fix: Security hardening, reliable daemon stop, and dashboard UX overhaul#18

Merged

ARHAEEM merged 19 commits into

mainfrom

fix/security-hardening

Jun 12, 2026

Commits on Jun 12, 2026

fix(daemon): create daemon.lock with 0600 perms + Windows ACL, sanitize icacls principal

ARHAEEM
and
claude
committed
fix(auth): deliver login credentials over fork IPC instead of child env

ARHAEEM
and
claude
committed
fix(ci): pin vsce/ovsx exactly and validate registry version replies

ARHAEEM
and
claude
committed
fix(build): refuse symlinks escaping workspace node_modules in VSIX dep copy

ARHAEEM
and
claude
committed
fix(mcp): fail closed to read-only on unknown tool profile

ARHAEEM
and
claude
committed
fix(daemon): timing-safe bearer comparison, redact token in daemon status

ARHAEEM
and
claude
committed
docs: changelog entry for security hardening fixes

ARHAEEM
and
claude
committed
fix(build): canonicalize node_modules allowlist root in symlink guard

ARHAEEM
and
claude
committed
fix(daemon): make dashboard Stop reliable — verify shutdown, reclaim stale locks, prevent auto-resurrect

ARHAEEM
and
claude
committed
fix(webview): UI/UX hardening — action feedback, state sync, theming, a11y, content

ARHAEEM
and
claude
committed
docs: changelog for daemon stop fix + webview UI/UX hardening

ARHAEEM
and
claude
committed
fix(webview): daemon controls use daemon-specific pending state; watcher retry; aria-busy alignment

ARHAEEM
and
claude
committed
fix(webview): add hostname field for Cloudflare Named Tunnel setup

ARHAEEM
and
claude
committed
fix(webview): dead-end sweep — ngrok token update path, prompt editor feedback, form state, cosmetics

ARHAEEM
and
claude
committed
feat(webview): show configured named-tunnel hostname; prompt edits wait for confirmation

ARHAEEM
and
claude
committed
fix(tunnel): make named-tunnel hostname changes take effect; use pnpm exec in release

ARHAEEM
and
claude
committed
fix(security): remove unsanitized icacls duplicate; require proven identity before kill escalation

ARHAEEM
and
claude
committed
fix(daemon): require uuid proof for ALL kill escalation; restartDaemon aborts on failed stop

ARHAEEM
and
claude
committed
fix(lsp): make published LSP actually runnable; committed bin shim kills CI warn

ARHAEEM
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix: Security hardening, reliable daemon stop, and dashboard UX overhaul#18

fix: Security hardening, reliable daemon stop, and dashboard UX overhaul#18
ARHAEEM merged 19 commits into
mainfrom
fix/security-hardening

Commits on Jun 12, 2026

fix(daemon): create daemon.lock with 0600 perms + Windows ACL, sanitize icacls principal

fix(auth): deliver login credentials over fork IPC instead of child env

fix(ci): pin vsce/ovsx exactly and validate registry version replies

fix(build): refuse symlinks escaping workspace node_modules in VSIX dep copy

fix(mcp): fail closed to read-only on unknown tool profile

fix(daemon): timing-safe bearer comparison, redact token in daemon status

docs: changelog entry for security hardening fixes

fix(build): canonicalize node_modules allowlist root in symlink guard

fix(daemon): make dashboard Stop reliable — verify shutdown, reclaim stale locks, prevent auto-resurrect

fix(webview): UI/UX hardening — action feedback, state sync, theming, a11y, content

docs: changelog for daemon stop fix + webview UI/UX hardening

fix(webview): daemon controls use daemon-specific pending state; watcher retry; aria-busy alignment

fix(webview): add hostname field for Cloudflare Named Tunnel setup

fix(webview): dead-end sweep — ngrok token update path, prompt editor feedback, form state, cosmetics

feat(webview): show configured named-tunnel hostname; prompt edits wait for confirmation

fix(tunnel): make named-tunnel hostname changes take effect; use pnpm exec in release

fix(security): remove unsanitized icacls duplicate; require proven identity before kill escalation

fix(daemon): require uuid proof for ALL kill escalation; restartDaemon aborts on failed stop

fix(lsp): make published LSP actually runnable; committed bin shim kills CI warn