ci: restore generated blocking security scans - #3791

Closed

KooshaPari wants to merge 219 commits into

tailcallhq:mainfrom

KooshaPari:ci/baseline-workflow-repair-20260731

Commits on May 2, 2026

ci: add cargo-deny config, fix workspace license (#3)

KooshaPari
and
claude
authored
c126175
docs: add CLAUDE.md with fork context and Phenotype-org additions

KooshaPari
and
claude
committed
6e6679c
docs: add journey-traceability + iconography implementation (#4)

KooshaPari
and
Phenotype Agent
authored
af78ca8
ci: SHA-pin GitHub Actions (normalize to canonical SHAs)

Phenotype Agent
and
claude
committed
03409b2
chore: update stale workflow

Phenotype Agent
and
claude
committed
2fdbc96
ci: add trufflehog secrets scan
Phenotype Agent
committed
a13e279
docs: add CODEOWNERS
Phenotype Agent
committed
0ca21da
ci: add FUNDING.yml
KooshaPari
committed
e322549
docs: add CONTRIBUTING.md and SECURITY.md
Phenotype Agent
committed
f04b643
Add CHANGELOG.md scaffolding

Phenotype Agent
and
claude
committed
2658d36
docs: trim README to 169 lines, add fork preamble

Phenotype Agent
and
claude
committed
b6e8c02
docs: trim README to 169 lines, add fork preamble (#5)

authored
406bc64
ci(cargo-deny): add workflow_dispatch trigger, fix double-tag checkout

KooshaPari
and
claude
committed
208dce5

Commits on May 3, 2026

chore: bump version to 0.1.1 (#6)

KooshaPari
and
Phenotype Agent
authored
1d7024f
chore: commit untracked infrastructure files
Phenotype Agent
committed
4a97dce
ci: pin all GitHub Actions SHA [org-bootstrap-2026-05-03]
Phenotype Agent
committed
2d0cd6d

Commits on May 4, 2026

fix(cargo-deny): remove stale RUSTSEC-2026-0049 ignore (#7)

KooshaPari
and
claude
authored
864dd7c
fix(cargo-deny): ignore unmaintained transitive advisories with rationale
Phenotype Agent
committed
9c1ef52
fix(cargo-deny): ignore unmaintained transitive advisories with rationale (#8)

KooshaPari
and
Phenotype Agent
authored
6100def
fix(forgecode): update compact history handling
Phenotype Agent
committed
8fd7740

Commits on May 5, 2026

fix(forge_main): suppress cursor position timeout errors on exit
Phenotype Agent
committed
fb623a1
feat(forgecode): add LLM summarization for compaction

Phenotype Agent
and
claude
committed
e20a527

Commits on May 6, 2026

security(ci): replace trufflehog/actions/setup with go install + setup-go

Phenotype Agent
and
claude
committed
ebd253b
fix(forgecode): restore workspace members list

Phenotype Agent
and
claude
committed
c14fe20
chore: add cargo-deny bans config and update workflows
Phenotype Agent
committed
da8df12
fix(forgecode): restore workspace members

Phenotype Agent
and
claude
committed
1e757df
fix(workflows): use pull_request instead of pull_request_target

Phenotype Agent
and
claude
committed
b2b6383
chore: add omniroute benchmark plan

Phenotype Agent
and
claude
committed
bfbfba7

Commits on May 7, 2026

chore(forgecode): add packageManager field

Phenotype Agent
and
claude
committed
9bdfc16
fix(rust): tighten deny.toml wildcards policy in forgecode
Phenotype Agent
committed
1b59732

Commits on May 28, 2026

Merge upstream/main into main

Phenotype Agent
and
claude
committed
93761b2
Merge fork commit 6100def72 into synced main
Phenotype Agent
committed
c2bfb2b

Commits on Jun 8, 2026

chore(forgecode): shell-script hygiene (#14)

authored
598cc3a

Commits on Jun 9, 2026

chore(forgecode): align editorconfig with org standard (#16)

