fix(core): restrict session artifact permissions on unix (light-tested) - #2614

Closed

1688mengdie wants to merge 3474 commits into

GCWing:mainfrom

BitFun-SIG:fix/security-json-store-0600

This pull request is big! We're only showing the most recent 250 commits

Commits on Aug 14, 2026

perf(app-server): move TypeScript schemas to protocol owner
limityan
committed
6679a08
Merge pull request #2276 from wgqqqqq/feat/harmonyos-conversation-ui-ux
wgqqqqq
authored
626a3ab
fix(flow-chat)!: make session rollback transactional
wsp1911
committed
93c02ef
chore: bump version to 0.2.18

wgqqqqq
and
claude
committed
873ed8d
feat(ai): add task-specific model settings
wsp1911
committed
5b0f992
feat(acp): ship an IDE-facing ACP bridge for DeepSeek Harness

wgqqqqq
and
claude
committed
297b561
fix(acp): unblock CI and materialize the dsh profile on remote hosts

wgqqqqq
and
claude
committed
c6b750a
fix(core-boundaries): teach the self-test about the ACP client's profile deps

wgqqqqq
and
claude
committed
a46b557
fix(agents): hide MCP tools from mode profiles
wsp1911
committed
21bd988
fix(acp): keep the remote agent's dying words

wgqqqqq
and
claude
committed
77d05ff
fix(acp): ask the remote host the same question the agent list asks

wgqqqqq
and
claude
committed
bfd525a
fix(remote-ssh): stop reading a dropped control handle as a kill
wgqqqqq
committed
b114761
fix(acp): log how a remote agent exited
wgqqqqq
committed
607a4b7
fix(acp): say why an agent died instead of that it died
wgqqqqq
committed
e6bbbd0
fix(permission): apply mode changes per round
wsp1911
committed
2abb21c
fix(acp): show a code-mode step as the program it ran

wgqqqqq
and
claude
committed
cc59f99
fix(flow-chat): keep an ACP conversation on disk

wgqqqqq
and
claude
committed
ac23982
feat(acp): reopen a stored DeepSeek Harness conversation

wgqqqqq
and
claude
committed
4c38663
Merge pull request #2291 from wgqqqqq/feat/dsh-acp-bridge
wgqqqqq
authored
fe68c03
Merge pull request #2289 from wgqqqqq/chore/bump-0.2.18
wgqqqqq
authored
59bc94f
fix(dsh): package the bridge profile on Windows

wgqqqqq
and
claude
committed
63405be
Merge pull request #2296 from wgqqqqq/fix/dsh-profile-windows-vendor
wgqqqqq
authored
48d43c3

Commits on Aug 15, 2026

Commits on Aug 16, 2026

fix(peer): reattach blocking session interactions (#2322)
bobleer
authored
0ecbef9
fix(web): simplify file mention path display
kev1n77
committed
74ed56d
fix(peer): preserve runtime turns across device switches (#2325)
bobleer
authored
14c4b5c
Merge pull request #2323 from kev1n77/fmy/dev
kev1n77
authored
bcd622a
fix(desktop): disable update checks in development
kev1n77
committed
211e62f
fix(peer): stop a device switch from permanently freezing the chat
bobleer
committed
df573d7
feat(runtime): let a running Turn's projection outlive its Host process
bobleer
committed
fa0a92d
feat(runtime): append the executing Turn's events to a durable log
bobleer
committed
ce83c25
feat(peer): persist running Turns per host and unstrand a returning device
bobleer
committed
8aad825
fix(agent): normalize malformed deferred tool calls
wsp1911
committed
bf8f8d1
fix(agent): allow direct calls to loaded deferred tools
wsp1911
committed
74e7fb4
feat(tools): clarify direct and deferred tool calling contracts
wsp1911
committed
f41d47b
fix(tool-card): keep tool spec cards compact
wsp1911
committed
965de28

