fix: reliability, Windows launch and IPC findings from the code audit - #93

Merged

howdeploy merged 22 commits into

howdeploy:mainfrom

BIackFIame:fix/audit-reliability-windows-ipc

Sep 28, 2026

Commits on Sep 28, 2026

fix(browser): keep saving tabs after one failed write
BIackFIame
committed
1360b4a
fix(ipc): accept settings, plugin, secret and terminal calls only from the main renderer
BIackFIame
committed
90308ce
fix(windows): escape batch provider arguments for the shim's second cmd.exe pass
BIackFIame
committed
a5bb450
fix(agent-control): bound request receipts without locking out controllers
BIackFIame
committed
14112d8
fix(windows): handle pipe host stdio errors instead of crashing the main process
BIackFIame
committed
37c2ab5
fix(gateways): recover from a failed Windows pipe host and clean up a failed start
BIackFIame
committed
2dcff05
fix(windows): pass the real search path to plugin environment wrappers
BIackFIame
committed
0141276
fix(orchestration): let cancel and disconnect reach the running tool call
BIackFIame
committed
d4dde5d
fix(plugins): run only the service entry bytes that match the trusted hash
BIackFIame
committed
232a9fd
fix(agent-runtime): close hook connections that never send their message
BIackFIame
committed
7d52290
fix(storage): remove the temporary file when an atomic write fails
BIackFIame
committed
6a77cb6
fix(browser-audit): recover from a record cut off during a write
BIackFIame
committed
ebdbba7
fix(browser-audit): hash records with a locale-independent key order
BIackFIame
committed
754dffe
fix(windows): find cmd.exe the same way for the terminal and batch providers
BIackFIame
committed
37f80d9
fix(github-auth): keep polling the device code through network errors
BIackFIame
committed
9c64479
fix(settings): apply provider availability in write order
BIackFIame
committed
89be9d5
fix(limits): do not start `kimi web` after the limits service was disposed
BIackFIame
committed
4315658
fix(plugin-media): do not follow a link at the playlist temp name
BIackFIame
committed
03fdaa7
fix(plugin-cards): do not count hidden badges of revoked plugins
BIackFIame
committed
b16bee2
fix(plugins): do not wipe plugin storage when it cannot be read
BIackFIame
committed
4839f0a
fix(plugins): keep the service entry guard out of the main bundle's CommonJS shim
BIackFIame
committed
1c58f2a
fix(plugins): check the main module node resolves, not only the path the host resolved
BIackFIame
committed
4d616f7

Navigation Menu

fix: reliability, Windows launch and IPC findings from the code audit - #93

fix: reliability, Windows launch and IPC findings from the code audit#93
howdeploy merged 22 commits into
howdeploy:mainfrom
BIackFIame:fix/audit-reliability-windows-ipc

Commits on Sep 28, 2026

fix(browser): keep saving tabs after one failed write

fix(ipc): accept settings, plugin, secret and terminal calls only from the main renderer

fix(windows): escape batch provider arguments for the shim's second cmd.exe pass

fix(agent-control): bound request receipts without locking out controllers

fix(windows): handle pipe host stdio errors instead of crashing the main process

fix(gateways): recover from a failed Windows pipe host and clean up a failed start

fix(windows): pass the real search path to plugin environment wrappers

fix(orchestration): let cancel and disconnect reach the running tool call

fix(plugins): run only the service entry bytes that match the trusted hash

fix(agent-runtime): close hook connections that never send their message

fix(storage): remove the temporary file when an atomic write fails

fix(browser-audit): recover from a record cut off during a write

fix(browser-audit): hash records with a locale-independent key order

fix(windows): find cmd.exe the same way for the terminal and batch providers

fix(github-auth): keep polling the device code through network errors

fix(settings): apply provider availability in write order

fix(limits): do not start `kimi web` after the limits service was disposed

fix(plugin-media): do not follow a link at the playlist temp name

fix(plugin-cards): do not count hidden badges of revoked plugins

fix(plugins): do not wipe plugin storage when it cannot be read

fix(plugins): keep the service entry guard out of the main bundle's CommonJS shim

fix(plugins): check the main module node resolves, not only the path the host resolved