Repository navigation

feat(project): an untrusted project is held to the shape a bundle has - #871

Closed

raymondk wants to merge 24 commits into

rk/bundle-symlinksfrom

rk/trusted-shape

Closed

feat(project): an untrusted project is held to the shape a bundle has#871
raymondk wants to merge 24 commits into
rk/bundle-symlinksfrom
rk/trusted-shape

Commits on Nov 5, 2026
- feat(project): a filesystem confined to the project root, for a project from elsewhere
  
  raymondk
  and
  claude
  authored
  dcec008
- fix(project): hold Confined to the root by spelling alone
  
  raymondk
  and
  claude
  authored
  6f5b535
Commits on Nov 10, 2026
- docs(project): say what Confined holds in fewer words
  
  raymondk
  and
  claude
  committed
  397bef0
- feat(project): Confined takes an absolute root and refuses every symlink
  
  raymondk
  and
  claude
  committed
  659b354
- docs(project): note that a path Confined refuses can be reported as missing
  
  raymondk
  and
  claude
  committed
  cbf9e07
- fix(project): Confined refuses a path that mentions a symlink, before any '..' after it
  
  raymondk
  and
  claude
  committed
  8a1df3d
- fix(bundle): hold a bundle to regular files and directories
  
  raymondk
  and
  claude
  committed
  44a10f7
- fix(bundle): refuse the output, a non-UTF-8 name and a looping link by name
  
  raymondk
  and
  claude
  committed
  0ec22ec
- docs(bundle): keep the Intel macOS chore out of Experimental, drop a stale doc comment
  
  raymondk
  and
  claude
  committed
  777ddb3
- refactor(bundle): resolve each directory once on the walk, and list names
  
  raymondk
  and
  claude
  committed
  624dbca
- fix(bundle): resolve the output once it exists, for the walk to refuse
  
  raymondk
  and
  claude
  committed
  0e1dc02
- fix(bundle): hold a files: entry to what the walk holds, and resolve from where a link led
  
  raymondk
  and
  claude
  committed
  5c7c8a4
- feat(project): an untrusted project is held to the shape a bundle has
  
  raymondk
  and
  claude
  committed
  58af0d8
- refactor(project): say what an untrusted step may be, not what it may not
  
  raymondk
  and
  claude
  committed
  c490cb0
- fix(untrusted): read every module through the confined filesystem, and anchor a relative root
  
  raymondk
  and
  claude
  committed
  4953f0d
- refactor(cli): put --untrusted on build, deploy and sync alone
  
  raymondk
  and
  claude
  committed
  e3c2b23
- docs(untrusted): say what an untrusted project may have, not what it may not
  
  raymondk
  and
  claude
  committed
  77f4633
- refactor(untrusted): hold what a project runs, not what it reads
  
  raymondk
  and
  claude
  committed
  f3ba100
- test(untrusted): a chain of links, and a linked directory on the way, lead where they lead
  
  raymondk
  and
  claude
  committed
  c09004b
- fix(untrusted): what a step names must be a regular file
  
  raymondk
  and
  claude
  committed
  df0ca77
- fix(untrusted): ask what a step names is of the path as spelled
  
  raymondk
  and
  claude
  committed
  602c8a3
- refactor(untrusted): one match per step kind, and less said twice
  
  raymondk
  and
  claude
  committed
  85852bf
- feat(untrusted): read an untrusted project through a filesystem confined to its root
  
  raymondk
  and
  claude
  committed
  dd69ace
- feat(untrusted): hold what the CLI keeps under .icp to the confined filesystem
  
  raymondk
  and
  claude
  committed
  a67e243

Commits

Commits on Nov 5, 2026

Commits on Nov 10, 2026