KooshaPari
and
Phenotype Agent
authored
be8425b
ci: add release workflow with tag triggers, build, test, and crates.io publish
Phenotype Agent
committed
62e209a
chore(forgecode): align version drift (#17)

KooshaPari
and
Phenotype Agent
authored
8c91ed6
chore(forgecode): add standard CODEOWNERS (#15)

KooshaPari
and
Phenotype Agent
authored
7411096

Commits on Jun 12, 2026

chore(gitignore): adopt shared node template from phenotype-tooling (#19)
KooshaPari
authored
ba9b6b8

Commits on Jun 16, 2026

feat(session-viewer): hide subagent sessions, add FTS5 search, pagination, and loop commands (#20)

authored
70e43e7

Commits on Jun 18, 2026

wip: pre-push snapshot 2026-06-18T02:00:13Z from wrap-up session
Phenotype Agent
committed
c462519

Commits on Jun 21, 2026

feat(forgecode): perf-v2 — dirty tracking, drop guard, FTS5 search, by-ref upsert, HTTP cache, composite indexes (#21)

KooshaPari
and
Phenotype Agent
authored
f4d300b
feat(forgecode): v3 — :reparent/:cwd commands, sort UI, cwd+message_count migration (#22)

KooshaPari
and
Phenotype Agent
authored
eb1e886
feat(forgecode): v4 — :reparent/:cwd commands, sort UI, ConversationSort canonical, get_conversation_snippet (#24)

KooshaPari
and
Phenotype Agent
authored
345fb70
fix(forge_app,forge_repo): add new Conversation fields to test fixtures
Phenotype Agent
committed
d31e918
chore(ci): regenerate workflows via gh-workflow-gen
Phenotype Agent
committed
66d6160
feat(config): document OutputMode in schema + chore(docs): L7 stub regeneration
Phenotype Agent
committed
1c91f6e
fix(forgecode): v4-ux P0 reactivity — kill stale background tasks, Arc-shared conv map, single-await prompt (#25)

KooshaPari
and
Phenotype Agent
authored
2050073
fix(forgecode): v4-ux P0 reactivity — kill stale background tasks, Arc-shared conv map, single-await prompt (#26)

KooshaPari
and
Phenotype Agent
authored
708849c

Commits on Jun 22, 2026

feat(forgecode): status bar — Claude-style context/tokens/tools/last-action (#27)

KooshaPari
and
Phenotype Agent
authored
ccf325a

Commits on Jun 23, 2026

fix(forge): non-TTY stdin no longer hangs; re-point auto-update to KooshaPari/forgecode (#28)

KooshaPari
and
Phenotype Agent
authored
aff6aed

Commits on Jun 24, 2026

feat(forgecode): compress tool output to 3 lines with expand hint (#29)

KooshaPari
and
Phenotype Agent
authored
95a9d1e
feat(forgecode): ASCII color coding + symbol per tool type (#30)

KooshaPari
and
Phenotype Agent
authored
85a24d1
feat(forgecode): promote subagent tool discovery to top-level system prompt (#31)

KooshaPari
and
Phenotype Agent
authored
953cced

Commits on Jun 26, 2026

fix: resolve persistent 'database is locked' in shared .forge.db (P1+P2) (#32)

authored
5a85a2b
feat(forgecode): wire refresh_fts_index into background cadence (P2a) (#34)

KooshaPari
and
Phenotype Agent
authored
476fa62
feat(forgecode): configurable WAL checkpointer + ctrl_c graceful flush (P1a) (#35)

