v5.74.0

5.74.0 (2026-07-27)

Bug Fixes

• cherry: implement follower bridge, runtime validation, and protocol strengthening (344f60f)
• cherry: replace hardcoded cherry: 3 with CHERRY_PROTOCOL_VERSION + 1 in mismatch tests (b93f6e6)
• correct misleading 'atomically publish' comment in snapshot-store.ts (ffe0c10)
• ios: align tray transcript protocol version (7dc7f07)
• ios: use escaped string literals in export decode test (d10baf3)
• resolve new-code diagnostics in transcript export (0549e4d)
• resolve rebase artifacts — dedup, import org, protocol version, doc size (ac6a09c)
• shared-ts: address task-1 review findings (bb3d2c7)
• shared-ts: avoid unsafe regex match indices (3dc6ed0)
• shared-ts: wrap 104-char expected-error line under 100 chars (m-4) (9e1c6d2)
• swift-server: restore Package.resolved to base commit f8be374ed (7684e9d)
• transcript-export: address memory-review findings P1/P2/P3 and CV items (f0e3caf)
• transcript-export: address task-10 review findings (7137623)
• transcript-export: address task-8 security/protocol review findings (aec3561)
• transcript-export: apply final-review fixes (I-1, I-2, I-3, M-1 through M-5) (19f9a00)
• transcript-export: cancel leader on spool failure (7f501eb)
• transcript-export: cherry selector routing and message-generation race (9f6d2d1)
• transcript-export: CI green — biome debt, node-server coverage, E2E fixture swap (494a285)
• transcript-export: close cross-wave attachment state inconsistencies (56365d1)
• transcript-export: close lifecycle review findings F1/F2/F3 (404c31b)
• transcript-export: close memory-review findings SCOPE-1/2, P3-N1, P3-N2 (dc16cb6)
• transcript-export: PR review wave 1 — attachment privacy and integrity (29fbcbc)
• transcript-export: PR review wave 2 — attachment rejection fixes (b3ccef1)
• transcript-export: PR review wave 2 — lifecycle and correctness (cf59c51)
• transcript-export: stream OPFS File to independent Blob before deletion (672cf46)
• transcript-export: Wave 4 bounded-memory — ack-gated flow control, spool, ZIP, and protocol v3 (a721e04)
• transcript-validator: PR review wave 3 — schema and relational validation (ccb4f7a)
• transcript-validator: resolve P1/P2/P3 review findings F1-F5 (213a358)
• transcript: address task-3 review findings (a11d912)
• transcript: address task-4 security review findings (565d0e5)
• transcript: quality fixes — falsifiable privacy skip test and applyLeaves CC (a80711d)
• webapp: address task-2 review findings (e27c870)
• webapp: address task-5 review findings — parentJid wiring, phase disjoint, race, missing-file completeness (dec21b5)
• webapp: address task-6 review findings — backslash traversal, orchestrator registration, stale metadata, completion rejection, progress ordering (c925f54)
• webapp: address task-7 review findings — sha256, legacy frozen id, quick-freeze tests, flag validation, default output, nav disabled state (f85b109)

Features

• add fail-closed transcript secret redaction (7865180)
• cherry: request approved transcript exports (e1865d3)
• redact transcript credential patterns (f8504f2)
• shared-ts: define transcript export schema (7dfff5c)
• transfer approved transcript exports to followers (179feb9)
• webapp: capture complete transcript snapshots (e20c245)
• webapp: expose local transcript export (f1fb31e)
• webapp: normalize canonical transcript messages (d1404ec)
• webapp: stream transcript export bundles (15c6ff4)