release/v0.0.278 — composer-image privacy (#634), drop bundled Smolify, no tag - #636
Merged
Conversation
Pasted screenshots stayed on the pending-image queue after the user deleted the composer chip, so a text-only submit still sent native vision blocks (and a double-stage could emit four from two pastes). Submit now keeps composer payloads only while [Image], [Image #N], or @[path] remains; /image and /paste stay sticky. Identical b64 collapses. The TUI backspace/Ctrl+U path detaches chips so the composer matches what the request will send. Fixes #634
Incremental on main after v0.0.277: #634 marker-gated submit so a deleted composer screenshot is not sent. Ratchet floor 1684. No v0.0.278 git tag on this cut.
Headless -p prints "turn still going" on stdout from model call 2 (ADR 0020). The boundary script required stdout to be exactly the final reply, so CI zig failed after that pulse landed on main.
Smolify is no longer a reserved core server. Startup does not inject schemas, GRAFF_SMOLIFY is ignored, and a workspace or plugin entry named smolify connects like any other remote MCP. CI no longer runs the boundary E2E (it asserted default tools while GRAFF_NO_SMOLIFY=1). The local secret-egress gate stays if someone adds mcp__smolify__*. smolify-tools.json remains a schema-gate fixture. Ratchet floor 1683: the offline connectSmolify registration test left with the server.
The evaluators wait up to 120s for all four primary-start markers (#467). invoke() killed graff at 60s, so a loaded PR runner reported TimeoutExpired while the same commit's push job finished in 3s.
This was referenced Aug 26, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Cut of
release/v0.0.278atc5c33e2, rebased onmainafter v0.0.277. Nov0.0.278git tag.Incremental: deleted composer screenshots must not reach the model (#634 / #635), and the bundled Smolify pin is gone.
What this cut adds
[Image #N]and are sent only while that chip, a bare[Image], or@[path]remains. A text-only submit drops the leftover queue./imageand/pastestay sticky./image clearclears the whole queue.b64collapses (two pastes cannot become four blocks).xdetach chips.ask_userruns the same retain-filter before flush.Bundled Smolify removed
The reserved core server is gone: no
connectSmolify, noGRAFF_SMOLIFYauto-connect, no workspace-name lockout, no CI boundary E2E. CI was already settingGRAFF_NO_SMOLIFY=1and then asserting default Smolify tools — that contradiction kept the zig job red.Add it like any other remote MCP if you want it:
A local secret-egress gate still rejects recognizable credentials on
mcp__smolify__*when that name is connected.smolify-tools.jsonstays as a schema-gate fixture only.Tests
Unit suite 1683 (floor 1683; the bundled-registration test left with the server). Tournament E2E parent timeout is 180s so it outlives the 4-way barrier (default 120s); the previous 60s parent killed
graffon a loaded PR runner while the same-commit push job finished in 3s.Notes:
CHANGELOG.md,docs/releases/v0.0.278.md,graff --version.