Hare
5b12c3e085
fix: make mobile sidebar swipes track touch gestures
2026-10-27 06:49:28 +09:00
Hare
623c31615d
fix: assign unique event refs to merge integration comments
2026-10-27 06:15:48 +09:00
Hare
af719e387d
fix: align reviewer guidance with Bash-enabled scope
2026-10-27 06:15:48 +09:00
Hare
d12bc2ea0b
fix: deduplicate live and committed task updates
2026-10-26 10:13:36 +09:00
Hare
a1df3742b1
fix: integrate passkey results with current dogfooding shell
...
Preserve authenticated home/account navigation and guarded mobile sidebar swipes. Keep both browser task selections. Complete the new account fixture contract and synchronize lifecycle probes on visible registered-key results, without changing their success or security assertions.
2026-10-26 09:50:13 +09:00
Hare
d8818b776b
feat: open and close mobile sidebar with guarded swipes
2026-10-26 09:39:35 +09:00
Hare
40c36ccb1d
fix: restore authenticated home and account navigation
2026-10-26 09:39:35 +09:00
Hare
80c151d084
fix: fence recovered passkey results against cross-tab changes
2026-10-26 07:52:06 +09:00
Hare
c6a8759e7b
fix: fence activation and setup against delayed cross-tab events
...
Capture the shared authentication stamp as well as generation before dispatch and across response/confirmation/application awaits. Do not let stale setup failure reconciliation overwrite a newer tab's stamp. Add no-event-yet logout and account-change regressions for activation and setup, including prompt, pre-complete and post-dispatch confirmation boundaries.
Addresses MR AC4_CROSS_TAB_ACTIVATION. Validation: activation21/setup40 narrow tests; Web720 unit+625 component, check0/0/build, activation and hosting browser suites; root check/fmt/diff; both explicit real Backend browser suites including native CTAP2. Existing Server exclusions and 15 identical baseline naming findings remain unchanged. No verifier, binding, migration or rendering contract weakened.
2026-10-26 07:34:04 +09:00
Hare
f17b5212c7
fix(auth): confirm passkey operations and preserve safe legacy migration
...
Fence displayed identity and native prompt generations, classify secret-free outcomes, recover atomic addition receipts without restoring old credentials, and expose truthful own-key verification metadata. Preserve required verifier and enrollment authority boundaries. Include real-store, production browser, native CTAP2 and visible responsive regressions.
Validation: root check/fmt; API 115; passkey security 25; Web unit 712/component 605; auth/entry/activation/hosting browsers; product auth E2E 8 and two explicit browser suites. Server suite: 1262 lib+12 CLI, 3 ignored and 2 environment-specific exclusions. State-name checker retains 15 byte-identical baseline findings; no new exceptions. Physical keys/mobile and hosted CI remain unverified.
2026-10-26 07:18:23 +09:00
Hare
b284934e34
test: add captured Codex worker restore fixture
2026-10-24 12:57:28 +09:00
Hare
2d33321fab
fix: validate live fixture snapshots and shutdown boundaries
2026-10-24 12:57:28 +09:00
Hare
0975471986
fix: preserve diagnostic context in backend test assertions
2026-10-24 12:51:28 +09:00
Hare
214d6e21dd
fix: assert classified workdir session closure in tests
2026-10-24 12:40:37 +09:00
Hare
fca5c23345
fix: reject unrestorable and opaque fixture records
2026-10-24 12:39:22 +09:00
Hare
f9b1500ba2
fix: align panel tests with current ticket case states
2026-10-24 12:33:31 +09:00
Hare
931bf3b27d
test: add isolated saved worker restore scenarios
2026-10-24 12:33:31 +09:00
Hare
6bb671be21
test: add typed stopped worker fixture transport
2026-10-24 12:19:43 +09:00
Hare
b8f2fa479c
test: add isolated backend fixture seeding
2026-10-24 12:15:10 +09:00
Hare
1639be9841
