Gatekeeper: add stale audit allowlist guard - #1840

Open

kunkunGames wants to merge 359 commits into

mainfrom

jules/gatekeeper/stale-allowlist-guard-367107354653095581

This pull request is big! We're only showing the most recent 250 commits

Commits on Jul 16, 2026

OnboardingSmith: improve onboarding wizard form accessibility (#1173)

kunkunGames
and
google-labs-jules[bot]
authored
753003f
chore: update PULL_REQUEST_TEMPLATE with stricter duplicate and no-change guards (#1178)

kunkunGames
and
google-labs-jules[bot]
authored
b31a0d2

Commits on Jul 17, 2026

Gatekeeper: simplify scratch path regex and catch missing extensions (#1180)

kunkunGames
and
google-labs-jules[bot]
authored
409a7a2

Commits on Jul 19, 2026

Merge commit '925a8d44833fe633a8de0a5195c70a128d4c253e' into codex/upstream-sync-20260719T200132Z
merge-check
committed
7c4836a

Commits on Jul 20, 2026

Merge commit '7791dd7a01ef2c5e9109ebb99a42f47c1c6c8bc5' into codex/upstream-sync-20260720T200058Z
merge-check
committed
97208df

Commits on Jul 21, 2026

Merge commit '7845a6fd23fe6979e9643e72b8ac40fcb535fe98' into codex/upstream-sync-20260721T200110Z
merge-check
committed
7c5d107

Commits on Jul 23, 2026

Merge commit 'e0e7b992c650012ef402810169bd8839561ff1b3' into codex/upstream-sync-20260723T200141Z
merge-check
committed
03ccea9

Commits on Jul 24, 2026

Merge commit 'dc284599bb8dffd2728663d397cab4484fbe7089' into codex/upstream-sync-20260724T200437Z
merge-check
committed
9500d3c

Commits on Jul 25, 2026

Merge commit 'fa487dc0e35b6981cab750793964e3d1202552a3' into codex/upstream-sync-20260725T200352Z
merge-check
committed
33d5ac4
chore(ci): centralize Node version via .nvmrc

kunkunGames
and
google-labs-jules[bot]
authored
13bf519

Commits on Jul 26, 2026

Merge commit '6305acfa4b216623d5c4673c4cd17ea022fe3670' into codex/upstream-sync-20260726T200552Z
merge-check
committed
af43617
feat(dashboard): disable onboarding text-input autocomplete
kunkunGames
authored
96c6830
chore(ci): guard JSON scratch files at repository root
kunkunGames
authored
df65d57
fix(dashboard): prevent opener access from issue tabs
kunkunGames
authored
d13b0b4
fix(dashboard): streamline modal selector keyboard focus
kunkunGames
authored
d6797d1
test(maintainability): cover stale allowlist failures
kunkunGames
authored
c40e13f

Commits on Jul 28, 2026

Supply-Lite: update @tailwindcss/vite dependency to 4.3.3 (#1196)

kunkunGames
and
google-labs-jules[bot]
authored
bec47a8
OnboardingSmith: prevent password autofill on bot token fields (#1199)

kunkunGames
and
google-labs-jules[bot]
authored
8459493
Accessor: improve emoji picker selected-state semantics (#1198)

kunkunGames
and
google-labs-jules[bot]
authored
1e40058
Doctor: translate Korean diagnostic guidance to English (#1179)

kunkunGames
and
google-labs-jules[bot]
authored
7ecc2ac
Doctor: clarify disk usage diagnostic sorting (#1204)

kunkunGames
and
쿤쿤
authored
be37661
WorkerRegistry: add target observability to worker local terminal signals (#1261)

kunkunGames
and
google-labs-jules[bot]
authored
024176a
Merge commit '69c7b4ca0f380b2a574002511e4c2a79da5f1d49' into codex/upstream-sync-20260728T200813Z
merge-check
committed
bef4c55
Steward: fix boolean checkbox regex in analyze_prs.py (#1271)

kunkunGames
and
google-labs-jules[bot]
authored
da60d37
FacadePilot: replace raw kanban_cards SQL query with agentdesk.cards.get in review-automation (#1276)

kunkunGames
and
google-labs-jules[bot]
authored
65c6376

Commits on Jul 29, 2026

Commits on Jul 30, 2026

Merge commit 'f616f63c4bc4a9972c2b7d41392712d600afc789' into codex/upstream-sync-20260730T200109Z
merge-check
committed
43c12a2

