buzz/desktop/scripts at debff9f3d81fabbe14834a8a8048c463ca649b0f - buzz

mirror of https://github.com/block/buzz.git synced 2026-08-18 06:50:31 +02:00

Files

T

Will Pfleger debff9f3d8 feat(agent): add hardened MCP toolchain shims with config isolation

Add hermit-managed shim scripts for uv/uvx/npx/node that provide
config-isolated toolchain execution for MCP servers, preventing
ambient system toolchains from leaking user config into agent
processes.

Security hardening:
- Private mktemp temp dir with cleanup trap (no predictable paths)
- Lock mutual exclusion via kill-0 + /proc start-time verification
- Atomic bootstrap recovery (staged download + validated mv)
- Desktop fail-loud validation of shim resources before env export

Co-authored-by: Will Pfleger <pfleger.will@gmail.com>
Signed-off-by: Will Pfleger <pfleger.will@gmail.com>

2026-07-16 10:32:34 -05:00

build-release-config.mjs

refactor(shell): drop bundled PortableGit, add BUZZ_SHELL override + dialect hint (#1536 )

2026-07-06 12:54:50 -04:00

check-file-sizes.mjs

feat(agent): add hardened MCP toolchain shims with config isolation

2026-07-16 10:32:34 -05:00

check-pubkey-truncation.mjs

feat(desktop): canonical <PubKey> component — hover to view/copy full keys, owner "you" labels (#1589 )

2026-07-07 13:35:15 -07:00

check-px-text.mjs

fix(desktop): simplify sign out settings row (#1903 )