v0.0.283

v0.0.283 (2026-08-31)

Next cut after v0.0.282 merged to main. No GitHub tag
until asked. Download / notarization ids land after the build.

Composer image chips sync on delete (ADR 0056 / #702)

#634 already kept deleted composer screenshots off the model. The line
composer still numbered the next [Image #N] from the unpruned queue,
and every successful Ctrl-V / /paste wrote MIME type and byte count
into .graff/traces even when the chip was backspaced away.

Deleting a chip now drops that queue slot and remaps remaining numbers
to 1..k. The next paste reuses the next live number. A successful
stage records clipboard_paste without content-derived fields; MIME
and bytes are written only when the image is actually sent. Failures
may still carry a size. /image and /paste stay sticky.

TUI already numbered from its live array. The line REPL matches.

Tests

This cut raises the release-cut floor to 1868 (slack 25).

The tournament E2E parent timeout is 300s (was 180) and the four-arm
barrier defaults to 45s when unset, so a loaded CI runner cannot spend
the whole parent budget at rendezvous (#467).

Tuiguard (#704) kills a wedged PTY probe's process group at 60s (90s
for the long ones) and fails the parent if a wave overruns, naming
whoever is still running.

peer_message (#700) lists the visible title and saved-session base
and resolves those before opaque id / goal fragments. Duplicate titles
are ambiguous. Older presence files without the new fields still parse.

A long current tool turn that pins compact_cut at one boundary no
longer retries that cut while context grows (#706). Two no-progress
attempts escalate once.

#405 / #705: POSIX credential replace fsyncs the destination directory
after rename. Windows stays atomic-file + home ACL.

Downloads

All six CLI archives, the curl installer, and checksums:

File	Platform
graff-aarch64-linux.tar.gz	Linux arm64
graff-aarch64-macos.tar.gz	macOS Apple Silicon — Developer ID signed, Apple notarized
graff-aarch64-windows.tar.gz	Windows arm64
graff-x86_64-linux.tar.gz	Linux x86_64
graff-x86_64-macos.tar.gz	macOS Intel — Developer ID signed, Apple notarized
graff-x86_64-windows.tar.gz	Windows x86_64
install.sh	curl installer
SHA256SUMS	checksums for the six archives

curl -fsSL https://github.com/justrach/codegraff/releases/download/v0.0.283/install.sh | bash

Both macOS binaries are Developer ID Application signed (hardened runtime,
timestamped) and Apple notarized (notary-local, Accepted:
b344b011-a0ad-4345-aada-db2516bbe9a9 aarch64,
41510341-c551-4d7f-b773-19898943f70d x86_64). Stapling is skipped on
the bare CLI (stapler error 73); Gatekeeper checks the ticket online at
first launch. GitHub also attaches the usual source zip/tarball for the tag.