Hare
623c31615d
fix: assign unique event refs to merge integration comments
2026-10-27 06:15:48 +09:00
Hare
af719e387d
fix: align reviewer guidance with Bash-enabled scope
2026-10-27 06:15:48 +09:00
Hare
f17b5212c7
fix(auth): confirm passkey operations and preserve safe legacy migration
...
Fence displayed identity and native prompt generations, classify secret-free outcomes, recover atomic addition receipts without restoring old credentials, and expose truthful own-key verification metadata. Preserve required verifier and enrollment authority boundaries. Include real-store, production browser, native CTAP2 and visible responsive regressions.
Validation: root check/fmt; API 115; passkey security 25; Web unit 712/component 605; auth/entry/activation/hosting browsers; product auth E2E 8 and two explicit browser suites. Server suite: 1262 lib+12 CLI, 3 ignored and 2 environment-specific exclusions. State-name checker retains 15 byte-identical baseline findings; no new exceptions. Physical keys/mobile and hosted CI remain unverified.
2026-10-26 07:18:23 +09:00
Hare
2d33321fab
fix: validate live fixture snapshots and shutdown boundaries
2026-10-24 12:57:28 +09:00
Hare
0975471986
fix: preserve diagnostic context in backend test assertions
2026-10-24 12:51:28 +09:00
Hare
214d6e21dd
fix: assert classified workdir session closure in tests
2026-10-24 12:40:37 +09:00
Hare
fca5c23345
fix: reject unrestorable and opaque fixture records
2026-10-24 12:39:22 +09:00
Hare
6bb671be21
test: add typed stopped worker fixture transport
2026-10-24 12:19:43 +09:00
Hare
b8f2fa479c
test: add isolated backend fixture seeding
2026-10-24 12:15:10 +09:00
Hare
1639be9841
fix: allow reviewers to read related tickets
2026-10-23 03:22:45 +09:00
Hare
aa0fb2f787
fix: continue workdir output reads after long-poll expiry
2026-10-21 04:48:43 +09:00
Hare
1b6d4dbfd8
fix: preserve workdir failure diagnostics across transport
2026-10-21 01:22:04 +09:00
Hare
af615ab177
fix: retain archive and worker restore failure diagnostics
2026-10-20 22:00:58 +09:00
Hare
338e39bcdb
fix: defer restored workdir access until use
2026-10-20 22:00:58 +09:00
Hare
3cfe04be3a
fix: preserve saved feature configuration during worker restore
2026-10-20 22:00:39 +09:00
Hare
70d153b365
fix: isolate unreadable archives from runtime startup
2026-10-20 17:39:38 +09:00
Hare
ce93849948
chore: merge develop into hare/develop
2026-10-20 15:39:09 +09:00
Hare
3c499719fe
feat: default Coder ticket work to review flow
2026-10-20 15:38:50 +09:00
Hare
9e1d3df7ad
fix: remove overbroad Worker bypass instructions
2026-10-20 15:38:50 +09:00
Hare
18bac16a23
fix: require replay-safe control lifecycle for Subject delegation
2026-10-20 08:12:26 +09:00
Hare
9005856f77
fix: replay accepted delegation without reserving active Workdirs
2026-10-20 07:24:51 +09:00
Hare
e39372a52a
Merge remote-tracking branch 'origin/develop' into ticket/t-768-subject-grants
2026-10-20 06:38:12 +09:00
Hare
223a74a9e2
fix: retain byte command transport and explicit authorization fixtures
2026-10-20 06:38:12 +09:00
Hare
f38d9a16ea
Merge remote-tracking branch 'origin/develop' into ticket/t-768-subject-grants
...
# Conflicts:
# crates/worker-runtime/src/worker_backend.rs
# openapi/server-api.json
# web/workspace/src/lib/generated/companion-api.ts
# web/workspace/src/lib/generated/repository-api.ts
# web/workspace/src/lib/generated/runtime-api.ts
# web/workspace/src/lib/generated/ticket-api.ts
# web/workspace/src/lib/generated/worker-launch-api.ts
2026-10-20 06:24:11 +09:00
Hare
b135fa5e99
feat: enforce explicit Subject permissions and delegated Worker grants
2026-10-20 06:22:58 +09:00
Hare
07b8b6d41b
Merge commit 'b8e548b92d3c785c482dbb418517cc5a2cf9e7e0' into refactor/T-765-session-feature-boundary
2026-10-20 05:34:22 +09:00
Hare
8017c55d82
fix: retain annotated compaction history and honor non-System input policy
2026-10-20 05:34:22 +09:00
Hare
b8e548b92d
chore: integrate reviewed browser session navigation
2026-10-20 05:31:32 +09:00
Hare
90e38551cf
Merge commit '00ad02d04728a8e32a82a4e72747fefcf8a82d4e' into refactor/T-765-session-feature-boundary
...
# Conflicts:
# crates/worker/src/feature/builtin.rs
2026-10-20 05:25:16 +09:00
Hare
3b3381900f
fix: preserve role-neutral input policy across compaction and replay
2026-10-20 04:45:50 +09:00
Hare
00ad02d047
chore: integrate bounded shared text page refusal
2026-10-20 03:55:13 +09:00
Hare
a774925dec
fix: reject byte-truncated line windows before advancing search
2026-10-20 03:53:03 +09:00
Hare
8f759911ab
fix: emit Session use policy type in browser bindings
2026-10-20 03:52:55 +09:00
Hare
daf1f6ed50
fix: route retained Session migration through Runtime staging
2026-10-20 03:52:55 +09:00
Hare
86602240fa
refactor: bind Subject metadata and prompt confirmation to Host lifecycle
2026-10-20 03:52:55 +09:00
Hare
bfeee487fd
feat(auth): separate anonymous entry from expired session recovery
2026-10-20 03:52:48 +09:00
Hare
f9830fe7dd
test: reject Bash search pages that would skip an unread long line
2026-10-20 03:40:36 +09:00
Hare
de96c5b577
chore: update shared file contracts and validation fixtures
...
# Conflicts:
# crates/worker/src/checkout_http_tests.rs
2026-10-20 03:26:56 +09:00
Hare
6e729ed06c
refactor: isolate Feature System input migration and compaction policy
2026-10-20 03:21:22 +09:00
Hare
f38b2a52b1
fix: record native prior Read only after result validation
2026-10-20 03:21:14 +09:00
Hare
dd5384df3b
feat: expose retained Bash streams through common WIP file contracts
2026-10-20 03:13:46 +09:00
Hare
6576850b7a
chore: connect shared file contracts for Bash validation
2026-10-20 03:03:53 +09:00
Hare
4555aace28
feat: capture bounded Bash output over replayable byte transport
2026-10-20 03:01:22 +09:00
Hare
47b32ef6ab
fix: bind capability changes to Object freshness and update contract consumers
2026-10-20 02:53:21 +09:00
Hare
bb5c50f9ab
feat: persist System input policies through public consumers
2026-10-20 02:44:28 +09:00
Hare
32a409c15d
feat: share virtual file contracts and checked binary byte ranges
2026-10-20 02:18:49 +09:00
Hare
19514a5d6a
feat: define bounded Feature-owned system input envelopes
2026-10-20 02:14:52 +09:00
Hare
887184796e
docs: distinguish commit completion from Feature authority
2026-10-20 02:05:02 +09:00
Hare
cd0eb5eb00
fix: allowlist public system input projections
2026-10-20 02:02:28 +09:00
Hare
e8dfb3e68d
refactor: notify system input producers after durable commit
2026-10-20 02:02:28 +09:00
Hare