Every change, in the order it merged

docs(history): record the #418 port series — four measured pieces, two rules not taken, one narrowed

#470c51f92342 filesalso engine, tests, our CI, repo, tooling, docs

bundleSizeciSecuritycodeQualitydocumentationhardcodedUrllinksprSizesecrets

fix(nightly): install every workspace, and go red when the sweep is red — three tests failed for nothing a human looks at

#471cb642cc41 filesalso engine, tests, our CI, repo, tooling

bundleSizeciSecuritycodeQualitydocumentationhardcodedUrllinksprSizesecrets

fix(ci): the job named "Full Scan" ran the quick suite; the Stop-hook sweep was never wired (port of #418, piece 4)

#4699b1b23b40 filesalso engine, tests, repo, our CI, tooling

bundleSizeciSecuritycodeQualitydocumentationhardcodedUrllinksprSizesecrets

fix(website): suite sizes, tool count and model names are read from the engine, never typed (port of #418, piece 3)

#468c9439dc37 filesalso engine, tests, tooling

bundleSizeciSecuritycodeQualitydocumentationhardcodedUrllinksprSizesecrets

fix(rules): port #418's rule fixes onto main, each re-measured on the corpus (piece 2)

#4677d5931a14 filesalso tests

bundleSizeciSecuritycodeQualitydocumentationhardcodedUrllinksprSizesecrets

fix(direct-repair): fixes were pushed unverified — verify fail-closed, revert what does not hold (port of #418, piece 1)

#4656620853218 filesalso tests, website, engine, our CI, precision corpus

fix(deploy): run the deploy script from the commit being deployed, not the box's stale copy

#46472952f5215 filesalso website, tests, our CI, precision corpus

Flywheel trainer report — 2026-09-06

#416c4012e7215 filesalso website, tests, precision corpus, tooling

Refresh website testing statistics — 2026-09-06

#4174a72a0c6 filesalso tests, precision corpus, tooling

fix(deploy): the box deploy refused its own build's changelog.json — five deploys failed, production 85 commits behind

#463e7b2f322 filesalso tooling

docs: the Fifty's queue and metrics after #458 / #461 — KI #77 resolved on both halves

#46234107812 files

ci(action): stop swallowing exit codes in the Marketplace action (KI #108)

#4614d5856e4 filesalso CI integration, tests

docs: one stripper — Doctrine §4 rows, KI #77 string-guard half closed, KI #108 opened, HISTORY entry

#460ebd2a6b74 filesalso tests, CI integration, our CI, docs

asyncIterationauthBypassbashSafetyciSecuritycookieSecuritycronExpressioncrossFileTaintdataIntegrityenvVarserrorSwallowhardcodedUrlhomoglyphintegrationTestsmoneyFloatnPlusOnepromptSafetyraceConditionredosresourceLeakretryHygienesecurityshellssrftlsSecurityundefinedRef

feat(core): one stripper — every string and comment guard imports source-strip.js; three false negatives the corpus was sitting on

#458c15d52871 filesalso tests, CI integration, our CI

asyncIterationauthBypassbashSafetyciSecuritycookieSecuritycronExpressioncrossFileTaintdataIntegrityenvVarserrorSwallowhardcodedUrlhomoglyphintegrationTestsmoneyFloatnPlusOnepromptSafetyraceConditionredosresourceLeakretryHygienesecurityshellssrftlsSecurityundefinedRef

walk: one definition of what a walk skips — fifteen private exclude lists become imports of src/core/walk-excludes.js, and the import graph stops skipping every dot-directory

#4578ab5b7019 filesalso tests, docs

crossFileTaintenvIntegritymutationopenapiDriftsecretssyntaxundefinedRef

tests: the suite runner counts every file — `--test-force-exit` exited before children had reported and called the partial count green

#456be2db4026 filesalso docs, engine, our CI, tooling, website, repo

aiHallucinationflakyTests

aiHallucination: package imports come from the one import graph — a re-export, a multi-line import and a dynamic import() are imports; a Deno `npm:` specifier and a baseUrl-relative path are not packages

#4556c972aa7 filesalso tests, docs

aiHallucination

dependencyReachability: production imports come from the one import graph — a package named in a comment, a prompt or a code sample is not imported

#454a70912b6 filesalso tests, docs

deadCode: two conventions the orphan rule could not see — Docusaurus `@site/*` and angular.json entrypoints

