Secure Mode: Deno & Node.js compatible permissions for Bun, but better#25911

Open

kynnyhsap wants to merge 38 commits into

oven-sh:mainfrom

kynnyhsap:claude/implement-deno-security-model

Commits on Jan 12, 2026

feat: implement Deno-compatible security/permissions model

kynnyhsap
and
claude
committed
fix: complete permissions model implementation and tests

kynnyhsap
and
claude
committed
feat: add permission checks to os.freemem/totalmem and comprehensive tests

kynnyhsap
and
claude
committed
fix: address PR review comments for permissions model

kynnyhsap
and
claude
committed
test: skip ls command test on Windows

kynnyhsap
and
claude
committed
feat(permissions): implement file system permission checks

kynnyhsap
and
claude
committed
feat(permissions): add network wildcard pattern support

kynnyhsap
and
claude
committed
test(permissions): expand network wildcard test coverage

kynnyhsap
and
claude
committed
fix(permissions): address PR review comments

kynnyhsap
and
claude
committed
fix(permissions): fail closed on invalid port patterns

kynnyhsap
and
claude
committed
fix(permissions): handle path edge cases for Windows and trailing separators

kynnyhsap
and
claude
committed
fix(permissions): check abort signal before permissions, add stderr assertions

kynnyhsap
and
claude
committed
test(permissions): enable --deny-read test

kynnyhsap
and
claude
committed
chore(permissions): remove unused imports and fields

kynnyhsap
and
claude
committed
Add FFI/Worker permission tests and documentation

kynnyhsap
and
claude
committed
docs: clarify revoke() behavior and add request/revoke examples

kynnyhsap
and
claude
committed
Address CodeRabbit review feedback

kynnyhsap
and
claude
committed
docs: address CodeRabbit review feedback on permissions

kynnyhsap
and
claude
committed
test: add failing tests for Bun.file() permission checks

kynnyhsap
and
claude
committed
fix: add permission checks for Bun.file() and Bun.write()

kynnyhsap
and
claude
committed
Address CodeRabbit review feedback on permissions

kynnyhsap
and
claude
committed
Use relative paths for test.ts in spawn commands

kynnyhsap
and
claude
committed
Add permission system performance benchmarks

kynnyhsap
and
claude
committed
Split benchmark into sync/async to avoid await overhead

kynnyhsap
and
claude
committed
Address CodeRabbit review: make tests cross-platform and non-interactive

kynnyhsap
and
claude
committed
Add bunfig.toml support for permission options

kynnyhsap
and
claude
committed
Address CodeRabbit review: refactor --allow-* parsing and improve tests

kynnyhsap
and
claude
committed
Address CodeRabbit review: use cross-platform env vars in tests

kynnyhsap
and
claude
committed
Add bun_secure to .gitignore

kynnyhsap
and
claude
committed
Address CodeRabbit review: add explicit exitCode assertions

kynnyhsap
and
claude
committed
Implement permission checks for fs.open and fs.statfs operations

kynnyhsap
and
claude
committed
Address CodeRabbit review: bundler checks, symlink docs, memory docs

kynnyhsap
and
claude
committed
feat: add Node.js permission model compatibility

kynnyhsap
and
claude
committed
refactor: improve permission code quality

kynnyhsap
and
claude
committed
docs: clarify prompt state handling in permission check

kynnyhsap
and
claude
committed
feat: add symlink resolution for path permissions in secure mode

kynnyhsap
and
claude
committed
docs: add symlink resolution behavior to permissions documentation

kynnyhsap
and
claude
committed
refactor: simplify permissions.zig code

kynnyhsap
and
claude
committed