Juan Denis e6e94dd23a Refuse release tarballs without a checksum ...

Both the installer and the updater treated a missing checksums.txt as
"skip verification" and installed the tarball anyway. Every release
publishes one, so its absence means a broken mirror or a tampered
download. The installer now falls back to a source build and the
updater refuses; SERVERKIT_ALLOW_UNVERIFIED=1 overrides for mirrors
that do not host checksums.

2026-10-10 18:20:27 -04:00

..

deps

fix(distro): patch all 6 failing distro-compatibility probes

2026-08-28 23:31:36 -04:00

dev

Add audit fallback, builtin extensions, and ports

2026-05-03 15:57:02 -04:00

lib

fix(distro): patch all 6 failing distro-compatibility probes

2026-08-28 23:31:36 -04:00

security

ci(security): expand scans and narrow Bandit exceptions

2026-09-05 04:30:11 -04:00

test

Refuse release tarballs without a checksum

2026-10-10 18:20:27 -04:00

build-release.sh

Drop gevent and the stale backend Dockerfile

2026-10-10 13:40:55 -04:00

check-bandit-report.py

ci(security): expand scans and narrow Bandit exceptions

2026-09-05 04:30:11 -04:00

check-html-sinks.mjs

feat(security): HTML-sink sweep guard (D4) — keep XSS sinks swept

2026-07-22 19:22:43 -04:00

export-registry-entries.mjs

feat(registry): add builtin-extension catalog export script

2026-07-09 01:37:20 -04:00

generate-funding-qr.mjs

docs(readme): accept crypto donations

2026-07-20 01:19:54 -04:00

generate-migration-inventory.py

fix(ratchets): regenerate the boundary baseline and the migration inventory

2026-08-21 20:14:34 -04:00

install.ps1

chore(scripts): re-vendor the installers after the usage-path fix

2026-08-16 18:06:19 -04:00

install.sh

chore(scripts): re-vendor the installers after the usage-path fix

2026-08-16 18:06:19 -04:00

measure-repository.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

measure-runtime.py

feat(test): passive cgroup-v2 runtime baselines for full installs

2026-09-19 04:52:24 -04:00

new-extension.mjs

feat: add declarative walkthrough contribution contract

2026-08-31 23:14:29 -04:00

preflight.sh

chore(preflight): gate builtin-frontend drift locally

2026-08-30 14:08:09 -04:00

profile-api.py

fix: complete audit follow-ups and add regression coverage

2026-09-05 14:41:15 -04:00

setup-nginx-proxy.sh

feat(security): optional SSL/TLS hardening with Cloudflare-aware configs and HTTP fallback

2026-06-19 16:13:06 -04:00

setup-wsl.sh

Add audit fallback, builtin extensions, and ports

2026-05-03 15:57:02 -04:00

sign-extension.mjs

chore(extensions): author signing tool + signing spec docs

2026-08-04 23:34:34 -04:00

stage-remote.sh

Drop gevent and the stale backend Dockerfile

2026-10-10 13:40:55 -04:00

stage.sh

feat(staging): plan 37 testbed — stage.sh/stage-remote.sh, STAGING banner+health, profiles, tests

2026-07-07 20:29:31 -04:00

sync-agent-installers.sh

fix(scripts): resolve the agent repo's default branch instead of hardcoding it

2026-08-16 11:50:50 -04:00

sync-builtin-frontends.mjs

feat(extensions): Phase 0 hygiene — author guide, sync gate, truth pass, tests

2026-07-01 21:13:04 -04:00

sync-registry-index.sh

security(extensions): trust signed first-party catalog

2026-08-28 00:56:12 -04:00

test-routing.sh

fix(agent-install): paged version discovery, checksum verify, busybox support (A1-A3)

2026-07-02 18:00:24 -04:00

update-readme-measurements.py

docs: unify README asset size into one total

2026-09-05 14:57:27 -04:00

update.sh

Refuse release tarballs without a checksum

2026-10-10 18:20:27 -04:00