Commit Graph

Select branches

Hide Pull Requests

add-opengateway-hy3-zero

add-stall-warning-hint

aimlapi-preset-fixes

anandh/stream-b-pr2-prefix-fingerprint

audit/2026-06-20-deep-audit

chore/launch-readiness-fixes

chore/remove-dead-code

ci/coderabbit-auto-approvals

claude/determined-lumiere-d7c56c

codex/pr3-plumbing

deferred-tools

docs/agents-md-rewrite

docs/awesome-agents

docs/awesome-agents-list

docs/community-discussions-wiring

docs/contributing-volume-batching

docs/normalize-before-match

docs/public-release-cleanup

docs/readme-trendshift-partners

docs/refresh-agents-guidelines

docs/source-build-sandbox-helpers

docs/vercel-oss-badge

docs/vercel-partner

esc-cancel-confirmation

feat-permission-feedback-input

feat/499-shell-completion

feat/637-btw-session

feat/971-sessions-prune

feat/acp-browser-session

feat/acp-structured-file-diffs

feat/agent-quality

feat/cheap-compaction

feat/command-output-intelligence

feat/concentrate-provider

feat/conversation-state-compaction

feat/cross-session-messaging

feat/draggable-terminal-pets

feat/exec-profiles-pr10bc

feat/exec-sandbox-deadline

feat/fast-command

feat/files-sidebar

feat/gmi-cloud-provider

feat/harness-efficiency-foundation

feat/homebrew-install-method

feat/import-agent-sessions

feat/interactive-terminal-attach

feat/longcat-provider

feat/loop-command

feat/m2-go-update-check

feat/notify-webhook

feat/npm-platform-packages

feat/npm-publish-approval

feat/npm-twigpine-scope

feat/openai-prompt-cache-key

feat/opencode-parity

feat/perf-token-wave1

feat/persisted-goals

feat/provider-management

feat/providers-models-discovery

feat/reasoning-modelsdev-catalog

feat/release-please

feat/resume-session-browser

feat/runtime-performance

feat/sandbox-execution-rework

feat/scoped-network-config

feat/simplicity-guardrail

feat/skill-bundled-files

feat/skill-invocation

feat/structural-code-query

feat/theme-catalog

feat/tui-allow-escalation

feat/tui-diff-viewer

feat/tui-ide-panels-and-fixes

feat/tui-startup-version

feat/twigpine-opengateway

feat/ui-polish

feat/unified-context-planner

feat/windows-powershell-shell

feat/windows-sandbox-identity

feat/windows-sandbox-offline-online

feat/zeromaxing-refresh

fix-alt-screen-height-fallback

fix-auth-propagation-gaps

fix-exec-output-buffer-oom

fix-macos-pooled-connection-stall

fix-model-picker-label

fix-ollama-context-window-gauge

fix-permission-selected-row

fix-queued-message-above-composer

fix-read-file-backwards-range

fix-stall-faster-abort-and-retry

fix-windows-ci-flaky-timing-tests

fix/1028-oauth-callback-servers

fix/1031-refresh-hono-lock

fix/1041-degraded-sandbox-notice

fix/1045-acp-load-read-only

fix/1048-search-metadata-redaction

fix/534-clipboard-image-paste

fix/674-provider-error-diagnostics

fix/677-scrub-daemon-token-file

fix/684-gopls-manual-opt-in

fix/721-providers-use-env-override

fix/728-windows-acl-toctou

fix/811-provider-command-timeout-bound

fix/815-deny-git-credential-stores

fix/822-mcp-check-reports-failures

fix/823-mcp-non-text-blocks

fix/825-mcp-panel-shows-failures

fix/829-resume-identity-and-panel

fix/831-advisory-locks

fix/838-seenwhole-from-ranges

fix/861-daemon-worker-group-kill

fix/870-mouse-mode-fallback

fix/936-voice-typing-collision

fix/969-redact-control-split-secrets

fix/998-mcp-tools-callable

fix/acp-desktop-interop

fix/acp-session-list

fix/agent-progress-visibility

fix/agent-runtime-resilience

fix/allow-private-network-provider-endpoints

fix/anthropic-env-gateway-url