KooshaPari
and
Phenotype Agent
authored
21dd884
feat(P2b): external-content FTS5 migration + query rewrites (#36)

authored
4e3e866
feat(forgecode): intent-gated semantic pruning — state machine + schema + prune gate (P4) (#37)

authored
528d429
Merge upstream/main: resolve conflicts per UNION intents
KooshaPari
committed
11f72d2
fix: add ConversationTree handler to ui.rs match statement
KooshaPari
committed
b6ffe90
feat(forge_dbd): single-writer daemon scaffold — collapse N:1 SQLite contention (P3) (#33)

authored
05b7c53
test(forge_repo): add comprehensive test suite for P1/P2/P2b/P4 merged work (#38)

authored
e66cf4d
feat(tooling): forge-session-cleaner — classifier + safe gated delete (#39)

authored
596669b
feat: transparent zstd compression of context blobs (lossless) (#40)

authored
fe1a62f
feat: auto_vacuum=INCREMENTAL + periodic incremental_vacuum (#41)

authored
fb118c9
feat(tooling): forge-context-backfill — batch-compress existing rows (#42)

authored
7753b94

Commits on Jun 27, 2026

feat(forge_main): polish conv-view UX + wire FTS search & sort into selector + version bump 2.10.0 (#43)

authored
8cf33ae
feat(forge): CC parity — /clear /init /rewind commands with full infra wiring (#44)

KooshaPari
and
Phenotype Agent
authored
73771f2
feat(forgecode): absorb 5 pheno crates + drift wiring + ZSH hooks + snapshot fix
Phenotype Agent
committed
ba6090a

Commits on Jun 28, 2026

fix(forge_select): debounce preview rendering to 150ms to avoid per-keystroke subprocess spawn (#45)

KooshaPari
and
Phenotype Agent
authored
39f7dc4
fix(ci): unblock CI pipeline — fix cargo-deny action + setup-go SHA pin (#46)

KooshaPari
and
Phenotype Agent
authored
22a89e0
feat(forge): add /review, /test, /think CC parity commands + debounce fix
Phenotype Agent
committed
5802046
feat(forge): subagent breadcrumb — '↳' prefix for conversations with parent_id
Phenotype Agent
committed
8e67a7f
feat(forge): subagent breadcrumb 'spawned by X' in info panel + conv header
Phenotype Agent
committed
536bb23
feat(forge): add :fts-optimize command — FTS5 index maintenance
Phenotype Agent
committed
8654a3f
feat(forge): add :fts-optimize command — FTS5 index maintenance
Phenotype Agent
committed
6dfd197
fix(security): redact secrets in Debug (ApiKey/AuthCredential/OAuth tokens)

Phenotype Agent
and
claude
committed
d46243e
docs(audit): forgecode overhaul deep-audit + phased DAG WBS roadmap (#47)

authored
c461435
feat(p0): de-fork doc/governance surface to Rust-first (#50)

authored
789f270
chore(crates): remove dead ghostty-kit + clarify forge_dbd WIP status (#48)

authored
c243d64
fix(stubs): implement openai http_delete + make NoopIntentExtractor a true no-op (#49)

authored
86388f5
fix(p1): redact device-code secrets + dedup update bots (#52)

authored
132dea4
feat(p2): forge_dbd health probe + graceful drain on shutdown (#53)

authored
21f2fbc
fix(p2): cancellable/bounded async task lifecycle (FTS loop, forge3d accept, telemetry spawns) (#54)

authored
082c0b0

Commits on Jun 29, 2026

Commits on Jun 30, 2026

fix(security): default-deny policy engine + opt-in redacted telemetry (#68)

KooshaPari
and
Phenotype Agent
authored
0346be2
perf(forge_repo): lite conversation-list query — fixes 3GB+ RAM (#71)

authored
17d95c3
docs(packaging): forge-dev installer + CLI spec (#72)

KooshaPari
and
Phenotype Agent
authored
e0cee4a
perf(update): skip GitHub update check in CI/agent-mode; default frequency to Daily (#74)

KooshaPari
and
Phenotype Agent
authored
4373179
perf(alloc): linux-gate jemalloc; use mimalloc on macOS (ARM64 bug #2532) (#75)

KooshaPari
and
Phenotype Agent
authored
45e1073
feat(maintenance): add 'forge maintenance compress' for zstd backfill migration (#76)

KooshaPari
and
Phenotype Agent
authored
b56b88d
feat(daemon): Zig forge-daemon (kqueue+posix_spawn+task-ring) for density (#77)

