AIPass
a2d84a78da
Merge pull request #506 from AIOSAI/work/system
...
feat(system): fix(drone): dynamic fork recovery message with actual repo/user info — closes #329
2026-05-03 09:46:57 -07:00
patrick and @devpulse
26c83b3f07
feat(system): style(drone): fix ruff format on pr_handler.py fork recovery
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-03 09:41:44 -07:00
patrick and @devpulse
a7214ed4ca
feat(system): fix(drone): dynamic fork recovery message with actual repo/user info — closes #329
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-03 09:39:44 -07:00
AIPass
0840dfe778
Merge pull request #505 from AIOSAI/work/system
...
fix(setup+cli): wire missing hooks (#498 ) + remove vestigial hooks/ dir (#497 )
2026-05-03 09:37:05 -07:00
patrick and @devpulse
607924c755
feat(system): fix(cli): remove vestigial hooks/ dir from aipass init scaffold — closes #497
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-03 09:35:48 -07:00
patrick and @devpulse
6839b1048a
feat(system): fix(setup): wire pre_edit_gate + SubagentStop hooks in setup.sh — closes #498
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-03 09:32:16 -07:00
AIPass
249b48e98b
Merge pull request #504 from AIOSAI/work/system
...
fix(setup): ensurepip check (#495 ) + git identity (#500 ) + secrets protection (#496 )
2026-05-03 09:30:24 -07:00
patrick and @devpulse
1d02f412f6
feat(system): fix(setup): protect ~/.secrets/ with permissions.deny + fix chmod on inner dir — closes #496
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-03 09:29:14 -07:00
patrick and @devpulse
c7bc27b7b8
feat(system): fix(setup): add ensurepip check ( #495 ) + git identity config ( #500 ) — closes #495 , closes #500
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-03 09:26:47 -07:00
patrick and @devpulse
a530c83a63
feat(system): fix(setup): add ensurepip check to prevent broken venv on Debian/Ubuntu — closes #495
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-03 08:57:18 -07:00
patrick and @memory
dd39cb6835
feat(memory): . fix(memory): fix embedder type error + update README date for seedgo 100%
...
Co-Authored-By: @memory <memory@aipass>
2026-05-02 23:42:38 -07:00
AIPass
5348ae6d81
Merge pull request #502 from AIOSAI/work/system
...
feat(system): feat(system): add settings terminology to global prompt, fix template registry IDs, add auto_watchdog hook
2026-05-02 23:33:08 -07:00
patrick and @devpulse
ccafca881d
feat(system): feat(system): add settings terminology to global prompt, fix template registry IDs, add auto_watchdog hook
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-02 23:26:35 -07:00
AIPass
d9b7c36a80
Merge pull request #501 from AIOSAI/work/system
...
feat(system): fix: untrack accidentally-committed .pyc files in devpulse_ops/__pycache__ + add *.bak to root .gitignore
2026-05-02 19:33:53 -07:00
patrick and @devpulse
5b398acff4
feat(system): fix: untrack accidentally-committed .pyc files in devpulse_ops/__pycache__ + add *.bak to root .gitignore
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-05-02 19:32:20 -07:00
AIPass
9a71137dda
Merge pull request #499 from AIOSAI/work/memory-rollover-fix
...
fix(memory): remove rollover from startup chain + add embedding deps
2026-05-02 19:05:30 -07:00
Patrick and Claude Opus 4.6
44bab11040
fix(memory): remove rollover from startup chain + add sentence-transformers dep
...
Two fixes:
1. Remove _run_memory_check() from trigger startup handler — rollover no
longer fires on every drone command. Rollover is now on-demand only
(drone @memory rollover) or via the watcher daemon. This eliminates the
noisy "Memory - Rollover Execution" banner from every drone invocation.
