Stabilize Glaze architecture, runtime, security, packaging, and cross-platform APIs - #5

Open

turinglambdaai wants to merge 121 commits into

mainfrom

chore/architecture-boundaries

Commits on Sep 17, 2026

docs: refocus README on public architecture
turinglambdaai
committed
7cacf3d
docs: add architecture boundaries
turinglambdaai
committed
5616ecf
docs: add focused roadmap
turinglambdaai
committed
39b3c0d
docs: mark glaze main as public facade
turinglambdaai
committed
3a4bac3
test: cover public glaze facade
turinglambdaai
committed
b1d2aaa
examples: add focused tray example
turinglambdaai
committed
2c52e75
examples: add focused events example
turinglambdaai
committed
d4f49de
examples: add events frontend
turinglambdaai
committed
f3edd05
docs: organize examples by recommended learning path
turinglambdaai
committed
4d59d9f
test: gate macOS menu e2e to macOS
turinglambdaai
committed
2dfe517
fix: make app shutdown idempotent and cleanup on errors
turinglambdaai
committed
3fabee2
fix: dispatch tray operations by handle backend
turinglambdaai
committed
b24169c
fix: retain single-instance locks for process lifetime
turinglambdaai
committed
ada1599
test: cover idempotent app shutdown
turinglambdaai
committed
fc0f310
security: confine static files and fix loopback host parsing
turinglambdaai
committed
a322189
test: cover host guard and static path confinement
turinglambdaai
committed
f4f86b6
fix: resolve packaged public assets without wrapper cwd
turinglambdaai
committed
0c70b24

