Repository navigation

Stabilize Glaze architecture, runtime, security, packaging, and cross-platform APIs - #5

Closed

turinglambdaai wants to merge 122 commits into

mainfrom

chore/architecture-boundaries

Commits on Sep 17, 2026
- docs: refocus README on public architecture
  turinglambdaai
  committed
  7cacf3d
- docs: add architecture boundaries
  turinglambdaai
  committed
  5616ecf
- docs: add focused roadmap
  turinglambdaai
  committed
  39b3c0d
- docs: mark glaze main as public facade
  turinglambdaai
  committed
  3a4bac3
- test: cover public glaze facade
  turinglambdaai
  committed
  b1d2aaa
- examples: add focused tray example
  turinglambdaai
  committed
  2c52e75
- examples: add focused events example
  turinglambdaai
  committed
  d4f49de
- examples: add events frontend
  turinglambdaai
  committed
  f3edd05
- docs: organize examples by recommended learning path
  turinglambdaai
  committed
  4d59d9f
- test: gate macOS menu e2e to macOS
  turinglambdaai
  committed
  2dfe517
- fix: make app shutdown idempotent and cleanup on errors
  turinglambdaai
  committed
  3fabee2
- fix: dispatch tray operations by handle backend
  turinglambdaai
  committed
  b24169c
- fix: retain single-instance locks for process lifetime
  turinglambdaai
  committed
  ada1599
- test: cover idempotent app shutdown
  turinglambdaai
  committed
  fc0f310
- security: confine static files and fix loopback host parsing
  turinglambdaai
  committed
  a322189
- test: cover host guard and static path confinement
  turinglambdaai
  committed
  f4f86b6
- fix: resolve packaged public assets without wrapper cwd
  turinglambdaai
  committed
  0c70b24
Commits on Sep 18, 2026
- fix: compile application entry directly
  turinglambdaai
  committed
  7a950a3
- fix: resolve packaged assets and validate server inputs
  turinglambdaai
  committed
  8cac26e
- fix: modernize scaffold and repair build option parsing
  turinglambdaai
  committed
  59b5716
- test: execute packaged module+ main entry
  turinglambdaai
  committed
  f531318
- ci: execute packaged entry on every platform
  turinglambdaai
  committed
  ab5bb8f
- ci: enforce formatting and cover Racket 9.3 packaging
  turinglambdaai
  committed
  1a29823
- fix: harden update manifest fetching
  turinglambdaai
  committed
  50009fc
- security: stop leaking handler exceptions to clients
  turinglambdaai
  committed
  a52c170
- test: cover update hashing and safe 500 responses
  turinglambdaai
  committed
  cc2ede0
- fix: generate safe JavaScript API bindings
  turinglambdaai
  committed
  5209af1
- test: cover safe generated API JavaScript
  turinglambdaai
  committed
  9a945e0
- fix: make CLI fail fast and protect existing projects
  turinglambdaai
  committed
  ed3bb4f
- security: enable API token by default and validate lifecycle inputs
  turinglambdaai
  committed
  a4900b8
- test: cover run-app argument contracts
  turinglambdaai
  committed
  65b8d3f
- docs: document secure defaults and hardened runtime contracts
  turinglambdaai
  committed
  21d5389
- docs: record stabilization fixes
  turinglambdaai
  committed
  f2c3c7a
- feat: expose background-active webview mode
  turinglambdaai
  committed
  7085b05
- feat: accept portable background-active webview option
  turinglambdaai
  committed
  3864006
- feat: accept portable background-active webview option
  turinglambdaai
  committed
  62488a8
- feat: accept portable background-active webview option
  turinglambdaai
  committed
  3c64dd4
- feat: keep macOS monitoring webviews active with public APIs
  turinglambdaai
  committed
  d4af0f7
- feat: pass background-active mode through run-app
  turinglambdaai
  committed
  a758476
- fix: isolate build intermediates and verify notarization staple
