NeilandOrca 4be5bcd756 feat(memory-safety): bound OOM-prone ingress across transports, parsers and scans ...

Re-scoped from the reverted #10179 to the bound-at-ingress doctrine (see
src/shared/memory-safety/README.md): ceilings go where untrusted or
unpredictably-large input first enters a heap, not in the interior.

Kept: daemon/relay/SSH/mobile/IPC transport frames, PTY output flow control,
on-disk agent transcripts, document parsing, filesystem enumeration, provider
pagination, media decode, and long-lived accumulators keyed by user-growable
ids -- the class behind the reported renderer OOM (#9872).

Dropped: interior ceilings whose size is already implied by a bounded input,
second ceilings behind existing ones, and derived/presentational state.

Every file is reconciled against current main: check-no-merge-base-revert
reports 0 reverted and 0 missing across 169 overlapping files, so no shipped
work is lost. Typecheck is at main's own 2-error baseline.

Co-authored-by: Orca <help@stably.ai>

2026-07-25 23:43:37 -07:00

..

docker/headless-pairing

Fix headless Linux serve pairing readiness (#9785)

2026-07-21 18:23:20 -07:00

nsis

Windows terminal update-survival (single consolidated PR) (#7538)

2026-07-07 19:21:07 -04:00

patches

fix(linux): restore Ubuntu 20.04 launch — pin node-pty glibc symbols + add glibc/libstdc++ packaging gate (#9902) (#10019)

2026-07-22 19:11:44 -07:00

relay-assets

fix(ssh): patch node-pty helper in Windows relay (#9638)

2026-07-20 19:09:18 -07:00

scripts

feat(memory-safety): bound OOM-prone ingress across transports, parsers and scans

2026-07-25 23:43:37 -07:00

bounded-ingress-baseline.json

feat(memory-safety): bound OOM-prone ingress across transports, parsers and scans

2026-07-25 23:43:37 -07:00

dev-app-update.yml

chore: move dev-app-update.yml into config/ (#1276)

2026-04-30 00:11:14 -07:00

electron-builder.config.cjs

fix(win): stop shipping duplicate broken orca.cmd shim in app.asar (#9123)

2026-07-24 00:25:30 -07:00

localization-audit.md

Revert "Decouple feature copy from translated locale catalogs (#8488)" (#8500)

2026-07-12 23:43:07 -07:00

localization-coverage-allowlist.json

feat(settings): make Language setting findable by native-language search terms (#9967)

2026-07-22 11:52:49 -07:00

max-lines-baseline.txt

Make plain-text file:// links clickable in the terminal (#9467)

2026-07-19 15:21:06 -07:00

oxlint-react-doctor.json

chore: gate high-signal react doctor rules

2026-05-31 22:35:15 -07:00

oxlint-switch-exhaustiveness.json

chore: enforce exhaustive switch handling

2026-05-30 13:18:12 -07:00

packaged-runtime-node-modules.cjs

fix(cli): avoid Windows PATH status timeout (#9483)

2026-07-19 21:59:22 -04:00

reliability-gates.jsonc

fix(remote): create paired agent sessions without host focus (#10193)

2026-07-23 20:20:00 -07:00

tsconfig.cli.json

feat(memory-safety): bound OOM-prone ingress across transports, parsers and scans

2026-07-25 23:43:37 -07:00

tsconfig.node.json

fix(daemon): daemon cannot start in 1.4.129-rc.1 — electron require leaked into daemon-entry chunk (#7844)

2026-07-08 19:41:09 -04:00

tsconfig.relay.json

Support agent status hooks over SSH (#1865)

2026-05-14 16:06:23 -07:00

tsconfig.tc.cli.json

refactor to clean up the codebase (#412)

2026-04-08 22:49:16 -07:00

tsconfig.tc.web.json

perf(main): make worktree path dedupe linear (#8177)

2026-07-10 20:52:24 -07:00

tsconfig.web.json

chore: enforce exhaustive switch handling

2026-05-30 13:18:12 -07:00

vitest.config.ts

fix(win-e2e): survive the agent-CLI feature-wall modal in the crash-survival harness (#9992)

2026-07-23 18:04:51 -07:00