Clarify architecture boundaries and public API - #5

Open

turinglambdaai wants to merge 101 commits into

mainfrom

chore/architecture-boundaries

Commits on Sep 17, 2026

docs: refocus README on public architecture
turinglambdaai
committed
7cacf3d
docs: add architecture boundaries
turinglambdaai
committed
5616ecf
docs: add focused roadmap
turinglambdaai
committed
39b3c0d
docs: mark glaze main as public facade
turinglambdaai
committed
3a4bac3
test: cover public glaze facade
turinglambdaai
committed
b1d2aaa
examples: add focused tray example
turinglambdaai
committed
2c52e75
examples: add focused events example
turinglambdaai
committed
d4f49de
examples: add events frontend
turinglambdaai
committed
f3edd05
docs: organize examples by recommended learning path
turinglambdaai
committed
4d59d9f
test: gate macOS menu e2e to macOS
turinglambdaai
committed
2dfe517
fix: make app shutdown idempotent and cleanup on errors
turinglambdaai
committed
3fabee2
fix: dispatch tray operations by handle backend
turinglambdaai
committed
b24169c
fix: retain single-instance locks for process lifetime
turinglambdaai
committed
ada1599
test: cover idempotent app shutdown
turinglambdaai
committed
fc0f310
security: confine static files and fix loopback host parsing
turinglambdaai
committed
a322189
test: cover host guard and static path confinement
turinglambdaai
committed
f4f86b6
fix: resolve packaged public assets without wrapper cwd
turinglambdaai
committed
0c70b24

