c9700b6c36
chore(docs): regenerate the catalogs and graphs and re-record the app-boot pairing after the master merge
Yichen Jiang
2026-08-08 22:44:02 +08:00
0aeca9c3ce
fix(windows): make native coverage graph portable
Tianyi Cui
2026-08-08 22:19:45 +08:00
441927c526
fix(sandbox): drop Authenticated Users from both restricting lists — close the C:\\-root escape, CIM unavailable in every confined mode
Huanqi Cao
2026-08-08 21:55:02 +08:00
3e13581c35
Merge remote-tracking branch 'origin/worktree/ci-native-windows-20260808' into worktree/ci-native-windows-coverage-20260808
Tianyi Cui
2026-08-08 21:28:09 +08:00
72efc6f522
Merge remote-tracking branch 'origin/master' into worktree/ci-native-windows-20260808
Tianyi Cui
2026-08-08 21:27:25 +08:00
b1ccca71ef
fix(windows): stabilize native coverage watchers
Tianyi Cui
2026-08-08 21:26:38 +08:00
ded7f8ffd1
Merge latest native Windows CI base into coverage follow-up
Tianyi Cui
2026-08-08 20:44:36 +08:00
0ad10e0f9d
Merge latest master into native Windows CI
Tianyi Cui
2026-08-08 20:41:54 +08:00
f96be1db13
test(windows): make native coverage fixtures portable
Tianyi Cui
2026-08-08 20:36:31 +08:00
2cea99409f
test(web): re-record goldens with the header preset label now rendering live
Yichen Jiang
2026-08-08 20:34:03 +08:00
9d10a1888b
fix(pwsh): record the tool-pwsh user-approval dependency in the lockfile
Huanqi Cao
2026-08-08 20:24:19 +08:00
66e9b01fbd
fix(tools,client): chain-mode resolution and a live preset label
Yichen Jiang
2026-08-08 20:19:00 +08:00
7eadde5c58
Merge remote-tracking branch 'origin/feat/windows-pwsh-default' into feat/windows-acl-sandbox
Huanqi Cao
2026-08-08 20:18:56 +08:00
c5dd429478
Merge branch 'master' into fs-overwrite-diff-bound-v2
Ziya
2026-08-08 05:17:04 -07:00
132debb5fe
fix(apiproxy): echo the resolved agent preset on create and session-added
Yichen Jiang
2026-08-08 20:16:50 +08:00
03cf9caba2
Merge remote-tracking branch 'origin/master' into HEAD
Huanqi Cao
2026-08-08 20:15:08 +08:00
83f835e4cb
feat(pwsh): mirror the bash sandbox surface — denial rendering, escalation, and the ConstrainedLanguage contract
Huanqi Cao
2026-08-08 20:11:21 +08:00
2dd9af6f4b
fix(sandbox): keep read-only strictly zero-grant by dropping the write-allowlist SID from list I
Huanqi Cao
2026-08-08 20:11:01 +08:00
85e9f3b7cb
Merge latest native Windows CI base into coverage follow-up
Tianyi Cui
2026-08-08 20:07:25 +08:00
f91305ef5c
Merge latest master into native Windows CI
Tianyi Cui
2026-08-08 20:06:38 +08:00
279e51a84c
Merge native Windows CI lifecycle fixes into coverage follow-up
Tianyi Cui
2026-08-08 20:05:46 +08:00
9b169f7555
ci: run required checks on native Windows
Tianyi Cui
2026-08-08 18:37:32 +08:00
69fd67bfd8
fix(docs): restore the cli reference pairing record to the multi-line contract after the merge-forward
Huanqi Cao
2026-08-08 18:25:48 +08:00
e9b1c64a38
fix(sandbox): update the missing-runner snapshot for the Windows-aware SANDBOX_UNAVAILABLE text
Huanqi Cao
2026-08-08 18:16:19 +08:00
f1af1831ef
fix(docs): point the parity note at the implemented windows-pwsh-default note and re-record the pair
Huanqi Cao
2026-08-08 18:10:21 +08:00
d770fb21cc
docs(scope,agent-presets): standing-mount model, parent chain, and the Agent Note
Yichen Jiang
2026-08-08 18:08:20 +08:00
644162d4df
fix(docs): re-record the parity note pair hashes after the EOF normalization
Huanqi Cao
2026-08-08 18:03:15 +08:00
c0991f2568
fix(docs): point the parity note at the implemented windows-pwsh-default note and refresh catalogs after the merge-forward
Huanqi Cao
2026-08-08 17:58:35 +08:00
e18aa2745c
refactor(scope,agent-presets): per-preset standing mounts over a scope parent chain
Yichen Jiang
2026-08-08 17:51:49 +08:00
cc64c729db
Merge remote-tracking branch 'origin/feat/windows-pwsh-default' into feat/windows-acl-sandbox
Huanqi Cao
2026-08-08 17:50:39 +08:00
d1b080a68d
Merge remote-tracking branch 'origin/master' into HEAD
Huanqi Cao
2026-08-08 17:42:47 +08:00
07c7e2f0bd
fix(sandbox): revoke post-apply grant failures, free init SID allocations, and name the Windows runner in SANDBOX_UNAVAILABLE
Huanqi Cao
2026-08-08 17:39:25 +08:00
43d53d339d
fix(pwsh): stamp the calling session's sandbox policy onto pwsh tool calls
Huanqi Cao
2026-08-08 17:30:04 +08:00
abfb933620
feat(sandbox): per-session windows-acl write grant with dual-mode restricting lists and a private temp subdirectory
Huanqi Cao
2026-08-08 17:29:43 +08:00