Repository navigation

security(tui): stop trusting mutable interpreter arguments - #11165

Open

lawrencecchen wants to merge 2020 commits into

feat-tui-agent-screen-detectionfrom

repair-pr11127-cmdline

Open

security(tui): stop trusting mutable interpreter arguments#11165
lawrencecchen wants to merge 2020 commits into
feat-tui-agent-screen-detectionfrom
repair-pr11127-cmdline

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 15, 2026
- Fix recursive Codex autoresume after nightly regression (#12697)
  austinywang
  authored
  9314041
- Guard production IROH v2 deploy against Stack Auth drift (#12686)
  azooz2003-bit
  authored
  1bbb37e
- Keep iOS Iroh connections alive through stalls and traffic bursts (#12411)
  
  azooz2003-bit
  and
  austinywang
  authored
  b9fbbe4
- Bump version to 0.64.24 (#12698)
  austinywang
  authored
  f5da007
- Preserve older iOS access to v2 Macs and saved computer metadata (#12693)
  azooz2003-bit
  authored
  15d375d
- Harden production deployment rollback guards (#12699)
  azooz2003-bit
  authored
  5b71a4f
- Cloud VM create: remove redundant network announcement wait (#12687)
  austinywang
  authored
  88945c8
- test: retain local image files through terminal delivery
  austinywang
  committed
  d815ff6
- fix: keep local image transfer files alive
  austinywang
  committed
  68edbe2
- Test Cloud creation name reconciliation and rename races
  austinywang
  committed
  f2b8723
- Reconcile Cloud workspace names and initiating selection
  austinywang
  committed
  14e146f
- iOS: preserve pixel scroll through reconnect gaps (#12649)
  azooz2003-bit
  authored
  2066c07
- Scope Cloud name reconciliation to bound workspace
  austinywang
  committed
  fc963ce
- Preserve generated provenance for Cloud projections
  austinywang
  committed
  19ce61d
- Carry creation title provenance through Cloud workspace opens
  austinywang
  committed
  1056f32
- Fix Cloud creation request initialization
  austinywang
  committed
  3822baf
- Preserve user workspace titles during binding
  austinywang
  committed
  83bfdf9
- Fix Xcode project entry for selection helper
  austinywang
  committed
  9e07507
- Preserve legacy Cloud placeholder compatibility
  austinywang
  committed
  76cda4a
- Cover initiating-window Cloud workspace selection
  austinywang
  committed
  bb824e5
- Avoid duplicate Cloud directory reconciliation
  austinywang
  committed
  31ead62
- fix: read guest stats directly in the dev backend
  austinywang
  committed
  83a585c
- Update legacy mobile transport call for current API
  austinywang
  committed
  4858b68
- Fix delayed discovery fixture setup
  austinywang
  committed
  121aa30
- fix: align legacy mobile host call with first-frame timeout API
  austinywang
  committed
  bf03a63
- test: reproduce remote-disabled Cloud dogfood override refusal
  austinywang
  committed
  ec88fed
- fix: scope Cloud local overrides to Nightly and debug builds
  austinywang
  committed
  f727997
- cmux182: #12538 cloud inline metrics
  austinywang
  authored
  f231c08
- fix(ci): make nightly universal build bounded and diagnosable (#12704)
  
