All pull requests

Pull requests

• fix(sandbox): point zsh TMPPREFIX into TMPDIR on macOS

  #443·NoRiceToday opened Oct 30, 2026Contributor·

  ·
  1

• fix(cli): keep OpenCode v2 model state across omac sessions

  #441·NoRiceToday opened Oct 29, 2026Contributor·

  ·
  1

• feat(cli): scope protected-file warnings to a project

  #440·NoRiceToday opened Oct 29, 2026Contributor·

  ·
  1

• feat(start): add --skip-unregistered to launch despite unregistered skills

  #436·nhuelstng opened Oct 28, 2026Contributor·

  ·
  1

  1

• feat(cli): omac approvals, register summary and docs (#428, 4/4)

  #433·mathiasburger opened Oct 27, 2026Contributor·

  ·

• feat(approver): approval dialog, verdict store and wiring (#428, 3/4)

  #432·mathiasburger opened Oct 27, 2026Contributor·

  ·

• feat(facade): closed-world gate for declared sidecar endpoints (#428, 2/4)

  #431·mathiasburger opened Oct 27, 2026Contributor·

  ·

• feat(approval): endpoint declaration schema, matcher and path cleaning (#428, 1/4)

  #430·mathiasburger opened Oct 27, 2026Contributor·

  ·

• refactor(vm): reach the VM's Docker only over SSH

  #427·NoRiceToday opened Oct 27, 2026Contributor·

  ·

• feat(vm): VM lifecycle manager

  #424·NoRiceToday opened Oct 26, 2026Contributor·3/8·

  ·

• feat(skills): builtin omac-vm skill

  #423·NoRiceToday opened Oct 26, 2026Contributor·8/8·

  ·

• feat(cli): omac vm exec

  #422·NoRiceToday opened Oct 26, 2026Contributor·7/8·

  ·

• feat(vm): worktree copy, remote exec and JDK provisioning

  #421·NoRiceToday opened Oct 26, 2026Contributor·6/8·

  ·

• feat(cli): attach sessions to the omac VM with --vm

  #420·NoRiceToday opened Oct 26, 2026Contributor·5/8·

  ·

• feat(cli): omac vm subcommand

  #419·NoRiceToday opened Oct 26, 2026Contributor·4/8·

  ·

• feat(vm): limactl, SSH, key, docker-probe and image-pull seams

  #418·NoRiceToday opened Oct 26, 2026Contributor·2/8·

  ·

• feat(vm): VM config, state and Lima config rendering

  #417·NoRiceToday opened Oct 26, 2026Contributor·1/8·

  ·

• fix(security): Activation candidates must be resolved against symlinks before root policy checks so linked targets cannot bypass the allowlist.

  do-not-merge
  #412·github-actions[bot] opened Oct 24, 2026Bot·

  ·

• fix(security): The approval snapshot and the integrity hash must apply one shared exclusion predicate so unreviewed files cannot be frozen.

  do-not-merge
  #411·github-actions[bot] opened Oct 24, 2026Bot·

  ·

• fix(security): Upgrade-time approval migration must anchor on the hash recorded at registration so mutated skill content cannot inherit trust.

  do-not-merge
  #410·github-actions[bot] opened Oct 24, 2026Bot·

  ·

• fix(security): Directory lifecycle endpoints re-mint or retain session and token state across deactivation and one write endpoint lacks the standard control-token check; enforce uniform auth and forget state on deactivation.

  do-not-merge
  #388·github-actions[bot] opened Oct 17, 2026Bot·

  ·

• fix(security): Network egress policy compares address spellings literally, so a blocked address in an embedded IPv6 form is admitted; normalize addresses before policy checks.

  do-not-merge
  #387·github-actions[bot] opened Oct 17, 2026Bot·

  ·

• fix(sandbox): restore terminal modes after the harness exits

  #381·thomas-endres-tng opened Oct 16, 2026Contributor·1 task·

  ·

• feat(herdr): report pane lifecycle and sandboxed resume to herdr

  #372·aron98 opened Oct 16, 2026·

  ·
  1

  2

• fix(sandbox): skip toolchain folders in the .env scan and ask before starting when it is cut short

  #359·nhuelstng opened Oct 12, 2026Contributor·

  ·
  1

  2