9 Commits

Include renames

Author	SHA1	Message	Date
Affaan Mustafa	8fa9694b03	chore: integrate current main into hardening	2026-07-26 06:26:28 -04:00
Affaan MustafaandGitHub	f3afd59045	fix: flatten Claude skill installs (#2582) ... Flatten managed Claude skill destinations, preserve user-owned conflicts, and migrate legacy nested installs through the lifecycle tooling.	2026-07-26 03:20:06 -07:00
Affaan Mustafa	7aa943a9ab	fix: close dashboard hardening review gaps	2026-07-26 05:34:10 -04:00
Affaan Mustafa	9b81e51602	fix: eliminate repair source read race ... Read source bytes and mode from one no-follow file descriptor so a path replacement cannot mix metadata from one inode with content from another. Add a regression that rejects separate path-based source metadata lookup.	2026-07-26 04:59:20 -04:00
Affaan Mustafa	a8295c6bf7	fix: harden local data boundaries ... Bind the capabilities dashboard exclusively to loopback and reject untrusted Host and Origin values. Constrain project-configured agent data paths to the Cursor data root, and harden lifecycle repair/uninstall operations against state-file traversal, symlink swaps, unsafe sources, and forged install-state destinations.\n\nCloses #2506	2026-07-26 04:51:12 -04:00
6 people	67537ea480	fix(repair): build opencode payload so repair clears doctor's opencode-plugin-not-built warning (#2414) (#2438) ... * fix(repair): build opencode plugin payload so repair clears doctor's opencode-plugin-not-built warning (#2414) Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> * refactor(repair): narrow validation bypass to specific codes; fix test-artifact cleanup (#2414 review) Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> --------- Co-authored-by: affaan <affaan@itomarkets.com> Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>	2026-07-08 17:14:33 -04:00
Affaan Mustafa	b40de37ccb	test: cover install lifecycle edge paths	2026-04-29 17:56:25 -04:00
Affaan MustafaandGitHub	131f977841	feat: strengthen install lifecycle and target adapters (#512) ... * fix: strengthen install lifecycle adapters * fix: restore template content on uninstall	2026-03-15 21:47:31 -07:00
Affaan Mustafa	4e028bd2d2	feat: orchestration harness, selective install, observer improvements	2026-03-14 12:55:25 -07:00