0
Fork 0
mirror of https://github.com/steipete/agent-scripts.git synced 2026-09-23 07:21:21 +00:00

Compare commits

...

248 commits

Author SHA1 Message Date
Peter Steinberger
ee4c7193bf
fix: publish app releases after uploading assets 2026-09-21 22:08:37 -07:00
Peter Steinberger
e332685698
docs: clarify Octopool read routing and freshness (#44) 2026-09-21 20:33:54 -07:00
Peter Steinberger
95d8d86949
fix(xcode-sync): guard selected toolchains with bounded smoke checks 2026-09-18 09:34:39 -07:00
Peter Steinberger
2784a3898d
fix(release-mac-app): drain release asset checks
Consume the complete asset-name list so an early regex match cannot cause printf to fail with SIGPIPE under pipefail. Cover short and large valid lists plus missing extra assets with an offline regression, and run it in CI.
2026-09-15 03:43:12 -07:00
Peter Steinberger
16a71932d9
fix(release-mac-app): run the Developer ID signing canary under the login home
The canary invoked codesign before the helper restored the account home, so
under an isolated producer HOME the keychain search list could not see the
Developer ID identity and every local release failed with 'no identity found'
after tagging. Scope HOME to mac_release_login_home for the canary call, the
same way the later signing child already does.
2026-09-13 19:12:59 -07:00
Peter Steinberger
02ea67bec3 docs: coordinate Team restarts through Stable 2026-09-13 13:06:26 -07:00
Peter Steinberger
01f4758140 docs: require explicit Team deployment approval 2026-09-13 12:35:14 -07:00
Peter Steinberger
b05b1ed676 docs: expose the complete Peekaboo skill directory 2026-09-12 22:04:20 -07:00
Peter Steinberger
d7b4db5ef5 docs: route Peekaboo guidance to its canonical skill 2026-09-12 21:18:55 -07:00
Peter Steinberger
60e8e13713 docs: use Peekaboo as computer-use fallback 2026-09-12 20:32:27 -07:00
Peter Steinberger
9bb82e9ef1
feat(browser-use): add Chrome remote-debugging auto-approve watcher 2026-09-12 12:50:11 -07:00
Peter Steinberger
c5aa55fb4a docs: correct OpenClaw deployment account 2026-09-11 22:43:01 -07:00
Peter Steinberger
d8ab47871b
docs(agents): one Chrome attach per task budget 2026-09-11 19:24:53 -07:00
Peter Steinberger
42e6353529
docs(maintainer-orchestrator): record telemetry and clawsweeper-state gate results 2026-09-11 18:36:58 -07:00
Peter Steinberger
0c153e1a1d
docs(maintainer-orchestrator): record clawpushrelay gate result 2026-09-11 18:15:46 -07:00
Peter Steinberger
866c26d0e3 docs(browser-use): distinguish relay and operation timeouts 2026-09-11 11:13:41 -07:00
Peter Steinberger
ec388b9800 docs(browser-use): clarify relay override URL format 2026-09-11 11:06:19 -07:00
Peter Steinberger
6db16aadaa docs(browser-use): persist relay discovery controls in daemon config 2026-09-11 10:57:57 -07:00
Peter Steinberger
7eb5b58b22
fix(release): pin credential runners to system Bash
Use the same explicit system shell for both tmux handoff and credential reader execution. Preserve environment scrubbing, status propagation, and the shared-session cleanup contract. Reject accidental PATH-selected Bash in the synthetic provider matrix.
2026-09-11 10:03:38 -07:00
Peter Steinberger
6149fd086c
fix(release): drain signing canary reports before checking status
Long codesign metadata can make grep -q close its pipe before printf finishes, causing a valid Developer ID canary to fail under pipefail. Consume the full report while preserving Apple trust and authority predicates. Add synthetic production-function regressions and run them in CI.
2026-09-11 09:57:23 -07:00
Peter Steinberger
15bcfe33f5
docs(orchestrator): record clawsweeper and nix repos as owner-maintained overrides 2026-09-08 06:09:45 -07:00
Peter Steinberger
e6903a140c
docs(orchestrator): record windows-packaging gate result 2026-09-07 23:57:13 -07:00
Peter Steinberger
12c50d78d3
docs(orchestrator): record six non-majority gate results from the phase-three sweep 2026-09-07 17:57:06 -07:00
Peter Steinberger
9d0ee489d1
docs(agents): forbid raw CDP probes against Peter's Chrome 2026-09-07 12:21:06 -07:00
Peter Steinberger
faf7b37dac
ci(codex): run private-home auth regression suite (#40) 2026-09-06 19:34:25 -07:00
Peter Steinberger
b511b24d36
docs(maintainer-orchestrator): log 2026-09-05 non-majority gate results 2026-09-06 18:17:17 -07:00
Peter Steinberger
362a562bc2
fix(codex-huge-context): diagnose private-home Keychain delivery
Document explicit Keychain selection in the existing external auth wrapper and add an opt-in private-home delivery probe with synthetic regression coverage. Preserve managed reviewer isolation, source scanning, auth projection, and configured inference selection.