Commits on Aug 1, 2026

Merge commit '65c8746138523cdc416a80ade397af43451be9f7' into codex/upstream-sync-20260801T200417Z
merge-check
committed
0f2ed9b

Commits on Aug 2, 2026

Merge upstream/main into kunkunGames main
이택훈
committed
ba2897b
feat: 예약 메시지 대표 이미지 첨부 지원 (#1417)

kunkunGames
and
merge-check
authored
3568c5d
Refiner: deduplicate expand_tilde in discord module (#1412)

kunkunGames
and
google-labs-jules[bot]
authored
77e706f
FacadePilot: migrate long-turn monitor kv_meta exact queries to typed facade (#1408)

kunkunGames
and
google-labs-jules[bot]
authored
3458587
Bolt: Replace O(N) database queries with O(1) batched query in active run rotation (#1407)

kunkunGames
and
google-labs-jules[bot]
authored
632a720
Steward: Update TEST_PLAN.md with explicit execution plan guidelines (#1406)

kunkunGames
and
google-labs-jules[bot]
authored
3d22011
Bolt: optimize idle-kill query by inlining lateral join (#1402)

kunkunGames
and
google-labs-jules[bot]
authored
a84f57d
Steward: update PR analyzer to flag diff/patch scratch files (#1395)

kunkunGames
and
google-labs-jules[bot]
authored
a105cd8
Parity-Lite: Fix sqlite rowid translation to preserve unquoted AS rowid aliases (#1386)

kunkunGames
and
google-labs-jules[bot]
authored
bc5dab8
Steward: Upgrade empty no-change PR info to warning (#1385)

kunkunGames
and
google-labs-jules[bot]
authored
3c1a129
QualityKeeper: implement explicit decode fallback for ColumnNotFound in regression alerts (#1377)

kunkunGames
and
google-labs-jules[bot]
authored
2300e7e
Steward: enforce impact fields in PR templates (#1374)

kunkunGames
and
google-labs-jules[bot]
authored
57f2cb4
Refiner: reuse expand_user_path in dcserver workspaces (#1373)

kunkunGames
and
google-labs-jules[bot]
authored
972a45b
Courier: improve dispatch outbox delivery observability logs (#1366)

kunkunGames
and
google-labs-jules[bot]
authored
b1395c3
Steward: enforce agent PR title prefixes in analyze_prs.py (#1361)

kunkunGames
and
google-labs-jules[bot]
authored
551e44a
Refiner: reuse expand_user_path for doctor voice checks (#1358)

kunkunGames
and
google-labs-jules[bot]
authored
86b3de9
Steward: apply strict zero-changed-files guard to 'no change' PRs (#1349)

kunkunGames
and
google-labs-jules[bot]
authored
42dd9c0
Bolt: Reduce N+1 queries in auto queue generate (#1338)

kunkunGames
and
google-labs-jules[bot]
authored
ac4bb9d
Courier: clear outbox wait reasons on retry scheduling (#1324)

kunkunGames
and
google-labs-jules[bot]
authored
71dd8fe
Parity-Lite: update legacy sqlite unavailable errors to require postgres (#1311)

kunkunGames
and
google-labs-jules[bot]
authored
c8ca632
FacadePilot: review-automation cardInfo cards.get migration (#1307)

