Repository navigation

feat(tools): guarded write core under the shared lock (U5, #1375) - #1914

Open

easonLiangWorldedtech wants to merge 135 commits into

Zoo-Code-Org:mainfrom

easonLiangWorldedtech:fws/u5-guard-core

Open

feat(tools): guarded write core under the shared lock (U5, #1375)#1914
easonLiangWorldedtech wants to merge 135 commits into
Zoo-Code-Org:mainfrom
easonLiangWorldedtech:fws/u5-guard-core

Commits on Oct 14, 2026
- split unit U1 of PR 1833 (issue 1375)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  1823e82
- fix(file-safety): close the pre-merge findings on the publish primitive (U1, issue 1375)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  bef023d
- fix(file-safety): propagate a non-ENOENT lstat failure in resolvePublishTarget (U1, issue 1375)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  12b57c1
- fix(file-safety): keep the rollback pair typed and the mock stand-ins type-sound
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  984c6ed
- rebuild unit u2 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  20136ce
- chore(lint): prune the safeWriteJson suppression this unit earns
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  b524863
- rebuild unit u3 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  93329bd
- fix(task): declare the observation registry on Task in this unit
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  0f32b3e
- rebuild unit u4 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  8372003
- fix(file-safety): inherit unit 1 committed guard and exact rmdir assertion
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  074348e
- fix(tools): stop the source indentation leaking into the clipped-lines notice
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  aaf2434
- fix(file-safety): keep the publish error message in RollbackFailureError
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  d9ee95a
- test(file-safety): assert the exact staging directory removed after a rollback failure
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  fedb77d
- test: re-trigger required checks - the queued runs were cancelled by the Actions queue, no source change
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  28737be
- fix(file-safety): give the Windows DACL dump a per-write name
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  e53a6e0
- fix(tools): the clipping notice must describe the slice it actually returned
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  bb34958
- fix(file-safety): keep the target present while publishing (durable copy backup)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  62705bb
- feat(utils): let a caller confine a write to a directory
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  b894375
- fix(file-safety): do not read a failed target lstat as a missing target
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  b9cfd73
- fix(file-safety): compare staging and target identity with bigint stats
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  afdd517
- test(file-safety): pin the bigint options in the staging-identity tests
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  13c2902
- fix(file-safety): report a Windows replacement whose DACL was not preserved
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  2955c80
- fix(file-safety): keep DACL warning delivery from failing the save
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  a6dc245
- fix(utils): check confinement before taking the advisory lock
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  bfff215
- fix(file-safety): handle async warning sinks and confine before mkdir
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  677478f
- test(file-safety,utils): cover the commit-rename failure and unmock with doUnmock
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  bcce2c3
- test(task): pin that each Task owns its observation registry
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  4291ced
- fix(mcp): confine project MCP writes to the workspace root
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  40b9c39
- fix(task,tools): retire the observation registry on disposal and pin every MCP confine site
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  d5ff976
- fix(u4): re-check cancellation after the post-read stat before observing
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ae8fda5
- fix(file-safety): one lock key whether the parent directory exists yet
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  0deb7f4
- test(file-safety): a backup copy that fails part-way must not survive the write
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ddae96e
- chore(ci): no-op commit to re-trigger the review for this head
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  e12880f
- test(tools,mcp): count the observation stats and name the pinned write
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  7bcc158
- style(test): reflow three pre-existing lines to the repo prettier gate
