Repository navigation

fix: bug-hunt round — security hardening, lifecycle and TUI state fixes - #154

Merged

jkyberneees merged 28 commits into

mainfrom

fix/bug-hunt-audit

Oct 12, 2026

Merged

fix: bug-hunt round — security hardening, lifecycle and TUI state fixes#154
jkyberneees merged 28 commits into
mainfrom
fix/bug-hunt-audit

Commits on Oct 12, 2026
- fix(server): keep odek serve alive and stoppable around stderr
  
  jkyberneees
  and
  claude
  committed
  c8752ce
- fix(watchdog): identify the parent by start time, not pid alone
  
  jkyberneees
  and
  claude
  committed
  de680d5
- fix(bodek): let a second signal abort a slow shutdown
  
  jkyberneees
  and
  claude
  committed
  0cac82f
- fix(bodek): never overwrite a settings file broken mid-run
  
  jkyberneees
  and
  claude
  committed
  86959f4
- fix(update): rank a release above its own pseudo-version builds
  
  jkyberneees
  and
  claude
  committed
  b3030d5
- fix(update): bound the release metadata decode
  
  jkyberneees
  and
  claude
  committed
  209781d
- fix(client): bound every REST JSON decode
  
  jkyberneees
  and
  claude
  committed
  4723a05
- fix(client): never follow redirects on authenticated REST calls
  
  jkyberneees
  and
  claude
  committed
  d41a48a
- fix(client): bound websocket frame writes with a deadline
  
  jkyberneees
  and
  claude
  committed
  6a62c73
- fix(tokens): keep unpersisted tokens across the disk merge
  
  jkyberneees
  and
  claude
  committed
  e775ba9
- fix(settings): create ~/.bodek with 0700
  
  jkyberneees
  and
  claude
  committed
  5f6d494
- fix(workspace): persist under the store mutex
  
  jkyberneees
  and
  claude
  committed
  60d82df
- fix(tui): sanitize wire text at the remaining terminal sinks
  
  jkyberneees
  and
  claude
  committed
  947984d
- fix(tui): attach regular files only, with a capped read
  
  jkyberneees
  and
  claude
  committed
  fe4b63f
- fix(tui): keep armed actions and selections on their target
  
  jkyberneees
  and
  claude
  committed
  78f6de9
- fix(tui): refuse session resume while a turn runs
  
  jkyberneees
  and
  claude
  committed
  f888df0
- fix(tui): run one approval expiry sweep at a time
  
  jkyberneees
  and
  claude
  committed
  9e7fdea
- fix(tui): drop jobs and plan replies for a session already left
  
  jkyberneees
  and
  claude
  committed
  5120f2f
- fix(tui): never type key sentinels or chords into hidden inputs
  
  jkyberneees
  and
  claude
  committed
  e0db69e
- fix(tui): clamp an expired poll timeout to zero
  
  jkyberneees
  and
  claude
  committed
  f4ba41e
- fix(tui): show tool arguments without HTML escaping
  
  jkyberneees
  and
  claude
  committed
  610275a
- fix(server): keep the orphan watchdog armed until odek exits
  
  jkyberneees
  and
  claude
  committed
  9d9c142
- fix(server): send the leader fallback through Process.Signal
  
  jkyberneees
  and
  claude
  committed
  c6f6a4f
- fix(tui): hold sends until an in-flight session resume lands
  
  jkyberneees
  and
  claude
  committed
  6091813
- fix(tui): keep memory confirms on the exact row identity
  
  jkyberneees
  and
  claude
  committed
  d7bf6b5
- fix(tui): sanitize plan step status in the detail view
  
  jkyberneees
  and
  claude
  committed
  e3e57bb
- fix(tui): never silently re-attach a path a symlink was planted on
  
  jkyberneees
  and
  claude
  committed
  a684756
- fix(tui): paint /attach and /unattach outcome notes immediately
  
  jkyberneees
  and
  claude
  committed
  45d5a5c

Commits

Commits on Oct 12, 2026