fix/auth-login-chatgpt-routing

fix/automatic-git-repo-commands

fix/bench-oracle-answer-contamination

fix/bump-go-1.26.6

fix/chatgpt-oauth-model-discovery

fix/codex-forward-tool-input

fix/config-provider-command-flakes

fix/daemon-status-atomic-publication

fix/doctor-native-binary

fix/eager-tool-budget-view-image

fix/empty-turn-resilience

fix/exec-default-turn-budget

fix/exec-server-startup-race

fix/factory-test-oauth-isolation

fix/format-on-write-timeout-disclosure

fix/gemini-tool-schema-sanitize

fix/go-1.26.10

fix/go-1.26.5-govulncheck

fix/google-model-default

fix/guardrail-denial-counter-rekey

fix/help-overlay

fix/hermetic-resolver-and-header-tests

fix/hono-4.13.13

fix/issue-666-plan-stall

fix/loopback-proxy-safe-dial

fix/main-ci-red

fix/mcp-oauth-protected-resource-discovery

fix/mcp-scrub-injected-key-from-rpc-errors

fix/model-picker-title-by-name

fix/model-switch-credential-name

fix/npm-publish-wait-and-drop-bridge

fix/oauth-doctor-connectivity

fix/oauth-lock-windows-access-denied

fix/oauth-preset-login

fix/oauth-token-redirect

fix/oauth-validate-discovered-endpoints

fix/omit-prompt-cache-key-compatible

fix/openai-empty-content

fix/opencode-session-header

fix/opengateway-endpoint-and-recommended

fix/perfbench-exposes-no-write-tools

fix/prefix-approval-sandbox-disclosure

fix/preserve-user-environment

fix/refresh-shell-quote-lock

fix/remove-dead-setnotify

fix/reset-quiet-generation-clock

fix/resume-after-provider-error

fix/resume-context-stable-order

fix/retry-presend-transport

fix/safe-command-ast-interactive

fix/sandbox-enabled-config

fix/sandbox-reentrancy-autoallow

fix/scoped-permission-prompts

fix/serve-scope-symlink-skip

fix/session-lease-outlives-store

fix/specialist-resume-model

fix/staticcheck-nits

fix/stream-content-stall-timeout

fix/subagent-provider-inheritance

fix/swarm-agent-type-enum

fix/termux-android-platform

fix/tui-active-work-duration

fix/tui-mouse-api

fix/tui-permission-deadlock

fix/tui-picker-test-4ret

fix/tui-session-rename

fix/tui-sidebar-footer-availability

fix/undo-command

fix/voice-ctrl-space

fix/windows-acl-reparse-intermediate

fix/windows-denyread-world-sid

fix/windows-exec-test-flakes

fix/windows-provider-background-pid-race

fix/windows-provider-command-tests

fix/windows-restricted-sid-invariant

fix/windows-setup-marker-runtime-root

fix/windows-tool-schema-budget

fix/windows-world-sid-write-jail

fix/workspaceindex-gitsafe

fix/workspaceindex-twigpine-import

fix/write-stdin-invalid-session-guidance

fix/write-stdin-unknown-session-thrash

gnanam1990-patch-1

local/tui-selection-fixes

main

opentui

origin-sessions

perf/bench-binary-and-errored-honesty

perf/concurrent-readonly-tool-batches

perf/deterministic-completion-policy

perf/edit-tools-parity

perf/openai-optimized-session

perf/stable-prompt-prefix

perf/structured-task-state

perf/token-aware-output-budgeting

perf/tool-effect-metadata

perf/turn-trace-baseline

perf/unified-tool-outcomes

polish/per-turn-overhead-cache-new

polish/v2-smoothness

pr/mcp-oauth-skip-discovery-when-configured

providers

release-please--branches--main--components--zero

revert/accent-color-brightness

split/permission-mode-and-classifier

test/clear-fetch-disable-env

test/cli-prewarm-ordering

test/exec-image-tests-isolation

test/swarm-drain-waits-for-slot

test/tty-exec-test-root

test/tui-overlay-cwd

zenline-runtime-work

zeroline-redesign

#1

#10

#100

#1000

#1001

#1003

#1005

#1006

#1007

#1008

#1009

#101