  austinywang
  and
  azooz2003-bit
  authored
  f148fc2
- Merge pull request #12707 from manaflow-ai/issue-12705-cloud-nightly-override
  austinywang
  authored
  239cf23
Commits on Sep 16, 2026
Commits on Sep 17, 2026
- Merge pull request #12811 from manaflow-ai/issue-11307-light-terminal-palette
  austinywang
  authored
  89d02bd
- Merge remote-tracking branch 'origin/main' into issue-12648-remote-daemon-assets
  austinywang
  committed
  b99c964
- test: await portal commits without starving the main actor
  austinywang
  committed
  03134f3
- test: cover geometry settlement after retry exhaustion
  austinywang
  committed
  cbda7d4
- fix: retain pending geometry until layout settles
  austinywang
  committed
  2f36e55
- Merge branch 'main' of https://github.com/manaflow-ai/cmux into issue-12684-image-drop-attachment
  austinywang
  committed
  4ca686d
- refactor: keep pasteboard context limited to file insertion
  austinywang
  committed
  b1ee541
- test: preserve Finder originals when the pasteboard includes a TIFF preview
  austinywang
  committed
  c08bcd3
- fix: preserve backing files before decoding Finder paste previews
  austinywang
  committed
  5373b4a
- Merge pull request #12752 from manaflow-ai/issue-12684-image-drop-attachment
  austinywang
  authored
  9fe20d7
- fix: keep PTY resize independent from input writes
  austinywang
  committed
  ec442c4
- test: await settled viewport geometry in portal regressions
  austinywang
  committed
  8051e48
- fix: apply TUI rustfmt before release (#12823)
  lawrencecchen
  authored
  68df8ee
- test: reject incomplete bundled SSH daemon assets
  austinywang
  committed
  e604d8d
- Use PlanetScale for Cloud VM migrations and operator guidance (#12821)
  lawrencecchen
  authored
  ec4cbd4
- fix: bundle verified SSH daemons for unpublished builds
  austinywang
  committed
  4ac2570
- Merge remote-tracking branch 'origin/main' into issue-12648-remote-daemon-assets
  austinywang
  committed
  860aa16
- chore: remove fixture trailing blank lines
  austinywang
  committed
  3f669c7
- Add the cmux RC release channel (com.cmuxterm.app.rc) (#12777)
  lawrencecchen
  authored
  9a916eb
- iOS: make the keyboard button Liquid Glass by default
  lawrencecchen
  authored
  be7d9fa
- Merge remote-tracking branch 'origin/main' into issue-12797-light-mode-terminal
  austinywang
  committed
  65033c2
- docs: localize adaptive terminal appearance in every web locale
  austinywang
  committed
  e2545e1
- test: reproduce restored daemon closeout regressions
  austinywang
  committed
  dad840d
- fix: import workspace model for iOS release build (#12829)
  azooz2003-bit
  authored
  dc6c414
- Merge remote-tracking branch 'origin/main' into issue-12797-light-mode-terminal
  austinywang
  committed
  52fa496
- fix: close out restored daemon review findings
  austinywang
  committed
  78c15bf
- chore: restore unrelated daemon test formatting
  austinywang
  committed
  fa424e6
- test: cover signal state inherited by CLI exec children
  
  austinywang
  and
  claude
  committed
  3ea0ec5
- fix: exec restored agents with the default signal state
  
  austinywang
  and
  claude
  committed
  bb2f674
- ci: verify PlanetScale access before migration (#12828)
  lawrencecchen
  authored
  bbe64f6
- test: guard every CLI exec and spawn site for default signal state
  
  austinywang
  and
  claude
  committed
  abc88f2
- fix: exec restored agents through the signal-state reset wrapper
  
  austinywang
  and
  claude
  committed
  6efd462
- test: verify resize signals through actual CLI restore and fork
  austinywang
  committed
  3df8e4e
- Merge pull request #12812 from manaflow-ai/issue-12797-light-mode-terminal
  austinywang
  authored
  6dc1794
- Render pricing before subscription checks finish (#12836)
  lawrencecchen
  authored
  f39c6ba
- test: verify portal settlement and presentation at resize end
  austinywang
  committed
  8986181
- ci: pin and serialize Cloud VM migration source (#12839)
  lawrencecchen
  authored
  3283ee9
- Merge pull request #12796 from manaflow-ai/issue-12681-terminal-resize-garble
  austinywang
  authored
  c765ac2
- fix: recover iOS Iroh runtime after sign-in (#12837)
  azooz2003-bit
  authored
  3773d55
- Merge remote-tracking branch 'origin/main' into issue-12648-remote-daemon-assets
  austinywang
  committed
  41b3540
- Merge remote-tracking branch 'origin/main' into issue-12648-remote-daemon-assets
  austinywang
  committed
  60668a9
- test: bound workspace listing requests in tmux batch output
  austinywang
  committed
  27131a2
- Merge remote-tracking branch 'origin/main' into issue-12757-tmux-rate-limited
  austinywang
  committed
  1a58732
- fix: reuse tmux workspace snapshots and sanitize shell diagnostics
  austinywang
  committed
  a056a2d
- Merge remote-tracking branch 'origin/main' into issue-12648-remote-daemon-assets
  austinywang
  committed
  a8989a2
- Scope Cloud VM coderouter access to its team and account pool (#12771)
  lawrencecchen
  authored
  f5ad88a
- test: SSH attach must not hang when the remote session can never become ready
  
