Repository navigation

Restrict the UDS mirror sockets directory to its owner and publish mirror metadata atomically - #3019

Merged

kriszyp merged 14 commits into

mainfrom

fix/uds-mirror-dir-hardening

Oct 8, 2026

Commits on Oct 7, 2026
- Harden the UDS mirror directory and publish its metadata atomically
  
  kriszyp
  and
  claude
  committed
  396ab5f
- Resolve the UDS mirror directory from the helper and fail isolated workers loudly
  
  kriszyp
  and
  claude
  committed
  7b26d4c
- Check the UDS mirror directory before registering the secure listener
  
  kriszyp
  and
  claude
  committed
  5970700
- Refuse ready for an isolated worker that bound no UDS mirror
  
  kriszyp
  and
  claude
  committed
  cd6eff0
- Describe the isolated-worker readiness rule in the UDS design note
  
  kriszyp
  and
  claude
  committed
  fb1cb74
- Count only bound UDS mirrors toward isolated-worker readiness
  
  kriszyp
  and
  claude
  committed
  5d63d47
- Trim the portable UDS suite's header comment
  
  kriszyp
  and
  claude
  committed
  9210eae
- Guard the portable UDS suite's teardown against a failed setup
  
  kriszyp
  and
  claude
  committed
  d66a8a5
- Read the sockets path per test in the UDS directory suite
  
  kriszyp
  and
  claude
  committed
  b035b47
- Guard the sockets-path teardown in the UDS directory suite
  
  kriszyp
  and
  claude
  committed
  51b3964
- Import Node built-ins with the node: prefix in the UDS directory suite
  
  kriszyp
  and
  claude
  committed
  0ab44c4
- Refuse to clear a sockets path outside the test root in the UDS directory suite
  
  kriszyp
  and
  claude
  committed
  3a4111a
- Guard the UDS sockets-path test teardown with real path containment
  
  kriszyp
  and
  claude
  committed
  0a65b33
- Correct two comments in the UDS sockets-path containment guard
  
  kriszyp
  and
  claude
  committed
  b7f9179

Navigation Menu

Repository navigation

Restrict the UDS mirror sockets directory to its owner and publish mirror metadata atomically - #3019

Restrict the UDS mirror sockets directory to its owner and publish mirror metadata atomically#3019
kriszyp merged 14 commits into
mainfrom
fix/uds-mirror-dir-hardening

Commits on Oct 7, 2026

Harden the UDS mirror directory and publish its metadata atomically

Resolve the UDS mirror directory from the helper and fail isolated workers loudly

Check the UDS mirror directory before registering the secure listener

Refuse ready for an isolated worker that bound no UDS mirror

Describe the isolated-worker readiness rule in the UDS design note

Count only bound UDS mirrors toward isolated-worker readiness

Trim the portable UDS suite's header comment

Guard the portable UDS suite's teardown against a failed setup

Read the sockets path per test in the UDS directory suite

Guard the sockets-path teardown in the UDS directory suite

Import Node built-ins with the node: prefix in the UDS directory suite

Refuse to clear a sockets path outside the test root in the UDS directory suite

Guard the UDS sockets-path test teardown with real path containment

Correct two comments in the UDS sockets-path containment guard