DuncanandWill Pfleger 0e77706443 fix(desktop): require scope match in runtime lifecycle capability ...

put_managed_agent_runtime_lifecycle_for validated pair key, start_nonce,
and process liveness but never required the tracked runtime's scope_id to
equal the current active scope — the same cross-scope leak class killed on
the sibling put_agent_session_config (P23-C1). A same-pair/same-nonce
lifecycle frame from a drained workspace was accepted and mutated the
runtime after a workspace rotation.

Capture the active scope before the runtime-map lock and reject any frame
whose runtime.scope_id differs, mirroring the sibling command's shape. Add
a capability test proving a stale-scope frame is rejected with the runtime
lifecycle unmutated (no status emit).

Co-authored-by: Will Pfleger <pfleger.will@gmail.com>
Signed-off-by: Will Pfleger <pfleger.will@gmail.com>

2026-08-17 14:38:56 -04:00

..

assets

feat(desktop): Agent Trading Cards — mintable agent-snapshot card PNGs with optional NIP-44 lock (#3278)

2026-07-31 22:01:17 -04:00

capabilities

feat(desktop): redesign the Huddle experience (#4281)

2026-08-03 17:16:09 -07:00

crates/buzz-terminal

fix(desktop): enforce owner-only access in internal builds (#4053)

2026-08-05 19:58:24 -06:00

icons

Update DMG background and label size (#1629)

2026-07-08 15:28:32 +01:00

resources/pocket-voices

refactor(voice): extract reusable Pocket primitives + Pocket voice settings (relands #2467 + #3208) (#3910)

2026-07-31 09:41:09 -04:00

src

fix(desktop): require scope match in runtime lifecycle capability

2026-08-17 14:38:56 -04:00

tests

fix(desktop): enable the content security policy (#4614)

2026-08-05 16:36:36 -07:00

.gitignore

feat(acp): bring your own harness (BYOH) — generic ACP runtime seam + settings gallery (#2773)

2026-07-26 20:06:20 -04:00

build.rs

fix(desktop): enforce owner-only access in internal builds (#4053)

2026-08-05 19:58:24 -06:00

Cargo.lock

fix(desktop): route macos notification clicks (#4799)

2026-08-05 13:29:41 -07:00

Cargo.toml

Merge remote-tracking branch 'origin/main' into duncan/workspace-scoped-agent-store-merge

2026-08-05 17:32:58 -04:00

Entitlements.plist

fix(desktop): load downloaded mesh runtime on signed macOS builds (#1932)

2026-07-15 21:28:17 -04:00

Info.plist

fix(desktop): explain macOS local network access (#2263)

2026-07-25 01:54:31 +00:00

tauri.conf.json

fix(desktop): enable the content security policy (#4614)

2026-08-05 16:36:36 -07:00

tauri.dev.conf.json

Rename desktop app to Buzz (#960)

2026-06-11 15:06:24 +00:00

tauri.windows.conf.json

feat(k8s): Kubernetes backend plugin + desktop deploy path (#4289)

2026-08-02 14:39:27 -04:00