Commits on Sep 18, 2026

fix: compile application entry directly
turinglambdaai
committed
7a950a3
fix: resolve packaged assets and validate server inputs
turinglambdaai
committed
8cac26e
fix: modernize scaffold and repair build option parsing
turinglambdaai
committed
59b5716
test: execute packaged module+ main entry
turinglambdaai
committed
f531318
ci: execute packaged entry on every platform
turinglambdaai
committed
ab5bb8f
ci: enforce formatting and cover Racket 9.3 packaging
turinglambdaai
committed
1a29823
fix: harden update manifest fetching
turinglambdaai
committed
50009fc
security: stop leaking handler exceptions to clients
turinglambdaai
committed
a52c170
test: cover update hashing and safe 500 responses
turinglambdaai
committed
cc2ede0
fix: generate safe JavaScript API bindings
turinglambdaai
committed
5209af1
test: cover safe generated API JavaScript
turinglambdaai
committed
9a945e0
fix: make CLI fail fast and protect existing projects
turinglambdaai
committed
ed3bb4f
security: enable API token by default and validate lifecycle inputs
turinglambdaai
committed
a4900b8
test: cover run-app argument contracts
turinglambdaai
committed
65b8d3f
docs: document secure defaults and hardened runtime contracts
turinglambdaai
committed
21d5389
docs: record stabilization fixes
turinglambdaai
committed
f2c3c7a
feat: expose background-active webview mode
turinglambdaai
committed
7085b05
feat: accept portable background-active webview option
turinglambdaai
committed
3864006
feat: accept portable background-active webview option
turinglambdaai
committed
62488a8
feat: accept portable background-active webview option
turinglambdaai
committed
3c64dd4
feat: keep macOS monitoring webviews active with public APIs
turinglambdaai
committed
d4af0f7
feat: pass background-active mode through run-app
turinglambdaai
committed
a758476
fix: isolate build intermediates and verify notarization staple
turinglambdaai
committed
554e99e
fix: repair update checker syntax
turinglambdaai
committed
9beec49
fix: classify listener startup races as network errors
turinglambdaai
committed
ef2d121
docs: document background-active webview mode
turinglambdaai
committed
5889fbd
fix: use real Windows folder picker and correct kdialog argv
turinglambdaai
committed
17f12e2
fix: use correct macOS SMAppService registration API
turinglambdaai
committed
0c09144
fix: harden license canonicalization and claim validation
turinglambdaai
committed
7d3913b
test: cover license control characters and invalid dates
turinglambdaai
committed
5096f4a
fix: harden Linux deep-link registration contract
turinglambdaai
committed
5e5a58b
security: escape Linux desktop entries and validate autolaunch inputs
turinglambdaai
committed
d1a2034
test: cover Linux deep-link contract and escaping
turinglambdaai
committed
5fca17d
security: open browser without shell command construction
turinglambdaai
committed
c0ed47a
security: validate SSE event names and payloads
turinglambdaai
committed
22c9a0e
fix: make asset helpers robust for nested directories
turinglambdaai
committed
86e4ae0
fix: use real GDK clipboard atom and correct Linux helpers
turinglambdaai
committed
f72970c
security: pass macOS notification content as argv
turinglambdaai
committed
7cf6478
fix: preserve Unicode and memory ownership in Windows clipboard
turinglambdaai
committed
d5d2aaf
fix: make installer builds fail-safe and assemble Linux AppDir
turinglambdaai
committed
4b944c9
security: escape packaging metadata and shell boundaries
turinglambdaai
committed
443e630
fix: repair packaging helper source quoting
turinglambdaai
committed
efb0d3b
ci: cancel stale runs for superseded PR commits
turinglambdaai
committed
a48f4a1
fix: fail closed for signing and bundle metadata
turinglambdaai
committed
6442ff8
ci: only request signing where credentials are available
turinglambdaai
committed
1ffd840
fix: repair SHA verifier parentheses
turinglambdaai
committed
6f2bfb4
fix: validate app names without unsupported regex escapes
turinglambdaai
committed
960c701
fix: remove stale glaze-lib CLI dependency
turinglambdaai
committed
2dcf234
chore: keep runnable examples out of package setup compilation
turinglambdaai
committed
1efb8d6
chore: exclude executable CI scripts from package setup
turinglambdaai
committed
523e698
security: make bootstrap single-use and protect SSE/origin boundaries
turinglambdaai
committed
c154a2d
security: use a distinct one-time browser bootstrap nonce
turinglambdaai
committed
af09637
test: lock down bootstrap, origin, and SSE authentication
turinglambdaai
committed
39a71fe
test: cover SSE protocol input validation
turinglambdaai
committed
f50a377
test: restore environment portably
turinglambdaai
committed
debca81
test: align generated client assertions with safe JS
turinglambdaai
committed
87cd65c
ci: use supported Windows installer toolchain
turinglambdaai
committed
abf0f69
fix: restore AppImage environment portably
turinglambdaai
committed
7771166
fix: resolve Windows root-relative asset paths
turinglambdaai
committed
a1cbbac
ci: replace unavailable formatter with compile gate
turinglambdaai
committed
9bd8152
api: validate WebView facade arguments consistently
turinglambdaai
committed
bc71001
test: cover WebView facade contracts
turinglambdaai
committed
69d1640
fix: fail loudly when browser fallback cannot launch
turinglambdaai
committed
9595956
api: validate routes and response helpers early
turinglambdaai
committed
2f49934
test: cover API route and response contracts
turinglambdaai
committed
e0ac40f
docs: add security reporting policy
turinglambdaai
committed
c06a4dc
docs: align contributor workflow with architecture boundaries
turinglambdaai
committed
f7fb875
fix: make Windows dialog buffers memory-safe and parse multi-select
turinglambdaai
committed
d660b72
test: cover Windows dialog multi-string parsing and contracts
turinglambdaai
committed
b8b5da1
api: validate menu protocol before native dispatch
turinglambdaai
committed
9139a75
test: cover menu protocol contracts
turinglambdaai
committed
406eb83
api: validate tray facade arguments consistently
turinglambdaai
committed
fb95e47
test: cover tray facade contracts
turinglambdaai
committed
b97dbb3
api: separate sys argument errors from platform failures
turinglambdaai
committed
1a207e0
test: cover sys public argument contracts
turinglambdaai
committed
6357a63
ci: verify installable source package archive
turinglambdaai
committed
751b652
docs: align Chinese README with current architecture
turinglambdaai
committed
6527030
docs: add repeatable release checklist
turinglambdaai
committed
dc17b3e
fix: report Windows autolaunch removal failures
turinglambdaai
committed
ff5fadb
pkg: separate runtime and build dependencies
turinglambdaai
committed
c7fa748
cli: fail fast on invalid arguments and partial key generation
turinglambdaai
committed
2f771da
test: cover CLI fail-fast behavior and scaffold
turinglambdaai
committed
f8036d7
fix: validate and fully read update manifests
turinglambdaai
committed
2a18b7c
test: cover update manifest and version contracts
turinglambdaai
committed
152c8b3