  turinglambdaai
  committed
  554e99e
- fix: repair update checker syntax
  turinglambdaai
  committed
  9beec49
- fix: classify listener startup races as network errors
  turinglambdaai
  committed
  ef2d121
- docs: document background-active webview mode
  turinglambdaai
  committed
  5889fbd
- fix: use real Windows folder picker and correct kdialog argv
  turinglambdaai
  committed
  17f12e2
- fix: use correct macOS SMAppService registration API
  turinglambdaai
  committed
  0c09144
- fix: harden license canonicalization and claim validation
  turinglambdaai
  committed
  7d3913b
- test: cover license control characters and invalid dates
  turinglambdaai
  committed
  5096f4a
- fix: harden Linux deep-link registration contract
  turinglambdaai
  committed
  5e5a58b
- security: escape Linux desktop entries and validate autolaunch inputs
  turinglambdaai
  committed
  d1a2034
- test: cover Linux deep-link contract and escaping
  turinglambdaai
  committed
  5fca17d
- security: open browser without shell command construction
  turinglambdaai
  committed
  c0ed47a
- security: validate SSE event names and payloads
  turinglambdaai
  committed
  22c9a0e
- fix: make asset helpers robust for nested directories
  turinglambdaai
  committed
  86e4ae0
- fix: use real GDK clipboard atom and correct Linux helpers
  turinglambdaai
  committed
  f72970c
- security: pass macOS notification content as argv
  turinglambdaai
  committed
  7cf6478
- fix: preserve Unicode and memory ownership in Windows clipboard
  turinglambdaai
  committed
  d5d2aaf
- fix: make installer builds fail-safe and assemble Linux AppDir
  turinglambdaai
  committed
  4b944c9
- security: escape packaging metadata and shell boundaries
  turinglambdaai
  committed
  443e630
- fix: repair packaging helper source quoting
  turinglambdaai
  committed
  efb0d3b
- ci: cancel stale runs for superseded PR commits
  turinglambdaai
  committed
  a48f4a1
- fix: fail closed for signing and bundle metadata
  turinglambdaai
  committed
  6442ff8
- ci: only request signing where credentials are available
  turinglambdaai
  committed
  1ffd840
- fix: repair SHA verifier parentheses
  turinglambdaai
  committed
  6f2bfb4
- fix: validate app names without unsupported regex escapes
  turinglambdaai
  committed
  960c701
- fix: remove stale glaze-lib CLI dependency
  turinglambdaai
  committed
  2dcf234
- chore: keep runnable examples out of package setup compilation
  turinglambdaai
  committed
  1efb8d6
- chore: exclude executable CI scripts from package setup
  turinglambdaai
  committed
  523e698
- security: make bootstrap single-use and protect SSE/origin boundaries
  turinglambdaai
  committed
  c154a2d
- security: use a distinct one-time browser bootstrap nonce
  turinglambdaai
  committed
  af09637
- test: lock down bootstrap, origin, and SSE authentication
  turinglambdaai
  committed
  39a71fe
- test: cover SSE protocol input validation
  turinglambdaai
  committed
  f50a377
- test: restore environment portably
  turinglambdaai
  committed
  debca81
- test: align generated client assertions with safe JS
  turinglambdaai
  committed
  87cd65c
- ci: use supported Windows installer toolchain
  turinglambdaai
  committed
  abf0f69
- fix: restore AppImage environment portably
  turinglambdaai
  committed
  7771166
- fix: resolve Windows root-relative asset paths
  turinglambdaai
  committed
  a1cbbac
- ci: replace unavailable formatter with compile gate
  turinglambdaai
  committed
  9bd8152
- api: validate WebView facade arguments consistently
  turinglambdaai
  committed
  bc71001
- test: cover WebView facade contracts
  turinglambdaai
  committed
  69d1640
- fix: fail loudly when browser fallback cannot launch
  turinglambdaai
  committed
