fix(scope): stored-script enumeration is administrator-only (Spec 105 PR H0, FR-012) - #1285

Merged

Dumbris merged 24 commits into

mainfrom

105-h0-scripts

Sep 18, 2026

Commits on Sep 17, 2026

test(scope): Spec 105 PR H0 red phase — FR-012 stored-script enumeration is admin-only

Dumbris
and
claude
committed
5e86e94
feat(scope): Spec 105 PR H0 — stored-script enumeration is administrator-only (FR-012)

Dumbris
and
claude
committed
3cd939f
fix(scope): PR H0 critique round 1 — gate the REST script listing, scoped resolver never lists, path-free sibling refusals (FR-012)

Dumbris
and
claude
committed
2aab29e
fix(scope): PR H0 codex round 1 — scoped script resolution never reads the directory (FR-012)

Dumbris
and
claude
committed
69f3822
test(scope): PR H0 — make the FR-012 tests portable to Windows

Dumbris
and
claude
committed
51ce3c3
fix(scope): PR H0 codex round 2 — administrator Resolve keeps its directory-based candidate decision (SC-005)

Dumbris
and
claude
committed
2d0d027
fix(scope): PR H0 codex round 3 — scoped resolution fails closed on a Linux case-folding mount (FR-012)

Dumbris
and
claude
committed
39cd1d0
fix(scope): PR H0 review round 4 — an exactly named script runs on a Linux case-folding mount; the fold pays one listing (FR-012)

Dumbris
and
claude
committed
fbe5cc7
fix(scope): PR H0 review round 5 — the scoped resolver answers from a directory-generation-validated exact-name index on Linux/BSD (FR-012)

Dumbris
and
claude
committed
91e901a
test(codescripts): drop the dead Windows skip from the Linux-tagged index test

Dumbris
and
claude
committed
4a879bb
fix(scope): PR H0 review round 6 — the scoped stored-script index is maintained off the request path; no scoped request ever lists (FR-012)

Dumbris
and
claude
committed
f3b265d
fix(scope): PR H0 review round 8 — the stored-script index answers only for its own generation, and a hit's directory generation is rechecked after the open (FR-012)

Dumbris
and
claude
committed
6c46ca9
fix(scope): an unreadable scripts directory is refused as unreadable on the first scoped request

Dumbris
and
claude
committed
ab05427
fix(scope): PR H0 review round 9 — the index authorizes only once settled, the descriptor's spelling is proven at open on darwin/Windows, the generation includes the device, and the index map is bo…

Dumbris
and
claude
committed
71a4007
test(codescripts): exercise the post-open spelling proof with a rename Windows allows

Dumbris
and
claude
committed
d046008
fix(scope): PR H0 review round 11 — bind scoped resolution to one directory descriptor per call, refuse a following Windows reparse point, and make async rebuilds cancellable (FR-012)

Dumbris
and
claude
committed
f4eec72
fix(scope): PR H0 review round 13 — unify darwin/Windows onto the shared index + retained-descriptor design (FR-012)

Dumbris
and
claude
committed
80e28ec
fix(scope): PR H0 — a directory candidate is non-regular on Windows, never unreadable

Dumbris
and
claude
committed
a58fe56
fix(scope): PR H0 review round 14 — Windows path-size off-by-one and fallback-platform test compilation (FR-012)

Dumbris
and
claude
committed
6db4f55
test(codescripts): force the directory mtime forward in the Windows race test

Dumbris
and
claude
committed
b57b7f1
fix(scope): PR H0 review round 15 — bound the Windows final-path resize loop against a growing path (FR-012)

Dumbris
and
claude
committed
fc30954

Commits on Sep 18, 2026

fix(scope): PR H0 review round 17 — Warm blocks on the shared rebuildSlots semaphore (FR-012)

Dumbris
and
claude
committed
b3bd123
merge: resolve main into 105-h0-scripts

Dumbris
and
claude
committed
b48c78c
fix(scope): LanguageMismatchError was the one refusal that ignored disclose (FR-012)

Dumbris
and
claude
committed
1f352c2

Navigation Menu

fix(scope): stored-script enumeration is administrator-only (Spec 105 PR H0, FR-012) - #1285

fix(scope): stored-script enumeration is administrator-only (Spec 105 PR H0, FR-012)#1285
Dumbris merged 24 commits into
mainfrom
105-h0-scripts

Commits on Sep 17, 2026

test(scope): Spec 105 PR H0 red phase — FR-012 stored-script enumeration is admin-only

feat(scope): Spec 105 PR H0 — stored-script enumeration is administrator-only (FR-012)

fix(scope): PR H0 critique round 1 — gate the REST script listing, scoped resolver never lists, path-free sibling refusals (FR-012)

fix(scope): PR H0 codex round 1 — scoped script resolution never reads the directory (FR-012)

test(scope): PR H0 — make the FR-012 tests portable to Windows

fix(scope): PR H0 codex round 2 — administrator Resolve keeps its directory-based candidate decision (SC-005)

fix(scope): PR H0 codex round 3 — scoped resolution fails closed on a Linux case-folding mount (FR-012)

fix(scope): PR H0 review round 4 — an exactly named script runs on a Linux case-folding mount; the fold pays one listing (FR-012)

fix(scope): PR H0 review round 5 — the scoped resolver answers from a directory-generation-validated exact-name index on Linux/BSD (FR-012)

test(codescripts): drop the dead Windows skip from the Linux-tagged index test

fix(scope): PR H0 review round 6 — the scoped stored-script index is maintained off the request path; no scoped request ever lists (FR-012)

fix(scope): PR H0 review round 8 — the stored-script index answers only for its own generation, and a hit's directory generation is rechecked after the open (FR-012)

fix(scope): an unreadable scripts directory is refused as unreadable on the first scoped request

fix(scope): PR H0 review round 9 — the index authorizes only once settled, the descriptor's spelling is proven at open on darwin/Windows, the generation includes the device, and the index map is bo…

test(codescripts): exercise the post-open spelling proof with a rename Windows allows

fix(scope): PR H0 review round 11 — bind scoped resolution to one directory descriptor per call, refuse a following Windows reparse point, and make async rebuilds cancellable (FR-012)

fix(scope): PR H0 review round 13 — unify darwin/Windows onto the shared index + retained-descriptor design (FR-012)

fix(scope): PR H0 — a directory candidate is non-regular on Windows, never unreadable

fix(scope): PR H0 review round 14 — Windows path-size off-by-one and fallback-platform test compilation (FR-012)

test(codescripts): force the directory mtime forward in the Windows race test

fix(scope): PR H0 review round 15 — bound the Windows final-path resize loop against a growing path (FR-012)

Commits on Sep 18, 2026

fix(scope): PR H0 review round 17 — Warm blocks on the shared rebuildSlots semaphore (FR-012)

merge: resolve main into 105-h0-scripts

fix(scope): LanguageMismatchError was the one refusal that ignored disclose (FR-012)