2. Add sentence-transformers>=2.0 to pyproject.toml [memory] extras — the
embedding subprocess was failing because torch/sentence-transformers
were missing from the dependency list. chromadb alone is insufficient;
the custom embed_subprocess.py requires sentence-transformers directly.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-05-02 18:55:15 -07:00
AIPass
33c7643a95
Merge pull request #494 from AIOSAI/work/memory
...
feat(memory): fix(rollover): v1 extractor skips files at exactly max_lines
2026-04-28 18:22:51 -07:00
AIPass
fbe5605d0d
Merge pull request #493 from AIOSAI/work/system
...
feat(system): fix(drone): add path containment validation on registry branch resolution — prevents ghost-branch RCE via malicious path field (issue #490 fix 2)
2026-04-28 18:22:39 -07:00
AIPass
84168ff872
Merge pull request #492 from AIOSAI/work/spawn
...
feat(spawn): fix(spawn): atomic registry writes + file locking + path containment (issue #490 )
2026-04-28 18:22:30 -07:00
AIOSAI and @memory
d2f820d982
feat(memory): fix(rollover): v1 extractor skips files at exactly max_lines
...
Co-Authored-By: @memory <memory@aipass>
2026-04-28 18:15:00 -07:00
AIOSAI and @devpulse
d75735c926
feat(system): fix(drone): add path containment validation on registry branch resolution — prevents ghost-branch RCE via malicious path field (issue #490 fix 2)
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-28 18:11:49 -07:00
AIOSAI and @spawn
80699f0e95
feat(spawn): fix(spawn): atomic registry writes + file locking + path containment (issue #490 )
...
Co-Authored-By: @spawn <spawn@aipass>
2026-04-28 18:07:43 -07:00
AIPass
b10b64750b
Merge pull request #491 from AIOSAI/work/system
...
feat(system): feat(system): fix(trigger): dead events + zombie handler + stale registry + per-branch disable + email check (DPLAN-0159)
2026-04-28 17:59:55 -07:00
AIOSAI and @devpulse
78b7fb6ac7
feat(system): feat(system): fix(trigger): dead events + zombie handler + stale registry + per-branch disable + email check (DPLAN-0159)
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-28 17:46:06 -07:00
AIPass
477e3a58ef
Merge pull request #489 from AIOSAI/work/trigger
...
feat(trigger): S117 stress test @trigger
2026-04-28 17:45:47 -07:00
AIPass
cd14807845
Merge pull request #487 from AIOSAI/work/system
...
feat(system): S117 stress test prax
2026-04-28 17:45:27 -07:00
AIPass
9e8cd235c2
Merge pull request #486 from AIOSAI/work/s117_ai_mail
...
S117 stress test @ai_mail
2026-04-28 17:45:17 -07:00
AIPass
e8d295fadc
Merge pull request #485 from AIOSAI/work/memory
...
feat(memory): S117 stress test memory
2026-04-28 17:45:07 -07:00
AIPass
ccd8472668
Merge pull request #484 from AIOSAI/work/cli
...
feat(cli): S117 stress test @cli
2026-04-28 17:44:57 -07:00
AIOSAI and @trigger
3405c7ee41
feat(trigger): fix(trigger): dead events + zombie handler + stale registry + per-branch disable + email check (DPLAN-0159)
...
Co-Authored-By: @trigger <trigger@aipass>
2026-04-27 01:02:31 -07:00
AIOSAI and @devpulse
4fd5bdec7f
feat(system): fix(watchdog): replace shell=True with shlex.split in schedule.py _run_command — prevents shell injection via user-influenced command strings (S117 security finding)
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-27 00:43:04 -07:00
AIOSAI and @trigger
05608a8b64
feat(trigger): S117 stress test @trigger
...
Co-Authored-By: @trigger <trigger@aipass>
2026-04-27 00:07:11 -07:00
AIOSAI and @spawn
92da1c07a2
feat(spawn): S117 stress test @spawn
...
Co-Authored-By: @spawn <spawn@aipass>
2026-04-27 00:06:43 -07:00
AIOSAI and @devpulse
c4008144c7
feat(system): S117 stress test prax
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-27 00:04:46 -07:00
AIOSAI and Claude Opus 4.6
f60725dfc4
test(ai_mail): S117 stress test findings
...
