Repository navigation

feat(tools): route the remaining write tools through the guard (U7, #1375) - #1918

Open

easonLiangWorldedtech wants to merge 46 commits into

Zoo-Code-Org:mainfrom

easonLiangWorldedtech:fws/u7-tool-wiring

Commits on Oct 5, 2026
- split unit U1 of PR 1833 (issue 1375)
  easonLiangWorldedtech
  committed
  d5f8a79
- fix(file-safety): close the pre-merge findings on the publish primitive (U1, issue 1375)
  easonLiangWorldedtech
  committed
  aa0cdab
- fix(file-safety): propagate a non-ENOENT lstat failure in resolvePublishTarget (U1, issue 1375)
  easonLiangWorldedtech
  committed
  c4120b0
- fix(file-safety): keep the rollback pair typed and the mock stand-ins type-sound
  easonLiangWorldedtech
  committed
  97b599d
- rebuild unit u2 on the fixed chain
  easonLiangWorldedtech
  committed
  435be8b
- chore(lint): prune the safeWriteJson suppression this unit earns
  easonLiangWorldedtech
  committed
  625a976
- rebuild unit u3 on the fixed chain
  easonLiangWorldedtech
  committed
  4e2de13
- fix(task): declare the observation registry on Task in this unit
  easonLiangWorldedtech
  committed
  60376ca
- rebuild unit u4 on the fixed chain
  easonLiangWorldedtech
  committed
  77eb0a4
- chore(lint): prune the readFileTool.spec suppression this unit earns
  easonLiangWorldedtech
  committed
  d7eab3d
- rebuild unit u5 on the fixed chain
  easonLiangWorldedtech
  committed
  ca636d6
- rebuild unit U8 on U5 (corrected merge order)
  easonLiangWorldedtech
  committed
  45b7912
- rebuild unit u6 in the corrected order
  easonLiangWorldedtech
  committed
  22b6dec
- fix(apply-patch): a full hunk read is a complete observation
  easonLiangWorldedtech
  committed
  42f5877
- rebuild unit u7 on the corrected u6
  easonLiangWorldedtech
  committed
  5dc556b
- rebuild unit U7 on the corrected U6
  easonLiangWorldedtech
  committed
  4384441
- fix(task): keep main's abort re-check in ask
  easonLiangWorldedtech
  committed
  0e66025
- fix(file-safety): inherit unit 1 committed guard
  easonLiangWorldedtech
  committed
  8af402d
- fix(file-safety): keep the publish error message in RollbackFailureError
  easonLiangWorldedtech
  committed
  a3c03b6
- test(file-safety): assert the exact staging directory removed after a rollback failure
  easonLiangWorldedtech
  committed
  6fb1de7
- test: re-run mocked e2e and the ubuntu lane - no source change since the last green run on these files
  easonLiangWorldedtech
  committed
  2be04f1
- fix(file-safety): give the Windows DACL dump a per-write name
  easonLiangWorldedtech
  committed
  91c7d75
Commits on Oct 6, 2026
- fix(tools): carry U1's hunk-read completeness rule into this unit
  easonLiangWorldedtech
  committed
  b0cfb7c
Commits on Oct 7, 2026
- fix(tools): bring U7 onto the current file-safety core
  easonLiangWorldedtech
  committed
  de1b041
- chore: trigger a fresh review pass at this head
  easonLiangWorldedtech
  committed
  23cfce5
- fix(integrations): preview observation must not authorize a save; async warning sinks handled
  easonLiangWorldedtech
  committed
  7f70d96
- fix(tools): ApplyDiffTool must observe the version its diff was built on
  easonLiangWorldedtech
  committed
  6e85605
- test(tools): type the apply_diff observation doubles for check-types
  easonLiangWorldedtech
  committed
  e7138ab
- fix(integrations): never adopt an autosaved match for an unauthorized edit
  easonLiangWorldedtech
  committed
  92bb178
- fix(tools): never refresh a model observation the tool read on a different version
  easonLiangWorldedtech
  committed
  bb9ad00
Commits on Oct 8, 2026
- fix(safety): confine before the lock, keep the post-commit backup
  easonLiangWorldedtech
  committed
  f901421
- fix(safety): confine before mkdir, report the retained backup, stop pre-creating dirs
  easonLiangWorldedtech
  committed
  beda87c
- fix(tools): honor an approval for a write outside the task root
  easonLiangWorldedtech
  committed
  682dc9d
- fix(u7): no containment decision without a canonical workspace, and no observation without a baseline
  easonLiangWorldedtech
  committed
  5d6cac4
- fix(file-safety): one lock key whether the parent directory exists yet
  easonLiangWorldedtech
  committed
  9ce26f5
- test(file-safety): a backup copy that fails part-way must not survive the write
  easonLiangWorldedtech
  committed
  9b7f88f
- test(tools): pin which bracketing stat fails in the diff-read observation test
  easonLiangWorldedtech
  committed
  e2d0195
- fix(diff-view): put the save's post-publish cleanup inside the same teardown as a cancellation
  easonLiangWorldedtech
  committed
  c0c035a
Commits on Oct 9, 2026
- fix(diff-view): let only the teardown that started a pass finalize the session
  easonLiangWorldedtech
  committed
  baea7a4
- fix(diff-view): restore preview tabs for the pass that owns a rejected save
  easonLiangWorldedtech
  committed
  e94af93
- fix(tools): pass the outside-workspace approval flag in its own position
  easonLiangWorldedtech
  committed
  2e5c824
- fix(guardedWrite): one unresolvable workspace folder must not veto every write
  easonLiangWorldedtech
  committed
  34be982
- fix(guardedWrite): bind an approved outside-workspace write to the identity approved
  easonLiangWorldedtech
  committed
  8f38562
- fix(diff-view): keep the teardown guard held through the finalization steps
  easonLiangWorldedtech
  committed
  549f0c7
- fix(write-to-file): resolve the approved identity inside the tool's error handling
  easonLiangWorldedtech
  committed
  8075368
- test(tools): keep the outside-workspace flag reset on the failure path
  easonLiangWorldedtech
  committed
  b74fc6f

Commits

Commits on Oct 5, 2026

Commits on Oct 6, 2026

Commits on Oct 7, 2026

Commits on Oct 8, 2026

Commits on Oct 9, 2026