kunkunGames
and
google-labs-jules[bot]
authored
84d0be8
Gatekeeper: enforce parser-backed env!("HOME") hard gate (#1306)

kunkunGames
and
google-labs-jules[bot]
authored
9a6fda5
Steward: clarify duplicate check fallback and no-change report format (#1270)

kunkunGames
and
google-labs-jules[bot]
authored
4e775f1
Verifier: improve test reliability for poisoned lock recovery (#1268)

kunkunGames
and
google-labs-jules[bot]
authored
654b339
Accessor: improve modal sprite and icon selector accessibility (#1222)

kunkunGames
and
google-labs-jules[bot]
authored
bafb76e
Doctor: remove legacy SQLite mention from db_unavailable diagnostic (#1212)

kunkunGames
and
google-labs-jules[bot]
authored
3f80d27
Bolt: Avoid string allocation in phase-gate result reconciliation (#1207)

kunkunGames
and
google-labs-jules[bot]
authored
fe8c21e
Steward: add mergeability status PR template check (#1202)

kunkunGames
and
google-labs-jules[bot]
authored
1069dce
Steward: support bold labels in PR analyzer (#1163)

authored
702b372
Bolt: optimize live_sessions aggregation in auto_queue queries (#1156)

authored
e9ea36a
Upgrade dashboard security baseline (#1418)

kunkunGames
and
이택훈
authored
9ea1d99
Accessor: fix semantic modal labels and radiogroup names (#1394)

authored
ed58a2e
Verifier: cover cards JSON decode fallback in CI (#1383)

authored
4e6bf0f
DomainKeeper: isolate routine routes in their own domain (#1380)

authored
3394440
RoutineSmith: normalize routine-run query limits (#1378)

authored
abc2062
DomainKeeper: align analytics route ownership (#1343)

authored
abe4570
Accessor: fix picker labels and non-modal semantics (#1339)

authored
d7f8ecb
Add modal focus trapping to OfficeManagerModal (#1325)

authored
7d50d44
Bolt: batch long-turn KV cleanup through typed facade (#1312)

authored
c4cdaa0
Bolt: reuse auto-queue dependency statuses without cloning (#1308)

authored
ecb87ba
Doctor: classify provider and cluster gateway standby states (#1296)

authored
88deb95
Gatekeeper: NUL-delimit large-file guard paths (#1233)

authored
d802432
Gatekeeper: reject stale dashboard audit waivers (#1215)

authored
d713f47
Doctor: expose actionable degraded reason details (#1185)

authored
3a542cb
Scheduler: fence image delivery cutovers and bound payload retention (#1419)

kunkunGames
and
이택훈
authored
94c6954

Commits on Aug 3, 2026

Bolt: optimize clear_slot_sessions_pg with batch update (#1425)
kunkunGames
authored
7b6f23c
DomainKeeper: mark reviews domain as its own category (#1424)
kunkunGames
authored
835459c
Accessor: fix sprite/emoji selector accessibility in AgentFormModal (#1420)
kunkunGames
authored
4dd78f2
Merge upstream main into kunkunGames main
merge-check
committed
46b6014
Bolt: use EXISTS for dispatch_exists_pg (#1423)
kunkunGames
authored
32b5cf6
DomainKeeper: mark reviews domain as its own category (#1424 follow-up)

merge-check
and
claude
committed
4a5e4d9
Sentinel: redact Cookie and Set-Cookie headers in logs (#1429)
kunkunGames
authored
9ea3464
Steward: flag PRs whose entire diff is regenerated inventory docs (#1426)
kunkunGames
authored
8cd59f0
Steward: add Duplicate/overlap check field to the PR template (#1428)
kunkunGames
authored
129f3b8
Merge commit '0ae1c5b774605ca615f78dc44951cd03aab33bc8' into codex/upstream-sync-20260803T200420Z
merge-check
committed
214b6a2
Gatekeeper: enforce test-target integrity gate (#5003) (#1430)

