Abdulaziz AlbaharandClaude Fable 5
7589f52b81
Isolate every iOS build by bundle identity (#9183)
* test: require iOS build isolation
* fix: isolate iOS builds by bundle identity
* fix: compile namespaced Mac backup publisher
* chore: remove shared app group example
* test: require isolated iOS OAuth cookies
* fix: isolate iOS OAuth browser cookies
* fix: close autoreview namespace gaps
* fix: complete iOS namespace isolation
* refactor: satisfy namespace isolation policy
* fix: close namespace migration review gaps
* fix: preserve isolated Iroh and OAuth admission
* test: cover isolated iOS rollout paths
* fix: authenticate isolated iOS rollout paths
* test: cover authenticated management recovery
* fix: authorize isolated management operations
* test: cover cached proof and Mac forget
* fix: preserve proof across isolated lifecycle paths
* fix: satisfy Iroh API package policy
* test: cover autoreview isolation regressions
* fix: close isolated rollout review gaps
* test: cover target and trust boundary regressions
* fix: enforce isolated pairing boundaries
* test: cover legacy tombstone migration
* fix: preserve tombstones across backup migration
* test: cover migration precedence and discovery privacy
* fix: enforce migration and discovery precedence
* test: cover push targeting and migration bounds
* fix: close push and migration isolation gaps
* test: prevent entitlement dumps on signing failures
* fix: redact signed entitlements on upload failure
* fix: make backup scope provider sendable
* fix: return localized pairing target names
* fix: drain legacy namespaced revocations
* test: track push token policy limits
* test: cover post-revocation fallback paths
* fix: refresh authority after binding revocations
* test: cover paired-Mac migration boundaries
* fix: bound and scope legacy paired-Mac migration
* fix: capture migration account without async coalescing
* fix: keep legacy migration and keychain deletion safe
* chore: refresh pull request head
* fix: bound legacy backup reconciliation
* test: cover conditional paired Mac migration
* fix: make paired Mac migration conditional
* test: cover pairing migration recovery races
* fix: serialize identity persistence recovery
* test: cover migration team and pairing lanes
* fix: pin migration team and pairing channel
* test: await development identity storage
* test: cover pairing emission and keychain scope
* fix: fail closed on app and keychain scope
* test: cover bundle-derived Mac namespaces
* fix: namespace Mac bindings by bundle
* test: cover legacy sign-out binding namespaces
* fix: revoke bindings in their stored namespace
* test: expect APNs bundle in send outcome
* test: cover untagged debug pairing identity
* fix: preserve untagged debug pairing identity
* test: cover rate-limited pending revocations
* fix: drain revocations after rate-limited registration
* test: cover safe pending revocation reconciliation
* fix: preserve active binding during revocation recovery
* fix: preserve broker proof through client wrappers
* test: retain authorization during rate-limited recovery
* fix: preserve retained binding during rate-limit recovery
* test: cover stale binding cleanup authorization
* fix: authorize stale binding cleanup
* docs: document binding authorization helpers
* test: type stale cleanup response
* fix(macos): restore compilable cleanupSurfaceState call
https://github.com/manaflow-ai/cmux/pull/10072 changed this call site to
pass workspaceID: but never landed that overload, so the macOS target
has not compiled since it merged (CI is dispatch-only and did not catch
it). Restore the existing signature; the native-mobile-surface
preservation intent needs to re-land together with its implementation.
Co-Authored-By: Claude Fable 5 <[email protected]>
* fix: wire mobile surface artifact integration
* fix: require explicit trust broker namespace
* fix: require explicit management revocation routes
* fix: reject ambiguous iOS bundle namespaces
* fix: bound identity waits and scope legacy auth
* fix: cancel queued identity operations
* fix: modernize browser change handlers
* fix: scope legacy token deletion
---------
Co-authored-by: Claude Fable 5 <[email protected]>
2026-08-18 13:37:30 -07:00
..
2026-08-12 13:08:33 -07:00
2026-08-18 13:37:30 -07:00