Verified parent and private-home preflight, actual isolated acpx candidate review, 20 existing sandbox/route tests, skill validation, and an isolated P2 patch review. The installed helper already used explicit selection and was preserved.
2026-09-06 17:42:10 -07:00
Peter Steinberger
fc8757310b
docs: reconcile canonical Codex routing guidance 2026-09-05 22:41:19 -07:00
Peter Steinberger
8cceb4f3eb
docs(vm-lab): document clone and shell bootstrap diagnostics 2026-09-05 22:25:40 -07:00
Peter Steinberger
2e2773b02b docs(codex-first): note the list_turns resume refusal 2026-09-05 15:39:28 -07:00
Peter Steinberger
06a04b6eea docs(codex-first): document how codex exec resume works 2026-09-05 14:32:33 -07:00
Peter Steinberger
1d5ff536b4
docs(transcript): scope previews and publication explicitly (#39) 2026-09-05 13:00:30 -07:00
Peter Steinberger
d2790cf56f
chore(codex-first): select GPT-6 Astra with High and Fast 2026-09-05 10:48:22 -07:00
Peter Steinberger
b6c7ed56cb
chore(skills): remove retired Codex launch dependency 2026-09-05 10:45:18 -07:00
Peter Steinberger
92442a1b90
docs: retain native reviewers in large context catalog 2026-09-04 18:57:47 -07:00
Peter Steinberger
88f1b0a232
fix(codex): include Astra in direct API context preflight 2026-09-04 18:38:12 -07:00
Peter Steinberger
ef94376ca4 docs: forbid agent attribution trailers in commits and PRs 2026-09-02 18:32:38 -07:00
Peter Steinberger
b54663a31c
docs: scope release-only changelogs to openclaw 2026-09-02 12:54:39 -07:00
Peter Steinberger
e1e08d7383
docs(npm): defer publishing auth to owning skills
Replace the legacy standalone auth recipe with canonical npm and one-password handoffs. Preserve service-account-first access, explicit desktop consent, one task window in the shared session, helper-owned extraction, and window-only cleanup.\n\nValidated skills and documentation metadata/helper paths; Codex autoreview found no actionable blockers. Documentation only; no credential, tmux, or release operations.
2026-09-01 23:32:44 -07:00
Peter Steinberger
833f3fe873
fix(npm): resolve symlinked auth helper entrypoints
Node main detection now resolves both the module and argv paths. The sourced shell helper owns its physical sibling directory without changing caller state.

Add offline symlink, import, cache, and redaction regression coverage to CI.
2026-09-01 23:16:19 -07:00
Peter Steinberger
56c050e01c docs: remember personal Mac Studio worker identity 2026-09-01 16:17:03 -07:00
Peter Steinberger
584b5313c1
fix(release): start credential runner directly in tmux 2026-09-01 10:36:51 -07:00
Peter Steinberger
9b6cb5bdd9
docs: write changelogs only at release time 2026-08-31 11:33:03 -07:00
Peter Steinberger
8649e48768
fix(release-mac-app): quote direct-reference secret handoffs 2026-08-31 08:30:45 -07:00
Peter Steinberger
da5293719a
fix(release-mac-app): sanitize secret-provider diagnostics 2026-08-31 00:56:26 -07:00
Peter Steinberger
9b714ca5ef
chore(deps): refresh browser tooling and CI dependencies (#38) 2026-08-31 00:28:18 -07:00
Peter Steinberger
9b8796e3b8
fix(skills): safely repair nested self-links (#37)
Preserve real skill directories and files during ordinary sync. Add an explicit allowlisted nested-self-link repair that validates the entire batch before unlinking and reports partial progress on later failures.

Detect this loop topology in the read-only fleet audit, document the scoped owner workflow, and cover preservation, refusals, idempotence, and recurrence with isolated HOME fixtures.
2026-08-30 14:55:45 -07:00
Peter Steinberger
efa3b2f0f2
docs: preapprove task isolation and Crabbox leases 2026-08-30 09:02:52 -07:00
Peter Steinberger
3f9e884325
docs: preapprove synthetic proof captures 2026-08-30 02:27:24 -07:00
Peter Steinberger
01ae83e193
docs: separate Gitcrawl archive reads from Octopool gh 2026-08-29 14:19:03 -07:00
Peter Steinberger
f4e8ec98c0
docs: require patch-backed regression provenance (#36) 2026-08-29 12:39:31 -07:00
Peter Steinberger
55a873525d
docs: remove private one-password workflow from public skills 2026-08-28 18:37:23 -07:00
Peter Steinberger
8cfe7b9315
fix(clawsweeper-status): avoid SIGPIPE in workflow summary 2026-08-28 08:55:05 -07:00
Peter Steinberger
168f22313c
fix(clawsweeper-status): support public queue projection (#35)
Accept public exact-review queue aggregates independently of private target occupancy, preserve optional queue health without shifted fields, and report the publication tail separately.

Add public-projection, full/legacy, optional-field, and unavailable-response regression coverage. Verified with Bash 3.2, ShellCheck, skill validation, live public output, and CI.
2026-08-26 22:36:17 -07:00
Peter Steinberger
c8c8e2d725
docs: harden remote Mac topology guidance 2026-08-25 09:33:04 -07:00
Peter Steinberger
20ab9a5e6b
docs(peekaboo): keep AXPress foreground-explicit 2026-08-25 01:26:49 -07:00
Peter Steinberger
782fce3884
docs: sync PR image-upload rule with gh --attach status and extension warning 2026-08-23 22:22:38 -07:00
Peter Steinberger
d2e13afe35
fix(release): give the signing child a usable keychain domain
codesign resolves signing identities through the account's keychain
domain, which is read from HOME. Callers may legitimately sandbox HOME
for build isolation, and goplaces' release-local does, so the wrapped
signing command failed with:

  Error: An error occurred while accessing the keychain. A default
  keychain could not be found.

Run the wrapped command with the account's real home, the same domain the
codesign preflight already inspects. Environment scrubbing is unchanged.
2026-08-23 17:57:45 -07:00
Peter Steinberger
09393e80f5
fix(release): resolve the keychain domain independently of HOME
The codesign preflight queries the user keychain domain with
`security -d user`. That domain is read from the account's home
directory, so a caller that supplies an isolated HOME breaks it:

  security: SecKeychainCopyDomainDefault user: A default keychain could
  not be found.

goplaces' release-local does exactly this, running the signing step with
HOME pointed at an empty scratch directory, which made the dedicated
keychain check, the search-list read, and the search-list restore all
fail before signing could start.