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ce174a2
- style(tools,file-safety,utils): apply the repo prettier gate to the six unit files
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  25b02ca
- test(misc): teach the Unicode reader spec the hasClippedLines field
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  cc76cbf
- fix(tools): drop the duplicate Task import the merge produced
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  5a6b43e
- fix(tools): correct the merged no-explicit-any count for the read-file spec
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  f5a2a50
- fix(utils): keep confinement active for a declared-but-empty confineTo
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ea00f9f
- docs(file-safety): narrow what confineTo claims to what it can prove
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  325a0a2
- fix(file-safety): refuse a publish whose Windows DACL cannot be preserved
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  0fe578c
- style(tools): keep the merged spec import block prettier-clean
  easonLiangWorldedtech
  committed
  d73231e
- fix(u4): align the unit with main's unused-vars re-enable
  easonLiangWorldedtech
  committed
  56fe7a0
- split unit U1 of PR 1833 (issue 1375)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  83b4a96
- fix(file-safety): close the pre-merge findings on the publish primitive (U1, issue 1375)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  f9216d7
- fix(file-safety): propagate a non-ENOENT lstat failure in resolvePublishTarget (U1, issue 1375)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  96655c7
- fix(file-safety): keep the rollback pair typed and the mock stand-ins type-sound
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  a7af8f1
- rebuild unit u2 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  d853019
- chore(lint): prune the safeWriteJson suppression this unit earns
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  49943f8
- rebuild unit u3 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  3cb97b2
- fix(task): declare the observation registry on Task in this unit
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  3a14c48
- rebuild unit u4 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  d6bcf47
- rebuild unit u5 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ca084b1
- chore(ci): rerun the Windows test lane
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  e739fb9
- fix(tools): the clipping notice must agree with the recorded completeness
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  16988d8
- test(file-safety): check the paths the cleanup assertions actually name
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  315c69a
- test(file-safety): fix the readlink mock parameter type
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  36cd1ab
- fix(file-safety): inherit unit 1 committed guard
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ceafb44
- fix(file-safety): keep the publish error message in RollbackFailureError
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  d3135a3
- test: re-trigger required checks - the queued runs were cancelled by the Actions queue, no source change
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ffb9d67
- fix(file-safety): give the Windows DACL dump a per-write name
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  563a3c7
- test(file-safety): cover the committed guard in backup mode and align the test title
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  a8aadc8
- fix(tools): confine a guarded write to the task workspace
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  0f2cf5d
- test(tools): type the realpath double for the containment cases
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  a7dc10b
- fix(tools): fail closed on an unresolvable workspace and re-check containment under the lock
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  709fbd8
- fix(tools,fileLock): stop indenting the clipped view, canonicalize the lock key
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  9bc3e64
- fix(tools): stop a queued write from surviving a cancel-then-resume
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  1331d0d
- fix(tools): make the guarded create an atomic no-replace publish
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  17e7e59
- fix(tools): pin the publish to the target that was authorized
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  3db87ee
- fix(file-safety): keep the create path working and the lock key stable at the commit edge
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  44db939
- fix(guardedWrite): fail closed on an unresolvable workspace and pin the authorized directory chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  b28abb9
- fix(u5): drop the duplicated failIfExist key the assertion rewrite left behind
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  6835cde
- fix(file-safety): one lock key whether the parent directory exists yet