#1010

#1010/merge

#1011

#1012

#1013

#1014

#1016

#1017

#1018

#1019

#1025

#103

#1037

#1039

#104

#1040

#1042

#1043

#1044

#1047

#1049

#105

#1051

#1052

#1053

#1054

#1055

#1058

#1059

#106

#1060

#1061

#1062

#1063

#1064

#1065

#1066

#1067

#1068

#107

#1070

#1070/merge

#1072

#1073

#1074

#1074/merge

#1075

#1076

#1077

#1078

#1079

#108

#1080

#1082

#1083

#1088

#1089

#109

#1090

#1091

#1092

#1093

#1094

#1095

#1096

#11

#110

#1105

#1106

#1107

#111

#1110

#1111

#1112

#1113

#1114

#1115

#1116

#1117

#112

#1120

#1124

#1126

#1127

#1128

#113

#1131

#1133

#1134

#1136

#1137

#1139

#114

#1142

#1143

#1144

#1145

#1146

#1147

#1149

#115

#1150

#1152

#1153

#1158

#1159

#116

#1160

#1161

#1165

#1166

#1166/merge

#1167

#1168

#1169

#117

#1170

#1171

#1172

#1174

#1175

#1176

#1178

#1178/merge

#1179

#118

#1180

#1181

#1182

#1183

#1184

#1185

#1186

#1187

#1188

#1189

#119

#1190

#1191

#1192

#1193

#1197

#1198

#12

#120

#1201

#1202

#1203

#1204

#1205

#1205/merge

#1206

#1206/merge

#1208

#121

#1211

#1211/merge

#1212

#1212/merge

#1213

#1213/merge

#1214

#1215

#1215/merge

#122

#123

#124

#125

#126

#127

#128

#129

#13

#130

#131

#132

#133

#134

#135

#136

#137

#138

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#150

#151

#152

#153

#154

#155

#156

#157

#158

#159

#16

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#174

#175

#176

#177

#178

#179

#18

#180

#181

#182

#183

#184

#185

#186

#187

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#2

#20

#200

#201

#202

#203

#204

#205

#206

#207

#208

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#239

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#275

#276

#277

#278

#279

#28

#280

#281

#282

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#3

#30

#300

#301

#302

#303

#304

#305

#306

#307

#308

#309

#31

#310

#311

#312

#313

#314

#315

#316

#317

#318

#319

#32

#320

#321

#322

#323

#324

#325

#326

#327

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#372

#374

#378

#379

#38

#382

#385

#386

#387

#388

#389

#39

#391

#393

#394

#395

#396

#397

#398

#399

#4

#40

#400

#402

#403

#407

#408

#41

#410

#412

#414

#417

#418

#42

#420

#421

#422

#423

#424

#426

#427

#43

#436

#437

#438

#44

#441

#442

#443

#444

#445

#448

#45

#450

#451

#452

#453

#455

#456

#457

#46

#460

#461

#462

#464

#465

#468

#47

#474

#475

#476

#477

#478

#48

#481

#482

#484

#485

#486

#487

#489

#49

#490

#491

#492

#493

#496

#497

#498

#5

#50

#500

#502

#503

#504

#504/merge

#506

#509

#51

#515

#517

#518

#519

#52

#520

#522

#524

#526

#527

#528

#529

#53

#532

#533

#535

#537

#538

#539

#54

#543

#544

#547

#548

#549

#55

#550

#553

#557

#558

#56

#560

#563

#565

#568

#57

#570

#570/merge

#571

#572

#573

#574

#575

#576

#577

#578

#58

#580

#581

#582

#585

#586

#587

#589

#59

#590

#591

#593

#594

#595

#597

#599

#6

#60

#601

#602

#603

#606

#607

#608

#609

#61

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#623

#625

#626

#627

#628

#629

#63

#630

#631

#632

#634

#635

#636

#638

#639

#64

#640

#641

#642

#643

#645

#646

#647

#648

#649

#65

#650

#653

#654

#655

#656

#658

#659

#66

#660

#661

#665

#667

#668

#669

#67

#670

#671

#672

#673

#68

#681

#682

#685

#685/merge

#686

#688

#689

#69

#690

#691

#692

#693