kunkunGames
and
google-labs-jules[bot]
authored
97398f7

Commits on Aug 4, 2026

Merge commit '5a0c854e53477c8dc79c44ead36f5b9f45d56bc6' into codex/upstream-sync-20260804T200403Z
merge-check
committed
b75db5a
DomainKeeper: align domain category tags in access and onboarding routes (#1431)

kunkunGames
and
google-labs-jules[bot]
authored
8d3032a
Steward: enforce Verification Grounding rule (#1433)

kunkunGames
and
google-labs-jules[bot]
authored
e529686

Commits on Aug 5, 2026

Commits on Aug 6, 2026

Merge commit '5f16693e106de010ba0e350d5f9ae043cf28f576' into codex/upstream-sync-20260806T200403Z
merge-check
committed
e5d5afc

Commits on Aug 8, 2026

Merge upstream main into kunkunGames main
이택훈
committed
393358c
chore(ci): refresh lib test inventory
이택훈
committed
67deadc
Refiner: use expand_user_path for Discord !start tilde expansion (#1471)

kunkunGames
and
이택훈
authored
4aca585
IntakeRouter: drop misleading node override wording from duplicate log (#1473)

kunkunGames
and
이택훈
authored
9de9229
Doctor: point service-manager restart steps at --allow-restart (#1467)

kunkunGames
and
이택훈
authored
e259ddf
Dispatcher: centralize sidecar_dispatch via dispatch_context_requests_sidecar (#1459)

kunkunGames
and
이택훈
authored
ed5d6e1
Bolt: drop redundant JSON clone on dispatch finalize hot path (#1436)

kunkunGames
and
이택훈
authored
38397a2
MemoryCustodian: prompt manifest retention 문서·코드 정렬 (#1435)

kunkunGames
and
이택훈
authored
31a2730
Courier: outbox suppress/mark-dispatched DB 실패를 명시 로깅 (#1450)

kunkunGames
and
이택훈
authored
84a045b
Bolt: _dispatchableTargets를 gated transition 인덱스 O(S+T)로 (#1449)

kunkunGames
and
이택훈
authored
22225cd
Accessor: 아이콘 피커 a11y 용어 정리 및 sprite aria-valuemax (#1455)

kunkunGames
and
이택훈
authored
a00bc42
Quality: fail-closed on ColumnNotFound in regression decode fallback (#1485)

kunkunGames
and
이택훈
authored
93216b0
Bolt: use LATERAL join for auto-queue pending delivery orphan candidates (#1472)

kunkunGames
and
이택훈
authored
a355721
Dashboard: bump react-hook-form and @hookform/resolvers (#1478)

kunkunGames
and
이택훈
authored
9aa20b2
Parity: SQLite rowid→ctid 번역 시 AS 없는 alias도 보존 (#1457)

kunkunGames
and
이택훈
authored
79cfcdb
Integrations: add safe Kakao friend sharing
kunkunGames
committed
e7cd3e8
Quality: repair redaction and rowid alias regressions
kunkunGames
committed
0202b86
Dashboard: synchronize pnpm dependency lock
kunkunGames
committed
d329d0c

Commits on Aug 9, 2026

Commits on Aug 10, 2026

Merge commit 'f518912f9edbc25c707d03aac5b1c690dacaf76c' into codex/upstream-sync-20260810T200249Z
merge-check
committed
143e786
Bolt: optimize _isDispatchableState complexity (#1512)

kunkunGames
and
google-labs-jules[bot]
authored
91f7761
Parity-Lite: replace JOIN LATERAL with EXISTS for SQLite compat (#1516)

kunkunGames
and
google-labs-jules[bot]
authored
406712f

Commits on Aug 11, 2026

Merge commit 'e8846c6ad9dd0a5039f6a17d70aad0ece2f5cac5' into codex/upstream-sync-20260811T200241Z
merge-check
committed
3471c42