Resolve the real home from the account database and run the four user
domain queries against it. The check keeps its meaning: it still inspects
the actual account's default keychain and refuses to sign with it.
2026-08-23 17:35:29 -07:00
Peter Steinberger
acd8d64c56
docs: preapprove routine Codex autoreview 2026-08-21 23:12:45 -07:00
Peter Steinberger
2b082d95ed
docs(peekaboo): clarify stateful host routing 2026-08-21 20:18:31 -07:00
Peter Steinberger
ee69e9516e
fix(release): reject credentialed function environments 2026-08-21 01:54:29 -07:00
Peter Steinberger
2dee499adf
fix(release): narrow service token inheritance 2026-08-21 01:44:34 -07:00
Peter Steinberger
8f714f53c6
fix(release): harden credential child startup 2026-08-21 01:03:51 -07:00
Peter Steinberger
15e8c80dff
fix(release): scrub package signing authority 2026-08-20 22:25:39 -07:00
Peter Steinberger
3ca3af90f8
feat(release): add package-only credential runner 2026-08-20 22:23:10 -07:00
Peter Steinberger
034471e2ce
docs: allow private Codex routing override 2026-08-19 22:43:12 -07:00
Peter Steinberger
af4319e378
docs: route Codex through private runtime policy 2026-08-19 22:30:13 -07:00
Peter Steinberger
dfafc65b31
fix(codex-first): fall back to reviewed approvals 2026-08-19 21:42:48 -07:00
Peter Steinberger
56a3841079
docs(peekaboo): update tools reference 2026-08-17 13:17:50 -07:00
Peter Steinberger
f559ee04f6
docs(peekaboo): refresh v4 command examples 2026-08-17 13:17:39 -07:00
Peter Steinberger
dc4f583a2c
feat(release): resolve Sparkle keys from 1Password (#34)
* feat(release): resolve Sparkle keys from 1Password

* fix(release): redact Sparkle credential locators

* docs: note headless Sparkle signing
2026-08-13 19:01:11 -07:00
Peter Steinberger
7d58adec76
fix(npm): pass registry via env, not leading --registry flag (npm 11 trust positional parse bug) 2026-08-13 11:11:40 -07:00
Peter Steinberger
2e320ff086
docs(browser-use): document relay rediscovery 2026-08-12 03:50:45 -07:00
Peter Steinberger
a6902feed7
docs(browser-use): require extension relay routing 2026-08-11 22:38:39 -07:00
Peter Steinberger
067178d2bd
fix(one-password): correct GitHub secret stdin usage 2026-08-10 18:27:49 -07:00
Peter Steinberger
bce6015dbd
chore: repair CI and refresh dependencies (#33)
* test(ci): align orchestrator policy guard

* chore(deps): refresh JavaScript dependencies
2026-08-09 23:32:02 -07:00
Peter Steinberger
096a5feee9
docs(peekaboo): update skill for v4 CLI 2026-08-09 23:24:23 -07:00
Peter Steinberger
68e90b8033
docs(skills): record automation lessons from a long GUI-driving session
peekaboo: screenshot pixels are not click points, and the scale has to come from
list screens. Clicks without --app/--pid need --foreground. The first click into
a background app is consumed by focus, so click twice; that silent no-op looks
exactly like a wrong coordinate and costs far more to diagnose than the extra
click costs. Prefer paste over type for secrets so values stay out of argv. Note
that see --annotate is not universal and to check it returns elements before
designing around it. Finally, a macOS CLI that hangs with no output at all is
often blocked by a modal, not broken.

codexbar: record the real dashboard endpoints, that --all-accounts is slow and
returns nothing when a Gatekeeper prompt is pending, and that Claude rows read
claude-swap stored backups. That last one explains two confusing readings: the
active slot shows as having no stored credentials, and a cached percentage keeps
rendering for accounts whose credentials are long gone.

codex-first: check for a live codex exec in the repo before editing or
committing, since a run whose work is already in the tree can keep looping and
overwrite fixes. Independent review earns its keep.
2026-08-09 22:20:29 -07:00
Peter Steinberger
587b0dd4ac
docs(skills): record relay-loss and dead-worker diagnosis
browser-use: an empty list_pages means the relay lost its shared tabs, not that
the browser died. It fails silently and a daemon restart cannot fix it, because
sharing is user group membership rather than daemon state. Hand the URL to the
browser the user is already at instead of escalating to a full-profile or
isolated browser.