Commits on Aug 17, 2026

Merge pull request #2326 from kev1n77/fmy/dev
kev1n77
authored
0a6cfc0
feat(harmonyos): keep tri-fold conversation on remaining screens

wgqqqqq
and
cursoragent
committed
0e3db31
refactor(cli): decouple TUI runtime from app server

zvzuola
authored and
limityan
committed
ce5b067
Merge pull request #2333 from wgqqqqq/feat/harmonyos-trifold-wide-layout
wgqqqqq
authored
cd134e5
fix(peer): keep live turns attached after a device switch
bobleer
committed
b5ed01e
fix(responses): stabilize prompt cache routing
wsp1911
committed
64da016
fix(responses): replay encrypted reasoning state
wsp1911
committed
00d15b4
fix(responses): preserve prompt cache lineage
wsp1911
committed
bf9ab2e
fix(responses): preserve BTW prompt prefix
wsp1911
committed
cb56699
fix(responses): preserve reasoning across model switches
wsp1911
committed
6fed381
feat(harmonyos): replace the sidebar source switcher with workspaces

wgqqqqq
and
claude
committed
dd0d89d
fix(harmonyos): make the sidebar's connect-a-desktop row connect

wgqqqqq
and
claude
committed
107cac5
fix(harmonyos): centre the back chevron in its round button

wgqqqqq
and
claude
committed
b48f60d
fix(git): recover untrusted repositories via trust consent
guantw
committed
ecb69bf
fix(harmonyos): stop forcing square boxes on SymbolGlyph icons

wgqqqqq
and
claude
committed
257a945
docs(harmonyos): record the SymbolGlyph sizing rule
wgqqqqq
committed
676db7b
Merge pull request #2239 from guantw/fix/git-trust-recovery
wgqqqqq
authored
ac2c925
fix(harmonyos): keep thinking below the tools that ran before it

wgqqqqq
and
claude
committed
dfb3de6
fix(web-ui): keep inline edit keys with IME
QZQ-go
committed
024b083
fix(peer): keep receiver tool cards caught up with the host journal
bobleer
committed
f24be2b
feat(peer): make the CLI Host a peer of the account, not a controller's proxy
bobleer
committed
f583207
feat(runtime): make a delivery gap answerable instead of inferred
bobleer
committed
45425cc
feat(peer): repair a projection by applying what was missed
bobleer
committed
74d2d77
fix(peer): stop the catch-up path from stalling a healthy stream
bobleer
committed
1aaed63
refactor(flow-chat): give a Session's projection one owner
bobleer
committed
67b9372
docs(peer): point the invariant list at the contract replacing it
bobleer
committed
239f9d4
fix(flow-chat): stop a persisted checkpoint from overwriting a live Turn
bobleer
committed
9e7d28f
docs(flow-chat): drop a misleading symptom from the ownership comment
bobleer
committed
ad7595a
fix(tool-card): keep a cancelled tool's status a literal type
bobleer
committed
b1d7c6b
refactor(harmonyos): route tool status strings through RemoteI18n

wgqqqqq
and
claude
committed
29e90be
fix(harmonyos): fold reasoning into the tool summary it drove

wgqqqqq
and
claude
committed
d76706e
Merge pull request #2342 from wgqqqqq/feat/harmonyos-sidebar-workspaces
wgqqqqq
authored
3d3abfb
feat(usage): add historical model call statistics page

chaos
authored and
wsp1911
committed
2f88ae9
fix(usage): satisfy react-hooks/exhaustive-deps in trend chart

chaos
authored and
wsp1911
committed
d63b80c
refactor(usage): drop cost fields, add per-entry cache hit rate

chaos
authored and
wsp1911
committed
b3b34c8
refactor(usage): dedicated per-model cache hit rate card, truncate display

chaos
authored and
wsp1911
committed
01bcdb7
fix(usage): record token usage for analyze_image vision calls

chaos
authored and
wsp1911
committed
8937ef8
fix(usage): use literal appearance tokens so theme color audit passes

chaos
authored and
wsp1911
committed
952ccb6
fix(usage): align appearance surface contract with DOM attributes