Commits on Aug 12, 2026

Refiner: reuse expand_user_path in qwen working dir resolution (#1518)
kunkunGames
authored
ee2487d
Refiner: consolidate discord config tilde expansion to prevent path rebuilding (#1519)
kunkunGames
authored
27497f7
Doctor: standardize config audit JSON evidence counts (#1521)
kunkunGames
authored
4059f4d
Accessor: fix emoji picker accessibility labels (#1523)
kunkunGames
authored
3d69d28
Steward: Support Parity-Lite title prefix in PR analyzer (#1525)
kunkunGames
authored
3cc8952
Bolt: reduce database calls in finalizeRunWithoutPhaseGate via EXISTS (#1526)
kunkunGames
authored
f5ef920
feat(kakao): add self chatroom test send
merge-check
committed
0c957e5
feat(kakao): support multiple connected accounts
merge-check
committed
5eb12c1
fix(kakao): harden multi-account delivery safety
merge-check
committed
0229a84

Commits on Aug 13, 2026

test(kakao): register multi-account coverage
merge-check
committed
e3944b3
Merge pull request #1544 from kunkunGames/codex/kakao-multi-account
kunkunGames
authored
5ed9d2f
fix(dashboard): align lockfile root manifest
merge-check
committed
8bfcbf3
Merge pull request #1558 from kunkunGames/fix/dashboard-lockfile-deploy
kunkunGames
authored
4275b29

Commits on Aug 16, 2026

Commits on Aug 17, 2026

Commits on Aug 19, 2026

Merge commit '5cf174cc26cff7b7f35f0cc51e0666828059a189' into codex/upstream-sync-20260819T200142Z
merge-check
committed
0792a80

Commits on Aug 20, 2026

Merge commit '945d70a077b2955f935d3a44c278d6a333d351ef' into codex/upstream-sync-20260820T200104Z
merge-check
committed
7d2ba55

Commits on Aug 21, 2026

Merge commit '00d880a89be785282d251f1082d5b17e0902c6dd' into codex/upstream-sync-20260821T200112Z
merge-check
committed
c42112a

Commits on Aug 22, 2026

Merge commit '626d1b899e3f36bfa200724a21c17a8c8adf4f26' into codex/upstream-sync-20260822T200108Z
merge-check
committed
6f6badd

Commits on Aug 23, 2026

Merge commit '518cfef2bfae0cb0520db31854f19b3f8edfeb5b' into codex/upstream-sync-20260823T200110Z
merge-check
committed
b1e3d52

Commits on Aug 24, 2026

fix(db): reconcile deployed postgres migration lineage
이택훈
committed
762842e
chore(ci): refresh SQL execution surface lineage
이택훈
committed
8cd87f7
fix(test): initialize outbox attachment field
이택훈
committed
0db86bd
fix(db): restore intake capability migration floor
이택훈
committed
30b6b3d
fix(ci): restore giant-file issue snapshot structure
이택훈
committed
bba8a28
refactor(outbox): extract message identity policy
이택훈
committed
46c28f3
chore(docs): refresh generated route inventory
이택훈
committed
5067a8e
refactor(test): extract inflight generation fence regressions
이택훈
committed
8960706
fix(ci): budget PostgreSQL lane from measured runtime
이택훈
committed
d3fc33d
chore(docs): refresh inflight module inventory
이택훈
committed
e4df940
fix(courier): clarify post-notify outbox bookkeeping log
kunkunGames
authored
e70299f
fix(a11y): drop redundant selected prefix from office manager radios
kunkunGames
authored
cc99b98
test(kanban): cover scrub_worktree_keys_from_json contracts
kunkunGames
authored
e4b9f6b
fix(doctor): remove P0 jargon from OpenCode warm-server next_step
kunkunGames
authored
57b7bd1
fix(ci): pin extracted generation-fence tests in writer-gate skip set
kunkunGames
committed
88857de
Merge remote-tracking branch 'origin/main' into codex/restore-main-ci-20260824
kunkunGames
committed
7e3b81d
fix(db): restore deployed migration lineage and main CI
kunkunGames
authored
a00ec69
fix(intake-router): fail closed on open-route lookup errors

