Martin Vogel 62821375c4 fix: harden daemon release paths and verification ...

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-07-24 16:08:42 +02:00

..

ci

fix: deliver the static -portable linux binary on all install/update paths

2026-06-09 11:36:00 +02:00

git-hooks

Adopt the Developer Certificate of Origin for all commits

2026-06-12 14:31:55 +02:00

hooks

Add time-bomb + MCP file read audit, tracked pre-commit hooks

2026-03-21 16:43:48 +01:00

audit-grammar-security.sh

Add 89 new tree-sitter grammars (66 to 155 languages)

2026-04-15 21:28:51 +02:00

audit-license-provenance.py

Run the gate self-test and provenance audit in the security workflow

2026-06-12 13:24:07 +02:00

benchmark-index.sh

Fix C++ SEGV: NULL deref in LSP type resolver on large header files

2026-03-26 16:19:10 +01:00

benchmark-search-graph.sh

fix(scripts): use /usr/bin/env bash shebangs (NixOS has no /bin/bash)

2026-07-03 20:11:49 +02:00

build.sh

daemon: permanent lifecycle, daemon-backed CLI/hooks, real-Windows hardening, long-path launcher transactions

2026-07-21 15:32:15 +02:00

check-dco.sh

Adopt the Developer Certificate of Origin for all commits

2026-06-12 14:31:55 +02:00

check-lsp-originality.sh

chore(lsp): add Perl reference to originality-check manifest

2026-07-09 23:43:41 +02:00

check-no-test-skips.sh

Forbid test skips and convert existing skips to hard failures

2026-06-05 21:53:25 +02:00

check-nolint-whitelist.sh

fix(scripts): use /usr/bin/env bash shebangs (NixOS has no /bin/bash)

2026-07-03 20:11:49 +02:00

clean.sh

daemon: permanent lifecycle, daemon-backed CLI/hooks, real-Windows hardening, long-path launcher transactions

2026-07-21 15:32:15 +02:00

clone-bench-repos.sh

Cross-service communication discovery + RAM-first incremental indexing

2026-03-28 13:59:42 +01:00

embed-frontend.sh

fix(scripts): use /usr/bin/env bash shebangs (NixOS has no /bin/bash)

2026-07-03 20:11:49 +02:00

env.sh

perf(ci): verified compiler cache for test and smoke legs, local and CI

2026-07-18 20:51:56 +02:00

extract_nomic_vectors.py

Parallelize post-passes, fix mode filtering + semantic edge quality

2026-04-06 12:41:30 +02:00

gen-py-stdlib.py

feat(py_lsp): Round 1 parity push (parent-modules, cast, Self, fwd-refs)

2026-05-09 01:39:28 +02:00

gen-third-party-notices.sh

Extend the notices bundle to the UI dependencies and the Glama image

2026-06-12 10:51:11 +02:00

gen-ui-licenses.py

Resolve npm through the shell for Windows compatibility

2026-06-12 18:16:43 +02:00

generate-lang-code.py

Add 89 new tree-sitter grammars (66 to 155 languages)

2026-04-15 21:28:51 +02:00

install-git-hooks.sh

Adopt the Developer Certificate of Origin for all commits

2026-06-12 14:31:55 +02:00

license-gate-check-npm.py

Resolve npm through the shell for Windows compatibility

2026-06-12 18:16:43 +02:00

license-gate-check.py

Bundle third-party notices into release archives; extend release tooling

2026-06-12 02:17:39 +02:00

license-gate.sh

Run the gate self-test and provenance audit in the security workflow

2026-06-12 13:24:07 +02:00

license-policy.json

Exempt the provenance-audit tool from the ScanCode pass

2026-06-12 15:57:08 +02:00

lint.sh

fix(scripts): use /usr/bin/env bash shebangs (NixOS has no /bin/bash)

2026-07-03 20:11:49 +02:00

new-languages.json

Drop the nim grammar and refresh language counts

2026-06-12 02:17:39 +02:00

path-safety.sh

daemon: permanent lifecycle, daemon-backed CLI/hooks, real-Windows hardening, long-path launcher transactions

2026-07-21 15:32:15 +02:00

repro.sh

fix(scripts): use /usr/bin/env bash shebangs (NixOS has no /bin/bash)

2026-07-03 20:11:49 +02:00

run-test-wave.py

fix: harden daemon release paths and verification

2026-07-24 16:08:42 +02:00

run-tests-parallel.sh

fix: harden daemon release paths and verification

2026-07-24 16:08:42 +02:00

security-allowlist.txt

feat: coordinate concurrent CBM sessions

2026-07-16 19:20:46 +02:00

security-audit.sh

feat: coordinate concurrent CBM sessions

2026-07-16 19:20:46 +02:00

security-fuzz-random.sh

fix(qa): make crash and tolerance gates fail loudly

2026-07-23 17:35:40 +02:00

security-fuzz.sh

fix: harden cross-platform daemon startup

2026-07-18 02:43:14 +02:00

security-install.sh

fix(install): respect $CLAUDE_CONFIG_DIR in install/uninstall/update

2026-05-30 15:22:37 +02:00

security-network.sh

Add 8-layer security test suite + hardening

2026-03-20 18:19:15 +01:00

security-strings.sh

fix(ci): allow-list MSYS2 toolchain URL in binary string audit

2026-06-24 03:15:36 +02:00

security-ui.sh

Replace the graph-UI HTTP server with a first-party implementation

2026-06-12 02:17:25 +02:00

security-vendored.sh

feat(cli): expand agent integration coverage

2026-07-13 01:50:02 +02:00

setup-windows.ps1

Remove Go-era cruft, update THIRD_PARTY.md for pure C project

2026-03-22 01:09:12 +01:00

setup.sh

fix(install): respect $CLAUDE_CONFIG_DIR in install/uninstall/update

2026-05-30 15:22:37 +02:00

smoke-fixture-server.py

fix: harden daemon release paths and verification

2026-07-24 16:08:42 +02:00

smoke-invariants.sh

fix(pipeline): destroy TLS parsers at allocator-epoch boundaries

2026-07-11 12:51:29 +02:00

smoke-local.sh

fix: harden daemon release paths and verification

2026-07-24 16:08:42 +02:00

smoke-test.sh

fix: harden daemon release paths and verification

2026-07-24 16:08:42 +02:00

soak-test.sh

fix: harden daemon release paths and verification

2026-07-24 16:08:42 +02:00

test_mcp_interactive.py

fix(launcher): name the object and check behind every security refusal

2026-07-18 16:57:58 +02:00

test_mcp_rapid_init.py

fix(mcp): address QA round 1 findings

2026-03-21 12:37:28 -05:00

test-windows.ps1

fix(qa): make crash and tolerance gates fail loudly

2026-07-23 17:35:40 +02:00

test.sh

fix: harden daemon release paths and verification

2026-07-24 16:08:42 +02:00

vendor-grammar.sh

fix(scripts): use /usr/bin/env bash shebangs (NixOS has no /bin/bash)

2026-07-03 20:11:49 +02:00

vendored-checksums.txt

fix: resolve remaining platform CI regressions

2026-07-18 15:41:57 +02:00