History · ccantynz/Gluecron.com

50 recent commits on main

Browse the project's history. Click any commit to see the full diff, AI review notes, and signature status.

Commits on Today

security: fix the remaining 11 files with the broken glued-wildcard auth-gate pattern

ccantynz-alt·committed 3 hrs ago

03e6f9b

security: fix auth bypass on /admin/security and /admin/soc2 (both were publicly readable)

ccantynz-alt·committed 3 hrs ago

7b0a81b

fix(routing): stop /admin/autopilot/health being shadowed by the repo-health page

ccantynz-alt·committed 3 hrs ago

ad189d6

fix(standups): stop crashing with a raw 500 for anonymous visitors

ccantynz-alt·committed 3 hrs ago

ccec83a

fix(security): rate-limit /mcp and the v1 REST API

ccantynz-alt·committed 3 hrs ago

4d4bd4b

fix(deploy): auto-rollback on failed health check instead of leaving a broken container live

ccantynz-alt·committed 4 hrs ago

3b77289

fix(types): burn down all 49 TypeScript errors to 0

ccantynz-alt·committed 4 hrs ago

8ed88f2

refactor(ai): consolidate 3 duplicate Anthropic client constructors

ccantynz-alt·committed 5 hrs ago

242097b

fix(ai-review): consolidate 3 drifted merge-approval heuristics, fail open on provider errors

ccantynz-alt·committed 20 hrs ago

c166384

fix(mcp): wire AI review + triage into gluecron_create_pr

ccantynz-alt·committed 20 hrs ago

79a52c8

Commits on Yesterday

chore: stop tracking .agent/ scratch output, gitignore it

ccantynz-alt·committed 1 day ago

649bc9d

fix(git): decompress gzip'd smart-HTTP request bodies before piping to git

ccantynz-alt·committed 1 day ago

9086485

fix(git): stream git-upload-pack instead of buffering the whole pack

ccantynz-alt·committed 1 day ago

f5f21f2

fix(health-score): kill false-positive "critical security issue" noise

ccantynz-alt·committed 1 day ago

2415bdf

Commits on July 17

Initial commit

Test User·committed 3 days ago

f8614f3

Initial commit

Test User·committed 3 days ago

4fc7860

docs: consolidate status tracking into STATUS.md

Test User·committed 3 days ago

f0d13f9

Commits on July 16

Add feature

Test User·committed 4 days ago

e2206a6

seed

Test User·committed 4 days ago

a54e588

fix(webhooks): wire fireWebhooks() into the 11 real event points it was missing from

ccanty labs·committed 4 days ago

a74f4ed

fix(nav): connect the orphaned repo-settings and account-settings tree

ccanty labs·committed 4 days ago

ae2a071

Merge branch 'feat/push-policy-codeowners-hardening'

ccanty labs·committed 4 days ago·merge of 2 parents

2daad3c

fix(agent-journey): self-heal orphaned probe repos across runs

ccanty labs·committed 4 days ago

f8f6bd0

feat(policy): push-time secret scan, CODEOWNERS merge enforcement, PR-workflow wiring

ccanty labs·committed 4 days ago

91b054e

Commits on July 15

seed

ccanty labs·committed 5 days ago

61897c4

fix(activity): wire activity_feed writes into push/PR/merge paths

ccanty labs·committed 5 days ago

b7b5f75

docs(agent-journey): mark activity-feed check warn-only, document the gap

ccanty labs·committed 5 days ago

48c26de

fix(agent-journey): activity feed endpoint returns a bare array

ccanty labs·committed 5 days ago

561b2a8

fix(gate): a GateTest outage must not hard-block every merge platform-wide

ccanty labs·committed 5 days ago

6930df0

fix(backup): include bare git repos in the daily offsite backup

ccanty labs·committed 5 days ago

5dc0e94

Commits on July 14

fix(vapron): correct receiver URL — /api/hooks/gluecron/push (old path 404s)

ccanty labs·committed 6 days ago

5e67f6b

docs: Anthropic connector directory submission package

ccanty labs·committed 6 days ago

16c3343

feat(mcp): tool annotations (readOnlyHint/destructiveHint) on all tools — Anthropic directory requirement

ccanty labs·committed 6 days ago

523ddad

chore(registry): trim description to registry 100-char limit — published as com.gluecron/gluecron v1.0.0

ccanty labs·committed 6 days ago

9945e2c

feat(registry): publish to the official MCP Registry — domain verification + server.json

ccanty labs·committed 6 days ago

cb65da8

feat(vapron): VAPRON_API_KEY tenant auth on outbound calls

ccanty labs·committed 6 days ago

e61e6cd

docs(audit): 2026-07-14 public-readiness audit — MCP invalid_token fix verified live, doctor green

ccanty labs·committed 6 days ago

fb37dd6

feat(ops): doctor + agent-journey — one-shot public-readiness certification

ccanty labs·committed 6 days ago

2cecc08

fix(mcp): RFC 6750 invalid_token challenge — break the dead-token reconnect loop

ccanty labs·committed 6 days ago

b5a7bb3

Commits on July 13

docs(incident): 2026-07-13 deploy-window blip — root cause + follow-ups

Craig Canty·committed 7 days ago

94b5edf

fix(backup): dump the REAL production DB (Neon), add proven restore drill