Repository navigation

feat(tools): publish apply_patch through the guard (U6, #1375) - #1915

Open

easonLiangWorldedtech wants to merge 74 commits into

Zoo-Code-Org:mainfrom

easonLiangWorldedtech:fws/u6-apply-patch-wiring

Open

feat(tools): publish apply_patch through the guard (U6, #1375)#1915
easonLiangWorldedtech wants to merge 74 commits into
Zoo-Code-Org:mainfrom
easonLiangWorldedtech:fws/u6-apply-patch-wiring

Commits on Oct 14, 2026
- split unit U1 of PR 1833 (issue 1375)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  c4a9ae2
- fix(file-safety): close the pre-merge findings on the publish primitive (U1, issue 1375)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  9003730
- fix(file-safety): propagate a non-ENOENT lstat failure in resolvePublishTarget (U1, issue 1375)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  6c331da
- fix(file-safety): keep the rollback pair typed and the mock stand-ins type-sound
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ed7274f
- rebuild unit u2 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  88c4afa
- chore(lint): prune the safeWriteJson suppression this unit earns
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  166073f
- rebuild unit u3 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  f491af8
- fix(task): declare the observation registry on Task in this unit
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  188b2f3
- rebuild unit u4 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  91efcb1
- rebuild unit u5 on the fixed chain
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  3920f65
- rebuild unit U8 on U5 (corrected merge order)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  05b6aa2
- rebuild unit u6 in the corrected order
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  427e141
- fix(apply-patch): a full hunk read is a complete observation
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  82eb3f8
- chore(ci): rerun the e2e-mock lane
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  fae26bc
- fix(file-safety): inherit unit 1 committed guard
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ba493f4
- test: rerun mocked e2e - no source change, previous run failed in the runner
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  aaa12cb
- fix(file-safety): keep the publish error message in RollbackFailureError
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ea76274
- test(file-safety): assert the exact staging directory removed after a rollback failure
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ef18c7c
- fix(tools): the tool's own hunk read must not grant full-file authority
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  84c95ba
- test: re-run mocked e2e and the ubuntu lane - no source change since the last green run on these files
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  31d08da
- test(tools): the move test must follow the partial observation the hunk read now records
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  89624ce
- test: re-run mocked e2e - the same suite passed on the neighbouring units of this chain with identical guard behaviour
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  e8cffea
- fix(file-safety): give the Windows DACL dump a per-write name
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  a3be4a6
- test: third mocked-e2e attempt on this unit - the suite is green on the other eight units of the same chain with the same guard behaviour
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  59176fb
- chore(ci): re-run mocked E2E (apply_diff timeouts on the previous run; this unit was green on the earlier run)
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  22179e4
- chore(ci): second re-run of the mocked E2E suite. The apply_diff fixtures 404 on this run while the identical content passes on #1918, so the failure is in the mock fixture matching, not this unit'…
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  8459cba
- fix(tools): apply_diff must publish with edit-guard semantics, not create semantics
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  2c61f0c
- fix(file-safety): durable-copy publish and confined writes for the apply-patch unit
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  ff80d49
- fix(file-safety): do not read a failed target lstat as a missing target
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  3ebd9ce
- fix(file-safety): compare staging and target identity with bigint stats
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  da74317
- test(file-safety): pin the bigint options in the staging-identity tests
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  c6c6abf
- fix(file-safety): report a Windows replacement whose DACL was not preserved
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  fdb0977
- fix(file-safety): keep DACL warning delivery non-fatal and complete
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  f56e02a
- fix(utils): check confinement before taking the advisory lock
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  f241311
- fix(integrations): the preview observation must not authorize an approved edit
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  f29b11b
- fix(file-safety): handle async warning sinks and confine before mkdir
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  5fa2179
- fix(tools): ApplyDiffTool must observe the version its diff was built on
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  32d1fa6
- test(tools): type the apply_diff observation doubles for check-types
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  11848e6
- fix(integrations): never adopt an autosaved match for an unauthorized edit
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  9075fdd
- fix(tools): never refresh a model observation the tool read on a different version
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  cc8d413
- test(tools),docs(utils): drop the void casts, describe the backup as a copy
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  8c55b29
- fix(editor): roll back created directories when the guarded publish is refused
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  6551af7
- fix(diff-view,file-safety): keep one task's teardown in one task, and one lock key per file
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  5529fbc
- fix(u6): pin the confinement decision onto the publish, and stop leaking created directories
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  5218aea
- fix(u6): pin the path the publish re-resolves, not a second spelling of it
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  4d2bfb4
- test(file-safety): a backup copy that fails part-way must not survive the write
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  758e74c
- test(tools): pin which bracketing stat fails in the diff-read observation test
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  55a6598
- test(file-safety): cover the non-ENOENT scope-resolution failures the confinement check depends on
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  d10f0f2
- fix(diff-view): put the save's post-publish cleanup inside the same teardown as a cancellation
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  22ee292
- fix(diff-view): let only the teardown that started a pass finalize the session
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  c1d3021
- fix(diff-view): restore preview tabs for the pass that owns a rejected save
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  b8a5cfd
- fix(diff-view): finalize the session when a cancellation lands during a teardown it does not own
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  8795844
- fix(file-safety): refuse to replace an existing target whose access rights cannot be captured
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  e0ca1db
- fix(diff-view): one caller owns the session's finalization, by claim rather than by reading state
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  52b7cc6
- fix(safe-write): a write that declares no scope replaces the link instead of writing through it
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  2b82937
- fix(safe-write): cleanup is gated on the commit, not on the staging name
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  4fbf99a
- fix(diff-view): a rejected publish joins a cancellation's teardown instead of starting its own
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  957b1b1
- fix(test): teach main's unicode-reader spec about hasClippedLines
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  f4edf2c
- fix(safe-write): staging files are created and owned by this write, not named by the caller
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  23f0e8e
- fix(safe-write): a fresh target keeps its documented mode and the staging directory has a cleanup owner
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  567bf8f
- test(observation-registry): cover forget()'s boolean result and its blast radius
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  cc9bb4a
- fix(safe-write-json): serialize an unconfined symlink publish under both lock identities
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  688053b
- style: format the nine files the formatting gate flags on this PR
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  9610329
- fix: compare the two lock identities the way the filesystem does
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  fd25bba
- style: reflow the lock identity comparison the previous commit added
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  9f5c801
- fix: fold lock keys the way the lock is placed, not the way strings compare
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  4b6cf13
- fix: fold a lock key from the deepest existing ancestor, not the immediate parent
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  8d8901b
- fix: pin the directories a confined write creates before it commits
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  77070a2
- fix(safe-write-json): fail closed on unknown ancestor identities and unconfined link merges
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  f1371d8
- fix(safe-write): the fresh-target default mode respects the process umask
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  433d15b
- fix(safe-write-json): decide confinement presence once so an empty scope cannot confine nothing
  
  easonLiangWorldedtech
  authored and
  easonLiangWorldedtech
  committed
  98be920
- fix(u6): align the unit with main's lint re-enable and format gate
  easonLiangWorldedtech
  committed
  e153075
- fix(integrations): drop the Stryker directives from the guarded save path
  easonLiangWorldedtech
  committed
  c411f97
- chore: drop the committed gh device ID; test hygiene on the flagged blocks
  easonLiangWorldedtech
  committed
  1e8b458

Commits

Commits on Oct 14, 2026