Nightly Build (v0.10.7-nightly.202609170627.0dda4e14f)
Changes since v0.10.7-nightly.202609160626.21155beb4:
c8a8d16 lint(secretpatterns): see untracked files, and fail when git fails
12d49d8 test(checkpoint): cover the push call site that folds the remote's reason into the error
b320621 docs: fix brew install command for zsh
b1c9f82 docs: say login takes the device-code flow when Linux has no display
b3ac120 test(integration): cover the no-display device flow on Linux
94188b8 login: tighten the noLocalDisplay comment from review
b819986 test(integration): give the spawned login a display so the browser-flow test runs on headless CI
9b07568 login: use the device-code flow when Linux has no graphical display
7afcd21 Pin each grant target's roles against the generated client's enum
5ea17fa Prefix a malformed native path with the ref only
fdf947c Guard the forge token before parsing in resolveRepoPath
49be1b4 Show the parser's reason only for a ref that named the et/ token
da1d078 Pin that an omitted required --role never reaches RunE
dec333d Refuse an explicit empty --role on org grant add too
9eb896c Drop the ID column from the project and repo grant tables
83559e3 Lead the org grant list with the grantee's handle
00b3591 fix(repo): only hint the plain read when readiness is what failed
1ceb329 fix(repo): preserve readiness compatibility and creation metadata
75149a5 fix: confirm active repositories with authoritative reads
fcfe0d6 feat(repo): wait for authoritative repository readiness (COR-1595)
94edec6 test: isolate ENTIRE_TOKEN in both TestMains
4e6cf20 test(enable): pin that an http ENTIRE_TOKEN never sends the bearer
1775822 test(enable): cover the identity wiring, not just the injected fakes
1ed6e9d fix(enable): run the identity preflight for every first-time setup path
9ffc468 fix(enable): drop the bootstrap runner left unused by the identity move
3b2932e fix(enable): refuse identity login where it cannot be completed
44d2220 test(redact): join the existing fixture convention, and enforce it in lint
7693ebb fix(checkpoint): keep the tail when eliding long push output
65e3202 Validate an empty required --role and resolve path segments by name
150e92b Move entire grant under org, project and repo
08421cd Keep an explicit data host when ENTIRE_TOKEN selects the login
b59e30a test(redact): assemble the AWS key fixture instead of inlining it
c69b1e4 fix(checkpoint): surface the remote's reason when a checkpoint push is refused
45473ef Show the default cluster and a validated host in cluster list
0efa273 Add entire cluster list for the cluster catalog
ce76c49 refactor(auth): resolve the acting context through one accessor
941bdb6 fix(enable): harden git identity recovery
d47538f fix(enable): recover missing git identity through Entire login
1c67068 Never fall back to the data API while ENTIRE_TOKEN is set
ea3a9ca Fail closed on an invalid env token and a stale staging login in cell fallbacks
8f59b89 Trim repeated and stale cell-routing comments
cd7cd6e Never dial a login core as a cell, and keep cell fallbacks in one environment
22842b7 Make the cell-routing comments state constraints, not history
403fc90 Simplify the context-following cell path and its tests
6cd9aa0 Route entire api --to cell through the selected login context (COR-1634)
b5c900d test(status): cover read-only session reporting; correct the docs
92b6a3d fix(status): list every session without mutating state
0cec277 feat(session): add ListReadOnly for passive callers