Hare
f17b5212c7
fix(auth): confirm passkey operations and preserve safe legacy migration
...
Fence displayed identity and native prompt generations, classify secret-free outcomes, recover atomic addition receipts without restoring old credentials, and expose truthful own-key verification metadata. Preserve required verifier and enrollment authority boundaries. Include real-store, production browser, native CTAP2 and visible responsive regressions.
Validation: root check/fmt; API 115; passkey security 25; Web unit 712/component 605; auth/entry/activation/hosting browsers; product auth E2E 8 and two explicit browser suites. Server suite: 1262 lib+12 CLI, 3 ignored and 2 environment-specific exclusions. State-name checker retains 15 byte-identical baseline findings; no new exceptions. Physical keys/mobile and hosted CI remain unverified.
2026-10-26 07:18:23 +09:00
Hare
b284934e34
test: add captured Codex worker restore fixture
2026-10-24 12:57:28 +09:00
Hare
2d33321fab
fix: validate live fixture snapshots and shutdown boundaries
2026-10-24 12:57:28 +09:00
Hare
f9b1500ba2
fix: align panel tests with current ticket case states
2026-10-24 12:33:31 +09:00
Hare
931bf3b27d
test: add isolated saved worker restore scenarios
2026-10-24 12:33:31 +09:00
Hare
bfeee487fd
feat(auth): separate anonymous entry from expired session recovery
2026-10-20 03:52:48 +09:00
Hare
9c12fb4372
feat: verify discoverable passkeys against their saved owners
2026-10-16 19:01:43 +09:00
Hare
3c18916118
test: wait for complete isolated server address records
2026-10-16 19:01:43 +09:00
Hare
24c6f772f7
fix: serve entry shells independently of workspace catalog
2026-10-16 10:48:51 +09:00
Hare
b8b12442a0
feat: separate login registration and own account flows
2026-10-16 09:43:57 +09:00
Hare
d22899d39e
feat: activate provisional users with scoped passkey enrollment
2026-10-16 08:48:35 +09:00
Hare
af008f802d
feat: explicit hosting administrators and persistent self-registration policy
2026-10-16 07:26:21 +09:00
Hare
6218c27fb6
fix: separate account registration from authenticated passkey addition
...
Bind enrollment purpose and allocated/current account to verifier state. Reject existing-handle registration, derive additions from live transport authentication, recheck revocation/expiry in the insert-only transaction, and consume challenges atomically across connections. Derive stable account WebAuthn handles without rewriting legacy credentials; reject implicit-user login and unsafe legacy ceremonies.
Align account callers, DTO/OpenAPI/generated artifacts and migration/recovery rationale. Preserve credential-less legacy identities rather than allowing anonymous reclaim.
Validation: 14 actual-verifier passkey tests; full workspace-server 1086 library + 11 binary passed (Drive ignored case explicitly selected separately and passed); server-api default 99 and TypeScript feature 108 passed; isolated auth/Runtime E2E 1+2 passed; Web 645 + component 394 passed; root cargo check, docs/doctests, Server/Runtime builds, fmt, naming and generated consistency passed. Software authenticator only; hosted CI/hardware login not claimed.
2026-10-16 00:55:16 +09:00
Hare
b744efd104
fix: align isolated runtime harness with current trust contract
...
Keep Workspace trust enrollment and owner-authenticated registration, then verify each Runtime connection with a fresh signed request and match its binding ID. Remove obsolete workspace_trust_id input and cached connection_state assertions.
Validation: cargo test -p yoi-e2e --features e2e --test worker_environment --test auth_passkeys -- --nocapture (2 Runtime harness tests and 1 Passkey product E2E passed); root cargo check.
2026-10-16 00:35:23 +09:00
Hare
4efb0ace1f
docs: consolidate design documentation and standardize crate English
2026-10-12 14:58:00 +09:00
Hare
6a12b6cc34
fix: complete state-contract naming cleanup
2026-10-10 17:48:59 +09:00
Hare
a689072756
fix(e2e): close worker environment review gaps
2026-09-22 23:28:28 +09:00
Hare
0869ef0cc6
test(e2e): isolate worker server runtime environments
2026-09-22 22:26:02 +09:00
Hare
12d96fb03d
fix: preserve short paste line endings
2026-09-01 18:49:44 +09:00
Hare
47dabd8793
fix: keep short composer pastes as text
2026-09-01 18:23:23 +09:00
Hare
fdd902d534
fix: align e2e worker metadata root
2026-06-29 05:01:56 +09:00
Hare
c46e880b50
fix: finish worker wording cleanup
2026-06-29 04:54:33 +09:00
Hare
cb0c52e787
fix: update remaining active worker wording
2026-06-26 01:06:20 +09:00
Hare
da96d06f25
fix: remove stale pod guidance references
2026-06-26 00:57:27 +09:00
Hare
caf18dbaab
test: measure panel shell startup path
2026-06-19 13:04:45 +09:00
Hare
7593202492
test: align panel dashboard readiness fixture
2026-06-19 00:53:30 +09:00
Hare
5870251bdf
tui: tighten panel dashboard readiness
2026-06-18 23:39:52 +09:00
Hare
fc1ee5bb55
tui: measure panel dashboard readiness
2026-06-18 23:13:06 +09:00
Hare
fffdfd2721
test: assert panel rows-ready fixture data
2026-06-18 21:17:51 +09:00
Hare
9bad2745f7
fix: measure and defer panel startup reload
2026-06-15 23:24:16 +09:00
Hare
1f07e57a2c
test: record panel tui e2e evidence
2026-06-15 01:46:43 +09:00
Hare
b9f49eee1f
test: cover critical tui e2e paths
2026-06-14 14:24:12 +09:00
Hare
07e754ce4b
test: isolate e2e tmp runtime fixtures
2026-06-14 02:07:07 +09:00
Hare
47efeb0143
test: isolate e2e yoi subprocess env
2026-06-14 01:02:19 +09:00
Hare
13d0053036
test: build e2e yoi binary provider
2026-06-14 00:54:41 +09:00
Hare
10a1c383c2
test: harden panel e2e harness
2026-06-14 00:00:41 +09:00
Hare
96561897ae
test: add opt-in panel e2e harness
2026-06-13 23:38:51 +09:00
Hare