Alex Rosenzweig 36b442a1bd Merge remote-tracking branch 'origin/main' into codex/sandpit-agent-security ...

* origin/main:
  release(mobile-infra): buzz-push-gateway 0.3.0 (#7685)
  Add authenticated WebSocket recovery telemetry (#7546)
  Instrument database pool roles (#7356)
  refactor(desktop): share relay request construction (#7667)
  fix(db): allow naturally expired push lease replacement (#7653)
  perf(mobile): verify notification cache events in background (#7650)
  feat(push): make gateway origin configurable (#7261)
  perf(mobile): move profile sig checks off main thread (#7648)
  perf(mobile): avoid redundant message list sorting (#7647)
  perf(mobile): avoid reparsing unchanged Markdown (#7649)

Signed-off-by: Alex Rosenzweig <arosenzweig@squareup.com>

2026-09-16 17:13:47 -05:00

..

cutover

Multi-tenant Buzz relay: community_id as a server-resolved key (comprehensive rewrite) (#1321)

2026-06-29 12:39:02 -04:00

fixtures

Add experimental Sandpit agent security controls

2026-09-16 17:12:59 -05:00

maintenance

Bound NIP-RS retention and search indexing (#1771)

2026-07-13 17:58:20 -04:00

_goose-env.sh

…

backfill-d-tag.sql

…

build-sprig.sh

…

bundle-sidecars.sh

feat(k8s): Kubernetes backend plugin + desktop deploy path (#4289)

2026-08-02 14:39:27 -04:00

buzz-adopt-prod-agents.sh

fix(scripts): copy global-agent-config.json in buzz-adopt-prod-agents (#7303)

2026-09-03 17:32:10 -04:00

check-branch-skew.sh

Add pre-push branch-skew guard and changed-spec e2e recipe (#1940)

2026-07-15 21:43:32 -07:00

check-file-sizes-core.mjs

ci: make file-size policy a first-class gate (#6187)

2026-08-18 06:36:25 -07:00

check-file-sizes-core.test.mjs

ci: relax file-size ceilings by surface (#6485)

2026-09-01 19:14:15 +00:00

check-postgres-test-discovery.py

ci: run PostgreSQL tests in isolated lane (#6730)

2026-09-01 12:07:28 -04:00

check-pr-image-urls.sh

feat(mobile): harden unread badges and float tabs (#1298)

2026-06-25 17:40:00 -07:00

check-pubkey-truncation-core.mjs

fix(desktop): npub identity controls across profile, agents, and workflows (#7489)

2026-09-09 14:08:01 -04:00

check-push-head-scope.sh

fix(hooks): scope pre-push lanes to branch merge-base diff (#6423)

2026-08-20 15:55:00 -04:00

check-px-text-core.mjs

fix(desktop): make lint and unit-test gates work on Windows (#2943)

2026-07-27 13:00:25 -04:00

ci-mesh-lifecycle-smoke.sh

ci: prove the relay-driven mesh lifecycle — discover, join, infer, deny — with real nodes (#3862)

2026-08-05 23:13:16 -04:00

cleanup-instance-agents.sh

…

create-deployment-eligibility-predicate.jq

Qualify canonical relay images for staged delivery (#6781)

2026-08-25 14:44:49 -04:00

desktop_release.py

fix(release): attribute desktop candidates to the operator (#6831)

2026-08-25 18:50:58 -04:00

desktop-native-toolchain-id.sh

ci: add guarded desktop release cache prewarm (#4575)

2026-08-03 13:03:26 -07:00

desktop-release-cache-key.py

ci: add guarded desktop release cache prewarm (#4575)

2026-08-03 13:03:26 -07:00

dev-reset.sh

mesh: upgrade runtime, enforce membership, add shared compute provider (#1656)

2026-07-15 10:10:29 -04:00

dev-setup.sh

fix(dev): install Lefthook hooks into shared .git/hooks dir (#1751)

2026-07-10 22:06:32 -04:00

e2e-git-perms.sh

Remove public relay signing key fallback (#6729)

2026-08-25 13:57:23 -07:00

e2e-large-channel-roster.sh

fix(channels): return complete member rosters (#5765)

2026-08-13 14:48:04 -07:00

ensure-local-relay-key.sh

Remove public relay signing key fallback (#6729)

