Commit Graph
730 Commits
Author SHA1 Message Date
patrickand@devpulse 4a6d60ccc5 feat(system): fix(drone+memory): registry walk-up credential check + memory subprocess docs
- drone: skip mismatched registries during CWD walk-up instead of hard-failing (db55b6b, 44 LOC + 70 LOC tests). Fixes the orphan DEVPULSE_REGISTRY.json shadowing AIPASS_REGISTRY.json bug from S124.
- memory: README — document _get_memory_python() resolution chain (env override → memory/.venv/bin/python → sys.executable) accurately.

Both fixes from the S124 init-blast-radius incident triage.

Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-03 19:53:52 -07:00
AIPassandClaude Opus 4.6 db55b6b63a fix(drone): skip mismatched registries during walk-up instead of hard-failing
find_registry() now performs a lightweight credential check on each
candidate *_REGISTRY.json during the CWD walk-up. When a registry's
metadata.id conflicts with the nearest passport's registry_id, it is
skipped and the walk continues upward to find the correct registry.

Fixes the bug where an orphan DEVPULSE_REGISTRY.json inside a citizen's
tree caused RegistryMismatchError for all drone commands from devpulse CWD.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-05-03 18:28:08 -07:00
AIPass a2d84a78da Merge pull request #506 from AIOSAI/work/system
feat(system): fix(drone): dynamic fork recovery message with actual repo/user info — closes #329
2026-05-03 09:46:57 -07:00
patrickand@devpulse 26c83b3f07 feat(system): style(drone): fix ruff format on pr_handler.py fork recovery
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-03 09:41:44 -07:00
patrickand@devpulse a7214ed4ca feat(system): fix(drone): dynamic fork recovery message with actual repo/user info — closes #329
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-03 09:39:44 -07:00
AIPass 0840dfe778 Merge pull request #505 from AIOSAI/work/system
fix(setup+cli): wire missing hooks (#498) + remove vestigial hooks/ dir (#497)
2026-05-03 09:37:05 -07:00
patrickand@devpulse 607924c755 feat(system): fix(cli): remove vestigial hooks/ dir from aipass init scaffold — closes #497
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-03 09:35:48 -07:00
patrickand@devpulse 6839b1048a feat(system): fix(setup): wire pre_edit_gate + SubagentStop hooks in setup.sh — closes #498
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-03 09:32:16 -07:00
AIPass 249b48e98b Merge pull request #504 from AIOSAI/work/system
fix(setup): ensurepip check (#495) + git identity (#500) + secrets protection (#496)
2026-05-03 09:30:24 -07:00
patrickand@devpulse 1d02f412f6 feat(system): fix(setup): protect ~/.secrets/ with permissions.deny + fix chmod on inner dir — closes #496
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-03 09:29:14 -07:00
patrickand@devpulse c7bc27b7b8 feat(system): fix(setup): add ensurepip check (#495) + git identity config (#500) — closes #495, closes #500
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-03 09:26:47 -07:00
patrickand@devpulse a530c83a63 feat(system): fix(setup): add ensurepip check to prevent broken venv on Debian/Ubuntu — closes #495
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-03 08:57:18 -07:00
patrickand@memory dd39cb6835 feat(memory): . fix(memory): fix embedder type error + update README date for seedgo 100%
Co-Authored-By: @memory <memory@aipass>
2026-05-02 23:42:38 -07:00
AIPass 5348ae6d81 Merge pull request #502 from AIOSAI/work/system
feat(system): feat(system): add settings terminology to global prompt, fix template registry IDs, add auto_watchdog hook
2026-05-02 23:33:08 -07:00
patrickand@devpulse ccafca881d feat(system): feat(system): add settings terminology to global prompt, fix template registry IDs, add auto_watchdog hook
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-02 23:26:35 -07:00
AIPass d9b7c36a80 Merge pull request #501 from AIOSAI/work/system
feat(system): fix: untrack accidentally-committed .pyc files in devpulse_ops/__pycache__ + add *.bak to root .gitignore
2026-05-02 19:33:53 -07:00
patrickand@devpulse 5b398acff4 feat(system): fix: untrack accidentally-committed .pyc files in devpulse_ops/__pycache__ + add *.bak to root .gitignore
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-02 19:32:20 -07:00
AIPass 9a71137dda Merge pull request #499 from AIOSAI/work/memory-rollover-fix
fix(memory): remove rollover from startup chain + add embedding deps
2026-05-02 19:05:30 -07:00
PatrickandClaude Opus 4.6 44bab11040 fix(memory): remove rollover from startup chain + add sentence-transformers dep
Two fixes:

