kyle 644fda14da Refuse grant paths that cannot be mounted ...

Implemented-By: OpenCode session (model recorded in docs/implementer-log.md)

2026-09-22 23:06:09 -07:00

..

fixtures

Load grant files, failing closed on any invalid file

2026-09-19 02:50:26 -07:00

support

brokerd tests: read the final frame after the handler closes, on macOS

2026-09-22 18:28:18 -07:00

admin.rs

Handle approvals, refusals and grant checks on admin.sock

2026-09-20 13:54:01 -07:00

approvals.rs

Add the table of pending approvals

2026-09-19 16:48:09 -07:00

args.rs

Seal the fetch target: one value holds the URL and its host

2026-09-22 23:03:49 -07:00

audit_edges.rs

brokerd: recover a torn line in place, real dates only, bounded ttl, EMFILE

2026-09-22 21:48:24 -07:00

audit_startup.rs

Add the audit writer with its startup check

2026-09-19 16:32:37 -07:00

audit.rs

Add the audit writer with its startup check

2026-09-19 16:32:37 -07:00

broker_pending.rs

Handle a tool request from decision to answer

2026-09-20 12:59:42 -07:00

broker_sequence.rs

Handle a tool request from decision to answer

2026-09-20 12:59:42 -07:00

broker.rs

Handle a tool request from decision to answer

2026-09-20 12:59:42 -07:00

config.rs

Add brokerd's configuration

2026-09-19 02:24:15 -07:00

grants_mount.rs

Refuse grant paths that cannot be mounted

2026-09-22 23:06:09 -07:00

grants.rs

Load grant files, failing closed on any invalid file

2026-09-19 02:50:26 -07:00

ledger_answer.rs

Add the ledger: the audit writer and session state behind one lock

2026-09-20 03:30:37 -07:00

ledger.rs

Add the ledger: the audit writer and session state behind one lock

2026-09-20 03:30:37 -07:00

policy_matching.rs

Decide tool calls against grants, taint and time

2026-09-19 03:05:01 -07:00

policy_property.rs

Decide tool calls against grants, taint and time

2026-09-19 03:05:01 -07:00

policy_redecide.rs

Decide tool calls against grants, taint and time

2026-09-19 03:05:01 -07:00

policy.rs

Decide tool calls against grants, taint and time

2026-09-19 03:05:01 -07:00

runner.rs

Replace the runner stub with the Runtime seam and RunSpec

2026-09-19 16:43:56 -07:00

serve_accept_break.rs

Test --accept-break on a real break through the brokerd binary

2026-09-22 21:52:54 -07:00

serve_pointers.rs

brokerd: recover a torn line in place, real dates only, bounded ttl, EMFILE

2026-09-22 21:48:24 -07:00

serve.rs

Add brokerd serve: startup, both sockets, and the expiry thread

2026-09-20 17:24:57 -07:00

state.rs

Keep each session's taint and untrusted flag in a file

2026-09-19 03:08:46 -07:00