#694

#696

#699

#7

#70

#700

#704

#705

#706

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#720

#723

#724

#725

#726

#726/merge

#73

#730

#732

#734

#736

#737

#738

#739

#74

#740

#741

#744

#745

#746

#747

#748

#749

#75

#750

#751

#755

#756

#756/merge

#757

#759

#76

#760

#761

#762

#763

#764

#765

#766

#767

#768

#769

#77

#772

#773

#774

#775

#776

#778

#779

#78

#780

#781

#782

#783

#784

#786

#787

#79

#794

#795

#796

#798

#799

#8

#80

#800

#801

#802

#803

#804

#805

#807

#808

#808/merge

#809

#81

#810

#812

#813

#814

#816

#818

#82

#820

#821

#826

#827

#828

#829

#829/merge

#83

#835

#835/merge

#837

#838

#84

#842

#843

#846

#848

#849

#85

#850

#851

#852

#853

#854

#855

#857

#86

#860

#864

#865

#866

#867

#87

#872

#873

#874

#876

#877

#878

#878/merge

#879

#88

#880

#882

#883

#883/merge

#884

#885

#886

#886/merge

#887

#888

#89

#890

#891

#892

#892/merge

#893

#893/merge

#894

#894/merge

#895

#895/merge

#896

#897

#897/merge

#899

#9

#90

#900

#901

#901/merge

#902

#903

#905

#906

#908

#909

#909/merge

#91

#910

#911

#912

#912/merge

#914

#915

#916

#918

#92

#926

#927

#927/merge

#93

#930

#931

#932

#934

#935

#938

#94

#940

#941

#941/merge

#942

#943

#944

#944/merge

#945

#946

#948

#949

#95

#950

#951

#952

#953

#954

#955

#956

#957

#958

#959

#96

#960

#961

#968

#97

#970

#974

#975

#976

#977

#978

#979

#98

#980

#981

#982

#983

#984

#985

#986

#987

#987/merge

#988

#988/merge

#989

#99

#990

#991

#993

#993/merge

#994

#995

#997

#999

v0.1.0

v0.10.0

v0.11.0

v0.12.0

v0.13.0

v0.2.0

v0.3.0

v0.4.0

v0.5.0

v0.6.0

v0.7.0

v0.8.0

v0.9.0

Mono Color

• 1cc95f39f3 fix(sandbox,tui,cli): close the unparseable network gap and the deferred-input arm Vasanthdev2004 2026-08-20 16:12:41 +05:30
• 714ce649bc fix(tui): cancel the full-auto offer when the terminal loses focus Vasanthdev2004 2026-08-19 13:29:19 +05:30
• 54613e4ff9 fix(sandbox,cli,tui): keep serving commands gated, and accept the canonical mode Vasanthdev2004 2026-08-11 16:58:06 +05:30
• 30459e167b test(tui): move the plan-mode guard onto advancePermissionMode Vasanthdev2004 2026-08-10 09:33:51 +05:30
• 874db9ff34 fix: make the full-auto rename reach the values that travel as data Vasanthdev2004 2026-08-09 18:01:47 +05:30
• f608752821 fix: keep the old permission-mode constant names as deprecated aliases Vasanthdev2004 2026-08-08 23:54:05 +05:30
• dbdd281d59 refactor: rename the unsafe permission mode to full-auto Vasanthdev2004 2026-08-08 23:37:37 +05:30
• eda9f3051c fix(sandbox): stop classifying local dev servers as network egress Vasanthdev2004 2026-08-08 23:11:36 +05:30
• 1bcb2bfadd feat(tui): put unsafe mode in the shift+tab cycle behind a confirm key Vasanthdev2004 2026-08-08 22:45:21 +05:30
• c4fff2b1de test(sandbox): give the cross-platform anchor tests native paths fix/windows-acl-reparse-intermediate Vasanthdev2004 2026-09-09 22:18:09 +05:30
• 38c1e333b1 test(sandbox): check the plan anchoring on every platform, out-of-root case included Vasanthdev2004 2026-09-09 21:55:31 +05:30
• 28360a2dff fix(sandbox): anchor only the carveouts that are under the root, and put the DACL back Vasanthdev2004 2026-09-09 21:54:07 +05:30
• ad78725568 fix(sandbox): reject the reparse ancestor itself before materializing Vasanthdev2004 2026-09-09 15:21:23 +05:30
• a9aa37e267 fix(sandbox): keep a derived ACL target inside the write root it came from Vasanthdev2004 2026-09-09 15:18:43 +05:30
