pin documentation links and contract tests to release commit 5bb28950
  Coding-Dev-Tools
  committed
  218efb8
- test(sources): cover whitespace-prefixed UNC and device paths
  opencode-agent
  committed
  8594488
- docs: describe the raw-path UNC rule across every local source surface
  opencode-agent
  committed
  2386cf9
- test(sources): cover UNC vault paths before resolution
  opencode-agent
  committed
  bae3acb
- docs: keep the vault-path sentence inside the public narrative boundary
  opencode-agent
  committed
  8da97e6
- docs: state the semantic-arm cost of history ranking
  opencode-agent
  committed
  28b1915
Commits on Oct 24, 2026
- fix(auth): treat a present-but-blank API token as configured
  opencode-agent
  committed
  85a67c9
- docs: regenerate the offline evidence after the token-gating fix
  opencode-agent
  committed
  9a46361
- docs: pin the README evidence links to the regenerated artifact commit
  opencode-agent
  committed
  79b0502
- ci(release): make signed full-product qualification opt-in
  claude
  committed
  0c7cfd3
- fix(install_cc_hook): keep the operator's key order and sync the rename
  claude
  committed
  9ade4df
- ci: run the suite with pytest-xdist and raise the coverage floor to 80
  claude
  committed
  b3c1598
Commits on Oct 25, 2026

Commits

Commits on Oct 14, 2026

Commits on Oct 19, 2026

Commits on Oct 20, 2026

Commits on Oct 21, 2026

Commits on Oct 23, 2026

Commits on Oct 24, 2026

Commits on Oct 25, 2026