shadowdaoandClaude Opus 5.5 14852ead65 Marketplace: check blob sizes from the object header before loading (PR review #9) ...

GitTree::read_file now takes a cap and reads the object's size from its
header first, so a blob over MAX_MANIFEST_BYTES / MAX_ITEM_BYTES is refused
without being inflated, and the blob is taken rather than cloned.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-27 13:01:48 -07:00

..

auth_bridge

security: close capability, CSP and auth-bridge holes

2026-08-23 11:13:15 -07:00

browser_view

fix: stop a stale payload re-enabling a bridge the user turned off

2026-09-17 11:13:57 -07:00

commands

Marketplace: pin the commit the user reviewed (final review I2)

2026-09-27 10:11:19 -07:00

docker

Marketplace: sync projects into their containers on start

2026-09-27 09:30:58 -07:00

file_viewer

Terminal file viewer/editor + per-window app-command lockdown (#60)

2026-09-23 17:05:50 +00:00

install_helper

Add Docker install helper for first-run setup

2026-04-24 10:18:46 -07:00

marketplace

Marketplace: check blob sizes from the object header before loading (PR review #9)

2026-09-27 13:01:48 -07:00

models

Marketplace: derive the plugin slug from the id only (final review M4)

2026-09-27 10:14:30 -07:00

storage

Marketplace: account credentials, token validation and fetch-error advice

2026-09-27 09:08:44 -07:00

web_terminal

Give the mouse back, retire the follow controls, update Claude per session

2026-09-08 11:02:33 -07:00

command_census.rs

Terminal file viewer/editor + per-window app-command lockdown (#60)

2026-09-23 17:05:50 +00:00

lib.rs

Marketplace: Tauri commands, store-owned fields and startup refresh

2026-09-27 09:41:59 -07:00

logging.rs

Make the scrub work off /usr/bin, and stop a log level deciding whether it runs

2026-08-23 15:47:36 -07:00

main.rs

fix: open host URLs with a clean environment (triple-c#34)

2026-09-17 10:08:20 -07:00

project_lock.rs

Hold back the Disk panel and OS drag-out from the ship branch

2026-08-23 15:20:22 -07:00

url_open.rs

fix: stop a stale payload re-enabling a bridge the user turned off

2026-09-17 11:13:57 -07:00