Repository navigation

feat(file-safety): guard machinery in the writer, with the identity and rights refusals (U5-B, split 1/2 of #1914, #1375) - #2357

Open

easonLiangWorldedtech wants to merge 75 commits into

Zoo-Code-Org:mainfrom

easonLiangWorldedtech:vps2f-1914-u5b

Open

feat(file-safety): guard machinery in the writer, with the identity and rights refusals (U5-B, split 1/2 of #1914, #1375)#2357
easonLiangWorldedtech wants to merge 75 commits into
Zoo-Code-Org:mainfrom
easonLiangWorldedtech:vps2f-1914-u5b

Commits on Oct 14, 2026
- split unit U1 of PR 1833 (issue 1375)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  1823e82
- fix(file-safety): close the pre-merge findings on the publish primitive (U1, issue 1375)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  bef023d
- fix(file-safety): propagate a non-ENOENT lstat failure in resolvePublishTarget (U1, issue 1375)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  12b57c1
- fix(file-safety): keep the rollback pair typed and the mock stand-ins type-sound
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  984c6ed
- rebuild unit u2 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  20136ce
- chore(lint): prune the safeWriteJson suppression this unit earns
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  b524863
- rebuild unit u3 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  93329bd
- fix(task): declare the observation registry on Task in this unit
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  0f32b3e
- rebuild unit u4 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  8372003
- fix(file-safety): inherit unit 1 committed guard and exact rmdir assertion
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  074348e
- fix(tools): stop the source indentation leaking into the clipped-lines notice
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  aaf2434
- fix(file-safety): keep the publish error message in RollbackFailureError
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  d9ee95a
- test(file-safety): assert the exact staging directory removed after a rollback failure
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  fedb77d
- test: re-trigger required checks - the queued runs were cancelled by the Actions queue, no source change
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  28737be
- fix(file-safety): give the Windows DACL dump a per-write name
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  e53a6e0
- fix(tools): the clipping notice must describe the slice it actually returned
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  bb34958
- fix(file-safety): keep the target present while publishing (durable copy backup)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  62705bb
- feat(utils): let a caller confine a write to a directory
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  b894375
- fix(file-safety): do not read a failed target lstat as a missing target
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  b9cfd73
- fix(file-safety): compare staging and target identity with bigint stats
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  afdd517
- test(file-safety): pin the bigint options in the staging-identity tests
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  13c2902
- fix(file-safety): report a Windows replacement whose DACL was not preserved
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  2955c80
- fix(file-safety): keep DACL warning delivery from failing the save
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  a6dc245
- fix(utils): check confinement before taking the advisory lock
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  bfff215
- fix(file-safety): handle async warning sinks and confine before mkdir
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  677478f
- test(file-safety,utils): cover the commit-rename failure and unmock with doUnmock
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  bcce2c3
- test(task): pin that each Task owns its observation registry
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  4291ced
- fix(mcp): confine project MCP writes to the workspace root
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  40b9c39
- fix(task,tools): retire the observation registry on disposal and pin every MCP confine site
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  d5ff976
- fix(u4): re-check cancellation after the post-read stat before observing
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ae8fda5
- fix(file-safety): one lock key whether the parent directory exists yet
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  0deb7f4
- test(file-safety): a backup copy that fails part-way must not survive the write
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ddae96e
- chore(ci): no-op commit to re-trigger the review for this head
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  e12880f
- test(tools,mcp): count the observation stats and name the pinned write
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  7bcc158
- style(test): reflow three pre-existing lines to the repo prettier gate
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ce174a2
- style(tools,file-safety,utils): apply the repo prettier gate to the six unit files
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  25b02ca
- test(misc): teach the Unicode reader spec the hasClippedLines field
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  cc76cbf
- fix(tools): drop the duplicate Task import the merge produced
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  5a6b43e
- fix(tools): correct the merged no-explicit-any count for the read-file spec
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  f5a2a50
- fix(utils): keep confinement active for a declared-but-empty confineTo
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ea00f9f
- docs(file-safety): narrow what confineTo claims to what it can prove
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  325a0a2
- fix(file-safety): refuse a publish whose Windows DACL cannot be preserved
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  0fe578c
- style(tools): keep the merged spec import block prettier-clean
  easonLiangWorldedtech
  committed
  d73231e
- fix(u4): align the unit with main's unused-vars re-enable
  easonLiangWorldedtech
  committed
  56fe7a0
- chore: drop the commit-message scratch file that slipped into the tree
  easonLiangWorldedtech
  committed
  1f4169e
Commits on Oct 15, 2026
- fix(safe-write): fail closed on confinement escapes and share the lock key
  easonLiangWorldedtech
  committed
  fcadb91
Commits on Oct 16, 2026
- fix(read-file): flag clipped lines in indentation reads and report the clipping
  easonLiangWorldedtech
  committed
  a53d162
Commits on Oct 22, 2026
Commits on Oct 26, 2026
- Merge remote-tracking branch 'upstream/main' into HEAD
  easonLiangWorldedtech
  committed
  c0120aa
- chore(lint): drop the unused pathUtils import in the McpHub spec
  easonLiangWorldedtech
  committed
  ef1044f
Commits on Oct 30, 2026
- fix(mcp): read the project root once per write; make the cancel tests land on the post-read stat
  easonLiangWorldedtech
  committed
  011451e
Commits on Nov 1, 2026
- Merge upstream/main into fws/u4-read-scope-recording
  lead
  committed
  f60aaeb
- fix(merge): restore the upstream hunks dropped by the main merge
  easonLiangWorldedtech
  committed
  5e45671
Commits on Nov 2, 2026
Commits on Nov 8, 2026

Commits

Commits on Oct 14, 2026

Commits on Oct 15, 2026

Commits on Oct 16, 2026

Commits on Oct 22, 2026

Commits on Oct 26, 2026

Commits on Oct 30, 2026

Commits on Nov 1, 2026

Commits on Nov 2, 2026

Commits on Nov 8, 2026