Google GitGoogle Git
Sign in
apache/magpie/HEAD
  1. fbaf7e4 docs(rfcs): drop stale Confluence attachment notes from RFC-AI-0002 (#1225) by Jarek Potiuk · 4 hours ago main
  2. b94274d feat(agent-isolation): show a window while gpg waits for a key touch (#1224) by Jarek Potiuk · 4 hours ago
  3. 3480d6a chore: bump dev version to 0.2.0.dev202609141352 (#1223) by Jarek Potiuk · 7 hours ago
  4. d297419 docs(sandbox): correct the agent-unreachable root cause on Linux (#1222) by Jarek Potiuk · 7 hours ago
  5. a6ecba2 chore: bump dev version to 0.2.0.dev202609141334 (#1220) by Jarek Potiuk · 7 hours ago
  6. 760e515 docs(setup): say which manifest Codex actually reads (#1221) by Jarek Potiuk · 7 hours ago
  7. ee6ee82 fix(gemini): require approval for web fetches and MCP resource reads (#1216) by Kevin Yang · 8 hours ago
  8. 6f00f1f docs(agents): gate signing commits on a hardware-key cache probe (#1219) by Jarek Potiuk · 8 hours ago
  9. 606e21b docs(setup): the post-checkout hook stopped delivering skills; say so (#1218) by Jarek Potiuk · 8 hours ago
  10. b5bd7ef docs(readme): say what Magpie is, and show it (#1215) by Jarek Potiuk · 25 hours ago
  11. b36e96b ci(prek): give the prek job four cores, drop the dead lychee cache (#1214) by Jarek Potiuk · 26 hours ago
  12. 9aa3f96 fix(setup): do not guess a third-party marketplace name; fix what grading found (#1213) by Jarek Potiuk · 26 hours ago
  13. 1507718 docs: real screenshots in the walkthrough, and a quick start that is quick again (#1212) by Jarek Potiuk · 27 hours ago
  14. 8afac05 feat(setup): one status line, and a safety walkthrough that matches the skills (#1211) by Jarek Potiuk · 27 hours ago
  15. 74f0d33 feat(setup): install the picked plugins, name the three scopes, and recommend a baseline (#1209) by Jarek Potiuk · 28 hours ago
  16. a4dd8ba feat: split install / config / adopt, and make per-family plugins installable everywhere (#1208) by Jarek Potiuk · 28 hours ago
  17. 05213bb feat(gemini): add tool sandboxing, policies and secure setup lifecycle (#1205) by Kevin Yang · 30 hours ago
  18. 0dd1cc9 docs(agent-isolation): record ghostty behaviour in claude-term-bg.sh (#1207) by Jarek Potiuk · 30 hours ago
  19. 9fdbb88 feat(adapter/local-llm): Ollama / llama.cpp / vLLM skill runtime guide (#1206) by Vardhman Gupta · 2 days ago
  20. 3c5c139 feat(adapter/cursor): Cursor Composer and Agent CLI skill runtime (#1204) by Vardhman Gupta · 2 days ago
  21. 823241c fix(setup): Update Codex CLI plugin installation command (#1203) by Shahar Epstein · 2 days ago
  22. ab80b7e fix(mail): resolve security draft CC before backend calls (#1200) by André Ahlert · 2 days ago
  23. 0ec0f4b feat(gemini): integrate gemini cli as runtime (#1199) by Kevin Yang · 2 days ago
  24. a7651d7 fix(pr-management-triage): include top-level reviews in F5a cooldown (#1202) by Grove · 2 days ago
  25. f4204ec feat(docs): make mode token costs traceable and reproducible (#1201) by André Ahlert · 2 days ago
  26. 68c01a3 chore: bump dev version to 0.2.0.dev202609110041 (#1198) by Jarek Potiuk · 4 days ago
  27. fcbe271 feat(bitbucket): add guarded cloud PR decline (#1194) by Kavya Katal · 4 days ago
  28. d844af5 feat(setup): offer an optional committed default plugin set (#1196) by Jarek Potiuk · 4 days ago
  29. 9dcf58b feat(cve-json): emit affected[].packageURL for generated CVE records (#1197) by Jarek Potiuk · 4 days ago
  30. d7c9d6c docs: make the marketplace plugin install the documented default (#1195) by Jarek Potiuk · 4 days ago
  31. 227fcba feat(plugins): fix Codex install, default-install a set, pre-flight every skill (#1193) by Jarek Potiuk · 4 days ago
  32. 74776c8 feat(bitbucket): add guarded cloud PR request-changes actions (#1192) by Kavya Katal · 4 days ago
  33. 127d0b8 chore: bump dev version to 0.2.0.dev202609092258 (#1191) by Jarek Potiuk · 5 days ago
  34. 54a4627 docs(education): add MCP server to glossary (#1189) by Pratiksha Badheka · 5 days ago
