Pavan Kumar Gondhi 230f7122dd fix(security): prevent workspace PATH injection via service env and trash helpers (#73264) ...

* fix: address issue

* fix: address PR review feedback

* fix: address review-pr skill feedback

* fix: address PR review feedback

* fix: address PR review feedback

* fix: address build feedback

* fix: address PR review feedback

* docs: add changelog entry for PR merge

2026-04-28 21:30:51 +05:30

..

test-helpers

…

arg-split.ts

…

cmd-argv.test.ts

…

cmd-argv.ts

…

cmd-set.ts

…

constants.test.ts

…

constants.ts

chore: remove unused flow and daemon helpers

2026-04-18 21:16:19 +01:00

container-context.ts

…

diagnostics.ts

refactor: centralize restart log conventions

2026-04-18 19:08:35 +01:00

exec-file.ts

refactor: remove redundant exec file conversions

2026-04-10 22:53:35 +01:00

future-config-guard.ts

fix: guard gateway mutations from older binaries

2026-04-26 06:07:55 +01:00

gateway-entrypoint.ts

fix(gateway): harden service entrypoint resolution (#65984)

2026-04-13 17:14:29 +02:00

inspect.test.ts

fix(doctor): avoid companion gateway service false positives

2026-04-27 23:30:29 +01:00

inspect.ts

fix(doctor): avoid companion gateway service false positives

2026-04-27 23:30:29 +01:00

launchd-plist.ts

fix: harden macOS gateway updates

2026-04-28 05:58:05 +01:00

launchd-restart-handoff.test.ts

fix(daemon): harden launchd restart handoff (#71409)

2026-04-24 22:27:05 -07:00

launchd-restart-handoff.ts

fix(daemon): harden launchd restart handoff (#71409)

2026-04-24 22:27:05 -07:00

launchd.integration.e2e.test.ts

fix(daemon): reconcile macOS LaunchAgent supervision state (#72616)

2026-04-26 22:39:15 -07:00

launchd.test.ts

fix: harden macOS gateway updates

2026-04-28 05:58:05 +01:00

launchd.ts

fix: harden macOS gateway updates

2026-04-28 05:58:05 +01:00

node-service.ts

…

output.ts

…

paths.ts

…

program-args.test.ts

fix: persist gateway service wrappers

2026-04-27 03:40:32 +01:00

program-args.ts

fix: persist gateway service wrappers

2026-04-27 03:40:32 +01:00

restart-logs.test.ts

fix: restore CI restart and provider compat

2026-04-18 19:24:08 +01:00

restart-logs.ts

fix: restore CI restart and provider compat

2026-04-18 19:24:08 +01:00

runtime-binary.test.ts

…

runtime-binary.ts

…

runtime-format.test.ts

fix(gateway): harden macOS launchd service startup

2026-04-26 17:18:49 -07:00

runtime-format.ts

fix(gateway): harden macOS launchd service startup

2026-04-26 17:18:49 -07:00

runtime-hints.test.ts

refactor: centralize restart log conventions

2026-04-18 19:08:35 +01:00

runtime-hints.ts

refactor: centralize restart log conventions

2026-04-18 19:08:35 +01:00

runtime-hints.windows-paths.test.ts

refactor: centralize restart log conventions

2026-04-18 19:08:35 +01:00

runtime-parse.ts

…

runtime-paths.test.ts

…

runtime-paths.ts

…

schtasks-exec.test.ts

test: harden Parallels fresh install smoke

2026-04-21 05:34:25 +01:00

schtasks-exec.ts

test: harden Parallels fresh install smoke

2026-04-21 05:34:25 +01:00

schtasks.install.test.ts

fix: audit windows task managed env drift

2026-04-27 10:19:50 +01:00

schtasks.startup-fallback.test.ts

fix: launch Windows startup gateway directly

2026-04-21 08:03:34 +01:00

schtasks.stop.test.ts

CI: expand native release validation coverage (#67144)

2026-04-16 19:58:19 +02:00

schtasks.test.ts

fix: audit windows task managed env drift

2026-04-27 10:19:50 +01:00

schtasks.ts

fix: audit windows task managed env drift

2026-04-27 10:19:50 +01:00

service-audit.test.ts

test: avoid slow home lookups in service audit tests

2026-04-27 23:23:15 +01:00

service-audit.ts

fix(gateway): avoid systemd service split-brain

2026-04-27 14:32:49 +01:00

service-env.test.ts

fix(security): prevent workspace PATH injection via service env and trash helpers (#73264)

2026-04-28 21:30:51 +05:30

service-env.ts

fix(security): prevent workspace PATH injection via service env and trash helpers (#73264)

2026-04-28 21:30:51 +05:30

service-managed-env.ts

fix: repair managed service env install migration

2026-04-27 10:13:01 +01:00

service-runtime.ts

fix(daemon): reconcile macOS LaunchAgent supervision state (#72616)

2026-04-26 22:39:15 -07:00

service-types.ts

fix: repair managed service env install migration

2026-04-27 10:13:01 +01:00

service.test-helpers.ts

…

service.test.ts

test: cover older-binary service guard

2026-04-26 06:18:37 +01:00

service.ts

fix: guard gateway mutations from older binaries

2026-04-26 06:07:55 +01:00

systemd-hints.test.ts

fix(daemon): handle sudo user-systemd gateway install failures

2026-04-27 01:34:57 -07:00

systemd-hints.ts

…

systemd-linger.ts

…

systemd-unavailable.test.ts

fix(daemon): handle sudo user-systemd gateway install failures

2026-04-27 01:34:57 -07:00

systemd-unavailable.ts

fix(daemon): surface systemd user-bus hints during gateway install (#72617)

2026-04-26 23:30:54 -07:00

systemd-unit.test.ts

fix: avoid inline dotenv secrets in systemd unit during service repair (#66249) (thanks @tmimmanuel)

2026-04-14 09:06:10 +05:30

systemd-unit.ts

fix: avoid inline dotenv secrets in systemd unit during service repair (#66249) (thanks @tmimmanuel)

2026-04-14 09:06:10 +05:30

systemd.test.ts

refactor: expose SDK test helper subpaths

2026-04-28 03:28:17 +01:00

systemd.ts

fix(doctor): avoid companion gateway service false positives

2026-04-27 23:30:29 +01:00