#45380985095 filesalso tests, docs

import-graph: require / import() / path literals are read through the one stripper — a doc comment is not a coupling edge

#4526f0712312 filesalso tests, docs

test-paths: the one definition moves to src/core — the two core copies the modules-only guard never saw are gone

#4513d48c4c11 filesalso tests, docs

homoglyph

homoglyph: JS/TS identifiers are walked on the one stripper's output — line two of a template or block comment is not code

#450d307a339 filesalso tests, docs

homoglyphimportCycle

perf: the elision use-scan runs only inside candidate cycles; the stripper is slice-based (2.6x) and two of its defects are fixed

#449818b3e56 filesalso tests, docs

importCycle

importCycle: type-only elision — the rule sees NodeNext projects, and the cycles it blocked on were never load-time (KI #96)

#448107a0e819 filesalso tests, docs, website, precision corpus

aiHallucinationimportCyclesyntax

test-paths: one definition — Python runner basenames added, and three modules' private copies (deadCode, flakyTests, typescriptStrictness) retired

#447ab24c7a6 filesalso tests, docs

deadCodeflakyTeststypescriptStrictness

deadCode: Python reachability on one resolver — flask 10→0, django 351→9 false orphans (KI #96)

#4463c0b43810 filesalso tests, docs

deadCode

Delete the 24 files nothing outside tests imports (KI #96's first catch); prSize stops counting whole-file deletions

#444caf9d4b45 filesalso engine, tests, docs

deadCodelinksprSize

deadCode: shipped-but-unreachable files, on one import graph that resolves the indirection (KI #96)

#443c682da647 filesalso tests, docs, website, tooling

aiReviewauthBypassciSecuritycodeQualitycrossFileTaintdeadCodeduplicateCodeerrorSwallowfakeFixDetectorhardcodedUrlintegrationTestskuberneteslinkslintmutationnPlusOneraceConditionregressionPredictorretryHygienerollbackHonestyruntimeErrorssqlMigrationsssrfterraform

links: the config keys are the ones the module reads — excludePatterns wired, five dead keys gone (KI #52)

#445ecfb2c25 filesalso tests, docs

links

Confidence: the block threshold is calibrated on the corpus, on every run (Move 09)

#4401ada58b34 filesalso tests, docs, website, our CI, tooling

aiReviewauthBypassciSecuritycodeQualitycrossFileTaintduplicateCodeerrorSwallowfakeFixDetectorhardcodedUrlintegrationTestskuberneteslintmutationnPlusOneraceConditionregressionPredictorretryHygienerollbackHonestyruntimeErrorssqlMigrationsssrfterraform

Modules: the last 22 CRLF conversions — split and join together, and a fix keeps the file's line endings (KI #77)

#44254d2bbc39 filesalso website, tests, docs, our CI, tooling

aiReviewauthBypassciSecuritycodeQualitycrossFileTaintduplicateCodeerrorSwallowfakeFixDetectorhardcodedUrlintegrationTestskuberneteslintmutationnPlusOneraceConditionregressionPredictorretryHygienerollbackHonestyruntimeErrorssqlMigrationsssrfterraform

CI: the Dogfood Gate checks out full history so prSize measures the same diff as the Quality Gate (KI #107)

#441b749dcb14 filesalso tests, our CI, docs, tooling

Website: /changelog — every change to main, generated from the branch history (Move 39)

#439b6817af12 filesalso tests, our CI, tooling, docs

CLI: --offline / GATETEST_OFFLINE=1 — air-gapped mode, stated and recorded (Move 42)

#438c84d5b713 filesalso tests, docs, website

hardcodedUrl

Mutation: mutants live in a sandbox copy — the user's tree is never opened for writing (Move 20)

#437874332432 filesalso tests, docs, CI integration

fakeFixDetectormutationprSizeraceConditionundefinedRef

Gate: one diff base for every module, merge queues, and monorepo path filters (Move 27)

#435c062f4f19 filesalso tests, CI integration, docs

fakeFixDetectorprSizeundefinedRef

Gate: policy-change findings and the policy hash in every report (Move 26)

#4369ffc9a28 filesalso tests, docs

fakeFixDetector

Flywheel: per-rule silenced rate, published at /noise (Move 07)