fix: allow reviewers to read related tickets
2026-10-23 03:22:45 +09:00
Hare
aa0fb2f787
fix: continue workdir output reads after long-poll expiry
2026-10-21 04:48:43 +09:00
Hare
1b6d4dbfd8
fix: preserve workdir failure diagnostics across transport
2026-10-21 01:22:04 +09:00
Hare
4ef7b03651
fix: stop background session checks and loading flicker
2026-10-20 22:35:38 +09:00
Hare
af615ab177
fix: retain archive and worker restore failure diagnostics
2026-10-20 22:00:58 +09:00
Hare
338e39bcdb
fix: defer restored workdir access until use
2026-10-20 22:00:58 +09:00
Hare
3cfe04be3a
fix: preserve saved feature configuration during worker restore
2026-10-20 22:00:39 +09:00
Hare
70d153b365
fix: isolate unreadable archives from runtime startup
2026-10-20 17:39:38 +09:00
Hare
ce93849948
chore: merge develop into hare/develop
2026-10-20 15:39:09 +09:00
Hare
3c499719fe
feat: default Coder ticket work to review flow
2026-10-20 15:38:50 +09:00
Hare
9e1d3df7ad
fix: remove overbroad Worker bypass instructions
2026-10-20 15:38:50 +09:00
Hare
18bac16a23
fix: require replay-safe control lifecycle for Subject delegation
2026-10-20 08:12:26 +09:00
Hare
9005856f77
fix: replay accepted delegation without reserving active Workdirs
2026-10-20 07:24:51 +09:00
Hare
e39372a52a
Merge remote-tracking branch 'origin/develop' into ticket/t-768-subject-grants
2026-10-20 06:38:12 +09:00
Hare
223a74a9e2
fix: retain byte command transport and explicit authorization fixtures
2026-10-20 06:38:12 +09:00
Hare
f38d9a16ea
Merge remote-tracking branch 'origin/develop' into ticket/t-768-subject-grants
...
# Conflicts:
# crates/worker-runtime/src/worker_backend.rs
# openapi/server-api.json
# web/workspace/src/lib/generated/companion-api.ts
# web/workspace/src/lib/generated/repository-api.ts
# web/workspace/src/lib/generated/runtime-api.ts
# web/workspace/src/lib/generated/ticket-api.ts
# web/workspace/src/lib/generated/worker-launch-api.ts
2026-10-20 06:24:11 +09:00
Hare
b135fa5e99
feat: enforce explicit Subject permissions and delegated Worker grants
2026-10-20 06:22:58 +09:00
Hare
07b8b6d41b
Merge commit 'b8e548b92d3c785c482dbb418517cc5a2cf9e7e0' into refactor/T-765-session-feature-boundary
2026-10-20 05:34:22 +09:00
Hare
8017c55d82
fix: retain annotated compaction history and honor non-System input policy
2026-10-20 05:34:22 +09:00
Hare
b8e548b92d
chore: integrate reviewed browser session navigation
2026-10-20 05:31:32 +09:00
Hare
90e38551cf
Merge commit '00ad02d04728a8e32a82a4e72747fefcf8a82d4e' into refactor/T-765-session-feature-boundary
...
# Conflicts:
# crates/worker/src/feature/builtin.rs
2026-10-20 05:25:16 +09:00
Hare
3e8164e757
fix: fence hosting setup verification against superseded sessions
2026-10-20 04:53:43 +09:00
Hare
3b3381900f
fix: preserve role-neutral input policy across compaction and replay
2026-10-20 04:45:50 +09:00
Hare
00ad02d047
chore: integrate bounded shared text page refusal
2026-10-20 03:55:13 +09:00
Hare
a774925dec
fix: reject byte-truncated line windows before advancing search
2026-10-20 03:53:03 +09:00
Hare
8f759911ab
fix: emit Session use policy type in browser bindings
2026-10-20 03:52:55 +09:00
Hare
daf1f6ed50
fix: route retained Session migration through Runtime staging
2026-10-20 03:52:55 +09:00
Hare
86602240fa
refactor: bind Subject metadata and prompt confirmation to Host lifecycle
2026-10-20 03:52:55 +09:00
Hare
bfeee487fd
feat(auth): separate anonymous entry from expired session recovery
2026-10-20 03:52:48 +09:00
Hare
f9830fe7dd
test: reject Bash search pages that would skip an unread long line
2026-10-20 03:40:36 +09:00
Hare
de96c5b577
chore: update shared file contracts and validation fixtures
...
# Conflicts:
# crates/worker/src/checkout_http_tests.rs
2026-10-20 03:26:56 +09:00
Hare