Hare
623c31615d
fix: assign unique event refs to merge integration comments
2026-10-27 06:15:48 +09:00
Hare
f17b5212c7
fix(auth): confirm passkey operations and preserve safe legacy migration
...
Fence displayed identity and native prompt generations, classify secret-free outcomes, recover atomic addition receipts without restoring old credentials, and expose truthful own-key verification metadata. Preserve required verifier and enrollment authority boundaries. Include real-store, production browser, native CTAP2 and visible responsive regressions.
Validation: root check/fmt; API 115; passkey security 25; Web unit 712/component 605; auth/entry/activation/hosting browsers; product auth E2E 8 and two explicit browser suites. Server suite: 1262 lib+12 CLI, 3 ignored and 2 environment-specific exclusions. State-name checker retains 15 byte-identical baseline findings; no new exceptions. Physical keys/mobile and hosted CI remain unverified.
2026-10-26 07:18:23 +09:00
Hare
0975471986
fix: preserve diagnostic context in backend test assertions
2026-10-24 12:51:28 +09:00
Hare
b8f2fa479c
test: add isolated backend fixture seeding
2026-10-24 12:15:10 +09:00
Hare
1639be9841
fix: allow reviewers to read related tickets
2026-10-23 03:22:45 +09:00
Hare
1b6d4dbfd8
fix: preserve workdir failure diagnostics across transport
2026-10-21 01:22:04 +09:00
Hare
338e39bcdb
fix: defer restored workdir access until use
2026-10-20 22:00:58 +09:00
Hare
70d153b365
fix: isolate unreadable archives from runtime startup
2026-10-20 17:39:38 +09:00
Hare
18bac16a23
fix: require replay-safe control lifecycle for Subject delegation
2026-10-20 08:12:26 +09:00
Hare
9005856f77
fix: replay accepted delegation without reserving active Workdirs
2026-10-20 07:24:51 +09:00
Hare
e39372a52a
Merge remote-tracking branch 'origin/develop' into ticket/t-768-subject-grants
2026-10-20 06:38:12 +09:00
Hare
223a74a9e2
fix: retain byte command transport and explicit authorization fixtures
2026-10-20 06:38:12 +09:00
Hare
f38d9a16ea
Merge remote-tracking branch 'origin/develop' into ticket/t-768-subject-grants
...
# Conflicts:
# crates/worker-runtime/src/worker_backend.rs
# openapi/server-api.json
# web/workspace/src/lib/generated/companion-api.ts
# web/workspace/src/lib/generated/repository-api.ts
# web/workspace/src/lib/generated/runtime-api.ts
# web/workspace/src/lib/generated/ticket-api.ts
# web/workspace/src/lib/generated/worker-launch-api.ts
2026-10-20 06:24:11 +09:00
Hare
b135fa5e99
feat: enforce explicit Subject permissions and delegated Worker grants
2026-10-20 06:22:58 +09:00
Hare
07b8b6d41b
Merge commit 'b8e548b92d3c785c482dbb418517cc5a2cf9e7e0' into refactor/T-765-session-feature-boundary
2026-10-20 05:34:22 +09:00
Hare
b8e548b92d
chore: integrate reviewed browser session navigation
2026-10-20 05:31:32 +09:00
Hare
90e38551cf
Merge commit '00ad02d04728a8e32a82a4e72747fefcf8a82d4e' into refactor/T-765-session-feature-boundary
...
# Conflicts:
# crates/worker/src/feature/builtin.rs
2026-10-20 05:25:16 +09:00
Hare
3b3381900f
fix: preserve role-neutral input policy across compaction and replay
2026-10-20 04:45:50 +09:00
Hare
00ad02d047
chore: integrate bounded shared text page refusal
2026-10-20 03:55:13 +09:00
Hare
a774925dec
fix: reject byte-truncated line windows before advancing search
2026-10-20 03:53:03 +09:00
Hare
bfeee487fd
feat(auth): separate anonymous entry from expired session recovery
2026-10-20 03:52:48 +09:00
Hare
de96c5b577
chore: update shared file contracts and validation fixtures
...
# Conflicts:
# crates/worker/src/checkout_http_tests.rs
2026-10-20 03:26:56 +09:00
Hare
6e729ed06c
refactor: isolate Feature System input migration and compaction policy
2026-10-20 03:21:22 +09:00
Hare
6576850b7a
chore: connect shared file contracts for Bash validation
2026-10-20 03:03:53 +09:00
Hare
4555aace28
feat: capture bounded Bash output over replayable byte transport
2026-10-20 03:01:22 +09:00
Hare
47b32ef6ab
fix: bind capability changes to Object freshness and update contract consumers
2026-10-20 02:53:21 +09:00
Hare
bb5c50f9ab
feat: persist System input policies through public consumers
2026-10-20 02:44:28 +09:00
Hare
32a409c15d
feat: share virtual file contracts and checked binary byte ranges
2026-10-20 02:18:49 +09:00
Hare
e5749b9be0
test: integrate Drive connection and lifetime coverage
2026-10-20 00:37:32 +09:00
Hare
ec6c5beda0
test: connect Drive publication to client and resource lifetimes
2026-10-20 00:34:50 +09:00
Hare
8e40fae6f4
fix: recover unpublished Subject creation and preserve auth rejections
2026-10-19 18:56:24 +09:00
Hare
b3189d8e85
fix: preserve worker retention failure diagnostics
2026-10-19 13:52:43 +09:00
Hare
24bc45a31e
chore: merge develop into hare/develop
2026-10-19 01:31:23 +09:00
Hare
cc66bd5052
test: connect restored Runtime parent tools to child session
2026-10-19 00:02:02 +09:00
Hare
67767eeee7
test: integrate Ticket public regression coverage
2026-10-18 02:35:16 +09:00
Hare
651820dc6d
test: connect Ticket public regressions to real Backend
2026-10-18 02:10:15 +09:00
Hare
75b1557d63
feat: browse Subject Journals and persistent Memory links
2026-10-18 02:03:51 +09:00
Hare
8f598da931
test: verify frozen Journal compaction across Hosts and restores
2026-10-17 12:25:24 +09:00
Hare
956aeed6b2
feat: freeze Host Journal context across compaction
2026-10-17 12:19:37 +09:00
Hare
adfa422973
chore: merge develop into hare/develop
2026-10-17 12:06:05 +09:00
Hare
7a5228b8e6
fix: reconcile Memory Journal links with handoff fencing
2026-10-17 03:52:11 +09:00
Hare
b1808b7c4d
fix: unblock MR follow-up and simplify orchestration guidance
2026-10-17 03:35:58 +09:00
Hare
b544e53bd7
feat: connect Memory provenance to durable Journal context
2026-10-16 23:54:54 +09:00
Hare
04a4e59100
feat: fence Subject handoff on recorded Journal and seed new bodies once
2026-10-16 20:51:08 +09:00
Hare
9c12fb4372
feat: verify discoverable passkeys against their saved owners
2026-10-16 19:01:43 +09:00
Hare
be1c030350
chore: merge develop into hare/develop
2026-10-16 15:08:40 +09:00
Hare
ffaaf2ecb0
test: isolate local rules and reduce repeated fixture setup
2026-10-16 15:04:52 +09:00
Hare
6667985883
fix: preserve test completion and fixture invariants under concurrency
2026-10-16 15:04:42 +09:00
Hare
24c6f772f7
fix: serve entry shells independently of workspace catalog
2026-10-16 10:48:51 +09:00
Hare
d22899d39e
feat: activate provisional users with scoped passkey enrollment
2026-10-16 08:48:35 +09:00