1. Remove _run_memory_check() from trigger startup handler — rollover no
   longer fires on every drone command. Rollover is now on-demand only
   (drone @memory rollover) or via the watcher daemon. This eliminates the
   noisy "Memory - Rollover Execution" banner from every drone invocation.

2. Add sentence-transformers>=2.0 to pyproject.toml [memory] extras — the
   embedding subprocess was failing because torch/sentence-transformers
   were missing from the dependency list. chromadb alone is insufficient;
   the custom embed_subprocess.py requires sentence-transformers directly.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-05-02 18:55:15 -07:00
AIPass 33c7643a95 Merge pull request #494 from AIOSAI/work/memory
feat(memory): fix(rollover): v1 extractor skips files at exactly max_lines
2026-04-28 18:22:51 -07:00
AIPass fbe5605d0d Merge pull request #493 from AIOSAI/work/system
feat(system): fix(drone): add path containment validation on registry branch resolution — prevents ghost-branch RCE via malicious path field (issue #490 fix 2)
2026-04-28 18:22:39 -07:00
AIPass 84168ff872 Merge pull request #492 from AIOSAI/work/spawn
feat(spawn): fix(spawn): atomic registry writes + file locking + path containment (issue #490)
2026-04-28 18:22:30 -07:00
AIOSAIand@memory d2f820d982 feat(memory): fix(rollover): v1 extractor skips files at exactly max_lines
Co-Authored-By: @memory <memory@aipass>
2026-04-28 18:15:00 -07:00
AIOSAIand@devpulse d75735c926 feat(system): fix(drone): add path containment validation on registry branch resolution — prevents ghost-branch RCE via malicious path field (issue #490 fix 2)
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-28 18:11:49 -07:00
AIOSAIand@spawn 80699f0e95 feat(spawn): fix(spawn): atomic registry writes + file locking + path containment (issue #490)
Co-Authored-By: @spawn <spawn@aipass>
2026-04-28 18:07:43 -07:00
AIPass b10b64750b Merge pull request #491 from AIOSAI/work/system
feat(system): feat(system): fix(trigger): dead events + zombie handler + stale registry + per-branch disable + email check (DPLAN-0159)
2026-04-28 17:59:55 -07:00
AIOSAIand@devpulse 78b7fb6ac7 feat(system): feat(system): fix(trigger): dead events + zombie handler + stale registry + per-branch disable + email check (DPLAN-0159)
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-28 17:46:06 -07:00
AIPass 477e3a58ef Merge pull request #489 from AIOSAI/work/trigger
feat(trigger): S117 stress test @trigger
2026-04-28 17:45:47 -07:00
AIPass cd14807845 Merge pull request #487 from AIOSAI/work/system
feat(system): S117 stress test prax
2026-04-28 17:45:27 -07:00
AIPass 9e8cd235c2 Merge pull request #486 from AIOSAI/work/s117_ai_mail
S117 stress test @ai_mail
2026-04-28 17:45:17 -07:00
AIPass e8d295fadc Merge pull request #485 from AIOSAI/work/memory
feat(memory): S117 stress test memory
2026-04-28 17:45:07 -07:00
AIPass ccd8472668 Merge pull request #484 from AIOSAI/work/cli
feat(cli): S117 stress test @cli
2026-04-28 17:44:57 -07:00
AIOSAIand@trigger 3405c7ee41 feat(trigger): fix(trigger): dead events + zombie handler + stale registry + per-branch disable + email check (DPLAN-0159)
Co-Authored-By: @trigger <trigger@aipass>
2026-04-27 01:02:31 -07:00
AIOSAIand@devpulse 4fd5bdec7f feat(system): fix(watchdog): replace shell=True with shlex.split in schedule.py _run_command — prevents shell injection via user-influenced command strings (S117 security finding)
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-27 00:43:04 -07:00
