NeilandClaude 923bea9269 fix(files): open host files outside workspaces for any client with terminal access (#33958) ...

* fix(files): open host files outside workspaces for any client with terminal access

Paired clients that can open terminals on a host can already read and write
anything its user can, so the per-terminal provenance gate on files outside
workspaces protected nothing. The host now grants any existing file outside
its workspaces; older hosts get a clear update message instead of a refusal.

Co-Authored-By: Claude <noreply@anthropic.com>

* fix(files): refuse SSH, device and WSL-home paths instead of misreporting them

Co-Authored-By: Claude <noreply@anthropic.com>

* perf(files): size grant digests to the file and skip status checks for local fallbacks

Co-Authored-By: Claude <noreply@anthropic.com>

* fix(files): read procfs files whose stat reports size 0

Co-Authored-By: Claude <noreply@anthropic.com>

---------

Co-authored-by: Claude <noreply@anthropic.com>

2026-10-26 16:18:09 -07:00

..

agent-plugins

feat(agents): TypeScript 7 code intelligence for coding agents, load-aware tsrs checkers (#33408)

2026-10-24 23:47:10 -07:00

ast-grep

perf(lint): keep JS plugins out of default oxlint and adopt ast-grep (#33430)

2026-10-25 00:23:38 -07:00

audit-tools

fix(deps): resolve body-parser and happy-dom security findings (#32983)

2026-10-23 17:35:12 -07:00

build-plugins

perf(dev): −1.2 GB idle RSS per pnpm dev instance (Rolldown threads + mimalloc purge) (#33836)

2026-10-26 01:39:36 -07:00

ci

[comment audit] Complete repository-wide comment cleanup (#33249)

2026-10-25 04:05:46 -07:00

docker

[comment audit] Complete repository-wide comment cleanup (#33249)

2026-10-25 04:05:46 -07:00

nsis

[comment audit] Complete repository-wide comment cleanup (#33249)

2026-10-25 04:05:46 -07:00

oxlint-plugins

perf(lint): skip JS plugin rules on files that cannot match (#33813)

2026-10-26 00:13:01 -07:00

patches

fix(native): pin node-pty cfset*speed with legacy baud codes for glibc 2.42+ (#33803)

2026-10-26 00:29:36 -07:00

scripts

fix(files): open host files outside workspaces for any client with terminal access (#33958)

2026-10-26 16:18:09 -07:00

.bun-version

Use incremental tsrs locally and update Bun to 1.4.4 (#32276)

2026-10-23 03:28:11 -07:00

bundled-ripgrep-resources.cjs

[comment audit] Complete repository-wide comment cleanup (#33249)

2026-10-25 04:05:46 -07:00

cargo-deny.toml

ci: check dependency vulnerabilities on PRs and stable releases (#31858)

2026-10-22 00:43:07 -07:00

dark-build-switches.cjs

[comment audit] Complete repository-wide comment cleanup (#33249)

2026-10-25 04:05:46 -07:00

dependency-security-exceptions.json

fix(deps): patch vulnerable Zod collections in mobile and docs (#32941)

2026-10-23 15:29:15 -07:00

dependency-security.md

ci: send dependency review notices to release Slack (#32917)

2026-10-23 13:46:37 -07:00

dev-app-update.yml

…

e2e-failure-tracking.json

…

e2e-typecheck-baseline.txt

chore(lint): fix suppressed lint violations instead of ignoring them (#33294)

2026-10-24 19:37:19 -07:00

e2e-typecheck-mobile-native-stub.ts

fix(mobile): break the transport and terminal-document import cycles, and gate cycles after mobile's install (#30290)

2026-10-18 04:00:24 -07:00

electron-builder-pr-linux.config.cjs

…

electron-builder.config.cjs

perf(memory): read macOS footprints with a bundled proc_pid_rusage helper instead of top (#34053)

2026-10-26 13:32:55 -07:00

electron-vite-target.config.cts

…

flaky-test-pattern-baseline.txt

test: remove 140 low-value cases and 49 suites (#34062)

2026-10-26 15:16:27 -07:00

focus-setting-read-baseline.txt

refactor: colocate task page composition hooks (#33808)

2026-10-26 00:09:15 -07:00

host-list-render-baseline.txt

refactor: group repository execution settings (#33261)

2026-10-24 15:46:51 -07:00

i18n-translation-source.md

…

i18next.config.ts

…

id-only-store-write-baseline.txt

fix(renderer): host writes route only through the strict owner, and twin projections stay on their host (review-5 #2 #9 #11) (#30890)

2026-10-19 17:46:01 -07:00

knip.json

feat(devex): component fixtures with headless screenshots for fast UI checks (#33406)

2026-10-25 00:23:32 -07:00

legacy-relay-compat-tags-baseline.txt

fix(ssh): an old SSH host moves to its managed server while a relay shell named only on its tab still runs (#31093)

2026-10-20 14:18:04 -04:00

legacy-relay-importers-baseline.txt

refactor(ipc): group SSH and runtime-environment IPC handlers into ipc/ssh/ and ipc/runtime-environments/ (#30362)

2026-10-18 08:11:52 -07:00

localization-audit.md

Add translations for terminal shell settings (#25418)

2026-10-04 23:01:02 -07:00

localization-coverage-allowlist.json

fix(ci): localize the chat font family search keywords (#33715)

