fix: Security hardening, reliable daemon stop, and dashboard UX overhaul - #18

Merged

ARHAEEM merged 19 commits into

mainfrom

fix/security-hardening

Jun 12, 2026

Commits on Jun 12, 2026

fix(daemon): create daemon.lock with 0600 perms + Windows ACL, sanitize icacls principal

ARHAEEM
and
claude
committed
6622201
fix(auth): deliver login credentials over fork IPC instead of child env

ARHAEEM
and
claude
committed
1724975
fix(ci): pin vsce/ovsx exactly and validate registry version replies

ARHAEEM
and
claude
committed
d22fff0
fix(build): refuse symlinks escaping workspace node_modules in VSIX dep copy

ARHAEEM
and
claude
committed
e631de8
fix(mcp): fail closed to read-only on unknown tool profile

ARHAEEM
and
claude
committed
0325a80
fix(daemon): timing-safe bearer comparison, redact token in daemon status

ARHAEEM
and
claude
committed
d8fb659
docs: changelog entry for security hardening fixes

ARHAEEM
and
claude
committed
1ee41e6
fix(build): canonicalize node_modules allowlist root in symlink guard

ARHAEEM
and
claude
committed
5eafc61
fix(daemon): make dashboard Stop reliable — verify shutdown, reclaim stale locks, prevent auto-resurrect

ARHAEEM
and
claude
committed
3a27ffb
fix(webview): UI/UX hardening — action feedback, state sync, theming, a11y, content

ARHAEEM
and
claude
committed
26a8156
docs: changelog for daemon stop fix + webview UI/UX hardening

ARHAEEM
and
claude
committed
d72705f
fix(webview): daemon controls use daemon-specific pending state; watcher retry; aria-busy alignment

ARHAEEM
and
claude
committed
95c1ea2
fix(webview): add hostname field for Cloudflare Named Tunnel setup

ARHAEEM
and
claude
committed
0f3d485
fix(webview): dead-end sweep — ngrok token update path, prompt editor feedback, form state, cosmetics

ARHAEEM
and
claude
committed
d3e1dc9
feat(webview): show configured named-tunnel hostname; prompt edits wait for confirmation

ARHAEEM
and
claude
committed
40eca03
fix(tunnel): make named-tunnel hostname changes take effect; use pnpm exec in release

ARHAEEM
and
claude
committed
4bfb9d7
fix(security): remove unsanitized icacls duplicate; require proven identity before kill escalation

ARHAEEM
and
claude
committed
9624aab
fix(daemon): require uuid proof for ALL kill escalation; restartDaemon aborts on failed stop

ARHAEEM
and
claude
committed
a1a56cf
fix(lsp): make published LSP actually runnable; committed bin shim kills CI warn

ARHAEEM
and
claude
committed
065000f

Navigation Menu

Uh oh!

fix: Security hardening, reliable daemon stop, and dashboard UX overhaul - #18

fix: Security hardening, reliable daemon stop, and dashboard UX overhaul#18
ARHAEEM merged 19 commits into
mainfrom
fix/security-hardening

Commits on Jun 12, 2026

fix(daemon): create daemon.lock with 0600 perms + Windows ACL, sanitize icacls principal

fix(auth): deliver login credentials over fork IPC instead of child env

fix(ci): pin vsce/ovsx exactly and validate registry version replies

fix(build): refuse symlinks escaping workspace node_modules in VSIX dep copy

fix(mcp): fail closed to read-only on unknown tool profile

fix(daemon): timing-safe bearer comparison, redact token in daemon status

docs: changelog entry for security hardening fixes

fix(build): canonicalize node_modules allowlist root in symlink guard

fix(daemon): make dashboard Stop reliable — verify shutdown, reclaim stale locks, prevent auto-resurrect

fix(webview): UI/UX hardening — action feedback, state sync, theming, a11y, content

docs: changelog for daemon stop fix + webview UI/UX hardening

fix(webview): daemon controls use daemon-specific pending state; watcher retry; aria-busy alignment

fix(webview): add hostname field for Cloudflare Named Tunnel setup

fix(webview): dead-end sweep — ngrok token update path, prompt editor feedback, form state, cosmetics

feat(webview): show configured named-tunnel hostname; prompt edits wait for confirmation

fix(tunnel): make named-tunnel hostname changes take effect; use pnpm exec in release

fix(security): remove unsanitized icacls duplicate; require proven identity before kill escalation

fix(daemon): require uuid proof for ALL kill escalation; restartDaemon aborts on failed stop

fix(lsp): make published LSP actually runnable; committed bin shim kills CI warn