chaos
authored and
wsp1911
committed
03f80d5
fix(usage): honor exact local time ranges
wsp1911
committed
313f0c3
fix(usage): attribute stats by model config
wsp1911
committed
aa07ee8
feat(usage): add provider and model filters
wsp1911
committed
30ce75e
fix(usage): correct remote workspace policy
wsp1911
committed
e7c48ef
fix(usage): route statistics to active host
wsp1911
committed
eba4643
fix(usage): restore statistics ownership boundaries
wsp1911
committed
96cffb9
feat(dsh-acp): offer a per-session model picker

wgqqqqq
and
claude
committed
3016ec2

Commits on Aug 18, 2026

fix(harmonyos): wrap SDK BusinessError so ArkTS compile warnings clear

wgqqqqq
and
cursoragent
committed
86b8021
Merge pull request #2355 from GCWing/fix/harmonyos-arkts-sdk-error-handling
wgqqqqq
authored
729562e
fix(dsh-acp): list a model reachable by two routes once

wgqqqqq
and
claude
committed
30b3f65
feat(flow-chat): give the ACP mode a picker of its own

wgqqqqq
and
claude
committed
adf1d3c
Merge pull request #2339 from wgqqqqq/fix/dsh-acp-model-picker
wgqqqqq
authored
9d4db79
feat(cli): add app-server stdio host command

zvzuola
authored and
limityan
committed
5b66e36
fix(harmonyos): bind a created session to the workspace it names

wgqqqqq
and
cursoragent
committed
2b61b22
feat(harmonyos): show every account desktop's workspaces in the sidebar

wgqqqqq
and
cursoragent
committed
2ea428e
docs(harmonyos): record the sidebar device directory design
wgqqqqq
committed
6de3c46
fix(harmonyos): refresh account device presence when the sidebar is looked at
wgqqqqq
committed
732b10a
fix(harmonyos): bound a device switch the target desktop never answers
wgqqqqq
committed
9db1acd
docs(harmonyos): place the phone as dispatch's control plane
wgqqqqq
committed
42f2685
Merge pull request #2366 from wgqqqqq/feat/harmonyos-sidebar-device-directory
wgqqqqq
authored
c28e5dd
feat(harmonyos): switch the phone UI between Chinese and English

wgqqqqq
and
cursoragent
committed
1af9097
feat(search): make the workspace index policy visible and correct
wgqqqqq
committed
c928460
Merge pull request #2368 from wgqqqqq/feat/workspace-search-index-strategy
wgqqqqq
authored
24b2a68
Merge pull request #2369 from wgqqqqq/feat/harmonyos-app-i18n
wgqqqqq
authored
3a7c75a
fix(sessions): preserve settled history across clients
bobleer
committed
57d97f0
fix(agentic): stabilize durable history reconciliation
bobleer
committed
c25ec75
fix(permission): inherit mode in subagents
wsp1911
committed
2404ee9
Merge pull request #2372 from bobleer/bob/sync-session-history-fixes
bobleer
authored
405c1c7

Commits on Aug 19, 2026

feat(harmonyos): place overlay sheets from fold geometry

wgqqqqq
and
cursoragent
committed
f82490f
fix(harmonyos): keep fold creases on one axis

wgqqqqq
and
cursoragent
committed
265c54c
Merge pull request #2347 from QZQ-go/codex/fix-macos-ime-inline-edit
wgqqqqq
authored
bae0deb
Merge pull request #2376 from wgqqqqq/feat/harmonyos-app-i18n
wgqqqqq
authored
2ef884e
fix(rollback): disambiguate local workspace identity
wgqqqqq
committed
3c3d4f8
fix(review): correct GitCode pull request change stats
guantw
committed
9549fc8
fix(peer): route Tauri events once

wsp1911
authored and
bobleer
committed
6c0d9d8
Merge pull request #2384 from bobleer/bob/fix-tauri-event-fanout
bobleer
authored
0825520

