Repository navigation

feat(tools): publish apply_patch through the guard (U6, #1375) - #1915

Open

easonLiangWorldedtech wants to merge 89 commits into

Zoo-Code-Org:mainfrom

easonLiangWorldedtech:fws/u6-apply-patch-wiring

Open

feat(tools): publish apply_patch through the guard (U6, #1375)#1915
easonLiangWorldedtech wants to merge 89 commits into
Zoo-Code-Org:mainfrom
easonLiangWorldedtech:fws/u6-apply-patch-wiring

Commits on Oct 14, 2026
- split unit U1 of PR 1833 (issue 1375)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  c4a9ae2
- fix(file-safety): close the pre-merge findings on the publish primitive (U1, issue 1375)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  9003730
- fix(file-safety): propagate a non-ENOENT lstat failure in resolvePublishTarget (U1, issue 1375)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  6c331da
- fix(file-safety): keep the rollback pair typed and the mock stand-ins type-sound
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ed7274f
- rebuild unit u2 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  88c4afa
- chore(lint): prune the safeWriteJson suppression this unit earns
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  166073f
- rebuild unit u3 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  f491af8
- fix(task): declare the observation registry on Task in this unit
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  188b2f3
- rebuild unit u4 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  91efcb1
- rebuild unit u5 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  3920f65
- rebuild unit U8 on U5 (corrected merge order)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  05b6aa2
- rebuild unit u6 in the corrected order
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  427e141
- fix(apply-patch): a full hunk read is a complete observation
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  82eb3f8
- chore(ci): rerun the e2e-mock lane
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  fae26bc
- fix(file-safety): inherit unit 1 committed guard
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ba493f4
- test: rerun mocked e2e - no source change, previous run failed in the runner
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  aaa12cb
- fix(file-safety): keep the publish error message in RollbackFailureError
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ea76274
- test(file-safety): assert the exact staging directory removed after a rollback failure
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ef18c7c
- fix(tools): the tool's own hunk read must not grant full-file authority
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  84c95ba
- test: re-run mocked e2e and the ubuntu lane - no source change since the last green run on these files
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  31d08da
- test(tools): the move test must follow the partial observation the hunk read now records
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  89624ce
- test: re-run mocked e2e - the same suite passed on the neighbouring units of this chain with identical guard behaviour
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  e8cffea
- fix(file-safety): give the Windows DACL dump a per-write name
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  a3be4a6
- test: third mocked-e2e attempt on this unit - the suite is green on the other eight units of the same chain with the same guard behaviour
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  59176fb
- chore(ci): re-run mocked E2E (apply_diff timeouts on the previous run; this unit was green on the earlier run)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  22179e4
- chore(ci): second re-run of the mocked E2E suite. The apply_diff fixtures 404 on this run while the identical content passes on #1918, so the failure is in the mock fixture matching, not this unit'…
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  8459cba
- fix(tools): apply_diff must publish with edit-guard semantics, not create semantics
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  2c61f0c
- fix(file-safety): durable-copy publish and confined writes for the apply-patch unit
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ff80d49
- fix(file-safety): do not read a failed target lstat as a missing target
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  3ebd9ce
- fix(file-safety): compare staging and target identity with bigint stats
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  da74317
- test(file-safety): pin the bigint options in the staging-identity tests
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  c6c6abf
- fix(file-safety): report a Windows replacement whose DACL was not preserved
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  fdb0977
- fix(file-safety): keep DACL warning delivery non-fatal and complete
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  f56e02a
- fix(utils): check confinement before taking the advisory lock
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  f241311
- fix(integrations): the preview observation must not authorize an approved edit
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  f29b11b
- fix(file-safety): handle async warning sinks and confine before mkdir
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  5fa2179
- fix(tools): ApplyDiffTool must observe the version its diff was built on
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  32d1fa6
- test(tools): type the apply_diff observation doubles for check-types
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  11848e6
- fix(integrations): never adopt an autosaved match for an unauthorized edit
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  9075fdd
- fix(tools): never refresh a model observation the tool read on a different version
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  cc8d413
- test(tools),docs(utils): drop the void casts, describe the backup as a copy