codex-first: a worker that dies in seconds is a route problem, not a task
problem. Each error string names its cause, a router 502 usually means the model
id did not match the router's aliased catalogue, and one curl settles it far
cheaper than another failed run. Also: never pass a credential through -c, since
it lands in argv; use a private CODEX_HOME overlay.
2026-08-09 17:51:51 -07:00
Peter Steinberger
d382dba821
feat(project-structure): Swift support via zero-dependency scanner
- .swift files map alongside TS: regex/brace-depth line scanner validated 1:1
  against SourceKitten on 1,850 files (Peekaboo 5,166 / Tachikoma 836 top-level
  symbols, exact agreement), ~100x faster
- kinds: fn=func (incl. operators), cl=class/actor, ty=struct/enum/protocol/
  typealias/macro/extension:Target, c=let/var; visibility tags with internal
  omitted; --members and --public-only flags (Swift-only)
- lexical masking: comments, raw/multiline strings with escapes, #/../# regex
  literals, string interpolation (incl. raw \#(...)), #if/#else branch depth
- hardened via 12 adversarial review rounds: attribute-safe access detection,
  private(set), distributed/optional/unowned(unsafe)/borrowing/consuming,
  depth-aware binding lists, tuple/labeled-tuple patterns, generic-argument
  guards, bound-generic extension targets, repo-relative Swift test filtering
- fix: leaf repoRoot top-level files scanned when --include absent
- fix: destructured TS exports emit bound names (dense/skeleton) or squashed
  one-line pattern (typed modes) instead of leaking multi-line literals
- fixtures/ + selftest.mjs regression anchors (5 checks); SKILL.md documents
  Swift kinds, sizing (Peekaboo ~34k top / ~197k members / ~12k public tokens),
  nested --include, and named parserless-design limitations
2026-08-09 17:43:38 -07:00
Peter Steinberger
41a67f8786
docs(changelog): note clawsweeper-status queue health signals 2026-08-09 17:19:56 -07:00
Peter Steinberger
3a2a18306c
feat(clawsweeper-status): surface queue backoff, parked, and shed signals
Pending depth alone read as healthy while 46 exact-review items sat parked
on review_retry_exhausted and 48 more were in throttle_retry backoff. Print
handoff health, the ready/admissible split, backoff and parked reasons, and
shed-since-reset so operator-blocked items are visible in the snapshot.
2026-08-09 17:19:44 -07:00
Peter Steinberger
2cd4d05c6a
docs(browser-use): document mcporter argument mechanics and click failures
key=@file reads an argument from a file while --args takes inline JSON only.
That is a safety primitive: sign-in URLs and magic links are credential
equivalent and must not reach shell history or captured output. Also records
the short default call timeout, the workspace-root restriction on screenshot
filePath, and that a click by uid can return success without doing anything,
making keyboard activation plus a focus screenshot the reliable fallback.
2026-08-09 15:37:22 -07:00
Peter Steinberger
65a0429c26
feat(skills): add project-structure TypeScript repo-map generator 2026-08-09 14:44:35 -07:00
Peter Steinberger
59065041b5
docs(one-password): warn that --fields label= returns wrong concealed values
Measured on the Foundation p12 item: --fields label=p12_base64 returned 65
chars vs the correct 4432. Point release-credential reads at the JSON +
exact-label method so a truncated secret can never reach CI.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-09 00:48:38 -07:00
Peter Steinberger
874e97bd77
docs(one-password): unify release credentials under a release-credential tag
Renames every signing/notarization/tap item to 'Release - <what> - <scope>',
adds a 00 INDEX item mapping each GitHub Actions secret to its item+field, and
records that these secrets are per-repo (not org-level) plus the gogcli
legacy-name trap that silently fed the signer empty values.

Also records the non-majority repos found during the 2026-08 triage sweeps.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-09 00:45:09 -07:00
Peter Steinberger
157ce82c4a docs(skills): require conference strategy 2026-08-08 23:45:10 -07:00
Peter Steinberger
53f23144dd docs(skills): update clawstudio host identity 2026-08-08 23:45:10 -07:00
Peter Steinberger
cbdf5829ac refactor(skills): scope maintainer orchestration 2026-08-08 23:43:11 -07:00
Peter Steinberger
41009b13aa docs(hopper-debugger): correct MCP setup, --args footgun, and licensing
The skill assumed a preconfigured 'hopper' mcporter server and gave
examples that silently fail. Verified against Hopper 6.5:

