Peter Steinberger
|
2264816f1d
|
ci(macos): add enforced periphery dead-code lane and delete the 12 current findings (#105743)
* refactor(macos): delete dead code flagged by periphery
* ci(macos): add enforced periphery dead-code lane
* fix(ci): scope-label the periphery skip message
* chore(i18n): sync native inventory line coordinates
|
2026-07-12 16:39:15 -07:00 |
|
Peter Steinberger
|
9b1c36d23c
|
fix: prevent exec approval revocation races (#103515)
* fix(security): serialize exec approval mutations
* fix(security): preserve additive approval writes
* test(cli): expect normalized approval shape
* fix(security): preserve exec approval compatibility
* test(security): exercise locked approval initialization
* test(security): mock serialized approval helpers
* test(exec): derive enforced command path from plan
* fix(gateway): always return approval CAS conflicts
* fix(macos): serialize exec approvals writes
* fix(security): repair approval build errors
* fix(security): serialize exec approval mutations
* fix(security): fail closed on approval persistence errors
* test(security): cover detached approval persistence failures
* fix(security): harden exec approval state
* style(macos): format exec approval sources
* fix(security): complete exec approval hardening
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com>
* fix(macos): preserve approved login-shell semantics
* fix(macos): keep login shell approvals one-shot
* fix(security): linearize exec authorization
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com>
* fix(security): preserve durable approval basis
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com>
* fix(security): bind exec grants to current policy
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com>
* test(security): fix exec revocation fixtures
* test(security): align gateway approval fixtures
* fix(macos): return approval decisions
* chore(i18n): sync native approval strings
* test(security): align approval hardening fixtures
* test(node): authorize completed event fixture
* test(security): fix approval decision fixtures
* test(security): await durable approval visibility
* fix(exec): preserve concurrent approval grants
* fix(exec): address exact-head CI failures
* fix(exec): preserve concurrent approval promotions
* fix(exec): make Swift shutdown state explicit
* test(macos): handle approval read failures
* fix(macos): harden approval socket paths
* fix(macos): preserve exact shell payload bytes
* test(macos): make approval fixtures explicit
* test(macos): fix approval suite compilation
* fix(macos): bound approval socket JSONL reads
* chore: move exec approval note to release process
* chore: move exec approval note to release process
---------
Co-authored-by: Coy Geek <65363919+coygeek@users.noreply.github.com>
|
2026-07-10 21:35:05 +01:00 |
|
Peter Steinberger
|
091584b197
|
chore(swift): restore compact conditional bodies (#103832)
* style(swift): restore compact conditional bodies
* fix(ios): remove redundant startup timeout await
* chore(swift): sync native i18n inventory
|
2026-07-10 18:12:00 +01:00 |
|
Peter Steinberger
|
62bd760c0e
|
chore(swift): enforce current formatting and lint rules (#103313)
* style: apply SwiftFormat 0.62.1 rules
Refs #103202
* ci: enforce deterministic Swift lint
Refs #103202
* refactor: keep gateway connect lint-clean
Refs #103202
* style: keep iOS typography checks warning-free
* ci: route MLX Swift changes through pre-push
* fix: preserve native i18n extraction after Swift cleanup
* refactor: keep rebased Swift surfaces lint-clean
* style: format latest Swift additions
* chore: refresh native i18n inventory
* style: keep generated Swift formatter-clean
* fix: preserve node route invalidation callbacks
* fix: keep native translation IDs stable
* fix: retain native translation identifiers
* fix: preserve translations across Swift source moves
|
2026-07-10 11:54:08 +01:00 |
|
Pavan Kumar Gondhi
|
fc065b2693
|
Harden macOS shell wrapper allowlist parsing [AI] (#78518)
* fix: harden shell wrapper allowlist parsing
* fix: harden shell wrapper approval binding
* docs: add changelog entry for PR merge
---------
Co-authored-by: Ishaan <ishaan@Ishaans-Mac-mini.local>
|
2026-05-08 10:18:41 +05:30 |
|
Peter Steinberger
|
a94ec3b79b
|
fix(security): harden exec approval boundaries
|
2026-03-22 09:35:25 -07:00 |
|
Nimrod Gutman
|
c4a4050ce4
|
fix(macos): align exec command parity (#50386)
* fix(macos): align exec command parity
* fix(macos): address exec review follow-ups
|
2026-03-19 13:51:17 +02:00 |
|
Peter Steinberger
|
6b49a604b4
|
fix: harden macos shell continuation parsing
|
2026-03-13 20:54:10 +00:00 |
|
Peter Steinberger
|
e1fedd4388
|
fix: harden macos env wrapper resolution
|
2026-03-13 20:49:17 +00:00 |
|
Peter Steinberger
|
53fb317e7f
|
fix(macos): clean swiftformat pass and sendable warning
|
2026-03-08 13:22:46 +00:00 |
|
Peter Steinberger
|
a96d89f343
|
refactor: unify exec wrapper resolution and parity fixtures
|
2026-02-22 10:26:44 +01:00 |
|
Peter Steinberger
|
2b63592be5
|
fix: harden exec allowlist wrapper resolution
|
2026-02-22 09:52:02 +01:00 |
|
Peter Steinberger
|
1bc5c2a7e9
|
refactor: unify exec shell parser parity and gateway websocket test helpers
|
2026-02-21 23:17:12 +01:00 |
|
Peter Steinberger
|
90a378ca3a
|
fix(macos): block quoted shell substitution in allowlist checks
|
2026-02-21 22:57:53 +01:00 |
|
Peter Steinberger
|
e371da38aa
|
fix(macos): consolidate exec approval evaluation
|
2026-02-21 19:30:35 +01:00 |
|