Promote final main to release/stable for v0.5.12#105
Merged
yaacovcorcos merged 48 commits intoJul 24, 2026
Conversation
* fix provider status refresh invariants * fix Claude auth recovery
* Use direct OAuth for Grok sign-in * Expose safe Grok OAuth browser fallback
* Secure Scient state initialization * Allow legacy migration state test * fix(security): harden private state files * test(security): lock private file boundaries * fix(security): reject unsafe private file nodes
* Supervise the desktop backend lifecycle * fix(desktop): preserve backend lifecycle ownership * fix(desktop): replace semantically unready backends * fix(desktop): close backend lifecycle races
* Supervise desktop connection recovery * Isolate provider dialog browser fixtures * fix(desktop): bind activation readiness generation * fix(web): enforce single-owner connection recovery * style(web): format connection recovery * fix(web): satisfy connection transport types * fix(web): harden stream and terminal recovery * fix(web): fail closed on stuck stream cancellation * fix(web): preserve terminal recovery ordering * fix(web): clamp reconnect jitter ceilings * fix(desktop): preserve connection wake after restack
* Define safe RPC recovery policies * test(web): cover RPC recovery integration * fix(web): recover after uncertain mutation failures * test(web): type RPC recovery harness precisely * fix(web): recover a failed replay generation
* Surface connection recovery diagnostics * test(web): cover connection recovery experience * style(web): format recovery browser coverage * fix(web): keep recovery diagnostics current
* fix: recover Codex sessions after auth loss * fix(codex): gate auth recovery by provider mode * fix: harden Codex authentication recovery
* Secure Scient state initialization * Allow legacy migration state test * Supervise the desktop backend lifecycle * Supervise desktop connection recovery * Define safe RPC recovery policies * Surface connection recovery diagnostics * Support Linux desktop development launch * Isolate provider dialog browser fixtures * fix(desktop): fail closed on unsafe Linux sandbox * style(desktop): format Linux launcher hardening * fix(release): preserve AppImage sandbox * revert(release): keep AppImage migration out of launcher hardening * fix(desktop): honor Linux user namespace sandbox
* Fix Antigravity browser authentication * Harden Antigravity authentication lifecycle * Close Antigravity code window deterministically * Keep Antigravity code submission cancellable
* Fix trusted Antigravity install and update routing * Fix Antigravity browser authentication and models * Refine provider connection dialog actions * Harden managed provider update recovery
* Stabilize macOS release identity * Reduce unintended macOS permission prompts * Apply repository formatting
* feat(web): harden bidirectional chat rendering * fix(web): close bidi review gaps
* Add project source dialog * Harden project source cloning
* Add T3-style right dock surfaces * Fix right dock test formatting
* Add message-level conversation forks * Stabilize hosted fork browser test * Close message fork boundary gaps * Close final fork review gaps * Resolve final fork recertification blockers * Avoid replaying completed fork bootstrap * Harden fork lineage and restart recovery * Stabilize cold browser geometry startup * Repair legacy fork title families * Preserve unrecorded fork rename boundaries * Clear drifted fork title lineage
* Increase default base font size to 15px * Fix manual font size editing * Preserve external font setting updates
* Use recommended provider model defaults * Apply repository formatting * Update browser expectation for Codex default * Preserve explicit drafts before model discovery * Respect live provider model availability
* Fix release candidate regressions * Fix long transcript fork validation
* fix(release): preserve Linux sandbox * test(release): resolve nested builder package * test(release): follow Bun package symlinks
* Hide provider setup banner on empty chats * Stabilize empty provider banner coverage * Harden provider banner browser readiness
* feat(voice): define transcription backend contract * feat(voice): add verified local transcription core * Fix ChatGPT voice account context * feat(voice): add ChatGPT-first local Whisper fallback
* Apply updated settings defaults once * Enable Studio in its browser fixture
* Improve voice recording controls * Add live local voice previews * Keep voice send locked through completion * Keep active-turn composer actions available * Pin Whisper runtime source revision * Fix voice transition regressions
* Fix folder picker navigation and project opening * Tighten project setup choices * Prevent duplicate folder picker submissions
* fix: make Whisper packaging cross-platform safe * fix: verify signed Windows Whisper runtime
* feat: add secure HTML artifact previews * fix: enforce HTML preview ownership boundaries * Document cross-platform manual verification
# Conflicts: # apps/desktop/src/main.ts # apps/server/src/serverSettings.test.ts # apps/web/src/appSettings.ts # apps/web/src/components/AddProjectDialog.browser.tsx # apps/web/src/components/AddProjectDialog.logic.test.ts # apps/web/src/components/AddProjectDialog.logic.ts # apps/web/src/components/AddProjectDialog.tsx # apps/web/src/components/ChatView.browser.tsx # apps/web/src/components/ChatView.tsx # apps/web/src/components/ConnectionRecoveryNotifications.browser.tsx # apps/web/src/components/ConnectionRecoveryNotifications.tsx # apps/web/src/components/ScientProjectInitializationDialog.tsx # apps/web/src/components/chat/AssistantArtifactShelf.test.tsx # apps/web/src/components/chat/AssistantArtifactShelf.tsx # apps/web/src/hooks/useComposerSlashCommands.ts # apps/web/src/hooks/useProviderStatusRefresh.browser.tsx # apps/web/src/hooks/useProviderStatusRefresh.ts # apps/web/src/routes/-automations.shared.tsx # apps/web/src/routes/__root.tsx # apps/web/src/routes/_chat.$threadId.tsx # apps/web/src/routes/_chat.settings.tsx # apps/web/src/wsNativeApi.test.ts # packages/contracts/src/filesystem.test.ts # packages/contracts/src/rpc.ts # scripts/build-desktop-artifact-mac-config.test.ts # scripts/build-desktop-artifact.ts # scripts/lib/desktop-platform-build-config.ts
github-actions
Bot
added
size:XXL
vouch:trusted
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Promotion invariant
The promotion commit has exactly the protected stable head as first parent and final main as second parent. Because the prior protected promotion was squash-merged, Git history reported conflicts; no product code was hand-resolved. The promotion index was deterministically set to the exact final main tree, and both parent and tree invariants were verified before push.
Release train included
Held out
Verification
This PR only advances the protected release pointer. It does not publish a release.