Harden API, desktop, and Drive trust boundaries - #9

Merged

ishu86 merged 51 commits into

mainfrom

Sep 5, 2026

Commits on Sep 3, 2026

Check Host and Origin on every Drive request and websocket.
ishu86
committed
0f2fb53
Put desktops on their own network so only cased can reach them.
ishu86
committed
e3c33bd
Proxy the live view through cased with an explicit upstream header list.
ishu86
committed
cfd82d4
Return structured cased errors to the model and call the skill secret check a lint.
ishu86
committed
075d40a
Serve files from the computer as downloads, never as pages.
ishu86
committed
ce54f0b
Require the desk token on the VNC websocket and exit if Xvfb never starts.
ishu86
committed
695ce63
Send Anthropic the screenshot, not its base64.
ishu86
committed
aca8099
Gate exec, actions and files during credential injection and scope files to /home/agent.
ishu86
committed
cc3ff07
Deliver the assist link, flatten prompts for ntfy, and sign the approve and deny buttons.
ishu86
committed
8a8344f
Write threads.json atomically and trim the small duplications.
ishu86
committed
12d37df
Check Host and Origin, open the token-in-URL doors, and authenticate before auditing.
ishu86
committed
b9d6b6d
Add an HTTP test for the auth and origin gates.
ishu86
committed
81a92a6
Clear the password field before the injection gate drops.
ishu86
committed
12f243f
Send the solver a page URL without its query string.
ishu86
committed
db81076
Cap file uploads, keep desk calls off the event loop, and require https for logins.
ishu86
committed
fba884f
Build the observe script from the shared selectors.
ishu86
committed
8d92a2e
Keep the vault directory private and drop a computer's schedules with it.
ishu86
committed
2865cce
Pin the desktop image's base, packages and noVNC tarball, and add a healthcheck.
ishu86
committed
78c6f30
Recreate a missing container on wake instead of raising AttributeError, and cap pids and swap.
ishu86
committed
e66b41f
Pin GitHub Actions to commits and drop CI's default write token.
ishu86
committed
a42313d
Keep vault secrets out of argv and build the create body as JSON.
ishu86
committed
3a153b1
Bump Pillow past its advisories and add websockets for the live relay.
ishu86
committed
f3ab428
Run the session keeper on its own thread.
ishu86
committed
4bdaaa0
Relay the live desktop view through cased.
ishu86
committed
fd1aa03
Fail abandoned login attempts, refuse sub-minute intervals, and keep daily schedules on wall-clock time across DST.
ishu86
committed
3543ff3
Make the session keeper non-reentrant and forget deleted computers.
ishu86
committed
b9a5d81
Delete dead assist and link helpers and the auth_attempts aliases.
ishu86
committed
53d706a
Point the assist tests at a host the new gate allows.
ishu86
committed
a488bfb
Merge branch 'harden/wp-d' into harden/audit
ishu86
committed
894e596
Merge branch 'harden/wp-f' into harden/audit
ishu86
committed
ccb04a8
Merge branch 'harden/wp-e' into harden/audit
ishu86
committed
c82923c
Merge branch 'harden/wp-b' into harden/audit
ishu86
committed
73495bd
Merge branch 'harden/wp-c' into harden/audit
ishu86
committed
03c4c87
Drop the WP-B store stubs now that the real helpers have landed.
ishu86
committed
78a2026
Hoist the auth_attempts import and pin httpx for the test client.
ishu86
committed
47d8983

Commits on Sep 4, 2026

Commits on Sep 5, 2026