- Hopper 6.0+ ships its own MCP server; document the registration,
  including --scope home (the default project scope writes config
  into whatever repo you are standing in).
- Arguments must use --args. mcporter accepts an unknown --params
  flag silently and drops the payload, so calls arrive empty and
  Hopper answers 'Document not found.' This reads like a licensing
  or state fault and is not.
- Document-scoped calls do not fall back to the current document;
  pass 'document' every time. Names carry no .hop extension.
- Hopper 6.x keeps the hopper-web-4 bundle id, so a missing
  hopper-web-6 prefs domain is not evidence of being unlicensed;
  read the About panel instead.
- Note Peter's Dropbox exports plus the provenance caveat, and the
  runtime-pairing method for finding which store an API writes to.
2026-08-08 21:58:32 -07:00
Peter Steinberger
ff2e218bf5
docs: add token-based GitHub PR/issue image upload rule (uploads.github.com/user-attachments) 2026-08-08 19:46:41 -07:00
Peter Steinberger
d4913d5444 fix: bound maintainer polling ownership 2026-08-08 01:06:03 -07:00
Peter Steinberger
de475639df feat(fleet): enforce Octopool cache health 2026-08-08 00:38:58 -07:00
Peter Steinberger
1b30780613 docs: default agent transcripts to omitted 2026-08-07 19:05:31 -07:00
Peter Steinberger
1017707e26
fix: harden mac release service account reads (#32) 2026-08-07 18:02:31 -07:00
Peter Steinberger
5f066c951a chore: make agent transcripts opt-in 2026-08-07 17:04:33 -07:00
Peter Steinberger
2469c645d2 docs(browser-use): clarify extension relay auth 2026-08-07 15:56:44 -07:00
Peter Steinberger
bfe9d6f838 feat(fleet): validate window title icon policy 2026-08-07 15:34:31 -07:00
Peter Steinberger
761e4ebed2 docs: only plan when explicitly requested 2026-08-07 15:26:27 -07:00
Peter Steinberger
c87e18f0fd fix: isolate active 1Password approval workstations 2026-08-07 14:18:31 -07:00
Peter Steinberger
6a3c003fb0 docs: forbid model codenames in source code 2026-08-07 13:24:02 -07:00
Peter Steinberger
5f53bd299d docs: prevent public model codename disclosure 2026-08-07 11:07:39 -07:00
Peter Steinberger
e9c345a707 docs: prefer active Mac Studio for secret prompts 2026-08-06 22:36:02 -07:00
Peter Steinberger
1f53be0b27 refactor: remove obsolete commit helper 2026-08-06 16:06:43 -07:00
Peter Steinberger
13cdd90529 docs(codex): correct huge-context threshold 2026-08-06 15:48:47 -07:00
Peter Steinberger
369dd9b846 Merge remote-tracking branch 'origin/main' 2026-08-06 15:46:23 -07:00
Peter Steinberger
8c6ff6d285 fix(codex): reject split huge-context provider config 2026-08-06 15:46:06 -07:00
Peter Steinberger
010b07d91a docs: identify agent-sent email as Peter's Claw 2026-08-06 14:16:25 -07:00
Peter Steinberger
8aa202010c fix(codex-first): gate on actual model, not base URL; decode router model ids 2026-08-06 13:27:49 -07:00
Peter Steinberger
be66b516a5 feat(skills): add telecrawl and codexbar skills 2026-08-06 07:39:38 -07:00
Peter Steinberger
4ed3726598 feat(fleet): audit Codex and Claude CLI health 2026-08-04 15:11:05 -07:00
Peter Steinberger
c46ea65b63 Merge remote-tracking branch 'origin/main' 2026-08-02 18:44:34 -07:00
Peter Steinberger
e39ef6dc3c feat(fleet): disable Claude attribution 2026-08-02 18:42:50 -07:00
Peter Steinberger
80b8bcfcd0
feat(release-mac-app): resolve extra op:// env refs in the credential pass
MAC_RELEASE_OP_ENV_REFS (';'-separated NAME=op://Vault/Item/field) lets a
manifest pull additional service-account secrets — e.g. NPM_TOKEN for
Peekaboo's npm publish — in the same tmux pass, prompt-free.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-02 13:44:05 -07:00
Peter Steinberger
3e1e7cdf31 feat(fleet): record camsnap version evidence 2026-08-02 10:30:01 -07:00
Peter Steinberger
d3b8c66915 fix(fleet): collect camsnap executable 2026-08-02 10:13:54 -07:00
Peter Steinberger
3206129b99 docs(browser-use): document OpenClaw relay 2026-08-02 10:12:55 -07:00
Peter Steinberger
17e0a55a34 fix(fleet): collect managed crawler tools 2026-08-02 00:38:15 -07:00
Peter Steinberger
a00a77fdf1 docs(one-password): drop archived GitHub PAT items from known-items table
