v1.42.0.0 Daegu wave: 23 community-filed bugs + PTY classifier enforcement (24 bisect commits)#1594

Open

garrytan wants to merge 26 commits into

mainfrom

garrytan/daegu-v3

Commits on May 19, 2026

fix(gstack-paths): guard CLAUDE_PLUGIN_DATA against cross-plugin contamination (#1569)

garrytan
and
claude
committed
fix(gbrain-sync): sourceLocalPath handles wrapped {sources:[...]} shape from gbrain v0.20+

garrytan
and
claude
committed
fix(brain-context-load): probe gbrain via execFile, not shell builtin (#1559)

garrytan
and
claude
committed
test(gbrain-doctor): pin schema_version:2 doctor parse path (#1418)

garrytan
and
claude
committed
test(memory-ingest): pin put_page regression + scrub stale name from --help and comments (#1346)

garrytan
and
claude
committed
fix(resolvers): rewrite all gbrain put_page instructions to canonical put <slug>

garrytan
and
claude
committed
fix(build): extract package.json build to scripts/build.sh for Windows Bun compat (#1538, #1537, #1530, #1457, #1561)

garrytan
and
claude
committed
fix(windows): .exe glob in .gitignore + .exe extension resolution in find-browse (#1554)

garrytan
and
claude
committed
ci(windows): add fresh-install E2E gate that runs bun run build on windows-latest

garrytan
and
claude
committed
fix(codex): move diff scope into prompt instead of --base (Codex CLI 0.130+ argv conflict) (#1209)

garrytan
and
claude
committed
fix(review): diff from git merge-base, not git diff origin/<base> (#1492)

garrytan
and
claude
committed
test(codex): pin filesystem-boundary preservation across all codex review surfaces (#1503, #1522)

garrytan
and
claude
committed
fix(skills): use command -v instead of which for codex detection (#1197)

garrytan
and
claude
committed
fix(codex): surface non-zero exits so wrappers stop reading as silent stalls (#1467, #1327)

garrytan
and
claude
committed
fix(design): disclose OpenAI key source + warn on cwd .env match (#1278, closes #1248)

garrytan
and
claude
committed
fix(browse): guard full-page screenshots against Anthropic vision API >2000px brick (#1214)

garrytan
and
claude
committed
feat(security): add Node sidecar entry for L4 prompt-injection classifier (#1370)

garrytan
and
claude
committed
feat(security): sidecar IPC client with lifecycle + circuit breaker (#1370)

garrytan
and
claude
committed
feat(security): add POST /pty-inject-scan endpoint for pre-PTY-inject scans (#1370)

garrytan
and
claude
committed
feat(extension): route gstackInjectToTerminal through /pty-inject-scan (#1370)

garrytan
and
claude
committed
test(security): invariant — extension PTY inject must be scan-gated (#1370)

garrytan
and
claude
committed
feat(browse): opt-in extended stealth mode with 6 detection-vector patches (#1112)

garrytan
and
claude
committed
test(fixtures): regenerate ship-SKILL.md golden baselines after C10-C13 + C16 templates

garrytan
and
claude
committed
chore(release): v1.41.0.0 — Daegu wave (24 bisect commits, 14 user-facing fixes)

garrytan
and
claude
committed
fix(find-browse): resolve source-checkout layout <git-root>/browse/dist/browse[.exe]

garrytan
and
claude
committed
chore(release): bump v1.41.0.0 → v1.42.0.0 to clear queue collision with #1574

garrytan
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

v1.42.0.0 Daegu wave: 23 community-filed bugs + PTY classifier enforcement (24 bisect commits)#1594

v1.42.0.0 Daegu wave: 23 community-filed bugs + PTY classifier enforcement (24 bisect commits)#1594
garrytan wants to merge 26 commits into
mainfrom
garrytan/daegu-v3

Commits on May 19, 2026

fix(gstack-paths): guard CLAUDE_PLUGIN_DATA against cross-plugin contamination (#1569)

fix(gbrain-sync): sourceLocalPath handles wrapped {sources:[...]} shape from gbrain v0.20+

fix(brain-context-load): probe gbrain via execFile, not shell builtin (#1559)

test(gbrain-doctor): pin schema_version:2 doctor parse path (#1418)

test(memory-ingest): pin put_page regression + scrub stale name from --help and comments (#1346)

fix(resolvers): rewrite all gbrain put_page instructions to canonical put <slug>

fix(build): extract package.json build to scripts/build.sh for Windows Bun compat (#1538, #1537, #1530, #1457, #1561)

fix(windows): .exe glob in .gitignore + .exe extension resolution in find-browse (#1554)

ci(windows): add fresh-install E2E gate that runs bun run build on windows-latest

fix(codex): move diff scope into prompt instead of --base (Codex CLI 0.130+ argv conflict) (#1209)

fix(review): diff from git merge-base, not git diff origin/<base> (#1492)

test(codex): pin filesystem-boundary preservation across all codex review surfaces (#1503, #1522)

fix(skills): use command -v instead of which for codex detection (#1197)

fix(codex): surface non-zero exits so wrappers stop reading as silent stalls (#1467, #1327)

fix(design): disclose OpenAI key source + warn on cwd .env match (#1278, closes #1248)

fix(browse): guard full-page screenshots against Anthropic vision API >2000px brick (#1214)

feat(security): add Node sidecar entry for L4 prompt-injection classifier (#1370)

feat(security): sidecar IPC client with lifecycle + circuit breaker (#1370)

feat(security): add POST /pty-inject-scan endpoint for pre-PTY-inject scans (#1370)

feat(extension): route gstackInjectToTerminal through /pty-inject-scan (#1370)

test(security): invariant — extension PTY inject must be scan-gated (#1370)

feat(browse): opt-in extended stealth mode with 6 detection-vector patches (#1112)

test(fixtures): regenerate ship-SKILL.md golden baselines after C10-C13 + C16 templates

chore(release): v1.41.0.0 — Daegu wave (24 bisect commits, 14 user-facing fixes)

fix(find-browse): resolve source-checkout layout <git-root>/browse/dist/browse[.exe]

chore(release): bump v1.41.0.0 → v1.42.0.0 to clear queue collision with #1574