• 2b08339aee fix(tools): finalize structured diff evidence KRATOS 2026-09-07 12:17:28 +05:30
• 64df522343 fix(tools): report partial patch paths from workspace KRATOS 2026-09-05 13:56:26 +05:30
• 7cb13ccc22 fix(tools): close rich diff race gaps KRATOS 2026-09-05 13:42:14 +05:30
• 73c2d59afb fix(acp): preserve structured diff identity KRATOS 2026-09-03 18:59:35 +05:30
• 9e2dad38e2 fix(tools): bind structured diffs to committed changes KRATOS 2026-09-02 13:35:41 +05:30
• e894db9ab4 fix(acp): preserve safe rich diff semantics KRATOS 2026-09-01 13:27:23 +05:30
• 45a3b59a8d fix(tools): reject unsafe rich diff previews KRATOS 2026-09-01 12:11:40 +05:30
• fd88bde58d fix(acp): harden structured file diff transport KRATOS 2026-09-01 09:24:12 +05:30
• a9897f45e8 feat(acp): emit structured file changes in tool updates KRATOS 2026-08-31 20:36:27 +05:30
• 20a22cadac feat(tools): retain bounded structured file diffs KRATOS 2026-08-31 20:36:27 +05:30
• 6937a309cf fix(tools): say when format-on-write ran out of time (#1044) Vasanth T 2026-09-12 06:24:58 +05:30
• da244bcbfc fix(sessions): render resume context fields in key order (#1043) Vasanth T 2026-09-12 06:24:33 +05:30
• e34c8d2252 test(cli): skip the serve-scope symlink test when the platform refuses the link (#1042) Vasanth T 2026-09-12 06:23:51 +05:30
• 91d921f4c5 feat(tui): offer mid-run model escalation behind --allow-escalation (#1019) Vasanth T 2026-09-12 06:21:42 +05:30
• 6ae8396f02 fix(sessions): carry an interrupted turn's work into the resume prompt (#1016) Vasanth T 2026-09-12 06:21:10 +05:30
• 2837f5efb3 fix(installtxn): put back an install a killed commit left behind (#997) beardthelion 2026-09-11 17:46:32 -07:00
• 08fbea7a32 fix(redaction): split camelCase keys in normalizeKey (#994) HazyLab 2026-09-12 02:45:58 +02:00
• 82ae3a8809 docs: name the five supported targets and drop Plan 9 as a review gate (#986) cairn-internandcairn-intern 2026-09-11 20:45:36 -04:00
• 488def68dc fix(config): preserve unknown top-level fields (#984) 3 people 2026-09-12 02:45:10 +02:00
• b04fe96e9e fix(config): lock config read-modify-write across processes (#960) 3 people 2026-09-12 02:44:43 +02:00
• 79fa1422ef fix(providers): register Atomic Chat as local OpenAI-compatible runtime (#550) 4 people 2026-09-12 03:43:46 +03:00
• 1aacf38b72 fix(background): treat POSIX zombie leader as already-exited (#981) cairn-internandcairn-intern 2026-09-11 20:41:52 -04:00
• 3063593129 ci: harden GitHub Actions permissions, add job timeouts, concurrency and coverage reporting (#951) HazyLabandcl-ment 2026-09-12 02:41:14 +02:00
• d6b25fc303 perf(providers): parallelize isolated provider unit tests and shrink retry backoffs (#955) HazyLabandcl-ment 2026-09-12 02:40:36 +02:00
• 7c50a9fb98 security(mcp): prevent server requests from matching client pending responses (#942) 3 people 2026-09-12 02:34:42 +02:00
• 275e248669 fix(oauth): Split an oversized keyring token blob across entries (#1007) euxaristiaandeuxaristia 2026-09-11 20:33:44 -04:00
• 0207f2b269 fix(sandbox): keep Windows restricted-token SIDs narrow and fail closed on DenyRead (#1006) 3 people 2026-09-11 20:33:06 -04:00
• 8b3d1b1597 fix(tools): reject fuzzy edits with drifted content (#983) PierrunoYTandAmp 2026-09-12 02:32:36 +02:00
• a3852bac59 fix(update): keep Windows failed-restore state in trusted recovery records (#979) cairn-internandcairn-intern 2026-09-11 20:29:11 -04:00
• a3e7446681 chore(tui): remove unused test exports GetLocalDiffStats and WatchPRState (#975) euxaristiaandeuxaristia 2026-09-11 20:28:31 -04:00
