hermes 3041606916 fix(npm): absolute cache root, per-arch cache dir, SIGINT during install ... From a second Codex review (gpt-6.1-sol, xhigh): - A relative XDG_CACHE_HOME (invalid per the XDG spec) made the launcher look for, and run, a binary under the current directory, which an untrusted checkout could supply. Use it only when absolute. - The cache dir now includes <platform>-<arch>, so a home directory shared across machines cannot hand an arm64 host an x64 binary. - SIGINT sent to the launcher's PID alone during the first-run install is forwarded to the installer (it was ignored); the launcher exits 130. - npm smoke runs the first-run install with an empty user cache and checks the package binary was created, so a cached binary cannot pass for it. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01V3syn2fN2LNo5pvTSqc6eh		2026-10-16 09:54:30 +00:00
..
ARCHITECTURE.md	refactor(core): move ownership queries, import, and sync into idx-core	2026-10-14 09:52:17 +00:00
CONVENTIONS.md	refactor(core): compile the mock provider only with a testing feature	2026-10-14 09:31:12 +00:00
DESIGN.md	chore: release 0.3.0 with idx-mcp	2026-10-14 19:01:29 +00:00
INSTALL.md	chore: release 0.3.1	2026-10-15 03:14:45 +00:00
NPM_DISTRIBUTION.md	fix(npm): absolute cache root, per-arch cache dir, SIGINT during install	2026-10-16 09:54:30 +00:00
OWNERSHIP_PUBLISH.md	fix(ownership): update syncs when a same-date snapshot is rebuilt	2026-10-14 18:52:13 +00:00
OWNERSHIP_SYNC.md	fix: address release review (WAL-aware sync hash, empty MCP inputs)	2026-10-14 19:44:24 +00:00
SMOKE.md	test(agents): run opencode 2 as well as opencode 1	2026-10-16 07:40:04 +00:00