Commits on Aug 20, 2026

Commits on Aug 21, 2026

fix(config): persist review team concurrency config fields
guantw
committed
9839785
perf(cargo): enforce third-party capability ownership
limityan
committed
c8e466d
Merge pull request #2406 from guantw/fix/review-team-concurrency-config-persistence
bobleer
authored
107ad38
fix(scripts): detect cargo/rustc per image on Windows without cmd.exe

GCWing
authored and
wgqqqqq
committed
86c9106
fix(web-ui): release startup overlay focus and mark it inert while hiding

GCWing
authored and
wgqqqqq
committed
79c7f73
fix(flowchat): stabilize viewport across window restore

wsp1911
authored and
wgqqqqq
committed
8bd78a4
fix(flow-chat): right-align the model dropdown with its trigger

bobleer
authored and
wgqqqqq
committed
1718a9d
fix(flow-chat): simplify new turn reveal

wsp1911
authored and
wgqqqqq
committed
340a3d8
fix(flow-chat): prevent file card collapse jump

wsp1911
authored and
wgqqqqq
committed
08b0b81
fix(flow-chat): keep todo cards collapsed

wsp1911
authored and
wgqqqqq
committed
eedf6d1
fix(flowchat): stabilize ExecCommand card collapse layout

wsp1911
authored and
wgqqqqq
committed
481f724
fix(toolcard): show first pending todo

wsp1911
authored and
wgqqqqq
committed
13d77aa
fix(flowchat): keep provisional explore tail open

wsp1911
authored and
wgqqqqq
committed
dd231f6
fix(flowchat): defer explore grouping until round completion

wsp1911
authored and
wgqqqqq
committed
5d31ea7
fix(ai): preserve reasoning projection when applying presets

wsp1911
authored and
wgqqqqq
committed
2bac2b1
fix(flow-chat): keep model menu inside viewport

bobleer
authored and
wgqqqqq
committed
eeb5750
fix(flowchat): preserve viewport state across switches

wsp1911
authored and
wgqqqqq
committed
a3594a4
fix(flowchat): stabilize session viewport restore

wsp1911
authored and
wgqqqqq
committed
8c823c0
fix(toolcard): register ExecProcess lifecycle states

wgqqqqq
and
claude
committed
63e17b9
docs(architecture): refine 4+1 product views
limityan
committed
42a426e
perf(ci): skip Rust validation for proven Web-only changes
limityan
committed
6cbb62d
Merge pull request #2416 from wgqqqqq/backport/explore-fixes
wgqqqqq
authored
b929304
chore: bump version to 0.2.19
wgqqqqq
committed
e5c8833
Merge pull request #2417 from wgqqqqq/chore/bump-0.2.19
wgqqqqq
authored
1456c29
perf(app-server): isolate TypeScript generation from RPC
limityan
committed
fa682ad
chore(skills): sync create-bitfun-skin contract
kev1n77
committed
b5869b8
feat(miniapp-market): funnel visitors without BitFun to the download page
bobleer
committed
43486ea
feat(skin-market): funnel visitors without BitFun to the download page
bobleer
committed
000f169
chore(skills): refresh appearance lifecycle states
kev1n77
committed
672cab0
fix(skin-market): include pnpm patches in image build
bobleer
committed
f3fa4f9
Merge pull request #2386 from kev1n77/fmy/dev
wgqqqqq
authored
4cd1638
fix(release): sync Cargo.lock when projecting build version

wgqqqqq
and
claude
committed
e3e8d8c
Merge pull request #2422 from wgqqqqq/fix/beta-build-cargo-lock-sync
wgqqqqq
authored
f6e9d7c
fix(release): drop --offline from the workspace lockfile sync

wgqqqqq
and
claude
committed
b9dd248
Merge pull request #2421 from bobleer/bob/miniapp-market-download-button-dfd68b
bobleer
authored
29d0bcc
Merge pull request #2423 from wgqqqqq/fix/beta-build-cargo-update-online
wgqqqqq
authored
d5f3c5e
feat: integrate managed opencode plugin host

can2
authored and
limityan
committed
e9c09b0
fix(plugin-host): gate execution and close lifecycle gaps
limityan
committed
41f4af3