#43462fc77f38 filesalso engine, tests, docs, CI integration

fakeFixDetector

Reports: the compliance evidence pack — `gatetest --compliance`, one mapping table for SARIF, CISO and the pack (Move 46)

#4337425cf820 filesalso tests, docs, website, CI integration

fakeFixDetector

KI #106 closed: the last nine framework gates open (promptSafety → seo), ceilings ratchet nightly (Move 06)

#43126a14bf34 filesalso tests, docs, our CI, tooling, repo

bashSafetyciSecuritydataIntegrityflakyTestspromptSafetyseoshellsqlMigrationstrpcContractzodSchemaPresence

Gate: a test skipped by a commit that calls itself a fix blocks (Move 30)

#43222fe2a35 filesalso tests, docs

fakeFixDetector

CLI: a blocked first scan leads with `gatetest --baseline` (Move 23); prSize ignores a stale local main

#430dc879b115 filesalso engine, tests, docs, CI integration

prSize

Website: the proof on the front page — measured precision, the six honesty habits, and the hero thesis

#429268bc117 filesalso tests

Part 2 — corpus to twenty (four monorepos); six more modules measured; shared guard fixes; webhookPayload + cacheHeaders gates; moneyFloat + prSize

#4283fb420044 filesalso tests, docs, website, precision corpus, repo

accessibilityauthBypasscacheHeadersciSecurityfakeFixDetectorhardcodedUrlintegrationTestslinksmoneyFloatperformanceprSizesecurityseounitTestswebhookPayload

Part 1 — doctrine + the Fifty in the repo; corpus to 16 repos (all eight languages); KI #106 gates; 8 modules measured on the monorepos

#426a35d67e65 filesalso engine, docs, website, precision corpus, tooling

accessibilityaiHallucinationbashSafetyciSecuritycodeQualitydocumentationerrorSwallowintegrationTestsmonorepoConstraintsnPlusOnesecretssecurityseosyntaxtypescriptStrictnessundefinedRefunitTestsvisualwebHeaders

The Fifty, moves 10/11/17/19/21/24/25/28/36/38 + 7 engine precision fixes our own scanner found

#423910e4b7138 filesalso website, tests, docs, tooling, our CI, repo

asyncIterationauthBypassbashSafetycacheHeadersclaudeCompliancecookieSecuritycronExpressiondataIntegritydatetimeBugdeadCodedeployContractdockerfiledocumentationduplicateCodeenvVarserrorSwallowfakeFixDetectorfeatureFlagflakyTestshardcodedUrlhomoglyphkuberneteslogPiimoneyFloatnPlusOneopenapiDriftpromptSafetyraceConditionredosresourceLeakretryHygienerollbackHonestysecretRotationsecurityserviceConsistencyshellsqlMigrationsssrfsystemdterraformtlsSecuritytypescriptStrictnesswebHeaders

fix(lang): the eight-language claim measured; /precision page; diff scans report only the diff

#4228b9c71128 filesalso engine, website, our CI, docs, precision corpus, tooling

datetimeBugsecretssecurity

fix: the gate could not fail, and the corpus proving it was safe held two fixtures

#41935bf48968 filesalso tests, website, precision corpus, CI integration, our CI, docs, tooling, repo

aiHallucinationaiReviewauthBypassbashSafetycodeQualitycompatibilitycrossFileTaintdataIntegritydeployContractdeployScriptValidatordocumentationerrorSwallowfakeFixDetectorhardcodedUrlintegrationTestsmutationnativeBundlerGuardperformancesecretssecuritysyntaxtrpcContractwebhookPayloadwpAdminProtectionwpBackupValidationwpExposedFileswpUserEnumeratewpXmlrpcExposedzodSchemaPresence

test(events-push): pin the eventId vectors Gluecron confirmed, and record KI #103

direct to main6b29f382 filesalso docs

docs(gate-verdict): the 'warning failed the push' note described code that never shipped

direct to maine3bd4e92 filesalso tests

fix(gluecron): the verdict Gluecron received came from a file the tests never ran

direct to main0737dc311 filesalso tests

fix(events-push): Gluecron's baseSha never reached scan_queue.base_sha

direct to main528e2ad3 filesalso tests

fix(gate): the PR gate could never go red, and Gluecron's failed on a warning

direct to main3d917a98 filesalso tests, engine

fix(wp): the version-leak module told customers "Good" without ever fetching

direct to main6e0c00810 filesalso tests

wpAdminProtectionwpBackupValidationwpMalwarePatternswpPhpVersionEolwpPluginCveCheckwpThemeAbandonmentwpUserEnumeratewpVersionLeakwpXmlrpcExposed