authored
8b91559
perf(auto-queue): use ORDER BY LIMIT 1 for oldest pending entry

authored
599c9ea
fix(doctor): classify mailbox consistency as provider runtime

authored
d618ada
perf(auto-queue): combine remaining-entry count queries

authored
2b57eb2
test(routines): recover poisoned loader locks instead of unwrap

authored
249009e
fix(doctor): remove shadowed gateway_standby diagnostic arm

authored
cf0c10a
fix(steward): tighten scratch detection and allow supply-lite titles

authored
729f664
fix(parity): do not treat dashes inside SQL strings as comments

authored
36f0a10
perf(auto-queue): use EXISTS for active-dispatch checks

authored
79b2f4c
merge: sync itismyfield/AgentDesk main (2026-08-25)
kunkunGames
committed
ae13224
Merge pull request #1712 from kunkunGames/chore/sync-upstream-itismyfield-20260825
kunkunGames
authored
dd7a857
Merge commit '84c83ed1c959ec8ee841508ac5652d5c745c8491' into codex/upstream-sync-20260824T200105Z
merge-check
committed
867f506

Commits on Aug 25, 2026

merge: sync itismyfield/AgentDesk main (2026-08-26)
kunkunGames
authored
673ea32
fix(dashboard): align lockfile root manifest
merge-check
committed
877f0ab
Merge pull request #1727 from kunkunGames/fix/dashboard-lockfile-deploy-20260826
kunkunGames
authored
61457da
Merge commit '252d7a5ae62543841e4dc72965e15167d1c0ab62' into codex/upstream-sync-20260825T200100Z
merge-check
committed
e3cec6a

Commits on Aug 28, 2026

feat: 예약 메시지 Discord 전용 멘션 지원 (#1763)

kunkunGames
and
쿤쿤
authored
19ea5a9
fix(qwen): extend startup watchdog to four minutes
merge-check
committed
63b0e2b

Commits on Aug 29, 2026

Commits on Aug 30, 2026

Commits on Aug 31, 2026

Courier: avoid redundant query in zero-TTL outbox enqueue

kunkunGames
and
google-labs-jules[bot]
authored
bd9e7d1
Accessor: improve modal sprite and emoji selector accessibility

kunkunGames
and
google-labs-jules[bot]
authored
91773ca
Optimize phase-gate context normalization

kunkunGames
and
google-labs-jules[bot]
authored
0b09a0e
Accessor: Add semantic accessibility to modal sprite/icon selectors

google-labs-jules[bot]
and
kunkunGames
committed
f5a64ab
Redline: maintainability audit drift correction (#1817)

kunkunGames
and
google-labs-jules[bot]
authored
dda980e
Bolt: optimize terminal pending cleanup query (#1813)

authored
5a1e0eb
Steward: allow explicit no-impact values in PR analyzer (#1756)

kunkunGames
and
이택훈
authored
a8e2fda
Bolt: optimize activate active and pending run queries

authored and
쿤쿤
committed
7332d38
Bolt: optimize activate active and pending run queries

authored and
쿤쿤
committed
89f1fd0
Accessor: Add semantic accessibility to modal sprite/icon selectors

google-labs-jules[bot]
and
kunkunGames
committed
cdc9013
Steward: enforce branch formatting and detect shell/sql test scratch files (#1820)

kunkunGames
and
google-labs-jules[bot]
authored
c5e8425

Commits on Sep 1, 2026

Commits on Sep 2, 2026

Gatekeeper: add stale audit allowlist guard

google-labs-jules[bot]
and
kunkunGames
committed
05affcd