Both returned 401 Bad credentials; archived from Molty 2026-08-02. Use gh keyring auth or mint a fresh PAT.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-08-02 00:14:14 -07:00
Peter Steinberger
202bcb3536 docs(fleet): narrow Homebrew formula trust 2026-08-01 21:44:57 -07:00
Peter Steinberger
d33867ea79 fix(fleet): handle Macs without Xcode 2026-08-01 21:34:31 -07:00
Peter Steinberger
758af566dd feat(fleet): enforce simulator hygiene 2026-08-01 21:26:15 -07:00
Peter Steinberger
72129b9a59 docs(fleet): record SF Mini SSH mesh 2026-08-01 20:52:22 -07:00
Peter Steinberger
96089bd758 docs: update remote Mac topology 2026-08-01 19:57:30 -07:00
Peter Steinberger
3ad33e3717 docs: add ClawMac provider outage triage 2026-08-01 18:43:17 -07:00
Peter Steinberger
ddd70d76a2 fix: canonicalize MiniClaw Tailscale 2026-08-01 18:36:05 -07:00
Peter Steinberger
bfa1d57984 docs: remove obsolete remote Macs 2026-08-01 18:30:45 -07:00
Peter Steinberger
affd1a5b3b docs: clarify Scaleway Mac identity 2026-08-01 17:47:03 -07:00
Peter Steinberger
3b5f4d2248 docs: refresh remote Mac topology 2026-08-01 17:45:20 -07:00
Peter Steinberger
cfe3fa27c0 feat: audit fleet 1Password setup 2026-08-01 17:06:35 -07:00
Peter Steinberger
013392915d fix: find Homebrew Node in fleet audits 2026-08-01 15:39:54 -07:00
Peter Steinberger
7833dbaf1f feat: add managed Mac fleet profiles 2026-08-01 15:37:25 -07:00
Peter Steinberger
bb3688355a
docs(codex-first): coordinator-mode learnings from sidebar flattening series 2026-07-23 05:02:12 -07:00
Peter Steinberger
5dc9c727f2
Merge remote-tracking branch 'origin/main' 2026-07-23 03:11:36 -07:00
Peter Steinberger
75a24fa1c0
fix(skills): reserve more context compaction headroom 2026-07-23 01:41:27 -07:00
Peter Steinberger
6878dd818b
docs(codex-first): mandate Codex-only rebases/landings, fresh work-order sessions, AGENTS.md-only notes, guarded CI waits 2026-07-22 20:48:34 -07:00
Peter Steinberger
0798fed56f
docs(codex-first): require harness-tracked launches, one sidebar chip per worker 2026-07-21 21:28:42 -07:00
Peter Steinberger
28025023cc
docs: note low disk recovery 2026-07-21 20:10:27 -07:00
Peter Steinberger
672e71421c
docs: avoid list-shaped answers by default 2026-07-21 11:15:31 -07:00
Peter Steinberger
0e63d483a1
docs(policy): prefer Codex for autoreview (#30) 2026-07-21 00:38:36 -07:00
Peter Steinberger
ea9ed3a677
docs: prefer prose over bullet-heavy reports 2026-07-20 23:09:38 -07:00
Peter Steinberger
7c216e82ef
fix(skills): reserve context compaction headroom 2026-07-21 01:23:57 +01:00
Peter Steinberger
824e077c14
fix(skills): recognize Gorilla-backed Clawdex sessions 2026-07-20 08:45:23 +01:00
Peter Steinberger
a9386d4df7
fix: preflight Codex direct API auth 2026-07-20 07:55:19 +01:00
Peter Steinberger
0cd887d196
docs: add Codex huge context skill 2026-07-19 19:44:07 -07:00
Peter Steinberger
a97f5a841a
docs(codex-first): skip local router sessions 2026-07-19 15:24:34 -07:00
Peter Steinberger
564b623b4d
docs(one-password): route desktop-path op flows to Peter's MacBook when online 2026-07-18 16:29:26 -07:00
Peter Steinberger
99b446d4f0
docs: harden live Mac testing policy 2026-07-18 13:01:25 -07:00
Peter Steinberger
f395b33ffb
docs: expand agent communication recaps 2026-07-18 12:49:45 -07:00
Peter Steinberger
49f5dfdc0e
docs: require --json gh reads; note native watch since octopool 0.4.7 2026-07-18 00:24:27 +01:00
Peter Steinberger
234e202845
docs: hard rule — op requires $one-password, never bare --account 2026-07-17 21:50:46 +01:00
Peter Steinberger
0df4c5aaa8
docs: GitHub quota etiquette — ban tight gh run watch/paginate, backoff polling 2026-07-17 19:27:18 +01:00
Peter Steinberger
b7f7269249
chore(release): prepare 0.12.0 2026-07-17 00:50:27 -07:00
Peter Steinberger
bf2e1eabd4
docs: require Claude Code to run parallel/background work as tracked tasks (sidebar visibility) 2026-07-17 03:39:25 +01:00
Peter Steinberger
31bf39c59a
docs(maintainer-orchestrator): non-majority snapshot 2026-07-16 + owner-maintained crawl overrides 2026-07-16 10:50:57 -07:00
Notorious D.E.V.
fd8807de61
docs(codex-first): cover ChatGPT-app-bundled Codex on PATH (#29)
* docs(codex-first): cover ChatGPT-app-bundled Codex on PATH