KooshaPari
and
Phenotype Agent
authored
6a479b2
feat(repo-map): tree-sitter repository structure map (#73)

KooshaPari
and
Phenotype Agent
authored
6f8f80a

Commits on Jul 2, 2026

chore: upstream diff analysis report (#70)

KooshaPari
and
Phenotype Agent
authored
aefcabc
chore(perf): baseline measurement (per-agent RSS / idle CPU / system-pool) (#78)

KooshaPari
and
Phenotype Agent
authored
2484fa8
chore: cross-fleet hygiene sweep (#69)

KooshaPari
and
Phenotype Agent
authored
a14b7f7

Commits on Jul 3, 2026

feat(repo-map): tree-sitter repo map + forge3d CLI + similarity hash-only impl (#79)

KooshaPari
and
Phenotype Agent
authored
edd84c2
feat(forge-tui): wire forge_tui TUI dashboard crate into workspace (#80)

KooshaPari
and
Phenotype Agent
authored
465542a
feat(packaging): forge-dev binary + install guide (T18) (#81)

authored
5b5f843
chore(forge3d): polish CLI help text — add about/doc strings to all commands (T57) (#82)

KooshaPari
and
KooshaPari
authored
5f6e621
chore(sync): integrate upstream tailcallhq/forgecode (32 commits) (#83)

authored
c0ad2a3
feat(publish): add cargo-dist-style release pipeline for forge-dev (#84)

KooshaPari
and
Phenotype Agent
authored
71c6a7a

Commits on Jul 6, 2026

feat(brand): add Terminal-Forge golden icon set (vision-pillar L96) (#87)

KooshaPari
and
Phenotype Agent
authored
2947254
docs(readme): inject centered brand icon + tagline (L104) (#88)

KooshaPari
and
Phenotype Agent
authored
4a76d20
feat(brand): L101 motion polish — animated SVG variant (#89)

KooshaPari
and
Phenotype Agent
authored
4aff1f6

Commits on Jul 7, 2026

docs(identity): L105 animated demo media (SVG + MP4 + README) (#90)

KooshaPari
and
Phenotype Agent
authored
ca824ff
feat(forge_display): Terminal-Forge palette → theme.rs (Phenotype-org addition) (#86)

KooshaPari
and
Phenotype Agent
authored
4e993dd
docs(readme): L107 — link to visual identity demo (L105 ladder close) (#91)

KooshaPari
and
Phenotype Agent
authored
f5fc938
audit(v38): forgecode C03 scorecard — Agent Readiness (18/36, D) (#85)

authored
2220633
renames(helioslite): publish-surface rename + provenance docs + release policy (#92)
KooshaPari
authored
9d67435
feat(forge_infra): L133 cross-pollination — backoff + cyclic_check + glob_pattern (#93)

KooshaPari
and
Phenotype Agent
authored
3df1540

Commits on Jul 15, 2026

fix: per-provider error resilience and /providers remove TUI command
Phenotype Agent
committed
69f83e9

Commits on Jul 22, 2026

ci: fix release workflow heredoc indentation
KooshaPari
committed
d7bc2cd
feat(gpu): add forge_gpu GpuLane for heterogeneous CUDA routing (#95)
KooshaPari
authored
3e7cb77
ci: harden workflows and unblock checks

KooshaPari
and
forge-code-agent
committed
5c9d92c
ci: fix rust-cache action pin

KooshaPari
and
forge-code-agent
committed
562093e
ci: use pinned trufflehog action

KooshaPari
and
forge-code-agent
committed
81bb0df
ci: repair pinned action shas

KooshaPari
and
forge-code-agent
committed
f250836
ci: fix trufflehog image tag

KooshaPari
and
forge-code-agent
committed
14e1d29
ci: restore deny and nextest commands

KooshaPari
and
forge-code-agent
committed
8d5418c
ci: install zig for workspace builds

