esengine 4111108fc4 ci(release): attest and gate the CLI channels job ...

cli-channels runs in the studio-cli-channels environment and is the only job
with id-token: write. Its registry tokens are environment-only secrets
(STUDIO_NPM_TOKEN, STUDIO_HOMEBREW_TAP_TOKEN), and its first step fails unless
the environment has a required reviewer. npm publish passes --provenance,
matching the 1.x release line. A contract test parses every workflow and pins
the permissions, the secret references and the id-token grant. npm/ changes now
trigger the CI job that runs npm/publish.test.mjs.

2026-09-30 00:49:28 -07:00

..

e2ebench

test(e2ebench): assert every memorybench grader accepts its task's correct answer

2026-09-30 11:01:59 +08:00

extension-protocol-gen

refactor: the kernel's packages live in the layer they belong to

2026-09-23 18:28:21 -07:00

reasonix

feat(provider): identify model requests as Reasonix/<version>

2026-09-27 07:19:02 -07:00

reasonix-plugin-example

refactor: the kernel's packages live in the layer they belong to

2026-09-23 18:28:21 -07:00

reasonix-studio-host

feat(studio): default new window sessions from the sandbox claim and folder trust

2026-09-29 04:55:03 -07:00

signpath-contract

ci(release): attest and gate the CLI channels job

2026-09-30 00:49:28 -07:00

studio-delta

feat(release): publish a Windows delta beside the installer

2026-09-24 03:53:21 -07:00