go/pkg/coredeno
Snider 19e3fd3af7 fix(coredeno): harden security and fix review issues
- Path traversal: CheckPath now requires separator after prefix match
- Store namespace: block reserved '_' prefixed groups
- StoreGet: distinguish ErrNotFound from real DB errors via sentinel
- Store: add rows.Err() checks in GetAll and Render
- gRPC leak: cleanupGRPC on all early-return error paths in OnStartup
- DenoClient: fix fmt.Sprint(nil) → type assertions
- Socket permissions: 0700 dirs, 0600 sockets (owner-only)
- Marketplace: persist SignKey, re-verify manifest on Update
- io/local: resolve symlinks in New() (macOS /var → /private/var)
- Tests: fix sun_path length overflow on macOS

Co-Authored-By: Virgil <virgil@lethean.io>
2026-02-19 14:39:56 +00:00
..
proto feat(coredeno): gRPC server with permission-gated I/O fortress 2026-02-17 21:09:40 +00:00
runtime feat(coredeno): Tier 3 Worker isolation — sandboxed module loading with I/O bridge 2026-02-18 00:48:16 +00:00
coredeno.go feat(coredeno): Tier 2 bidirectional bridge — Go↔Deno module lifecycle 2026-02-17 22:43:12 +00:00
coredeno_test.go feat(coredeno): Tier 2 bidirectional bridge — Go↔Deno module lifecycle 2026-02-17 22:43:12 +00:00
denoclient.go fix(coredeno): harden security and fix review issues 2026-02-19 14:39:56 +00:00
integration_test.go feat(coredeno): Tier 4 marketplace install pipeline — clone, verify, register, auto-load 2026-02-18 08:04:13 +00:00
lifecycle.go fix(coredeno): harden security and fix review issues 2026-02-19 14:39:56 +00:00
lifecycle_test.go feat(coredeno): Tier 2 bidirectional bridge — Go↔Deno module lifecycle 2026-02-17 22:43:12 +00:00
listener.go fix(coredeno): harden security and fix review issues 2026-02-19 14:39:56 +00:00
listener_test.go fix(coredeno): harden security and fix review issues 2026-02-19 14:39:56 +00:00
permissions.go fix(coredeno): harden security and fix review issues 2026-02-19 14:39:56 +00:00
permissions_test.go feat(coredeno): permission engine for I/O fortress 2026-02-17 21:02:37 +00:00
server.go fix(coredeno): harden security and fix review issues 2026-02-19 14:39:56 +00:00
server_test.go feat(coredeno): Tier 2 bidirectional bridge — Go↔Deno module lifecycle 2026-02-17 22:43:12 +00:00
service.go fix(coredeno): harden security and fix review issues 2026-02-19 14:39:56 +00:00
service_test.go feat(coredeno): wire Tier 1 boot sequence — gRPC listener, manifest loading, sidecar launch 2026-02-17 21:39:49 +00:00