  austinywang
  and
  claude
  committed
  18c628a
- fix: end SSH attach loudly when the remote session can never become ready
  
  austinywang
  and
  claude
  committed
  7247ee6
- Merge remote-tracking branch 'origin/main' into 12813-ssh-attach-hang
  austinywang
  committed
  cf97ee6
- Fix dropped socket-send bytes and GHOSTTY_BIN_DIR use-after-free (ghostty bump) (#12842)
  
  lawrencecchen
  and
  claude
  authored
  8052214
- Cloud: keep terminal creation targets and errors visible (#12478)
  
  lawrencecchen
  and
  austinywang
  authored
  9c5b6a6
- Fix SSH PTY terminal ownership and reject mismatched daemons (#12726)
  austinywang
  authored
  40ad414
- Let the nightly universal build fan out again (#12848)
  lawrencecchen
  authored
  90265e6
- Investigate macOS 27 native browser hover (#12683)
  lawrencecchen
  authored
  c11cad5
- First RC build fixes: cold-cache build budget, WebAuthn check follows the channel (#12840)
  lawrencecchen
  authored
  178e325
- test: wait for the parking block before reading released waiters
  
  austinywang
  and
  claude
  committed
  a4cf484
- fix: scope the readiness deadline to sessions that bootstrap over SSH
  
  austinywang
  and
  claude
  committed
  a15556a
- ghostty: targeted upstream picks (input encoding, erase/scroll state, termio lifetime) (#12849)
  
  lawrencecchen
  and
  claude
  authored
  3bdfaaa
- fix: report a rejected ControlMaster adoption to a waiting attach
  
  austinywang
  and
  claude
  committed
  53eb96e
- Revert "ghostty: targeted upstream picks (input encoding, erase/scroll state, termio lifetime) (#12849)" (#12852)
  lawrencecchen
  authored
  a40278b
- docs: record parked remote sessions and the remote_session_parked contract
  
  austinywang
  and
  claude
  committed
  380db00
- Merge pull request #12720 from manaflow-ai/issue-12648-remote-daemon-assets
  austinywang
  authored
  8c43c63
- fix: let an explicit PTY cleanup outrank the parked verdict
  
  austinywang
  and
  claude
  committed
  7ef0f7a
- Merge remote-tracking branch 'origin/main' into 12813-ssh-attach-hang
  austinywang
  committed
  228a876
- test: a ControlMaster reap must not repaint a parked session
  
  austinywang
  and
  claude
  committed
  34dc675
- fix: keep a parked session parked when its ControlMaster is reaped
  
  austinywang
  and
  claude
  committed
  519b5b5
- fix(l10n): name the Reconnect button as each locale labels it
  
  austinywang
  and
  claude
  committed
  69f5b5d
- test: restore pairing preparation deadline coverage (#12850)
  lawrencecchen
  authored
  4e73d97
- Merge pull request #12851 from manaflow-ai/12813-ssh-attach-hang
  austinywang
  authored
  c06913a
- Merge remote-tracking branch 'origin/main' into issue-12757-tmux-rate-limited
  austinywang
  committed
  8bcf5b2
- test: bound tmux-compat backpressure checks by causality, not wall-clock windows
  
  austinywang
  and
  claude
  committed
  c01e9b5
- feat: add prefix shortcuts for smart panes and resizing
  lawrencecchen
  authored
  a149b7e
- test: order renderer windows before presentation setup
  
  lawrencecchen
  authored and
  austinywang
  committed
  8008b7c
- test: align renderer fixtures with native callback lifecycle
  