• 0021475d4c fix(swarm): stop original member before handoff (#957) KRATOS 2026-09-12 05:58:01 +05:30
• deba3adfca security(update): prevent tar extraction from traversing escaping symlinks (#943) HazyLabandcl-ment 2026-09-12 02:27:31 +02:00
• 501f32160f ci: Run the race detector on pull requests (#940) euxaristiaandeuxaristia 2026-09-11 20:24:18 -04:00
• 29a5253013 test(sessions): assert the window key with its value, not the number alone fix/resume-after-provider-error Vasanthdev2004 2026-09-11 13:17:19 +05:30
• 6d19afa3c4 test(sessions): name the expected context block instead of the first render fix/resume-context-stable-order Vasanthdev2004 2026-09-11 10:20:14 +05:30
• b45bb2ece8 fix(sessions): render resume context fields in key order Vasanthdev2004 2026-09-09 22:39:52 +05:30
• a2e9558262 fix(sandbox): remove a failed secret through the handle that created it Vasanthdev2004 2026-09-11 10:16:49 +05:30
• 8b7ffa4f46 fix(sandbox): treat only a regular .git as the worktree pointer Vasanthdev2004 2026-09-09 13:46:40 +05:30
• a45d4000e1 fix(sandbox): keep the injectable lstat seam through the carveout specs Vasanthdev2004 2026-09-09 13:33:58 +05:30
• b12b2d71a4 fix(sandbox): build the elevated secret and runtime directories no-follow Vasanthdev2004 2026-09-09 13:27:38 +05:30
• 9abab7318d test(cli): assert the shutdown status and that nothing outlives the run Vasanthdev2004 2026-09-05 14:51:26 +05:30
• d376b7f2f0 fix(sandbox): refuse git init in a workspace inside another repository Vasanthdev2004 2026-09-05 14:45:20 +05:30
• 95c8ac6245 fix(sandbox): stop git's global options hiding the subcommand Vasanthdev2004 2026-09-05 14:31:49 +05:30
• c887961869 fix(cli): give a cancelled sandboxed command a graceful phase Vasanthdev2004 2026-09-05 14:27:35 +05:30
• a186eb46d7 fix(sandbox): decide the runtime base on a canonical spelling Vasanthdev2004 2026-09-04 22:13:07 +05:30
• 8099409f7c fix(cli): terminate the sandboxed command when the wrapper is cancelled Vasanthdev2004 2026-09-04 21:49:58 +05:30
• 4234357774 test(sandbox): reproduce the raced leaf at the instant it can actually happen Vasanthdev2004 2026-09-04 21:46:16 +05:30
• 9608817f47 fix(sandbox): restore a raced leaf whose parent this run created Vasanthdev2004 2026-09-04 21:42:40 +05:30
• 673b84d644 test(sandbox): drive the runtime-tree descent through its entry point Vasanthdev2004 2026-09-04 21:38:56 +05:30
• 69c68b18a2 fix(sandbox): stop following sandbox-controlled runtime descendants Vasanthdev2004 2026-09-04 21:37:44 +05:30
• daf58c8962 fix(sandbox): keep a linked worktree's .git typed as a file through planning Vasanthdev2004 2026-09-04 21:33:36 +05:30
• a8b295def3 test(sandbox): stop probing for privilege by mutating System32 Vasanthdev2004 2026-09-04 21:28:30 +05:30
• 30d3c4791e fix(cli): keep a specified-empty sandbox environment from inheriting Vasanthdev2004 2026-09-04 21:27:04 +05:30
• 26958ac6dd fix(sandbox): do not synthesize a .git inside an ancestor repository Vasanthdev2004 2026-09-04 20:48:39 +05:30
• 7920d3be3d fix(sandbox): key the read-grant refusal on the grant, not on the volume root Vasanthdev2004 2026-09-04 14:53:03 +05:30
• 4320d08bae fix(sandbox): refuse a denyRead profile instead of ACLing the volume root Vasanthdev2004 2026-09-04 14:31:20 +05:30
• bd7e98c05c fix(sandbox): make the capability git guard reach a workspace that gets git later Vasanthdev2004 2026-09-04 14:27:43 +05:30
• 5a43074c30 fix(sandbox): recheck the runtime object on the unelevated tier too Vasanthdev2004 2026-09-04 14:23:43 +05:30