  9595956
- api: validate routes and response helpers early
  turinglambdaai
  committed
  2f49934
- test: cover API route and response contracts
  turinglambdaai
  committed
  e0ac40f
- docs: add security reporting policy
  turinglambdaai
  committed
  c06a4dc
- docs: align contributor workflow with architecture boundaries
  turinglambdaai
  committed
  f7fb875
- fix: make Windows dialog buffers memory-safe and parse multi-select
  turinglambdaai
  committed
  d660b72
- test: cover Windows dialog multi-string parsing and contracts
  turinglambdaai
  committed
  b8b5da1
- api: validate menu protocol before native dispatch
  turinglambdaai
  committed
  9139a75
- test: cover menu protocol contracts
  turinglambdaai
  committed
  406eb83
- api: validate tray facade arguments consistently
  turinglambdaai
  committed
  fb95e47
- test: cover tray facade contracts
  turinglambdaai
  committed
  b97dbb3
- api: separate sys argument errors from platform failures
  turinglambdaai
  committed
  1a207e0
- test: cover sys public argument contracts
  turinglambdaai
  committed
  6357a63
- ci: verify installable source package archive
  turinglambdaai
  committed
  751b652
- docs: align Chinese README with current architecture
  turinglambdaai
  committed
  6527030
- docs: add repeatable release checklist
  turinglambdaai
  committed
  dc17b3e
- fix: report Windows autolaunch removal failures
  turinglambdaai
  committed
  ff5fadb
- pkg: separate runtime and build dependencies
  turinglambdaai
  committed
  c7fa748
- cli: fail fast on invalid arguments and partial key generation
  turinglambdaai
  committed
  2f771da
- test: cover CLI fail-fast behavior and scaffold
  turinglambdaai
  committed
  f8036d7
- fix: validate and fully read update manifests
  turinglambdaai
  committed
  2a18b7c
- test: cover update manifest and version contracts
  turinglambdaai
  committed
  152c8b3
Commits on Sep 20, 2026
- Add Dependabot for GitHub Actions
  turinglambdaai
  committed
  95e117c
- Add pull request checklist
  turinglambdaai
  committed
  1334300
- Add cross-platform bug report template
  turinglambdaai
  committed
  6e05ccb
- Configure issue templates
  turinglambdaai
  committed
  c0c2a76
- Harden CI permissions and timeouts
  turinglambdaai
  committed
  bdc3a92
- Pin CI actions to reviewed commits
  turinglambdaai
  committed
  350adce
- Avoid mutable AppImage tool in CI
  turinglambdaai
  committed
  018099d
- Upgrade setup-racket to Node 24 runtime
  turinglambdaai
  committed
  97cbacb
- Upgrade GitHub Actions to Node 24 releases
  turinglambdaai
  committed
  3260378
- Protect generated private keys on macOS
  turinglambdaai
  committed
  4f89308
- Document supported installer toolchains
  turinglambdaai
  committed
  8e80ae7
- Detect supported WiX version before packaging
  turinglambdaai
  committed
  15e7358
- Add cross-platform editor defaults
  turinglambdaai
  committed
  bfb4120
- Normalize text files across platforms
  turinglambdaai
  committed
  9747908
- Ignore generated installers and private key material
  turinglambdaai
  committed
  c4e0e72
- Add large static asset regression test
  turinglambdaai
  committed
  59abdfe
- Stream static assets instead of buffering whole files
  turinglambdaai
  committed
  a5e57a0
- test: cover macOS WebView full occlusion
  ren.ji
  committed
  796558a
- test: make macOS occlusion probe robust
  ren.ji
  committed
  9ef120e
- docs: record macOS occlusion CI limitation
  ren.ji
  committed
  9388d4e
Commits on Sep 21, 2026
- Merge remote-tracking branch 'origin/main' into chore/architecture-boundaries
  ren.ji
  committed
  91a645c

Commits

Commits on Sep 17, 2026

Commits on Sep 18, 2026

Commits on Sep 20, 2026

Commits on Sep 21, 2026