AIOSAIand@trigger 05608a8b64 feat(trigger): S117 stress test @trigger
Co-Authored-By: @trigger <trigger@aipass>
2026-04-27 00:07:11 -07:00
AIOSAIand@spawn 92da1c07a2 feat(spawn): S117 stress test @spawn
Co-Authored-By: @spawn <spawn@aipass>
2026-04-27 00:06:43 -07:00
AIOSAIand@devpulse c4008144c7 feat(system): S117 stress test prax
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-27 00:04:46 -07:00
AIOSAIandClaude Opus 4.6 f60725dfc4 test(ai_mail): S117 stress test findings
Honest self-review, security concerns, cross-branch observations,
and conversation summaries from the all-branch live-fire stress test.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-27 00:04:08 -07:00
AIOSAIand@memory 2d1a712f20 feat(memory): S117 stress test memory
Co-Authored-By: @memory <memory@aipass>
2026-04-27 00:04:02 -07:00
AIOSAIand@cli 321ae989c0 feat(cli): S117 stress test @cli
Co-Authored-By: @cli <cli@aipass>
2026-04-27 00:03:52 -07:00
AIOSAIand@devpulse d11bc94ade feat(system): fix(drone): mail view index bug — display order was reversed from array order
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-26 22:44:12 -07:00
AIPass 2f1ede44bb Merge pull request #482 from AIOSAI/work/system
feat(system): fix: DPLAN-0157 pre-commit hook + DPLAN-0158 watchdog reply detection
2026-04-26 22:39:19 -07:00
AIPass 166b6013c0 Merge pull request #481 from AIOSAI/work/ai_mail_dplan0158
fix(ai_mail): DPLAN-0158 Phase 1 — explicit reply in daemon prompt
2026-04-26 22:39:14 -07:00
AIPass ea7d0efcbf Merge pull request #480 from AIOSAI/work/ai_mail
feat(ai_mail): DPLAN-0156 — inbox auto-purge
2026-04-26 22:39:08 -07:00
AIOSAIand@devpulse 930400ee38 feat(system): fix: DPLAN-0158 Phase 3 — watchdog JSONL stall detection + plan updates
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-26 22:35:33 -07:00
AIOSAIand@devpulse 5fda6e9b8f feat(system): fix: DPLAN-0157 pre-commit hook + DPLAN-0158 watchdog reply detection
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-26 22:26:44 -07:00
AIOSAIandClaude Opus 4.6 0b73263fc6 fix(ai_mail): DPLAN-0158 Phase 1 — explicit reply instructions in daemon prompt
Replaced ambiguous "Send confirmation when done" with explicit
drone @ai_mail reply <id> command including the dispatch email ID
and sender address.  Sanitizes interpolated metadata (ID must be
alnum ≤12, sender must match @word pattern).  Fallback generic
instruction when ID is missing.  3 new tests.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-26 21:41:48 -07:00
AIOSAIandClaude Opus 4.6 63ab0005bb feat(ai_mail): DPLAN-0156 — inbox auto-purge sweeps closed messages on every read/write
Safety net for messages marked closed by direct JSON edit instead of
drone @ai_mail close.  _sweep_closed() in inbox_cleanup.py archives
closed messages to deleted/ and removes them from the inbox.

Wired into: mark_as_opened, mark_as_closed_and_archive (inbox_cleanup),
deliver_email_to_branch, deliver_to_inbox_file (delivery), and
load_inbox (inbox_ops).  8 new tests, 690 total pass.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-26 19:13:47 -07:00
AIPass 50a3827c8f Merge pull request #479 from AIOSAI/work/system
feat(system): security: DPLAN-0155 Phase 5 — fix TOCTOU lock race in daemon.py + wake.py
2026-04-26 18:31:58 -07:00
AIOSAIand@devpulse 1c063bf236 feat(system): security: DPLAN-0155 — telegram dead code removed, api secrets-only cleanup
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-26 17:59:25 -07:00