• 0904d88b26 fix(sandbox): check the runtime root still carries its grant, not just its pathname Vasanthdev2004 2026-09-03 13:57:05 +05:30
• 2925a6768b fix(sandbox): validate runtime candidates before the elevated create, not after Vasanthdev2004 2026-09-03 13:52:44 +05:30
• faa07e3937 fix(sandbox,cli): plan the grant and its guard together, and state the tier boundary Vasanthdev2004 2026-09-03 13:45:34 +05:30
• 834c184d4a fix(sandbox): resolve the temp dir physically before proving the fallback anchor Vasanthdev2004 2026-09-02 12:56:38 +05:30
• 8da16b455f fix(sandbox): root the fallback runtime tree beneath a validated private anchor Vasanthdev2004 2026-09-02 12:36:42 +05:30
• c3e5e4bdfc test(sandbox): stop the launch preflight test asserting a machine's token Vasanthdev2004 2026-08-31 15:32:01 +05:30
• 89b2e6dfbc test(sandbox): keep the runtime-root candidates inside test-owned storage Vasanthdev2004 2026-08-31 15:26:25 +05:30
• cd7805062f fix(sandbox): keep principal provisioning closed until a launch path exists Vasanthdev2004 2026-08-31 15:25:00 +05:30
• 6f0d45323b test(sandbox): assert nothing was created, not that a count held still Vasanthdev2004 2026-08-27 14:23:38 +05:30
• d6b4e73e0e fix(sandbox): refuse to provision a principal this caller could never launch Vasanthdev2004 2026-08-24 19:41:18 +05:30
• 3574f62c2f fix(sandbox): name the two role inventories, and fingerprint the whole plan Vasanthdev2004 2026-08-21 14:32:16 +05:30
• fffc780dc3 fix(sandbox): bind the ACL restore to the object it snapshotted Vasanthdev2004 2026-08-21 14:22:38 +05:30
• 272acb9324 feat(sandbox): give each workspace an offline and an online principal (#812) Vasanth T 2026-08-21 10:21:58 +05:30
• d736aae19a test(sandbox): compare normalized paths, not the raw input Vasanthdev2004 2026-08-12 22:31:17 +05:30
• 129800b995 fix(sandbox): stop the redirect check resolving what it checks for Vasanthdev2004 2026-08-12 20:19:40 +05:30
• 474f6e9b08 fix(sandbox): drop the unfollowable sandbox override from ACL failures Vasanthdev2004 2026-08-12 14:03:44 +05:30
• 2a765446cb fix(sandbox): stop the principal's environment naming the caller Vasanthdev2004 2026-08-12 12:36:56 +05:30
• 81c8326072 fix(sandbox): report the privileges a principal launch actually needs Vasanthdev2004 2026-08-12 12:06:14 +05:30
• b9ba54a948 fix(sandbox): write the principal secret through one pinned handle Vasanthdev2004 2026-08-12 11:48:39 +05:30
• b97e744989 fix(sandbox): protect the gitdir pointer in a linked worktree Vasanthdev2004 2026-08-11 23:52:47 +05:30
• 55023a9805 test(sandbox): fix the workspace-root literal in the setup-args tests Vasanthdev2004 2026-08-11 22:19:39 +05:30
• 9800065f65 fix(sandbox): give the principal's read roots a restricting SID Vasanthdev2004 2026-08-11 22:08:30 +05:30
• 18ffd02b93 fix(sandbox): derive the runtime roots where TEMP is the operator's Vasanthdev2004 2026-08-11 21:51:55 +05:30
• bfa40a79ca fix(sandbox): say what changed when the setup marker is rejected Vasanthdev2004 2026-08-11 21:32:49 +05:30
• 6e342cee45 fix(sandbox): create the runtime roots setup grants Vasanthdev2004 2026-08-11 21:22:23 +05:30
• 03c7783905 test(sandbox): make the jail aliasing assertion able to fail Vasanthdev2004 2026-08-11 20:36:09 +05:30
• 9fa86240be fix(sandbox): cover both runtime roots in the setup contract Vasanthdev2004 2026-08-11 20:14:21 +05:30
• 282a29f610 chore: drop a stray probe artifact from the branch Vasanthdev2004 2026-08-11 12:53:27 +05:30