2026-08-25 13:57:23 -07:00

generate-dev-icon.swift

chore: remove LLM-slop comments across the codebase (#1277)

2026-06-25 11:03:05 -04:00

grab-emoji.sh

chore: add grab-emoji.sh to register Slack emoji in Buzz (#1292)

2026-06-25 16:30:11 -04:00

instance-env.sh

fix(dev): keep the canonical profile when launching from desktop/ (#7143)

2026-09-01 11:55:42 -06:00

mobile-release.sh

chore(mobile): lighter-weight release process (#2144)

2026-07-23 15:05:59 -07:00

mobile-worktree-clean.sh

feat(mobile): push notifications MVP (#6269)

2026-08-28 15:15:09 -06:00

mobile-worktree-overrides.sh

feat(mobile): push notifications MVP (#6269)

2026-08-28 15:15:09 -06:00

model-capabilities.json

feat: add databricks fable 5.1 model capabilities (#7213)

2026-09-01 16:06:17 -07:00

normative-corpus.json

fix(agent): route GPT-5+ model-service FQNs to Responses (#7358)

2026-09-08 08:23:48 -06:00

nostr-tools-test-package.json

…

post-screenshots.sh

Projects v3: unify sharing, discussions, and issue ownership (#5792)

2026-08-14 16:48:41 -04:00

postgres-test-packages.sh

ci: run PostgreSQL tests in isolated lane (#6730)

2026-09-01 12:07:28 -04:00

postgres-test-run.sh

ci: run PostgreSQL tests in isolated lane (#6730)

2026-09-01 12:07:28 -04:00

postgres-test-setup.sh

ci: run PostgreSQL tests in isolated lane (#6730)

2026-09-01 12:07:28 -04:00

postgres-test-wrapper.sh

ci: run PostgreSQL tests in isolated lane (#6730)

2026-09-01 12:07:28 -04:00

prepare-desktop-release.sh

fix(release): attribute desktop candidates to the operator (#6831)

2026-08-25 18:50:58 -04:00

promote-oss-desktop-release.sh

ci(release): gate OSS desktop auto-update promotion (#5398)

2026-08-10 09:05:32 -07:00

publish-mobile-release-candidate.sh

chore(mobile): lighter-weight release process (#2144)

2026-07-23 15:05:59 -07:00

reconcile-schema-after-pgschema.sql

fix(db): disable heartbeat vacuum truncation (#6898)

2026-08-27 13:01:13 -04:00

release-rulesets.sh

chore(mobile): relax release check (#2636)

2026-07-23 18:00:35 -06:00

required-check-succeeded.jq

fix(release): tag immutable desktop candidates (#4811)

2026-08-05 11:00:14 -07:00

reset-desktop-dev-state.sh

mesh: upgrade runtime, enforce membership, add shared compute provider (#1656)

2026-07-15 10:10:29 -04:00

reset-desktop-standalone-state.sh

Add preferred runtime onboarding (#2040)

2026-07-17 14:19:29 -06:00

run-desktop-release-smoke.sh

fix(db): disable heartbeat vacuum truncation (#6898)

2026-08-27 13:01:13 -04:00

run-tests.sh

Verify ACP relay events before prompt routing (#7010)

2026-09-04 11:19:03 -07:00

sandpit-demo.py

Add experimental Sandpit agent security controls

2026-09-16 17:12:59 -05:00

sandpit-desktop-bundle.sh

Add experimental Sandpit agent security controls

2026-09-16 17:12:59 -05:00

sandpit-desktop-demo.sh

Add experimental Sandpit agent security controls

2026-09-16 17:12:59 -05:00

sandpit-live-demo.py

Add experimental Sandpit agent security controls

2026-09-16 17:12:59 -05:00

sandpit-native-test.py

Add experimental Sandpit agent security controls

2026-09-16 17:12:59 -05:00

seed-admin-dashboard.sh

feat: add read-only deployment moderation dashboard (#1999)

2026-07-17 12:50:06 -07:00

seed-local-community.sh

fix(setup): fix syntax error in seed-local-community.sh (#1547)

2026-07-06 14:24:03 -07:00

select-qualified-ci-run.jq

Qualify canonical relay images for staged delivery (#6781)