fix(python): two false positives on the first Python repo we ever scanned

direct to main2aced502 filesalso tests

claudeCompliance

fix(deadCode): a `.js` specifier that means `.ts` broke every re-export chain

direct to mainea3d6672 filesalso tests

fix(codeQuality): console.log outside library code is info, not a warning

direct to main7230bbf4 filesalso engine

codeQuality

fix(security): an argv array is not a shell command

direct to main49032ed2 filesalso tests

security

test(confidence): the 0.20-vs-full question answered — the scorer was right

direct to main438787f1 file

fix(innerHTML): our own false positives, found by auditing our side of the diff

direct to mainfd5db3d2 filesalso tests

fix(scope): .mjs and .cjs were never scanned for dangerous patterns

direct to main2230dcf12 filesalso tests

aiReviewcodeQualitycompatibilitydataIntegritydocumentationintegrationTestsmutationperformancesecurity

fix(flakyTests): 54% of the warning noise on a clean repo was hermetic tests

direct to main7a292b12 filesalso tests

flakyTests

test(secrets): pin the invariant that stops a neighbouring field hiding a key

direct to mainf94ebd21 file

feat(secrets): a real key in a README blocks; a documented example does not

direct to mainf2c431b2 filesalso tests

secrets

fix(readiness): the derived score disagreed with the gate it derives from

direct to main278925a3 filesalso tests

deployReadiness

fix(secrets): a live key in a README was invisible to us

direct to main6b360f03 filesalso tests, docs

secrets

fix(score,scope): the public badge graded customers backwards

direct to main473cfe28 filesalso website, tests

accessibilityseovisual

fix(scope): we blocked axios, lodash, chalk and fastify — 5 of 6 clean repos

direct to main595c32011 filesalso tests, docs

accessibilityauthBypasshardcodedUrlseosyntaxvisual

docs(benchmarks): precision/recall on third-party code, measured today

direct to main2ba612c1 file

fix(mcp,security): every MCP scan was crashing, and a second innerHTML rule

direct to main4f6246b7 filesalso tests

codeQualitysecurity

fix(security): correctly-escaped innerHTML was a blocking XSS finding

direct to mainc37dc832 filesalso tests

security

fix(platform): our public map advertised a Vapron endpoint that never existed

direct to mainc2ae9326 filesalso tests

fix(mcp): the agent surface handed dev agents a silently short list

direct to mainaaf95ea2 filesalso tests

fix(bashSafety): a deploy that could exit 0 having restarted nothing

direct to main3a54e9a6 filesalso engine, tests, tooling

bashSafety

fix(a11y,visual,perf,data): one real defect, four rules reporting what they never observed

direct to main695f7709 filesalso tests, website

accessibilitydataIntegrityperformancevisual

fix(authBypass): all 16 blocking findings were false positives

direct to maine69f9a714 filesalso engine, tests

authBypass

fix(security): rm -rf on webhook-supplied input, and an injection we shipped to customers

direct to mainfd964908 filesalso engine, repo

security

test(suppression): a mute with no positive control now fails CI

direct to main29b5ca93 filesalso engine

datetimeBug

fix(mcp,playground): two places we told the customer something untrue

direct to main872605c2 filesalso website

fix(status): ready:true while the credential was known filler

direct to main8f403222 filesalso tests

fix(secrets): the second blanket skip, and the one I rebuilt while fixing the first

direct to maina09e4232 filesalso tests

secrets

fix(lint): one unnecessary escape has held main red for 24 commits

direct to main8d134471 file

fix(secrets): a blanket process.env skip made fallback credentials unreachable

direct to main744e8f42 filesalso tests

secrets

fix(smoke): the */5 cron is not a 5-minute check — real cadence moves to the box

direct to main09d1efc6 filesalso our CI, docs

fix(status): the preferred git host could go dark with nothing reporting it

direct to main56b04f81 file

fix(scanner): our missing browser was reported as a defect in the customer's site