KooshaPari
and
forge-code-agent
committed
e6fa43c
chore: preserve local forgecode work
KooshaPari
committed
a540d2e
ci: gate forge daemon zig core
KooshaPari
committed
5e37326
fix: preserve update fallback result handling
KooshaPari
committed
f06a456
fix: repair perf harness linux build
KooshaPari
committed
c1a39b2
perf: fast-path zsh rprompt
KooshaPari
committed
39fb119
fix: parse theme hex without string slicing
KooshaPari
committed
8edbc9b
fix: satisfy strict string safety lints
KooshaPari
committed
75ec697
chore: preserve forgecode workflow and generated state

KooshaPari
and
forge-code-agent
committed
965d831
fix: satisfy ci clippy in perf harness
KooshaPari
committed
e238501
chore: preserve forgecode workspace fixes

KooshaPari
and
forge-code-agent
committed
c34802b
ci: make autofix workflow verify only
KooshaPari
committed
b182e54
ci: format fork gpu lane crate
KooshaPari
committed
2ca8562
Merge remote-tracking branch 'fork/main' into fix/workflow-indent
KooshaPari
committed
3fa49a5
chore: preserve forge info formatting
KooshaPari
committed
aa329b8
ci: align autofix and schema gates
KooshaPari
committed
3056ea7
test: canonicalize generated schema
KooshaPari
committed
5c82439

Commits on Jul 23, 2026

Merge pull request #96 from KooshaPari/fix/workflow-indent
KooshaPari
authored
7422a3e
fix: gate forge3d unix sockets on windows
KooshaPari
committed
fa5a7df
fix: gate forge3d daemon on unix
KooshaPari
committed
f7b7b9c
fix: preserve forge3d cli metadata on windows
KooshaPari
committed
4ebc842
feat(dual-harness): shared-3task.v1 process_smoke adapter

KooshaPari
and
cursoragent
committed
8a6b095
chore: update Cargo.lock for dual_harness workspace member

KooshaPari
and
cursoragent
committed
41f1c0a
Merge pull request #98 from KooshaPari/feat/dual-harness-shared-3task
KooshaPari
authored
11889d4
fix: clear forge3d windows release warnings
KooshaPari
committed
8e8efab
Merge remote-tracking branch 'fork/main' into fix/windows-release-forge3d
KooshaPari
committed
e3d5a9c
fix: align dual harness with ci lint
KooshaPari
committed
4948c81
fix: vendor dual harness fixture for ci
KooshaPari
committed
e13d79b
Merge pull request #97 from KooshaPari/fix/windows-release-forge3d
KooshaPari
authored
fd17142
fix: gate forge daemon unix sockets on windows (#99)

KooshaPari
and
KooshaPari
authored
c84b1e6
fix: repair winterminal windows release compile (#100)

KooshaPari
and
KooshaPari
authored
7567a59
fix: report helioslite package version
KooshaPari
committed
5796c89
Merge pull request #101 from KooshaPari/fix/helioslite-version-branding-v2
KooshaPari
authored
2c20fd4
fix: keep forge main cli tests compiling
KooshaPari
committed
20f844b
fix: keep forge main cli tests compiling (#102)
KooshaPari
authored
f238e4f
Merge remote-tracking branch 'fork/main' into fix/per-provider-error-resilience
KooshaPari
committed
a3cb940
fix: satisfy provider resilience clippy
KooshaPari
committed
296be1d
fix: per-provider error resilience and provider removal (#94)
KooshaPari
authored
9f2c201
chore: trigger main CI after merge train
KooshaPari
committed
38332bd
docs: record forgecode merge train
KooshaPari
committed
58c3512
fix: gate forge tui unix sockets on windows
KooshaPari
committed
79c08fe
fix: gate forge dbd unix sockets on windows
KooshaPari
committed
9f599be
fix: silence forge dbd windows unix-gate warnings
KooshaPari
committed
336318b
ci: install protoc for nightly and attestation

KooshaPari
and
forge-code-agent
committed
425daf0
fix: align installers with fork release artifacts

