Repository navigation

feat(tools): guarded write CAS core with per-path FIFO chain (S4a, #1375) - #1405

Open

easonLiangWorldedtech wants to merge 40 commits into

Zoo-Code-Org:mainfrom

easonLiangWorldedtech:feat/guarded-write-s4a

Commits on Aug 27, 2026
Commits on Aug 28, 2026
- fix(fws): use doUnmock + resetModules in safeWriteJson test cleanup
  easonliang28
  committed
  56ce4bf
Commits on Aug 30, 2026
- chore(ci): empty commit — re-trigger CI and the CodeRabbit current-head review gate (no code change)
  easonliang28
  committed
  be894d9
- fix(tools): address CodeRabbit review feedback (PR 1405)
  easonliang28
  committed
  58bb5ce
Commits on Oct 6, 2026
- merge(upstream): take main into feat/guarded-write-s4a
  easonLiangWorldedtech
  committed
  bb93d62
- fix(file-safety): run verifyBeforeCommit before the backup rename, and correct the observation docstring
  easonLiangWorldedtech
  committed
  4d4d511
Commits on Oct 7, 2026
- test(file-safety): cover a staging-file fsync failure
  easonLiangWorldedtech
  committed
  1ce0421
- chore: trigger a fresh review pass at this head
  easonLiangWorldedtech
  committed
  968078d
- docs(task): state the cross-process limit of the observation check
  easonLiangWorldedtech
  committed
  a2c364d
- fix(utils): refuse to publish a settings export through a symlink
  easonLiangWorldedtech
  committed
  9f8a857
- test(config): expect the export write to refuse symlink targets
  easonLiangWorldedtech
  committed
  cb72ac7
- fix(file-safety): keep the target mode, clean the staging dir, correct the hook contract
  easonLiangWorldedtech
  committed
  8cb5920
- fix(services): honour the creation mask for new targets and keep the symlink refusal effective
  easonLiangWorldedtech
  committed
  2810c8f
- fix(services): stop safeWriteText from resolving an already-guarded publish target
  easonLiangWorldedtech
  committed
  006389d
Commits on Oct 8, 2026
- fix(file-safety): publish credential writes without following a planted link
  easonLiangWorldedtech
  committed
  2dd792c
- test(file-safety): pin that a partial DACL dump is unlinked after a failed save
  easonLiangWorldedtech
  committed
  51f0cea
- fix(task): clear the per-task observation registry on disposal
  easonLiangWorldedtech
  committed
  8e5061e
- fix(mcp): refuse a symlinked target for project-scoped settings writes
  easonLiangWorldedtech
  committed
  bacb9d3
- fix(mcp,task): derive the symlink policy from the selected source; make registry disposal terminal
  easonLiangWorldedtech
  committed
  fc94f62
- fix(utils): refuse a symlinked ancestor for credential-bearing safeWriteJson writes
  easonLiangWorldedtech
  committed
  171a26e
- fix(utils): keep safeWriteJson publishing no-follow by default, and scope the ancestor refusal
  easonLiangWorldedtech
  committed
  17c736e
- test(tools): cover the omitted kind argument in guardedWrite, and say which pin is load-bearing
  easonLiangWorldedtech
  committed
  f1b2ae4
- fix(tools): stop a queued guarded write once its task has been aborted or disposed
  easonLiangWorldedtech
  committed
  17c53e0
Commits on Oct 9, 2026
- test(file-safety): cover parent-directory creation and its failure paths
  easonLiangWorldedtech
  committed
  509208e
Commits on Oct 10, 2026
- Merge org main into the guarded-write CAS core
  easonLiangWorldedtech
  committed
  df0ce3a
- style: format the MCP hub spec the way the repository formatter wants it
  easonLiangWorldedtech
  committed
  55d69c1
- test(mcp,task): make two test names say what their assertions check, and close a claim with an assertion
  easonLiangWorldedtech
  committed
  a37f284
- test(read-file): check that both stats around a read ask for the bigint variant
  easonLiangWorldedtech
  committed
  5e66c2f
- test(guarded-write,safe-write): stop names and describe blocks claiming what nothing checks
  easonLiangWorldedtech
  committed
  ca77e38
- style: format the safe-write JSON module the way the repository formatter wants it
  easonLiangWorldedtech
  committed
  a54e21a
- docs(safe-write-json): say the lock and publication decision once, and drop a stale identifier
  easonLiangWorldedtech
  committed
  1d205cd
- docs(safe-write-json): state the default symlink contract as it is implemented
  easonLiangWorldedtech
  committed
  777df3c
- fix(tools): re-observe the published version and capture observations at submission
  easonLiangWorldedtech
  committed
  3ee59e5
- style: format the four remaining files this PR touches
  easonLiangWorldedtech
  committed
  e56d189
- test(guarded-write): drop orphaned comment fragment in the FIFO chain test
  easonLiangWorldedtech
  committed
  ea730f0