direct to maine5302325 filesalso engine

chaosexplorer

docs(smoke): correct the vapron latency claim — path, not server

direct to main755f86f3 filesalso tests, docs

feat(smoke): empire-smoke targets corrected and actually scheduled (KI #102)

direct to main9be1b4c5 filesalso our CI, tests, docs

fix(config): our own .gatetest.json described protection that did not exist

direct to main37d3ba22 filesalso repo

feat(cli): the gate stopped ignoring your flags in silence

direct to main26d503c3 filesalso tests

fix(tests): MCP scan_local test used a 30s timeout its siblings had already outgrown

direct to main0bb30ad1 file

fix(tests): stale model id broke the legacy-model guard

direct to main2b205ba1 file

docs(roadmap): record the fourth instance of the duplicated-helper class

direct to main1716d631 file

fix(preview): the file path was deciding finding severity, in both directions

direct to main511cbc12 filesalso tests

fix(preview): free scan returned file:null for every finding — one parser now, not two

direct to mainaa76db73 filesalso tests

feat(systemd): flag EnvironmentFile=- on scheduled jobs — a green that cannot turn red

direct to main647af8f2 filesalso tests

systemd

fix(config): warn on .gatetest.json keys nothing reads

direct to main21ea14b2 filesalso tests

docs: the launch playbook — Craig's ordered path from built to paying users

direct to mainc69f9581 file

feat(launch): feedback affordances + launch metrics + one-command first-push drill

direct to main55dadcb8 filesalso docs, tests, tooling

Merge remote-tracking branches 'origin/flywheel/site-stats' and 'origin/flywheel/trainer-report'

direct to mainb24f464228 filesalso engine, website, tests, CI integration, repo

aiHallucinationaiReviewauthBypassbashSafetycompatibilitycookieSecuritydependenciesduplicateCodeerrorSwallowflakyTestssecurity

feat(suppression): suppression in place — @gatetest ignore <rule> on the PR writes .gatetestignore (audit advancement #13)

direct to main74e39e68 filesalso docs, engine, CI integration, tests

feat(ai-review): evidence gate — no AI finding ships without a verifiable code quote (completes audit advancement #5)

direct to maind1dfac16 filesalso website, tests, docs

aiReview

feat(pipeline): reliability hardening — audit advancement #11 complete

direct to maind56523510 filesalso tests, docs

feat(recall): the six missed NodeGoat classes now detected — NoSQLi, template XSS, cookie flags, IDOR, CSRF, helmet (audit advancement #6)

direct to maincfa08db6 filesalso docs, tests

authBypasscookieSecuritysecurity

feat(fix-verification): every AI fix now ships with proof — audit #7 complete

direct to maine725c3313 filesalso tests, engine, docs, repo

fix(precision): ship the full 2026-08-18 FP-residue list, every rule with positive + negative controls

direct to main0095cd312 filesalso tests, docs

aiHallucinationbashSafetycompatibilitydependenciesduplicateCodeerrorSwallowflakyTests

fix(deps): next 16.2.10 -> 16.3.1 + npm audit clean in both workspaces (closes KI #59)

direct to mainb306cec5 filesalso docs, repo

honesty: architecture diagram fix-stage label matches the shipped pipeline

direct to maina88b6db1 file

docs+honesty: production-ready checklist; site copy now describes only what ships

direct to main48bb13d19 filesalso engine, docs

Merge remote-tracking branches 'origin/flywheel/site-stats' and 'origin/flywheel/trainer-report'

direct to maine39b4b034 filesalso website, tests

chore(stats): refresh website testing statistics 2026-08-20

direct to mainb21c6561 file

docs(audit): report reflects the sore-point ships (registry, PR budget, reachability, attribution)

direct to maine745ecb1 file

feat(gate): "in this change" attribution — every PR finding says whether it sits in code the change touched

direct to mainfdc99079 filesalso tests

docs+site(sync): 'How we keep it quiet' on how-it-works; ROADMAP records the sore-point ships

direct to main5cea8612 filesalso docs

feat(deps): reachability-gated dependency alerts — only imported production dependencies block

direct to mainaf22bc73 filesalso tests

security

feat(noise): one defect is one finding — cross-module dedupe, risk-first ranking, a 5-item PR budget

direct to main99c593712 filesalso website, tests

fix(ops): readiness probe reads the real /api/scan/preview shape — a healthy funnel no longer reads as 'scanned nothing'