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  f353b89
- fix(u5): refuse a path that runs through a dangling link
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  aa25af0
- test(u5): the pin and the publish must agree on an aliased ancestor
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  d082d49
- fix(file-safety): take U1's copy-never-move backup into this unit
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  67f79b6
- fix(u5): align the unit with main's lint re-enable and format gate
  easonLiangWorldedtech
  committed
  e2674db
- fix(u5): restore the unicode spec's clipped-lines expectations the auto-merge dropped
  easonLiangWorldedtech
  committed
  6375a09
- chore: drop the commit-message scratch file that slipped into the tree
  easonLiangWorldedtech
  committed
  1f4169e
- fix(file-safety): fsync the copied target after the no-replace copy fallback
  easonLiangWorldedtech
  committed
  b95efab
- test(utils): type the readlink mock access in the cycle test
  easonLiangWorldedtech
  committed
  0c70f6d
Commits on Oct 15, 2026
Commits on Oct 16, 2026
- fix(read-file): flag clipped lines in indentation reads and report the clipping
  easonLiangWorldedtech
  committed
  a53d162
- fix(file-safety): fail closed when the volume has no atomic no-replace primitive
  easonLiangWorldedtech
  committed
  e5e71aa
Commits on Oct 21, 2026
- fix(file-safety): only a vanished ancestor name is a containment violation; harden the fail-closed test
  dsh-agent
  committed
  e3d66db
- chore(knip): keep the guarded-write module out of the production dead-code gate
  dsh-agent
  committed
  7d4a556
Commits on Oct 22, 2026
Commits on Oct 26, 2026
- Merge remote-tracking branch 'upstream/main' into HEAD
  easonLiangWorldedtech
  committed
  c0120aa
- chore(lint): drop the unused pathUtils import in the McpHub spec
  easonLiangWorldedtech
  committed
  ef1044f
Commits on Oct 30, 2026
- fix(mcp): read the project root once per write; make the cancel tests land on the post-read stat
  easonLiangWorldedtech
  committed
  011451e
Commits on Nov 1, 2026
- Merge upstream/main into fws/u4-read-scope-recording
  lead
  committed
  f60aaeb
- Merge upstream/main into fws/u5-guard-core
  lead
  committed
  363f166
- fix(merge): restore the upstream hunks dropped by the main merge
  easonLiangWorldedtech
  committed
  5e45671
- fix(merge): restore the upstream hunks dropped by the main merge
  easonLiangWorldedtech
  committed
  1b23d23
Commits on Nov 2, 2026
Commits on Nov 8, 2026
- Merge upstream/main (73931fe8) into fws/u4-read-scope-recording
  easonLiangWorldedtech
  committed
  4391a8b
- Reconcile the carried lock-key spec with the replacement protocol
  easonLiangWorldedtech
  committed
  279e77d
- Mark safeWriteText internal now that nothing in production calls it
  easonLiangWorldedtech
  committed
  c0b57f7
- Add the notice-separator row the review asked for on the clipped full read
  easonLiangWorldedtech
  committed
  e3d6327
- Read the staged bytes after staging, where the escape undo can use them
  easonLiangWorldedtech
  committed
  1871993
- Copy the target's mode onto the staged file so the publish cannot widen it
  easonLiangWorldedtech
  committed
  7bf2654
- Compare the interruption injection against identity so main's rows fire on an aliased temp
  easonLiangWorldedtech
  committed
  f739a5f
- Merge the landed u4 head into u5 and record each conflict resolution
  easonLiangWorldedtech
  committed
  e77ef44
- Repair the mode-read row I added: it pinned the caller's path spelling
  easonLiangWorldedtech
  committed
  b86511f
- Merge the landed u4 head: main's write protocol plus our path-safety graft
  easonLiangWorldedtech
  committed
  33e9200
- refactor(u4): reuse main's errorCode helper and drop a one-line fsync wrapper
  easonLiangWorldedtech
  committed
  416179d
- Merge u4 head 416179d17de8 into the guard-core unit
  easonLiangWorldedtech
  committed
  74f5eb2
- test(safeWriteJson): key the backup-stat injection on inode, not path spelling
  easonLiangWorldedtech
  committed
  281c245
- u5 CR round: pin confined-root identity, fence post-commit rollback, recover dangling alias
  easonLiangWorldedtech
  committed
  76427e7
- u5: fail a stalled staging write, correct two stale comments
  easonLiangWorldedtech
  committed
  3dcc4b6
- fix(utils): take a confined write's scope identity from the directory that exists
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  d2b65a5
- Merge upstream main 5319fe91fb into fws/u5-guard-core at d2b65a5a2c
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  7209a5f
Commits on Nov 9, 2026
- Refuse the publish when the target mode cannot be read or set
  easonLiangWorldedtech
  committed
  4132582
Commits on Nov 10, 2026

Commits

Commits on Oct 14, 2026

Commits on Oct 15, 2026

Commits on Oct 16, 2026

Commits on Oct 21, 2026

Commits on Oct 22, 2026

Commits on Oct 26, 2026

Commits on Oct 30, 2026

Commits on Nov 1, 2026

Commits on Nov 2, 2026

Commits on Nov 8, 2026

Commits on Nov 9, 2026

Commits on Nov 10, 2026