fix: auth/CLI hardening v0.8.43 — closes #5, closes #6#7

Merged

ARHAEEM merged 13 commits into

mainfrom

fix/0.8.43-auth-cli-hardening

May 11, 2026

Commits on May 11, 2026

fix(#6.1): resolve symlinks in direct-run guard
A.R.
committed
fix(#6.2): add shebang + exec bit to dist/cli.mjs post-build
A.R.
committed
fix(#6.3): cache keytar probe + add PERPLEXITY_DISABLE_KEYCHAIN=1 escape hatch
A.R.
committed
fix(#6.4): use persistent browser context for login runners
A.R.
committed
fix(#5.3): add diagnostic logging to getSavedCookies empty paths
A.R.
committed
fix(#5.1): strip HEADLESS_ONLY/NO_DAEMON from daemon spawn env
A.R.
committed
fix(#5.2): Phase 2 uses persistent context + selective vault cookie injection
A.R.
committed
test: regression tests for #5/#6 fixes + adjust existing tests
A.R.
committed
build(mcp-server): avoid tsup DTS worker OOM by delegating to tsc --allowJs --emitDeclarationOnly

A.R.
and
devin-ai-integration[bot]
committed
fix(review): suppress misleading 'key absent' log on unseal failure + optional-chain ctx.browser()

A.R.
and
claude
committed
chore: bump to 0.8.43 + CHANGELOG for issues #5 and #6

A.R.
and
claude
committed
feat(#daemonSync): live daemon↔UI auth status sync

A.R.
and
claude
committed
fix(ci): commit missing post-build-shebang.mjs + re-arm watcher on profile switch

A.R.
and
claude
committed