Audit hardening: persistence durability, Electron security, perf, deps - #65

Open

aagentah wants to merge 27 commits into

chore/audit-hardening

Commits on Jun 5, 2026

chore(deps): realign @types/node, align eslint 9, patch electron, fix audit vulns

aagentah
and
claude
committed
75f660f
fix(persistence): make atomic writes crash-durable (fsync) with a rolling backup

aagentah
and
claude
committed
9f34ca3
fix(security): deny in-app window.open and block external navigation on privileged windows

aagentah
and
claude
committed
2ff4a60
perf(dashboard): stop re-rendering debug logs on every input event when overlay is closed

aagentah
and
claude
committed
cdbb9b8
perf(dashboard): hoist sequencer-pattern lookup out of the 16-step render loop

aagentah
and
claude
committed
e93622f
fix(projector): release window resize listener and WebGL context in threeBase destroy

aagentah
and
claude
committed
1963d2f
ci(security): pin softprops/action-gh-release to a commit SHA

aagentah
and
claude
committed
34b4604
build(security): disable RunAsNode/inspect/NODE_OPTIONS fuses on packaged builds

aagentah
and
claude
committed
2ab7de0
build(security): drop disable-library-validation from macOS entitlements

aagentah
and
claude
committed
ea4c5a3
build(deps): upgrade electron-builder 25 to 26 to clear high-severity build CVEs

aagentah
and
claude
committed
de02615
fix(build,security): correct Linux fuse-hook path and catch openExternal rejection

aagentah
and
claude
committed
9b4e678

Commits on Jun 6, 2026

chore(deps): drop @eslint/js and globals; keep eslint on v8

aagentah
and
claude
committed
c2e8086
style: trim audit-hardening comments to match house style

aagentah
and
claude
committed
0f5a860
fix(projector): show empty state for a set with no active track

aagentah
and
claude
committed
cfb9e00
fix(modules): guard AsteroidGraph against destroy during async init

aagentah
and
claude
committed
77b4cd6
fix(sandbox): run a module's executeOnLoad methods even when dropped from the saved constructor

aagentah
and
claude
committed
8cc75a1
Revert "fix(modules): guard AsteroidGraph against destroy during async init"
aagentah
committed
4f01367

Commits on Jun 7, 2026

chore(cleanup): remove dead code and unused assets

aagentah
and
claude
committed
2f08bf0
refactor(consistency): align exports and projector logging with house style

aagentah
and
claude
committed
0be9015
docs: fact-check and simplify the markdown docs

aagentah
and
claude
committed
dbdfbf2

Commits on Jun 11, 2026

perf(sandbox): skip the per-request ensure round trip when a token is cached

aagentah
and
claude
committed
71f2a55
perf(projector): cache trigger maps per reference and drop redundant three.js renders

aagentah
and
claude
committed
4e65b8c
perf(dashboard): stop tick/heartbeat state re-rendering the whole tree

aagentah
and
claude
committed
7172655
perf(persistence): skip no-op writes and redundant projector disk reads

aagentah
and
claude
committed
f88bc91
feat(dashboard): live input activity readout in the footer

aagentah
and
claude
committed
2aae4d3
feat(dashboard): duplicate buttons for sets, tracks, and modules

aagentah
and
claude
committed
acc0ee9

Commits on Jul 11, 2026

chore: subtle cleanup pass across dead code, naming, and docs

aagentah
and
claude
committed
1711ecb