Pinchtab Files

Changelog

• [bf7627] Merge pull request [#627] from pinchtab/dependabot/npm_and_yarn/npm/js-yaml-4.3.1
• [d81a2a] Merge pull request [#632] from pinchtab/fix/npm-global-install-home-divergence
• [d3ea1f] Merge pull request [#635] from valkyriweb/fix/daemon-owned-autostart
• [44833c] Merge pull request [#636] from pinchtab/fix/tab-budget-orphans
• [36763f] Merge pull request [#637] from pinchtab/fix/keyboard-type-focused-633
• [ea1f8d] Merge pull request [#638] from pinchtab/fix/wait-url-634
• [e0a5a4] Merge pull request [#639] from pinchtab/chore/npm-eslint-10
• [95e98c] Merge pull request [#640] from pinchtab/chore/improvements
• [96d150] Merge pull request [#641] from pinchtab/feat/grok-plugin
• [4bf14c] chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 in /npm
• [fc11d4] docs(skills): align the pinchtab skill with the split keyboard, wait, and instances commands
• [2519c4] feat(ci): run the extended suites on every merge to main and smoke nightly
• [d8bf0e] feat(e2e): run each scenario file in its own subshell so no scenario inherits another's state
• [2ab9a7] feat(e2e): write per-test timings json and add a --slowest report
• [9d8994] feat(handlers): declare each route's tab guard set in the catalog and verify it through the mux
• [485592] feat(plugins): add Grok Build plugin
• [1ad596] feat(traceability): log the unredacted failure cause server-side, keyed by requestId
• [0fe9e8] fix(ci): constrain dispatched workflow refs
• [ce4d47] fix(ci): disable plugin workflow package cache
• [de1270] fix(ci): enrol the audit CLI implementation and guard every audit source against the map
• [b32843] fix(ci): escalate extended suites from product paths, not only test churn
• [5c2fdd] fix(ci): fail the preamble budget step when -run matches no test
• [55f0aa] fix(ci): remove reusable plugin ref input
• [1f33ba] fix(cli): declare the json flag on instance list, not only on the deprecated alias
• [22eb32] fix(cli): give instance its own list subcommand and print arg errors once
• [2fab0f] fix(cli): keep config token prose off stdout and fail loudly without a clipboard
• [b92458] fix(e2e): decide a scenario's verdict from its EXIT trap so an explicit exit cannot skip it
• [bcfd22] fix(e2e): match dockerignore patterns root-relative so nested context files reach the digest
• [16045b] fix(e2e): pin config token to the contract that fails loudly without a clipboard
• [6b5319] fix(handlers): refuse the mutating tab endpoints while a tab is paused for human handoff
• [da15d2] fix(plugins): correct profile routing and smoke coverage
• [dc2802] fix(snapshot): charge maxTokens what the formatter emits instead of a hand-modelled estimate
• [5c7c5d] fix(snapshot): honour the documented interactive alias instead of ignoring it
• [f91948] fix(snapshot): reject invalid cost controls and report the query params the server ignores
• [2a5fb2] fix(test): stamp each preamble budget with the commit that set it
• [48d43e] fix(traceability): route the auto-started server's output to server.log instead of /dev/null
• [39fe9a] fix: gate detached start on the resolved address, not flag presence
• [9d09c8] fix: install the stable launch binary atomically instead of truncating it in place
• [4745e0] fix: keyboard-type humanize types into the focused element without a selector (#633)
• [db67c4] fix: match wait url pattern in Go instead of a browser-evaluated boolean (#634)
• [9cb14d] fix: normalize Return to Enter on keydown and keyup dispatch
• [daf8ee] fix: preserve daemon ownership during CLI auto-start
• [1fe51b] fix: probe the local server before the bare banner reports its state
• [e7a9c6] fix: reap orphan tab targets at browser launch, not on the create path
• [2d8ccd] fix: resolve managed binary path from package root instead of $HOME
• [67ad7f] fix: restore CLI auto-start on daemon-less OSes and scope the detached-start ownership gate
• [ebbbcb] perf(ci): move the multi-page audit runs out of the PR path into the extended tier
• [8e4563] perf(e2e): cut the audit family from five full-site crawls to two
• [5a94a3] perf(e2e): tag smoke images by a digest of their build inputs so unchanged ones are reused
• [15af50] perf(mcp)!: collapse the wait, keyboard and record tool families into one tool each
• [40cdba] perf(snapshot): default the agent-facing snapshot to compact and skip enrichment the format cannot carry
• [23a58a] refactor(autosolver): fold the shared external solver skeleton into one base
• [c44966] refactor(e2e): single-source the default browser so timings cannot mislabel a run
• [1046f2] refactor(e2e-runner): decide every lane from the recorded exit codes, not a hardcoded suite list
• [16369f] refactor(handlers): fold the five tab-scoped decode-and-reconcile prologues onto the package's own helpers
• [73e51f] refactor(handlers): run the tab guard chain in one place behind a declared guard set
• [552ea6] refactor(mcp): declare shared tool params once and route the two wait tools on browser
• [b4535a] refactor: delete the unreachable RuntimeInstance shadow implementation
• [63803f] refactor: fold keydown/keyup dispatch into a shared helper
• [19e482] refactor: fold the address-change query into applyServerAddressFlags
• [89e2ac] refactor: single-source url redaction behind urls.Redact with an explicit cap
• [ab7d81] test(ci): fail when an automatic e2e trigger exists but its filters cannot fire
• [8f6f9c] test(e2e): delete soft_pass_assert and make the scenarios that leaned on it able to fail
• [eefcda] test(e2e): guard the scenario-isolation rules so a new scenario cannot quietly break them
• [8a6ea3] test(handlers): pin the dialog-blocked guard to its catalog declaration too
• [ca13bc] test(httpx): census every failure producer instead of pinning a fixed list of four
• [277ca9] test(mcp): stamp the collapsed-tool preamble budgets with the commit that set them
• [7875b8] test(snapshot): pin the ignored-params disclosure to the response body every branch writes
• [8cb65b] test: add e2e for keyboard-type humanize into the focused element (#633)
• [ab1575] test: add e2e for wait url matching the current URL (#634)
• [e37288] test: add e2e guard for tab creation under fingerprint-rotate churn
• [efa46d] test: assert a repeated stable-binary install leaves the destination untouched
• [ba037b] test: hold the bare-banner health probe to its timeout ceiling
• [8cdf35] test: measure property-level repeat share and floor the preamble budget
• [631770] test: meter the agent preamble against a checked-in token budget
• [f183f6] test: pin every capability the collapsed mcp tools absorbed
• [05ec61] test: pin that CanHandle and detectCaptchaType encode the same rule
• [07742a] test: pin the dropped relative-path class with deeper shapes than three literals
• [e2704e] test: require a floor on every measured preamble surface and guard its CI trigger