0xrsydn/idx-cli
1
mirror of https://github.com/0xrsydn/idx-cli.git synced 2026-11-07 01:35:36 +00:00
Code Issues Projects Releases 1 Packages Wiki Activity
idx-cli/scripts
History
hermes 3041606916 fix(npm): absolute cache root, per-arch cache dir, SIGINT during install 
From a second Codex review (gpt-6.1-sol, xhigh):
- A relative XDG_CACHE_HOME (invalid per the XDG spec) made the launcher
  look for, and run, a binary under the current directory, which an
  untrusted checkout could supply. Use it only when absolute.
- The cache dir now includes <platform>-<arch>, so a home directory shared
  across machines cannot hand an arm64 host an x64 binary.
- SIGINT sent to the launcher's PID alone during the first-run install is
  forwarded to the installer (it was ignored); the launcher exits 130.
- npm smoke runs the first-run install with an empty user cache and checks
  the package binary was created, so a cached binary cannot pass for it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01V3syn2fN2LNo5pvTSqc6eh
2026-10-16 09:54:30 +00:00
..
audit-msn-fundamentals.sh fix: handle non-finite msn key ratios 2026-04-13 23:34:36 +07:00
build-latest-ownership-snapshot.sh fix(ownership): bound snapshot download by manifest size; clean refused builds 2026-09-25 22:31:40 +00:00
build-ownership-snapshot.sh fix(ownership): verify snapshot assets before publishing manifests 2026-09-25 10:37:32 +00:00
check-ownership-snapshot-freshness.sh fix(ownership): make publisher RESULT contract hold on every path 2026-09-24 21:50:51 +00:00
idx.js fix(npm): absolute cache root, per-arch cache dir, SIGINT during install 2026-10-16 09:54:30 +00:00
install-sh-test.sh ci(nix): unify cached verification and strengthen packaged smoke 2026-10-03 16:22:11 +00:00
install.js fix(npm): absolute cache root, per-arch cache dir, SIGINT during install 2026-10-16 09:54:30 +00:00
live-smoke.sh test: add golden output parity gate and live A/B compare 2026-10-14 08:33:25 +00:00
npm-smoke.sh fix(npm): absolute cache root, per-arch cache dir, SIGINT during install 2026-10-16 09:54:30 +00:00
publish-ownership-snapshot-test.sh fix(ownership): update syncs when a same-date snapshot is rebuilt 2026-10-14 18:52:13 +00:00
publish-ownership-snapshot.sh fix: address final review (path traversal, sync races, MCP limits) 2026-10-14 21:58:37 +00:00