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  8c55b29
- fix(editor): roll back created directories when the guarded publish is refused
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  6551af7
- fix(diff-view,file-safety): keep one task's teardown in one task, and one lock key per file
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  5529fbc
- fix(u6): pin the confinement decision onto the publish, and stop leaking created directories
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  5218aea
- fix(u6): pin the path the publish re-resolves, not a second spelling of it
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  4d2bfb4
- test(file-safety): a backup copy that fails part-way must not survive the write
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  758e74c
- test(tools): pin which bracketing stat fails in the diff-read observation test
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  55a6598
- test(file-safety): cover the non-ENOENT scope-resolution failures the confinement check depends on
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  d10f0f2
- fix(diff-view): put the save's post-publish cleanup inside the same teardown as a cancellation
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  22ee292
- fix(diff-view): let only the teardown that started a pass finalize the session
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  c1d3021
- fix(diff-view): restore preview tabs for the pass that owns a rejected save
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  b8a5cfd
- fix(diff-view): finalize the session when a cancellation lands during a teardown it does not own
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  8795844
- fix(file-safety): refuse to replace an existing target whose access rights cannot be captured
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  e0ca1db
- fix(diff-view): one caller owns the session's finalization, by claim rather than by reading state
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  52b7cc6
- fix(safe-write): a write that declares no scope replaces the link instead of writing through it
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  2b82937
- fix(safe-write): cleanup is gated on the commit, not on the staging name
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  4fbf99a
- fix(diff-view): a rejected publish joins a cancellation's teardown instead of starting its own
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  957b1b1
- fix(test): teach main's unicode-reader spec about hasClippedLines
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  f4edf2c
- fix(safe-write): staging files are created and owned by this write, not named by the caller
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  23f0e8e
- fix(safe-write): a fresh target keeps its documented mode and the staging directory has a cleanup owner
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  567bf8f
- test(observation-registry): cover forget()'s boolean result and its blast radius
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  cc9bb4a
- fix(safe-write-json): serialize an unconfined symlink publish under both lock identities
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  688053b
- style: format the nine files the formatting gate flags on this PR
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  9610329
- fix: compare the two lock identities the way the filesystem does
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  fd25bba
- style: reflow the lock identity comparison the previous commit added
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  9f5c801
- fix: fold lock keys the way the lock is placed, not the way strings compare
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  4b6cf13
- fix: fold a lock key from the deepest existing ancestor, not the immediate parent
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  8d8901b
- fix: pin the directories a confined write creates before it commits
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  77070a2
- fix(safe-write-json): fail closed on unknown ancestor identities and unconfined link merges
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  f1371d8
- fix(safe-write): the fresh-target default mode respects the process umask
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  433d15b
- fix(safe-write-json): decide confinement presence once so an empty scope cannot confine nothing
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  98be920
- fix(u6): align the unit with main's lint re-enable and format gate
  easonLiangWorldedtech
  committed
  e153075
- fix(integrations): drop the Stryker directives from the guarded save path
  easonLiangWorldedtech
  committed
  c411f97
- chore: drop the committed gh device ID; test hygiene on the flagged blocks
  easonLiangWorldedtech
  committed
  1e8b458
Commits on Oct 15, 2026
- fix(apply-patch): surface half-applied moves instead of reporting success
  easonLiangWorldedtech
  committed
  51d912a
- test(tools): pass toolCallId in guarded-write spec callbacks
  easonLiangWorldedtech
  committed
  38feec8
Commits on Oct 16, 2026
Commits on Oct 21, 2026
- fix(apply-patch): delete the source path the move names, not the lock key's referent
  dsh-agent
  committed
  0b0db14
- chore(guarded-write): mark the test-only chain reset internal; type the extended fs double
  dsh-agent
  committed
  bc288fd
- test(apply-patch): pin the referent lock key and the named-source unlink
  dsh-agent
  committed
  9473a26
Commits on Oct 27, 2026
- test(apply-patch): isolate lock/realpath mocks and assert the lock is held during I/O
  easonLiangWorldedtech
  committed
  7f3ee12
- style: format the apply-patch lock assertions
  easonLiangWorldedtech
  committed
  9373761
Commits on Oct 28, 2026

Commits

Commits on Oct 14, 2026

Commits on Oct 15, 2026

Commits on Oct 16, 2026

Commits on Oct 21, 2026

Commits on Oct 27, 2026

Commits on Oct 28, 2026