2026-08-25 14:44:49 -04:00

setup-desktop-test-data.sh

mesh: upgrade runtime, enforce membership, add shared compute provider (#1656)

2026-07-15 10:10:29 -04:00

sprig-entrypoint.sh

feat(k8s): Kubernetes backend plugin + desktop deploy path (#4289)

2026-08-02 14:39:27 -04:00

start-isolated-test-relay.sh

fix(db): disable heartbeat vacuum truncation (#6898)

2026-08-27 13:01:13 -04:00

start-relay-for-tests.sh

fix(db): disable heartbeat vacuum truncation (#6898)

2026-08-27 13:01:13 -04:00

test-ci-required-context-isolation.sh

refactor(relay): extract NIP-29 membership authorization (#7285)

2026-09-04 10:46:55 -04:00

test-desktop-instance-detection.sh

fix(dev): keep the canonical profile when launching from desktop/ (#7143)

2026-09-01 11:55:42 -06:00

test-desktop-release-cache-key.sh

fix(ci): make desktop cache test version agnostic (#4791)

2026-08-04 14:22:26 -07:00

test-desktop-release-cache-workflow.sh

ci: add guarded desktop release cache prewarm (#4575)

2026-08-03 13:03:26 -07:00

test-desktop-release-candidate.sh

fix(release): attribute desktop candidates to the operator (#6831)

2026-08-25 18:50:58 -04:00

test-ensure-local-relay-key.sh

Remove public relay signing key fallback (#6729)

2026-08-25 13:57:23 -07:00

test-k8s-provider-release.sh

feat(k8s): Kubernetes backend plugin + desktop deploy path (#4289)

2026-08-02 14:39:27 -04:00

test-k8s-sprig-image-live.sh

feat(k8s): Kubernetes backend plugin + desktop deploy path (#4289)

2026-08-02 14:39:27 -04:00

test-mobile-gateway-recipes.sh

feat(push): make gateway origin configurable (#7261)

2026-09-15 14:56:45 -07:00

test-mobile-release-candidate-publisher.sh

chore(mobile): relax release check (#2636)

2026-07-23 18:00:35 -06:00

test-mobile-release-contract.sh

chore(mobile): lighter-weight release process (#2144)

2026-07-23 15:05:59 -07:00

test-mobile-worktree-overrides.sh

feat(mobile): push notifications MVP (#6269)

2026-08-28 15:15:09 -06:00

test-oss-desktop-promotion-behavior.sh

ci(release): gate OSS desktop auto-update promotion (#5398)

2026-08-10 09:05:32 -07:00

test-oss-desktop-promotion.sh

ci(release): gate OSS desktop auto-update promotion (#5398)

2026-08-10 09:05:32 -07:00

test-postgres-test-discovery.sh

ci: run PostgreSQL tests in isolated lane (#6730)

2026-09-01 12:07:28 -04:00

test-postgres-test-wrapper.sh

ci: run PostgreSQL tests in isolated lane (#6730)

2026-09-01 12:07:28 -04:00

test-relay-image-eligibility-workflow.sh

fix(ci): check out source in docker.yml merge job (#6833)

2026-08-25 18:50:47 -04:00

test-release-ref-contract.sh

ci(release): gate OSS desktop auto-update promotion (#5398)

2026-08-10 09:05:32 -07:00

test-reset-desktop-standalone-state.sh

Add preferred runtime onboarding (#2040)

2026-07-17 14:19:29 -06:00

test-rust-cache-contract-regressions.sh

ci: split CI into reusable workflows (#7168)

2026-09-02 12:23:16 -04:00

test-rust-cache-contract.sh

ci: split CI into reusable workflows (#7168)

2026-09-02 12:23:16 -04:00

test-signed-canary-contract.sh

ci(desktop): add signed macOS canary build (#2419)

2026-07-22 21:43:13 +00:00

test-sprig-image.sh

feat(k8s): Kubernetes backend plugin + desktop deploy path (#4289)

2026-08-02 14:39:27 -04:00

test-video-upload.sh

…

verify-desktop-release-merge.sh

fix(release): tag immutable desktop candidates (#4811)

2026-08-05 11:00:14 -07:00

verify-release-ref.sh

[codex] Bind release publishers to immutable tags (BUZZ-SEC-039) (#1914)

2026-07-17 08:52:57 -07:00