Codex merged into the ChatGPT desktop app (July 2026), so the CLI now
also ships as a bundled binary at
/Applications/ChatGPT.app/Contents/Resources/codex. Document both install
shapes and the symlink trap: the bundled binary resolves sibling helpers
(e.g. codex-code-mode-host) relative to its invocation path, so
symlinking it onto PATH makes exec fail with "the workspace execution
host is missing" (agent runs, file edits fail). Use an exec-wrapper or
the standalone installer instead.

Reproduced on codex-cli 0.144.0-alpha.4: symlink -> fail, exec-wrapper
-> ok, direct binary -> ok.

* docs(codex-first): address review — scope no-symlink to app bundle, safe wrapper

- Narrow the no-symlink rule to the ChatGPT-app-bundled binary; package
  manager symlinks/shims (npm/standalone) are fine and no longer discouraged.
- Make the wrapper recipe non-destructive: `mkdir -p ~/.local/bin` first and
  skip if a launcher already exists, so it works on a fresh app-only machine
  and never clobbers an existing codex.

Addresses ClawSweeper P2 findings on PR #29.

* Update Codex usage instructions in SKILL.md

simplify

* docs: clarify bundled Codex authentication

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>
2026-07-16 10:50:53 -07:00
Peter Steinberger
3cdaca7173
docs(one-password): trigger-first skill description so key/secret tasks load it 2026-07-16 16:29:13 +01:00
Peter Steinberger
2de62bda0d
docs(codex-first): liveness watchdog + explicit-id resume recipe 2026-07-16 01:37:18 -07:00
Peter Steinberger
423874fc31
feat(codex-first): route exploration/subagents, fixing, rebasing, and PR merge/landing to Codex
Broaden the delegate list beyond implementation: exploratory subagents (fan out
Codex instead of Claude Explore/Task), general fixing (bugs + CI/lint/type),
git mechanics (rebase onto origin/main, conflict resolution, executing the
scripts/pr merge/land workflow). Keep Claude-side: the land decision, pre-land
gates (autoreview/CI/proof), review of Codex output, releases, and session-tool
work.
2026-07-15 22:06:29 -07:00
Peter Steinberger
899a784c6e
docs(one-password): prevent repeated App Data prompts 2026-07-16 06:05:24 +01:00
Peter Steinberger
a40e1f5298
docs(one-password): op installed at stable ~/bin path; ban brew cask (TCC identity churn) 2026-07-15 17:22:31 -07:00
Peter Steinberger
f152a873e9
docs(one-password): op daemon + TCC dialog research notes 2026-07-15 16:25:47 -07:00
Peter Steinberger
6a2be27f1f
feat(skills): one shared op tmux session with per-task windows; op TTY App Data Protection fix 2026-07-15 16:20:55 -07:00
Peter Steinberger
10e6445287
docs: allow bounded opportunistic cleanup 2026-07-15 01:42:40 -07:00
Peter Steinberger
301ce1d1f0
fix(skills): gate codex-first to Claude Code 2026-07-15 02:58:04 -04:00
Peter Steinberger
fe832902bf
docs: require post-merge recap 2026-07-14 23:47:36 -07:00
Peter Steinberger
e06498301c
docs: require safe UI screenshots 2026-07-14 19:47:35 -07:00
Peter Steinberger
31e23450aa
fix(release): force lightweight tag mode 2026-07-14 19:01:46 -07:00
Peter Steinberger
da8a3f5ead
fix(release): parse app zip versions 2026-07-14 19:00:16 -07:00
Peter Steinberger
80be0770be
fix(release): accept bracketed changelog versions 2026-07-14 18:44:41 -07:00
Peter Steinberger
8f54173532
docs: keep GitHub reads on Octopool shim 2026-07-13 21:59:10 -07:00
Peter Steinberger
01e49105a6
docs: simplify global workflow rules 2026-07-13 22:55:48 +01:00
Peter Steinberger
a2bf921360
docs: tighten GitHub cache hygiene 2026-07-13 14:52:44 -07:00
Peter Steinberger
d42cf80a32 perf: batch fleet content snapshots 2026-07-13 02:59:45 -04:00
Peter Steinberger
d40c87de66 perf: fast-path clean fleet checkouts 2026-07-13 01:57:15 -04:00
Peter Steinberger
5616892c99 perf: skip unused machine recency scan 2026-07-13 01:20:11 -04:00
Peter Steinberger
cb75664704 perf: batch fleet repo collision checks 2026-07-13 01:00:33 -04:00
Peter Steinberger
e944a5a478 Merge remote-tracking branch 'origin/main' 2026-07-12 22:58:21 -04:00
Peter Steinberger
d02f52ac53 feat: add safe fleet repo updater 2026-07-12 22:58:08 -04:00
Peter Steinberger
a78cf0d5e5
docs(one-password): add migrated Molty items to known-item table 2026-07-12 19:38:53 -07:00
Peter Steinberger
e28c405d3e feat: allow safe dirty repo fast-forwards 2026-07-12 22:31:52 -04:00
Peter Steinberger
3fe5b7fc82
fix(one-password): service-account first, consent-gated desktop fallback, known Molty item table 2026-07-12 19:24:39 -07:00
Peter Steinberger
e3b05be0ac
docs: compress global agent policy 2026-07-12 00:16:11 -07:00
Kushida
5cc32f9fd8
fix: harden browser tools startup and console capture (#28)
Remove shell interpretation from browser startup, preserve safe Chrome profile-copy semantics, fix console serialization control, and add regression coverage plus contributor credit.