  35. 35a3457 ci(runners): move every job to the 1-vCPU ubuntu-slim runner (#1190) by Jarek Potiuk · 5 days ago
  36. 66623e9 feat(bitbucket): add guarded cloud PR approve actions (#1186) by Kavya Katal · 5 days ago
  37. 826e13d fix(list-skills): discover every installed skill, drop the PyYAML import (#1187) by Jarek Potiuk · 5 days ago
  38. a1d9e24 feat(vetted-ops): publish as a substrate plugin, with the privilege boundary on the entry point (#1188) by Jarek Potiuk · 5 days ago
  39. 22eaa73 chore(setup): drop the comdev-checkout check from setup-isolated-setup-verify (#1185) by Jarek Potiuk · 6 days ago
  40. 4b24abb fix(setup): document the Docker CLI and plugin paths the socket allowlist misses (#1184) by Jarek Potiuk · 6 days ago
  41. f22d0a4 fix(setup): allow static.rust-lang.org; correct the rust-toolchain paths in the doc (#1183) by Jarek Potiuk · 6 days ago
  42. fb9f970 chore(version): stamp the dev version to 0.2.0.dev202609090002 (#1180) by Jarek Potiuk · 6 days ago
  43. 4d1f4b2 feat(vetted-ops): cover the remaining forge-touching families, and stop refs traversing (#1179) by Jarek Potiuk · 6 days ago
  44. b14e7f9 feat(vetted-ops): extend the catalogue to the issue family (#1178) by Jarek Potiuk · 6 days ago
  45. 3ec8dbf feat(vetted-ops): extend the catalogue to the PR-management family (#1177) by Jarek Potiuk · 6 days ago
  46. bcc3e25 Add a vetted command surface for fixed-shape forge operations (#1176) by Jarek Potiuk · 6 days ago
  47. e655370 Record three lessons from a CVE publication that stalled (#1175) by Jarek Potiuk · 6 days ago
  48. a0149b7 chore(deps): bump the github-actions group with 3 updates (#1167) by dependabot[bot] · 6 days ago
  49. 6a1e37e fix(marketplace): re-sync magpie-agent-guard, and make the prek hook self-correcting (#1174) by Jarek Potiuk · 6 days ago
  50. fbe828e feat(agent-guard): run the guard from the installed plugin, not a per-worktree copy (#1170) by Jarek Potiuk · 6 days ago
  51. 217a7f8 fix(prek): drop the .git suffix from the doctoc repo URL (#1171) by Jarek Potiuk · 6 days ago
  52. a181dd1 chore(deps): bump the python-deps group across 1 directory with 4 updates (#1168) by dependabot[bot] · 6 days ago
  53. 01ab9f6 fix(skill-evals): do not scavenge JSON out of a prose step's output (#1169) by Jarek Potiuk · 6 days ago
  54. 507a226 chore(deps): bump https://github.com/crate-ci/typos (#1166) by dependabot[bot] · 6 days ago
  55. fccfe65 ci(prek): quieten the CI log — drop --verbose, skip the identity hook (#1165) by Jarek Potiuk · 7 days ago
  56. 6e93c2d ci(dev): deterministic gates for doc/tree drift, test coverage, and a shared toolchain (#1164) by Jarek Potiuk · 7 days ago
  57. abda5c1 docs(spec-loop): specify marketplace distribution, index every spec (#1163) by Jarek Potiuk · 7 days ago
  58. 1e1e389 chore(spec-loop): sync specs to main and advance .last-sync (#1162) by Jarek Potiuk · 7 days ago
  59. de7d705 fix(skill-evals): a CLI that grades nothing is an ERROR, not a PASS (#1161) by Jarek Potiuk · 7 days ago
  60. 2c6aab0 chore(version): stamp the dev version with the UTC time it lands (#1160) by Jarek Potiuk · 7 days ago
  61. 3d9b2c9 fix(docs): reconcile documentation with the state of the tree (#1159) by Jarek Potiuk · 7 days ago
  62. cf05bd4 feat(tracker-stats): project the current bucket to end-of-bucket totals (#1158) by Jarek Potiuk · 7 days ago
  63. 183a163 feat(security): add security-model prepare / verify / update skills (#1156) by Jarek Potiuk · 7 days ago
  64. 40b8ba3 docs(rfcs): RFC-AI-0008 — the coordinator role (multi-hop relay of security reports) (#1135) by Piotr P. Karwasz · 7 days ago
  65. c5b2e09 fix(pairing-self-review): require dependency evidence (#1152) by Alejandro Morgante · 7 days ago
  66. d199acd fix(sandbox-lint): normalise every trailing slash, not just one (#1149) by Amir Fathi · 7 days ago
  67. 7dfb956 fix(validator): tokenize gh-list-no-limit's flag check instead of substring match (#1147) by Amir Fathi · 7 days ago
