2026-07-18 - 2026-08-18
Overview
4 Pull requests merged by 1 user
Merged
#28 Make the image build multi-stage and cache-proof (closes #4)
Merged
#26 Compile bin/ alongside src/ so the package can be built (closes #3)
Merged
#23 Retry transient network failures with exponential backoff (closes #2)
Merged
#20 Verify secretstream TAG_FINAL and write downloads atomically (closes #1)
1 Pull request proposed by 1 user
Proposed
#31 Run all linting in Docker via Dockerfile.lint (closes #30)
5 Issues closed from 1 user
Closed
#4 Make make docker green and policy-conformant
Closed
#14 Decision needed: account credentials committed in test/integration/live-login.ts
Closed
#3 Fix the TypeScript build: make build fails with TS6059 on main
Closed
#2 Retry policy: no retry on 4xx, exponential backoff on 5xx and network errors
Closed
#1 Downloads: verify secretstream TAG_FINAL and write output atomically
28 Issues created by 1 user
Opened
#1 Downloads: verify secretstream TAG_FINAL and write output atomically
Opened
#2 Retry policy: no retry on 4xx, exponential backoff on 5xx and network errors
Opened
#3 Fix the TypeScript build: make build fails with TS6059 on main
Opened
#4 Make make docker green and policy-conformant
Opened
#5 Single-source the version string
Opened
#6 Package metadata for release: engines, exports, prepublishOnly
Opened
#7 listFiles can loop forever when the server stops advancing
Opened
#8 runBackup must not crash on symlink failure, and must repair partial originals
Opened
#9 Sanitize server-controlled filenames used as output paths
Opened
#10 Client session handling: stop reaching into private state, validate snapshots, clear keys on logout
Opened
#11 Harden the JPEG EXIF scanner against malformed input
Opened
#12 Add tests for the CLI (bin/quak.ts)
Opened
#13 Rewrite the README API reference to match the implementation
Opened
#14 Decision needed: account credentials committed in test/integration/live-login.ts
Opened
#15 Tag v1.0.0
Opened
#16 Decision needed: does quak publish to npm?
Opened
#17 fixMissingThumbnails assumes every file is a JPEG
Opened
#18 Unify URL construction in ApiClient
Opened
#19 Prune stale remote branches
Opened
#21 streamDecrypt buffers quadratically: recopies the whole accumulated buffer on every network read
Opened
#22 Atomic download writes: durability, orphan reaping, and untested failure paths
Opened
#24 Retry/timeout follow-ups: idle deadline, reader cancellation, and classifier hardening
Opened
#25 make test silently runs the suite N+1 times when a git worktree exists inside the checkout
Opened
#27 Drop the deprecated @types/libsodium-wrappers-sumo stub dependency
Opened
#29 make check runs prettier --check . twice
Opened
#30 Run all linting in Docker via Dockerfile.lint + script/lint
Opened
#32 Rename LINT_EPOCH to CHECK_EPOCH in Dockerfile.lint (blocked on a policy ruling)
Opened
#33 lint-once.test.ts misses the path CI actually runs, and its lockfile assertion checks the wrong branch