Co-authored-by: ShiroKSH <kushidashiro@gmail.com>
2026-07-11 16:32:12 -07:00
(Not) Stephen Benjamin
5c6abe6de9
fix(xurl): enable OpenClaw npm installer discovery (#27)
Correct the xurl skill installer metadata and add maintainer changelog credit.

Co-authored-by: Stephen Benjamin <stbenjam+ai@redhat.com>
2026-07-11 16:22:44 -07:00
Peter Steinberger
93388bf18e docs: add UI automation fallback 2026-07-11 15:38:11 -07:00
Peter Steinberger
afed630a9d feat: audit fleet package ownership and memory 2026-07-11 01:46:15 -07:00
Peter Steinberger
416b0fd3a9 feat: allow live fleet package updates 2026-07-10 23:23:34 -07:00
Peter Steinberger
55257d9316 feat: add safe fleet maintenance skill 2026-07-10 22:08:18 -07:00
Peter Steinberger
ee72fa1844 feat: add Xcode fleet sync skill 2026-07-10 21:32:50 -07:00
Peter Steinberger
4349ce571d
feat(codex-first): pin gpt-5.6-sol high + fast_mode as house default 2026-07-10 18:19:31 -07:00
Peter Steinberger
4b81ea7357
fix: report ClawSweeper failures accurately 2026-07-10 06:00:45 -07:00
Peter Steinberger
39629a20f6
fix: count ClawSweeper closures accurately 2026-07-10 05:13:59 -07:00
Peter Steinberger
fcf5276377
fix: reduce ClawSweeper status API probes 2026-07-10 03:31:51 -07:00
Peter Steinberger
2cee87517b
docs: refresh remote SSH topology 2026-07-09 16:57:32 -07:00
Peter Steinberger
2571a871c5
fix: report ClawSweeper worker capacity 2026-07-09 14:56:28 -07:00
Peter Steinberger
d6ed98c7dc
docs: refresh tools.md — brew paths, drop clawdis, prune stale sonos issue 2026-07-09 03:38:11 +01:00
Peter Steinberger
0b3e10b735 docs(remote-mac): add gorillaclaw/steipetesurface nodes + handed-off crabhammer 2026-07-07 12:50:46 -07:00
Peter Steinberger
443f2195ab fix: guard empty tag_args/push_tag_args for bash 3.2 set -u 2026-07-07 01:39:45 -07:00
Peter Steinberger
70d81b6f20 docs: pre-alert via nameplate-attention before interactive op auth 2026-07-07 01:07:36 -07:00
Peter Steinberger
eebb460cee
fix: use modern macOS distribution validation 2026-07-07 00:28:49 +01:00
Peter Steinberger
fb2fe5f960
fix: guard empty sparkle account args under set -u on bash 3.2 2026-07-06 01:12:43 -07:00
Peter Steinberger
2f2e73f46c
test: align orchestrator policy guard 2026-07-06 08:44:37 +01:00
Peter Steinberger
9e2a832fa5 chore: expose crawl skills globally 2026-07-06 03:08:42 -04:00
Peter Steinberger
79384d079a
fix: support passwordless release keychains 2026-07-05 23:42:34 +01:00
Peter Steinberger
c9a6fb0c50 clickclack: switch runbook to Cloudflare-only deploy
clickclack.chat/www now run as Worker custom domains; Hetzner box is
legacy. Documents the container-name rollout bump and token scopes.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-05 15:06:29 -07:00
Peter Steinberger
5faa2ee542 docs: require passwordless release signing 2026-07-05 17:20:17 -04:00
Peter Steinberger
9f0b5dab56 docs: isolate release keychains 2026-07-05 17:04:56 -04:00
Peter Steinberger
438b476316 docs: require signed macOS test builds 2026-07-05 15:58:42 -04:00
Peter Steinberger
82cce1d8d7
docs: megaclaw has no OpenClaw gateway by design 2026-07-05 11:08:16 -07:00
Peter Steinberger
2aac396102
docs: replace moltymac with megaclaw in remote-mac skill 2026-07-05 11:02:13 -07:00
Peter Steinberger
6ec0fc9591
feat: add codex-first skill, route implementation work to Codex CLI 2026-07-05 10:54:12 -07:00
Peter Steinberger
b4035ab710
fix: cache npm registry sessions 2026-07-04 19:01:06 +01:00
Peter Steinberger
4a368c1813
fix: isolate npm service auth 2026-07-04 17:55:55 +01:00
Peter Steinberger
4a47918ec3
docs: clarify personal Mac Studio identity 2026-07-04 17:49:51 +01:00
Peter Steinberger
fb3a115013
fix: expose behavior-validator and session-viewer skills 2026-07-04 08:37:12 +01:00
Peter Steinberger
d3c184d2f7
fix: expose shared crabbox skill in mirror 2026-07-04 08:34:57 +01:00
Peter Steinberger
fa8ca1aa41
docs: make internal operating repos autonomous 2026-07-03 21:13:12 -07:00
Peter Steinberger
643a4f7798
docs: make dependency updates autonomous 2026-07-04 04:54:24 +01:00
Peter Steinberger
f1c5dcd2bb
docs: drop dead email alias spelling from changelog 2026-07-03 20:51:33 -07:00
Peter Steinberger
327e3001b6
chore(skills): npm service-account auth, orchestrator public gate, email fix
- npm: shared npm-auth.sh, service-account default, npm-service.sh wrapper
- maintainer-orchestrator: forward-looking public gate, root-only thread titles
- AGENTS.MD: canonical test email clawdbot@gmail.com (alias never existed)
- one-password/peekaboo: minor skill touches
2026-07-03 20:50:38 -07:00
Peter Steinberger
590e75daa1
feat: add sync-skills claude/codex skill mirror script 2026-07-03 20:20:11 -07:00
Peter Steinberger
f4096e13bc
fix: harden npm credential selection 2026-07-03 20:20:11 -07:00
Peter Steinberger
60f37b15b6
docs(one-password): streamline desktop fallback 2026-07-03 23:34:25 +01:00
Peter Steinberger
f099255d8f
Merge pull request #26 from chaochaoweb3/codex/validate-skills-utf8
fix: read skill files as UTF-8
2026-07-02 02:50:48 -07:00
Peter Steinberger
98012b7444
docs: credit UTF-8 validator fix 2026-07-02 02:49:53 -07:00
Peter Steinberger
20a8e74508 Merge remote-tracking branch 'origin/main' into review/pr-26 2026-07-02 02:49:39 -07:00
chaochaoweb3
e4f62cfcbc fix: read skill files as UTF-8 2026-07-02 16:22:50 +08:00
Peter Steinberger
2fe30c0dbe fix: keep orchestrator skill updates in root 2026-07-02 09:21:53 +01:00
Peter Steinberger
15af4c5b34 Harden orchestrator concurrency and permission checks 2026-07-02 01:09:11 -07:00
Peter Steinberger
18e20fa153
fix: keep orchestrator execution thread-owned 2026-07-02 09:06:18 +01:00
Peter Steinberger
2d007c1643
docs: align orchestrator concurrency changelog (#25) 2026-07-01 14:41:38 +01:00
Peter Steinberger
e1898eeb14
build: declare browser helper dependencies (#24) 2026-07-01 14:34:40 +01:00
Peter Steinberger
9ff786db80
chore: refresh browser extraction libraries (#23) 2026-07-01 14:28:03 +01:00
Peter Steinberger
9342cafe87
docs: route Peekaboo automation through app host (#22) 2026-07-01 14:19:19 +01:00
Peter Steinberger
0a2ede426f
docs: extend non-majority repository ledger (#21) 2026-07-01 14:09:28 +01:00
Peter Steinberger
ec2cafc710
fix: keep worker thread titles current 2026-07-01 09:56:47 +01:00
Peter Steinberger
587733dc79
docs: require terminal worker titles 2026-07-01 09:43:10 +01:00
Peter Steinberger
5b2ba8f98a
docs: keep maintainer thread titles current 2026-07-01 09:32:32 +01:00
Peter Steinberger
626810320b
feat: add maintainer ownership ledger 2026-07-01 09:12:06 +01:00
Peter Steinberger
ed58cf26db feat: raise maintainer concurrency to 30 2026-07-01 00:58:49 -07:00
Peter Steinberger
7d5f1d27a0 feat: keep maintainer orchestration awake 2026-07-01 00:39:34 -07:00
Peter Steinberger
dbd0e0d4b1 docs: keep OpenClaw triage in orchestrator 2026-07-01 00:16:10 -07:00
Peter Steinberger
37173c19be docs: clarify OpenClaw thread ownership 2026-07-01 00:12:32 -07:00
Peter Steinberger
ac029e0567 feat: add OpenClaw maintainer orchestration 2026-07-01 00:10:13 -07:00
Peter Steinberger
2060ff0f49
ci: update checkout to v7 (#20) 2026-07-01 07:03:15 +01:00
Peter Steinberger
0e8ca002fc
feat(skill-cleaner): add exclusive root scans (#19) 2026-07-01 07:01:19 +01:00
113 changed files with 11719 additions and 1796 deletions

2
.gitignore vendored

220
scripts/sync-skills Executable file

425
scripts/test-sync-skills Executable file

1
skills/crabbox Symbolic link

1
skills/gitcrawl Symbolic link

1
skills/graincrawl Symbolic link

1
skills/peekaboo Symbolic link

Some files were not shown because too many files have changed in this diff Show more