fix: security boundary hardening, stream/scrollback bounds, SDK-compatible auth - #12

Merged

ForkedInTime merged 7 commits into

mainfrom

fix/qa-hardening-2026-08

Aug 2, 2026

Commits on Aug 2, 2026

fix(qa): bound SSE streams and TUI scrollback; remove NaN abort path

ForkedInTime
and
Arch Linux
committed
c920568
fix(security): close PowerShell approval+sandbox bypass; fail closed on bad mode

ForkedInTime
and
Arch Linux
committed
96545c6
feat(auth): resolve credentials like the official SDKs; support OAuth tokens

ForkedInTime
and
Arch Linux
committed
8b3feea
fix(auth): allow the full credential chain in .env; close OAuth verification gap

ForkedInTime
and
Arch Linux
committed
91399e0
fix(security): hooks fail closed when a gate cannot be evaluated; bound them

ForkedInTime
and
Arch Linux
committed
6eb9e68
fix(auth): never spawn a bare `ant` unless a profile actually exists

ForkedInTime
and
Arch Linux
committed
9fb5714
test(hooks): gate signal-termination tests to unix

ForkedInTime
and
Arch Linux
committed
60cec26