direct to main49f54d52 filesalso tests

docs(audit): the 2026-08-18 deep-audit report — shipped, live status, complaints, FP measurement, top-20 advancements, Craig's list

direct to main2ff7bbb1 file

fix(security): the hosted engine never executes customer-controlled code on the box

direct to main68ef2ea6 filesalso tests, website

fix(lint): our own quick gate on our own repo — two useless escapes, three raw anchors, one deliberate-fallback marker

direct to main5df15095 filesalso engine

undefinedRef

fix(website): sync the site with the product — funnel, honesty and SEO fixes from the audit

direct to maind34379344 filesalso tests, our CI, tooling, docs

fix(security): close the unauthenticated SSRF / fail-open / free-AI-spend holes the audit found

direct to main0936de113 filesalso engine, tests

fix(fake-fix): scope the git diff to the scanned project (-- .) — a subdirectory scan reported the enclosing repo's commit

direct to main430e1951 file

fakeFixDetector

fix(engine): cut blocking false positives ~90% on real repos — measured, with positive controls

direct to main770aabb32 filesalso tests

accessibilityauthBypassclaudeCompliancecodeQualitydataIntegritydeployReadinessdeployScriptValidatore2eenvVarslinksmutationperformancesecretssecurityseoundefinedRefunitTestsvisual

fix(scan): every hosted scan runs the real engine on the whole repo — not 23 modules on 50 files

direct to main070de6515 filesalso tests

fix(scan): read public repos without any git-host credential — the funnel no longer dies with the PAT

direct to mainb0b45c26 filesalso tests

Merge remote-tracking branch 'origin/flywheel/trainer-report'

direct to main36f7350242 filesalso website, tests

chore(stats): refresh website testing statistics 2026-08-18

direct to main60160d11 file

docs(ki-101): deploy half resolved — production is on HEAD for the first time

direct to maind0d788f1 file

fix(legal,deploy): stop publishing notes meant for counsel; deploy to the live checkout

direct to main9244d8e3 filesalso our CI

fix(ops): the readiness probe ran red 100 times and still missed the outage

direct to main8a732005 filesalso our CI, tests, tooling, docs

fix(scan): an unreadable repo tree is not an empty repo — stop blaming the customer

direct to main3a9437b2 filesalso tests

fix(deploy): fail when the deploy is inert — the warning was tried and lost

direct to maina2b308d1 file

fix(preflight): name the fatal blocker, stop crying wolf about the optional cron

direct to mainf8c9e1d2 filesalso tooling

fix(secrets): reading a secret is not hardcoding one — unblocks our own CI

direct to main13db5222 filesalso tests

secrets

fix(corpus): re-baseline empty-js-module — and TIGHTEN its error ceiling to 0

direct to mainbe0643b3 files

fix(accuracy): console.log is a library-code rule — stop firing it everywhere

direct to main67ab0b02 filesalso tests

codeQuality

fix(accuracy): stop blocking healthy repos on noise — 5 of 5 wrongful blocks

direct to maind8480c54 filesalso tests

lintsecretsunitTests

feat(ui): wire up shadcn/ui + Radix, and defuse the token collision first

direct to main227562f6 filesalso docs

feat(home): three doors in, and the website was quietly advertising 120 modules

direct to mainff0fe9b5 filesalso tests

feat(status): detect env vars that are SET but fake

direct to maind68977a4 filesalso engine, tests

docs: first end-to-end production test — pipeline proven to the GitHub API, blocked there by dead credentials

direct to main110c4e02 files

fix(security): lock down /api/heal/ssh — admin-only, env-only SSH target

direct to maine12cf642 filesalso tests

fix(deploy): every deploy would have stripped +x from tick.sh and killed the timers

direct to mainb379a4e3 files

docs: record what probing the running system actually found

direct to main3a3555c2 files

feat(deploy): actually drain the scan queue — nothing ever scheduled the ticks

direct to main39f4e3e6 files

fix(worker): the scan queue never drained — 'column q.host does not exist'

direct to maind3fe3731 file

fix(deploy): the clean-tree guard made the deploy script single-use

direct to main96df6c51 file

fix(deploy): pipefail + grep -q made the restart check false whenever it was true

direct to main54552a51 file

fix(deploy): the deploy script built, said done, and never restarted

direct to main3bd67ec1 file