What's New in Gluecron

Shippedlive from merged pull requests

Gluecron builds itself on Gluecron. Every entry below is a real merged pull request from the platform's own repository — gated by its full CI suite and deployed automatically within minutes of merging. This list updates itself; it cannot go stale.

• feat(ai): migrate generator/PR call sites to callModel

  #5629 · merged 18h ago

• feat(ai): migrate chat/editor call sites to callModel

  #5628 · merged 18h ago

• feat(ai-provider): messages.stream — the adapter half that was missing

  #5627 · merged 18h ago

• feat(ai): enforced budgets + the callModel funnel — metering that can refuse

  #5626 · merged 18h ago

• test(gate): pin cross-implementation eventId vectors against GateTest

  #5625 · merged 20h ago

• fix(gate): harden baseSha to GateTest's strict receiver contract

  #5624 · merged 20h ago

• feat(pr-ledger): sweep open PRs whose head already reached their base

  #5623 · merged 20h ago

• feat(gate): send baseSha to GateTest so enforcement scopes to the change

  #5622 · merged 20h ago

• fix(explore): discovery is opt-in — stop advertising every public repo

  #5607 · merged 20h ago

• fix(push): the per-repo secret-scan toggle now governs pushes, as its label claims

  #5621 · merged 20h ago

• fix: the cross-engine diff's findings — one real eval, one self-portrait

  #5619 · merged 1d ago

• feat(health): catch credentials inline in committed systemd units

  #5618 · merged 1d ago

• fix(health): mention is not use — call-shaped rules only fire from code

  #5617 · merged 1d ago

• feat(health): vendor-shaped credential detection — twelve families that were invisible

  #5616 · merged 1d ago

• fix(health): rules that fired in the wrong language, and files never scanned at all

  #5614 · merged 1d ago

• fix(merge): survive a lapsed Anthropic bill — the outage's three dominoes

  #5615 · merged 1d ago

• fix(health): the credential rule read the variable name, not the value

  #5613 · merged 1d ago

• fix(merge): the risk gate scored a commit it was not merging

  #5612 · merged 1d ago

• fix(health,mcp): a security score from 3% of the repo, and the last of the fake totals

  #5611 · merged 1d ago

• fix(mcp): totals that only counted the page, and an XSS rule that could not read escaping

  #5610 · merged 1d ago

August 2026

• Merges wait for green

  Every push runs typecheck + the full test suite on Gluecron CI, and the merge gate refuses a PR while its branch is red or still running. Non-fast-forward merges were also fixed at the resolver level.

• The spine reaches the owner

  Synthetic journeys probe the product (sign-in, session, explore), heartbeat detection notices the platform's own outages, and red probes, error spikes, failed deploys and rollbacks now notify the owner in-app and by email.

• GitHub import brings the whole history

  Issues, pull requests and comment threads are imported alongside git objects — single-repo and bulk — with recovery for quota-interrupted runs.

• Ships with Anthropic down

  An invariant test proves every customer path works with the AI provider unreachable; AI features degrade to honest fallbacks instead of errors.

• Honest site pass

  A visible pre-launch label on every page, standards-mode HTML site-wide, a single price list shared by home and /pricing, dead links resolved, and enterprise/compliance copy rewritten to what is real today versus planned for GA.

• Access visibility

  Admins can see, and revoke, every OAuth client and token that can reach their repositories. Repository slugs resolve case-insensitively across the MCP surface.

July 2026

• Selfcheck: the platform diagnoses its own source

  Twenty-one static rules run hourly over Gluecron's code — unguarded mutations, unawaited writes, check-then-insert races, indexes weaker than the schema declares, fetches without deadlines — and surface on /admin/selfcheck.

• Production-readiness gate

  A CI gate that exits non-zero on drift between Drizzle and migrations, unguarded state-changing routes, or missing production configuration.

• Push-time policy

  Secret scanning at push, CODEOWNERS enforced at merge, and PR workflows wired to fire on open and update.

• Unified navigation and admin console

  One repo nav everywhere, grouped settings sidebar, a single admin shell, and a nav-audit tool that presses every tab on every repo to prove it renders.

• Onboarding that arrives working

  New repositories start with a README, gates and labels; bulk imports are secured and scanned; the Connect Claude page points at a first real task.

• Tokens that expire

  Personal access tokens gained a real expiration control, and the admin token flow no longer hardcodes a seven-day life.

June 2026

• AI Trio Review

  Three-model parallel PR review running Security, Correctness, and Style passes simultaneously — faster feedback, broader coverage.

• Spec-to-Live progress UI

  Watch your spec become a merged PR in real time: a live progress stream shows each agent step from spec parse to gate green to merge.

• Pack-content ruleset enforcement

  Block bad commits at push time with pack-content rulesets — enforce file-size limits, banned extensions, and content patterns before the push lands.

• Customer deploy targets

  SSH deploy to your own server directly from a merge. Register a server target in repo settings and autopilot handles the rsync.

• Workflow cache SAVE

  CI runs warm from the second run. Workflow jobs can now persist dependency caches between runs, cutting install time on hot paths by up to 80%.

• Push Watch

  A pulsing Live indicator appears in the repo header whenever a push is in flight — gate runs, AI review, and deploy status update without a page reload.

May 2026

• Branch preview URLs with auto-expiry cleanup

  Every PR branch gets an isolated preview URL. Autopilot tears down stale previews 24 hours after the branch is merged or closed.

• Dashboard AI activity widget

  A compact widget on /dashboard surfaces the last hour of autopilot actions across all your repos — repairs, reviews, deploys, and digest sends at a glance.

• Health score badge on repo header

  A colour-coded health score (0–100) appears in the repo header, computed from gate pass rate, stale PR count, and recent deploy success.