  lawrencecchen
  authored and
  austinywang
  committed
  97c6088
- test: keep renderer presentation suite within budget
  
  lawrencecchen
  authored and
  austinywang
  committed
  5c30554
- test: sync the CLI help contract with the shipped vm sizes and Cloud guide
  
  austinywang
  and
  claude
  committed
  f6a67df
- test: keep exec-based transfer progress coverage to pull
  
  committed
  88ad621
- fix: clear the Swift warnings that put main over its warning budget
  
  austinywang
  and
  claude
  committed
  0633852
- test: let the custom-path re-entry fixture answer inject-settings
  
  austinywang
  and
  claude
  committed
  7037793
- test: expect the Campfire extension's queued hook delivery
  
  austinywang
  and
  claude
  committed
  e58fbe7
- chore: match #12759's text for two CI fixes so the branches merge cleanly
  
  austinywang
  and
  claude
  committed
  ebe4f61
- Update app-host fixtures for current remote and group behavior
  
  lawrencecchen
  authored and
  austinywang
  committed
  3bab274
- Fix app-host fixture contracts
  
  lawrencecchen
  authored and
  austinywang
  committed
  accdec4
- Align Cloud fixtures with current projection contracts
  
  lawrencecchen
  authored and
  austinywang
  committed
  5f94b9c
- test: keep Cloud fixture updates within source budgets
  
  lawrencecchen
  authored and
  austinywang
  committed
  48d73a0
- Stabilize portal visibility test lifecycle fixtures
  
  lawrencecchen
  authored and
  austinywang
  committed
  7bda7ff
- test: fit visibility lifecycle fixture budget
  
  lawrencecchen
  authored and
  austinywang
  committed
  e58e599
- fix: import terminal surface in visibility fixtures
  
  lawrencecchen
  authored and
  austinywang
  committed
  993d91a
- test: preserve visibility fixture budget after import
  
  lawrencecchen
  authored and
  austinywang
  committed
  f9178e0
- Authorize portal test surfaces through isolated workspaces
  
  lawrencecchen
  authored and
  austinywang
  committed
  8d7a3c2
- Exercise workspace reveal through noninteractive layout settlement
  
  lawrencecchen
  authored and
  austinywang
  committed
  7907779
- Merge remote-tracking branch 'origin/main' into issue-12757-tmux-rate-limited
  austinywang
  committed
  e9a53ed
- chore: keep CloudTreeNodeActions within its file length budget
  
  austinywang
  and
  claude
  committed
  d9d87d3
- Add v0.64.25 changelog, highlights, and iOS pairing translations
  
  austinywang
  and
  claude
  committed
  c56d008
- Bump version to 0.64.25
  
  austinywang
  and
  claude
  committed
  8083442
- Merge pull request #12866 from manaflow-ai/release/v0.64.25
  austinywang
  authored
  b685a27
- Merge pull request #12832 from manaflow-ai/issue-12757-tmux-rate-limited
  austinywang
  authored
  8aaad8c
- Show pane-centered Cloud terminal failures with useful diagnostics
  lawrencecchen
  authored
  9bf6cb8
- Fix idle Cloud SCP watches and report local transfer failures (#12759)
  
  lawrencecchen
  and
  austinywang
  authored
  9f4ecba
- Classify and back off Cloud usage failures (#12869)
  lawrencecchen
  authored
  89668df
- Add iOS terminal latency observability (#12816)
  azooz2003-bit
  authored
  72abbca
- test(tui): require interpreter identity to use the kernel executable
  lawrencecchen
  committed
  d8e7653
- security(tui): stop trusting interpreter arguments for agent identity
  lawrencecchen
  committed
  08248f9
- Merge screen detection base while preserving kernel-only identity
  lawrencecchen
  committed
  5a2e976
- Merge main and preserve current hook notification and report ownership
  lawrencecchen
  committed
  14ba027
- style(tui): keep core modules sorted
  lawrencecchen
  committed
  7e07af7

Commits

Commits on Sep 15, 2026

Commits on Sep 16, 2026