KooshaPari
and
forge-code-agent
committed
016130a
ci: use supported artifact provenance action

KooshaPari
and
forge-code-agent
committed
14116a0
ci: enable dev binary feature in nightly

KooshaPari
and
forge-code-agent
committed
31b27db
ci: add scorecard workflow for quality gating
KooshaPari
committed
290a312
chore(ci): harden github workflows and add fork scorecard/sast coverage
KooshaPari
committed
9a76738
ci: fix workflow yaml needs indentation
KooshaPari
committed
e9b1d4e

Commits on Jul 24, 2026

fix(spinner): suppress ANSI output when stderr is not a terminal
KooshaPari
committed
43268fb
chore: add bench/ to .gitignore
KooshaPari
committed
b7007ff

Commits on Jul 28, 2026

ci: add Mergify auto-merge rules
KooshaPari
committed
6410d19
ci: add Trunk.io lint/format config
KooshaPari
committed
c883fd0
ci: add CircleCI parallel pipeline
KooshaPari
committed
0c1ffa4
feat(compaction): add configurable compression and importance-based pruning
KooshaPari
committed
db286f0

Commits on Jul 29, 2026

fix: integrate compaction strategies across providers
KooshaPari
committed
db0c480
ci: make generated lint and release gates runnable
KooshaPari
committed
d957f56
style: satisfy workspace formatting and clippy
KooshaPari
committed
8bf0e00
wip(repo): preserve workspace conversation query
KooshaPari
committed
11c99c3
feat(compaction): add AI-driven compression and semantic pruning
KooshaPari
committed
55e6582
chore: preserve workspace conversation query support
KooshaPari
committed
e7aa5b5
fix(ui): adjust stream renderer for compaction integration
KooshaPari
committed
9611099
chore(ui): expose workspace conversation scope
KooshaPari
committed
1ed5446
chore(api): thread workspace conversation scope
KooshaPari
committed
2fc24ba
fix(repo): preserve typed conversation summary selection
KooshaPari
committed
bb53128
fix: propagate lightweight conversation workspace scope
KooshaPari
committed
5aca614
fix: propagate lightweight conversation workspace scope
KooshaPari
committed
5b49d77
fix(env): make workspace hashes deterministic

KooshaPari
and
KooshaPari
authored
7c0271a
Merge branch 'chore/preserve-workspace-conversation-query'
KooshaPari
committed
b01fb13
fix: use deterministic hash builder API
KooshaPari
committed
52288fa
fix: avoid unchecked compaction indexing
KooshaPari
committed
0279fe6
chore(ci): regenerate release workflow manifests
KooshaPari
committed
8c463ac
ci: refresh generated release workflow
KooshaPari
committed
80ace82
style: format compaction bounds check
KooshaPari
committed
3666eaa
ci: rerun canonical release gates
KooshaPari
committed
4d3d80b
ci: compare generated workflows semantically
KooshaPari
committed
68aa2e4
build: lock workflow yaml parser
KooshaPari
committed
230970e
chore: refresh forge config schema
KooshaPari
committed
fd99999
ci: harden Scorecard and add fuzz smoke (#105)

KooshaPari
and
KooshaPari
authored
958ad86
ci: update .mergify.yml
KooshaPari
committed
f0684f3
ci: update .github/workflows/ci.yml
KooshaPari
committed
53b30c7
ci: update .github/workflows/trunk-check.yml
KooshaPari
committed
5ad53c5
ci: update .github/workflows/scorecard.yml
KooshaPari
committed
f8dcc30
ci: update .github/stale.yml
KooshaPari
committed
9d6d5fa
ci: update .trunk/trunk.yaml
KooshaPari
committed
0f767e3
ci: update renovate.json
KooshaPari
committed
aa4397e
ci: update .pre-commit-config.yaml
KooshaPari
committed
2a12599

Commits on Jul 31, 2026

ci: repair generated workflow and trunk action pin
KooshaPari
committed
e057cf3
ci: restore blocking dependency and vulnerability scans
KooshaPari
committed
e0d6138