Commits on Sep 18, 2026

fix: compile application entry directly
turinglambdaai
committed
7a950a3
fix: resolve packaged assets and validate server inputs
turinglambdaai
committed
8cac26e
fix: modernize scaffold and repair build option parsing
turinglambdaai
committed
59b5716
test: execute packaged module+ main entry
turinglambdaai
committed
f531318
ci: execute packaged entry on every platform
turinglambdaai
committed
ab5bb8f
ci: enforce formatting and cover Racket 9.3 packaging
turinglambdaai
committed
1a29823
fix: harden update manifest fetching
turinglambdaai
committed
50009fc
security: stop leaking handler exceptions to clients
turinglambdaai
committed
a52c170
test: cover update hashing and safe 500 responses
turinglambdaai
committed
cc2ede0
fix: generate safe JavaScript API bindings
turinglambdaai
committed
5209af1
test: cover safe generated API JavaScript
turinglambdaai
committed
9a945e0
fix: make CLI fail fast and protect existing projects
turinglambdaai
committed
ed3bb4f
security: enable API token by default and validate lifecycle inputs
turinglambdaai
committed
a4900b8
test: cover run-app argument contracts
turinglambdaai
committed
65b8d3f
docs: document secure defaults and hardened runtime contracts
turinglambdaai
committed
21d5389
docs: record stabilization fixes
turinglambdaai
committed
f2c3c7a
feat: expose background-active webview mode
turinglambdaai
committed
7085b05
feat: accept portable background-active webview option
turinglambdaai
committed
3864006
feat: accept portable background-active webview option
turinglambdaai
committed
62488a8
feat: accept portable background-active webview option
turinglambdaai
committed
3c64dd4
feat: keep macOS monitoring webviews active with public APIs
turinglambdaai
committed
d4af0f7
feat: pass background-active mode through run-app
turinglambdaai
committed
a758476
fix: isolate build intermediates and verify notarization staple
turinglambdaai
committed
554e99e
fix: repair update checker syntax
turinglambdaai
committed
9beec49
fix: classify listener startup races as network errors
turinglambdaai
committed
ef2d121
docs: document background-active webview mode
turinglambdaai
committed
5889fbd
fix: use real Windows folder picker and correct kdialog argv
turinglambdaai
committed
17f12e2
fix: use correct macOS SMAppService registration API
turinglambdaai
committed
0c09144
fix: harden license canonicalization and claim validation
turinglambdaai
committed
7d3913b
test: cover license control characters and invalid dates
turinglambdaai
committed
5096f4a
fix: harden Linux deep-link registration contract
turinglambdaai
committed
5e5a58b
security: escape Linux desktop entries and validate autolaunch inputs
turinglambdaai
committed
d1a2034
test: cover Linux deep-link contract and escaping
turinglambdaai
committed
5fca17d
security: open browser without shell command construction
turinglambdaai
committed
c0ed47a
security: validate SSE event names and payloads
turinglambdaai
committed
22c9a0e
fix: make asset helpers robust for nested directories
turinglambdaai
committed
86e4ae0
fix: use real GDK clipboard atom and correct Linux helpers
turinglambdaai
committed
f72970c
security: pass macOS notification content as argv
turinglambdaai
committed
7cf6478
fix: preserve Unicode and memory ownership in Windows clipboard
turinglambdaai
committed
d5d2aaf
fix: make installer builds fail-safe and assemble Linux AppDir
turinglambdaai
committed
4b944c9
security: escape packaging metadata and shell boundaries
turinglambdaai
committed
443e630
fix: repair packaging helper source quoting
turinglambdaai
committed
efb0d3b
ci: cancel stale runs for superseded PR commits
turinglambdaai
committed
a48f4a1
fix: fail closed for signing and bundle metadata
turinglambdaai
committed
6442ff8
ci: only request signing where credentials are available
turinglambdaai
committed
1ffd840
fix: repair SHA verifier parentheses
turinglambdaai
committed
6f2bfb4
fix: validate app names without unsupported regex escapes
turinglambdaai
committed
960c701
fix: remove stale glaze-lib CLI dependency
turinglambdaai
committed
2dcf234
chore: keep runnable examples out of package setup compilation
turinglambdaai
committed
1efb8d6
chore: exclude executable CI scripts from package setup
turinglambdaai
committed
523e698
security: make bootstrap single-use and protect SSE/origin boundaries
turinglambdaai
committed
c154a2d
security: use a distinct one-time browser bootstrap nonce
turinglambdaai
committed
af09637
test: lock down bootstrap, origin, and SSE authentication
turinglambdaai
committed
39a71fe
test: cover SSE protocol input validation
turinglambdaai
committed
f50a377
test: restore environment portably
turinglambdaai
committed
debca81
test: align generated client assertions with safe JS
turinglambdaai
committed
87cd65c
ci: use supported Windows installer toolchain
turinglambdaai
committed
abf0f69
fix: restore AppImage environment portably
turinglambdaai
committed
7771166
fix: resolve Windows root-relative asset paths
turinglambdaai
committed
a1cbbac
ci: replace unavailable formatter with compile gate
turinglambdaai
committed
9bd8152
api: validate WebView facade arguments consistently
turinglambdaai
committed
bc71001
test: cover WebView facade contracts
turinglambdaai
committed
69d1640
fix: fail loudly when browser fallback cannot launch
turinglambdaai
committed
9595956
api: validate routes and response helpers early
turinglambdaai
committed
2f49934
test: cover API route and response contracts
turinglambdaai
committed
e0ac40f
docs: add security reporting policy
turinglambdaai
committed
c06a4dc
docs: align contributor workflow with architecture boundaries
turinglambdaai
committed
f7fb875
fix: make Windows dialog buffers memory-safe and parse multi-select
turinglambdaai
committed
d660b72
test: cover Windows dialog multi-string parsing and contracts
turinglambdaai
committed
b8b5da1
api: validate menu protocol before native dispatch
turinglambdaai
committed
9139a75
test: cover menu protocol contracts
turinglambdaai
committed
406eb83
api: validate tray facade arguments consistently
turinglambdaai
committed
fb95e47
test: cover tray facade contracts
turinglambdaai
committed
b97dbb3
api: separate sys argument errors from platform failures
turinglambdaai
committed
1a207e0
test: cover sys public argument contracts
turinglambdaai
committed
6357a63
ci: verify installable source package archive
turinglambdaai
committed
751b652
docs: align Chinese README with current architecture
turinglambdaai
committed
6527030
docs: add repeatable release checklist
turinglambdaai
committed
dc17b3e
fix: report Windows autolaunch removal failures
turinglambdaai
committed
ff5fadb
pkg: separate runtime and build dependencies
turinglambdaai
committed
c7fa748
cli: fail fast on invalid arguments and partial key generation
turinglambdaai
committed
2f771da
test: cover CLI fail-fast behavior and scaffold
turinglambdaai
committed
f8036d7
fix: validate and fully read update manifests
turinglambdaai
committed
2a18b7c
test: cover update manifest and version contracts
turinglambdaai
committed
152c8b3

Commits on Sep 20, 2026

Add Dependabot for GitHub Actions
turinglambdaai
committed
95e117c
Add pull request checklist
turinglambdaai
committed
1334300
Add cross-platform bug report template
turinglambdaai
committed
6e05ccb
Configure issue templates
turinglambdaai
committed
c0c2a76
Harden CI permissions and timeouts
turinglambdaai
committed
bdc3a92
Pin CI actions to reviewed commits
turinglambdaai
committed
350adce
Avoid mutable AppImage tool in CI
turinglambdaai
committed
018099d
Upgrade setup-racket to Node 24 runtime
turinglambdaai
committed
97cbacb
Upgrade GitHub Actions to Node 24 releases
turinglambdaai
committed
3260378
Protect generated private keys on macOS
turinglambdaai
committed
4f89308
Document supported installer toolchains
turinglambdaai
committed
8e80ae7
Detect supported WiX version before packaging
turinglambdaai
committed
15e7358
Add cross-platform editor defaults
turinglambdaai
committed
bfb4120
Normalize text files across platforms
turinglambdaai
committed
9747908
Ignore generated installers and private key material
turinglambdaai
committed
c4e0e72
Add large static asset regression test
turinglambdaai
committed
59abdfe
Stream static assets instead of buffering whole files
turinglambdaai
committed
a5e57a0
test: cover macOS WebView full occlusion
ren.ji
committed
796558a
test: make macOS occlusion probe robust
ren.ji
committed
9ef120e
docs: record macOS occlusion CI limitation
ren.ji
committed
9388d4e