2026-10-25 17:54:29 -07:00

main-layout-writer-baseline.txt

refactor(pty): one commit step for both terminal start lanes (#31596)

2026-10-22 10:03:07 -07:00

main-sync-spawn-baseline.txt

test: remove low-value main-process suites and browser probes (#33889)

2026-10-26 12:48:28 -07:00

max-lines-baseline.txt

docs: remove redundant max-lines agent instructions [skip ci]

2026-10-20 15:27:14 -07:00

mobile-ci.vitest.config.mjs

Cache mobile typechecks and overlap CI setup (#28192)

2026-10-13 03:35:51 -07:00

oxlint-anti-slop.json

perf(lint): skip JS plugin rules on files that cannot match (#33813)

2026-10-26 00:13:01 -07:00

oxlint-code-quality-casting.json

…

oxlint-code-quality-native-plugins.json

…

oxlint-code-quality-type-aware.json

…

oxlint-dead-classes.json

…

oxlint-design-system.json

…

oxlint-js-plugins.json

perf(lint): keep JS plugins out of default oxlint and adopt ast-grep (#33430)

2026-10-25 00:23:38 -07:00

oxlint-performance-audit.json

perf(lint): keep JS plugins out of default oxlint and adopt ast-grep (#33430)

2026-10-25 00:23:38 -07:00

oxlint-react-doctor.json

perf(lint): skip JS plugin rules on files that cannot match (#33813)

2026-10-26 00:13:01 -07:00

packaged-native-build-entries.cjs

[comment audit] Complete repository-wide comment cleanup (#33249)

2026-10-25 04:05:46 -07:00

packaged-runtime-node-modules.cjs

[comment audit] Complete repository-wide comment cleanup (#33249)

2026-10-25 04:05:46 -07:00

packaged-windows-only-runtime-files.cjs

[comment audit] Complete repository-wide comment cleanup (#33249)

2026-10-25 04:05:46 -07:00

path-literal-baseline.txt

Accept messages while any agent starts, and bound each startup step (#28046)

2026-10-19 10:53:46 -07:00

performance-audit.md

perf(lint): keep JS plugins out of default oxlint and adopt ast-grep (#33430)

2026-10-25 00:23:38 -07:00

pnpmfile.cjs

build: use the shared pnpm store on Windows by default (#30565)

2026-10-18 22:32:45 -07:00

process-host-direct-import-baseline.txt

chore(process-host): drop the WSL hook relay launcher from the direct-import baseline (#34078)

2026-10-26 15:24:14 -07:00

reliability-gates.jsonc

fix(files): open host files outside workspaces for any client with terminal access (#33958)

2026-10-26 16:18:09 -07:00

renderer-layout-writer-baseline.txt

Open browser links beside their source (#32907)

2026-10-25 09:30:37 -07:00

repo-host-read-baseline.txt

refactor: remove four unreachable preload IPC bridges (#32950)

2026-10-23 17:39:44 -07:00

sgconfig.yml

perf(lint): keep JS plugins out of default oxlint and adopt ast-grep (#33430)

2026-10-25 00:23:38 -07:00

ts-nocheck-baseline.txt

Check runtime construction and remaining service owners (#28377)

2026-10-15 04:24:51 -07:00

tsconfig.build.cli.json

perf(build): skip compiling tests into CLI output (#29400)

2026-10-15 23:25:26 -07:00

tsconfig.cli.json

build(cli): typecheck the CLI by following its imports, not a hand list (#30632)

2026-10-20 17:16:00 -07:00

tsconfig.e2e.json

chore(lint): fix suppressed lint violations instead of ignoring them (#33294)

2026-10-24 19:37:19 -07:00

tsconfig.node.json

Update Orca's skills with Orca's own installer instead of npx skills (#31688)

2026-10-22 22:35:14 -04:00

tsconfig.tc.cli.json

fix: remove comments from typecheck JSON configs (#29398)

2026-10-15 21:03:01 -07:00

tsconfig.tc.web.json

test: trim redundant checks and strengthen workspace persistence (#33208)

2026-10-24 10:27:59 -07:00

tsconfig.web.json

…

unproven-pty-retirement-baseline.txt

fix(pty): an exit proof names its incarnation; a spawn is tracked from its reply (#30754)

2026-10-19 09:59:24 -07:00

vite.fixtures.config.ts

[comment audit] Complete repository-wide comment cleanup (#33249)

2026-10-25 04:05:46 -07:00

vitest.agent-status-benchmark.config.ts

ci: fail when a checked-in test file has no runner (#33080)

2026-10-24 00:57:17 -07:00

vitest.config.ts

perf(test): faster local test loop and cold-worktree changed runs (#33421)

2026-10-24 23:15:51 -07:00

vitest.performance.config.ts

Stop workers from taking over the Run they work for (#29008)

2026-10-26 00:46:27 -07:00

wayland-clipboard-resources.cjs

fix(linux): keep Wayland clipboard text current (#27772)

2026-10-12 02:31:03 -07:00

workspace-record-read-baseline.txt

Open browser links beside their source (#32907)

2026-10-25 09:30:37 -07:00

worktree-id-composer-baseline.txt

chore(worktree): composeWorktreeId plus a ratchet on hand-built worktree ids (#30238)

2026-10-18 00:51:41 -07:00