Commits on Aug 24, 2026

fix(agent-runtime): persist evidence ledger

zvzuola
authored and
limityan
committed
e0c0fda
fix(agent-runtime): prune evidence ledger on revert and restore

zvzuola
authored and
limityan
committed
295c3f5
fix(agent-runtime): preserve evidence ledger during staged revert

zvzuola
authored and
limityan
committed
53f2587
fix(agent-runtime): copy evidence ledger on branch and converge sidecar on restore

zvzuola
authored and
limityan
committed
318e059
feat(sdk): bind local model for text queries
limityan
committed
a10728f
fix(review): load GitCode PR files as one bounded response
guantw
committed
5101de3
Merge pull request #2463 from guantw/fix/gitcode-files-response-unified
bobleer
authored
308ce51
fix(review): keep GitCode provider change stats on capped review targets

cursoragent
and
bobleer
committed
7e1d0eb
Merge pull request #2464 from bobleer/fix/gitcode-keep-provider-change-stats
bobleer
authored
b993edb
fix(process): hide console windows for spawned git/cmd subprocesses

user
authored and
wsp1911
committed
134a20c

Commits on Aug 25, 2026

feat(session): add rename action to session control tool
user
committed
bc73ae3
feat(sdk): resolve the package-local host
limityan
committed
07e6375
feat(sdk): complete local application integration
limityan
committed
e0a9a1b
fix(desktop): restore maximized main window state on startup

Tant
authored and
wsp1911
committed
7c84598
fix(desktop): preserve window state during correction
wsp1911
committed
aff3284
fix(desktop): await WebView recovery cleanup
wsp1911
committed
90014a7
fix(flow-chat): shorten visible turn rail bars
wsp1911
committed
8c672f3
fix(config): preserve primary fallback for unset fast model
wsp1911
committed
fe7b07a
fix(toolcard): preserve AskUserQuestion draft state
wsp1911
committed
27b33be
fix(windows): hide child process consoles
wsp1911
committed
36f22fb
fix(windows): hide remaining child consoles
wsp1911
committed
a22daa0
feat(sdk): resume durable agent sessions
limityan
committed
3cc50c1
test(sdk): align process fixture protocol version
limityan
committed
bbe07ad
refactor(runtime): enforce product workflow boundaries
limityan
committed
8bf0480
fix(harmonyos): clear devices when account expires
wgqqqqq
committed
2c77487
fix(harmonyos): expose signed-out QR pairing
wgqqqqq
committed
0189fa1
fix(harmonyos): refine signed-out connection flows
wgqqqqq
committed
f38cd0e
fix(harmonyos): simplify signed-out connection actions
wgqqqqq
committed
c251f94
fix(harmonyos): open scanner from device add action
wgqqqqq
committed
8fe0418
fix(harmonyos): hide scan action after pairing
wgqqqqq
committed
518d974
fix(harmonyos): unify account and paired device tree
wgqqqqq
committed
04343bb
Merge pull request #2484 from wgqqqqq/codex/fix-harmonyos-expired-account-roster
wgqqqqq
authored
1bc4bf7
fix(markdown): stabilize streaming images
wsp1911
committed
04c0a98
feat(sdk): add image input and turn usage
limityan
committed
5cc1e00
fix(agent): honor configured max rounds
wsp1911
committed
ab4b4d3
fix(ci): select predictive validation without PR packages
wgqqqqq
committed
a1f502a
Merge pull request #2466 from wgqqqqq/codex/predictive-ci-nightly
wgqqqqq
authored
dbadd6e
fix(config): preserve models with newer telemetry settings
limityan
committed
675df88
fix(cli): reject exiting dispatch leaders on macOS
limityan
committed
eadedad