Honest self-review, security concerns, cross-branch observations,
and conversation summaries from the all-branch live-fire stress test.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-04-27 00:04:08 -07:00
AIOSAI and @memory
2d1a712f20
feat(memory): S117 stress test memory
...
Co-Authored-By: @memory <memory@aipass>
2026-04-27 00:04:02 -07:00
AIOSAI and @cli
321ae989c0
feat(cli): S117 stress test @cli
...
Co-Authored-By: @cli <cli@aipass>
2026-04-27 00:03:52 -07:00
AIOSAI and @devpulse
d11bc94ade
feat(system): fix(drone): mail view index bug — display order was reversed from array order
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-26 22:44:12 -07:00
AIPass
2f1ede44bb
Merge pull request #482 from AIOSAI/work/system
...
feat(system): fix: DPLAN-0157 pre-commit hook + DPLAN-0158 watchdog reply detection
2026-04-26 22:39:19 -07:00
AIPass
166b6013c0
Merge pull request #481 from AIOSAI/work/ai_mail_dplan0158
...
fix(ai_mail): DPLAN-0158 Phase 1 — explicit reply in daemon prompt
2026-04-26 22:39:14 -07:00
AIPass
ea7d0efcbf
Merge pull request #480 from AIOSAI/work/ai_mail
...
feat(ai_mail): DPLAN-0156 — inbox auto-purge
2026-04-26 22:39:08 -07:00
AIOSAI and @devpulse
930400ee38
feat(system): fix: DPLAN-0158 Phase 3 — watchdog JSONL stall detection + plan updates
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-26 22:35:33 -07:00
AIOSAI and @devpulse
5fda6e9b8f
feat(system): fix: DPLAN-0157 pre-commit hook + DPLAN-0158 watchdog reply detection
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-26 22:26:44 -07:00
AIOSAI and Claude Opus 4.6
0b73263fc6
fix(ai_mail): DPLAN-0158 Phase 1 — explicit reply instructions in daemon prompt
...
Replaced ambiguous "Send confirmation when done" with explicit
drone @ai_mail reply <id> command including the dispatch email ID
and sender address. Sanitizes interpolated metadata (ID must be
alnum ≤12, sender must match @word pattern). Fallback generic
instruction when ID is missing. 3 new tests.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-04-26 21:41:48 -07:00
AIOSAI and Claude Opus 4.6
63ab0005bb
feat(ai_mail): DPLAN-0156 — inbox auto-purge sweeps closed messages on every read/write
...
Safety net for messages marked closed by direct JSON edit instead of
drone @ai_mail close. _sweep_closed() in inbox_cleanup.py archives
closed messages to deleted/ and removes them from the inbox.
Wired into: mark_as_opened, mark_as_closed_and_archive (inbox_cleanup),
deliver_email_to_branch, deliver_to_inbox_file (delivery), and
load_inbox (inbox_ops). 8 new tests, 690 total pass.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-04-26 19:13:47 -07:00
AIPass
50a3827c8f
Merge pull request #479 from AIOSAI/work/system
...
feat(system): security: DPLAN-0155 Phase 5 — fix TOCTOU lock race in daemon.py + wake.py
2026-04-26 18:31:58 -07:00
AIOSAI and @devpulse
1c063bf236
feat(system): security: DPLAN-0155 — telegram dead code removed, api secrets-only cleanup
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-26 17:59:25 -07:00
AIOSAI
ec406f4aa4
Merge remote-tracking branch 'origin/main'
2026-04-26 17:59:15 -07:00
AIOSAI and @devpulse
41623391fa
feat(system): security: DPLAN-0155 Phase 5 — fix TOCTOU lock race in daemon.py + wake.py
...
Co-Authored-By: @devpulse <devpulse@aipass>
2026-04-26 17:33:34 -07:00