  68. 61ac2f1 fix(agent-guard): scope Segment.raw to its own tokens, not the whole command (#1151) by Amir Fathi · 7 days ago
  69. 2b14842 ci(asf.yaml): stop blocking merge on unresolved review threads (#1155) by Jarek Potiuk · 7 days ago
  70. e9679f9 docs(agents): document <PROJECT> vs <project>, and catch spaced variants (#1154) by Jarek Potiuk · 7 days ago
  71. 9c1fdd4 feat(bitbucket): add guarded cloud PR comment create (#1142) by Kavya Katal · 7 days ago
  72. 8c06d21 fix(symlink-lint): enforce relay completeness and sync missing self-adoption symlinks (#1143) by Arnav · 7 days ago
  73. 9ac52f6 feat(skill-evals): add the issue-reassess eval suite (#1145) by Davide Polato · 7 days ago
  74. e99b08e fix(skills): derive the two remaining Airflow literals from project config (#1144) by Davide Polato · 7 days ago
  75. 809fa74 chore(deps): bump the github-actions group with 3 updates (#1141) by dependabot[bot] · 7 days ago
  76. a1cff44 docs(skill-evals): add --cli to workflow-security-audit and license-compliance-audit READMEs (#1134) by Amir Fathi · 13 days ago
  77. 33bd241 fix(docs): collapse three org-level security placeholder names into one (#1133) by Amir Fathi · 13 days ago
  78. a761475 fix(_template): drop Apache Airflow residue from the templates (#1132) by Jarek Potiuk · 2 weeks ago
  79. d751ffa fix(security-tracker-stats): recognise the framework's own comment marker (#1130) by Jarek Potiuk · 2 weeks ago
  80. 67ef6ae fix(security-issue-sync): omit the finder credit, never fall back to anonymous (#1131) by Jarek Potiuk · 2 weeks ago
  81. 5ac2c33 fix(security-cve-allocate): strip ID parentheticals anywhere in the title (#1126) by Jarek Potiuk · 2 weeks ago
  82. e3cc28c feat(security): add a policy for reporter-supplied proof-of-concept code (#1129) by Jarek Potiuk · 2 weeks ago
  83. 61db7bd fix(security-issue-import): require a positive GHSA query on every scan (#1128) by Jarek Potiuk · 2 weeks ago
  84. 2caca58 feat(pr-management-code-review): always report the branch's conflict state (#1125) by Jarek Potiuk · 2 weeks ago
  85. 31176a4 feat(security): add a finder-credit policy — timing gate and no placeholders (#1127) by Jarek Potiuk · 2 weeks ago
  86. 40567d6 fix(security-issue-sync): credit scanner findings as tool, not anonymous (#1124) by Jarek Potiuk · 2 weeks ago
  87. 8003429 chore: remove the last apache-steward references (#1123) by Jarek Potiuk · 2 weeks ago
  88. 9fa7c2f fix(agent-isolation): don't replace the caller's shell when sourced (#1121) by Jarek Potiuk · 2 weeks ago
  89. 7322af4 fix(sandbox): drop deny rules that file permission checks never match (#1122) by Jarek Potiuk · 2 weeks ago
  90. 9577cca fix(pr-management-triage): filter action_required runs server-side (#1088) by Jarek Potiuk · 2 weeks ago
  91. d5c56a4 fix(agent-isolation): make the gitignore safety check hook-safe (#1093) by Jarek Potiuk · 2 weeks ago
  92. a357630 fix(pr-management-triage): one violation bullet per category, not per check (#1119) by Jarek Potiuk · 2 weeks ago
  93. f297a4c infra(.asf.yaml): temporarily lift the approval requirement on main (#1120) by Jarek Potiuk · 2 weeks ago
  94. 453dd9f test(bitbucket): cover cross-origin authenticated redirect rejection (#1106) by Kavya Katal · 2 weeks ago
  95. e8c3a34 fix(pr-management-triage): show stable per-PR drill-in progress (#1118) by CAOShurong · 3 weeks ago
  96. 9d5382c fix(setup): wire the agent-guard hook into settings.local.json, not settings.json (#1115) by Amir Fathi · 3 weeks ago
  97. 72dbd74 feat(setup): install/uninstall primary commands; adopt/unadopt aliases (#913) by Jarek Potiuk · 3 weeks ago
  98. 07a0031 chore(asf.yaml): refresh collaborators list and keep approvals through pushes (#1116) by Jarek Potiuk · 3 weeks ago
  99. b7da5fa ci(ruff): reformat Python snippets in three skill markdown files (#1117) by Jarek Potiuk · 3 weeks ago
  100. b6281f7 chore(deps-dev): bump python-deps group and migrate gmail/oauth-draft to MCP 2.0 (#1095) by Jarek Potiuk · 3 weeks ago