Commits on Aug 26, 2026

refactor(web-ui): route business invokes through adapter layer and drop dead AgentService

authored and
limityan
committed
1668f90
chore(web-ui): delete confirmed zero-consumer dead code

authored and
limityan
committed
9a5376e
fix(web-ui): declare Peer-Device-Mode owners and close adapter fence gaps

authored and
limityan
committed
c65a159
fix(peer-host): mirror controller-owned commands into peer deny lists

authored and
limityan
committed
bcb6a95
fix(web-ui): point migrated tests at the ApiClient mock surface

authored and
limityan
committed
c135dc2
fix(web-ui): add CLI peer routes for cancel_tool + tool catalog and harden adapter fence

authored and
limityan
committed
2ddb2d3
fix(web-ui): route browser/computer-use to tool host and harden peer adapter surface

authored and
limityan
committed
a6eceb4
fix(web-ui): resolve mixed-version peer capabilities via host_type field

authored and
limityan
committed
0a0c949
fix(web-ui): close PR 2428 review gaps

zvzuola
authored and
limityan
committed
be345f3
feat(sdk): add structured turn output
limityan
committed
e3d63fe

Commits on Aug 27, 2026

fix(ai): disable Responses API storage
wsp1911
committed
cb0c692
fix(agent-hooks): prevent input rewrites from relaxing guards
nonoqing
committed
886b6ff
docs(agent-hooks): document rewrite validation boundary
nonoqing
committed
86ba796
fix(agent-hooks): enforce edit guards across rewritten inputs
nonoqing
committed
5358e9d
Merge pull request #2538 from GCWing/yuyiqing/dev
nonoqing
authored
04e1d76
fix(edit): search quote-normalized text with str::find

thaildhe172591
authored and
wsp1911
committed
b38537e
test(edit): cover pre-match quote byte shifts
wsp1911
committed
9d17e4d
Merge pull request #2471 from BitFun-SIG/pr-g6-rename-rebased
wsp1911
authored
4419e78
fix(session): complete SessionControl rename
wsp1911
committed
f713a19
Merge pull request #2545 from GCWing/codex/pr-2471-integration
wsp1911
authored
4c68f1c
feat(agent): add minimal mode
nonoqing
committed
db09a81
refactor(agent): migrate legacy minimal sessions
nonoqing
committed
06f980c
feat(web): expose minimal mode
nonoqing
committed
271fc94
Merge pull request #2547 from nonoqing/yuyiqing/dev
nonoqing
authored
53495de
refactor(usage): drop cache_write field from statistics pipeline

chaos
authored and
wsp1911
committed
6330839
fix(usage): break hit-rate line at gaps and mark hovered values

chaos
authored and
wsp1911
committed
13a49f7
fix(usage): plot hit-rate gaps at zero for a continuous line

chaos
authored and
wsp1911
committed
54172dc
fix(usage): preserve cache-write statistics
wsp1911
committed
3adf7be
chore(deps): upgrade h2 to 0.4.19 (RUSTSEC-2026-0258)
wsp1911
committed
e07bfac
feat(agent): bundle commit-push-pr skill

wgqqqqq
and
bitfun-ai
committed
f11f99b
fix(session): keep long-running turns steerable
wsp1911
committed
2a75d37
fix(agent): preserve current-turn todos during compaction
wsp1911
committed
bd2a7c4
fix(session): keep turn admission bindings consistent
guantw
committed
16b7787

Commits on Aug 28, 2026

fix(agent): make skill assertion line-ending agnostic

wgqqqqq
and
bitfun-ai
committed
3065bf4
Merge pull request #2557 from wgqqqqq/codex/builtin-commit-push-pr
wgqqqqq
authored
c3e3237
Merge pull request #2565 from guantw/fix/deep-review-admission-binding
bobleer
authored
10b2aaf
fix(flow-chat): route permission requests to a single owner
guantw
committed
4177686
Merge pull request #2595 from guantw/codex/fix-review-permission-panel-routing
bobleer
authored
32f2427
fix(core): restrict session artifact permissions on unix
user
committed
8abdf1c