mathias

mathias merged pull request mathias/gitea-mcp#66

2026-10-05 05:10:51 +00:00

fix(tools): reject case-variant arg keys and ref-shaped branch names (#65)

mathias created pull request mathias/hyperguild#175

2026-10-05 05:09:19 +00:00

fix(brain): wing indexes and the link check read through brainfs (#157, slice 5a)

mathias commented on issue mathias/hyperguild#169

2026-10-05 05:09:14 +00:00

brain_tunnel: path traversal lets an MCP token holder rewrite any file the pod can write

Gatekeeper verdict on PR #170, round 3 (6325c2b): PASS. The full review is on the PR. This is risk/high, so merging is Mathias's call. Nothing was merged.

Round-2 blockers: both…

mathias commented on pull request mathias/hyperguild#170

2026-10-05 05:09:13 +00:00

fix: brain_tunnel, brain_update and session_log confine caller-supplied paths (#169)

Adversarial review, round 3 (head 6325c2b): PASS

I found nothing that blocks. This PR is risk/high, so merging is Mathias's call and I have not merged it. Exploit inputs are left out…

mathias pushed to fix/brain-scan-root-157 at mathias/hyperguild

2026-10-05 05:09:05 +00:00

6e3c51c952 fix(brain): wing indexes and the link check read through brainfs (#157, slice 5a)

mathias created branch fix/brain-scan-root-157 in mathias/hyperguild

2026-10-05 05:09:05 +00:00

mathias pushed to fix/65-strict-args-branch-names at mathias/gitea-mcp

2026-10-05 05:05:01 +00:00

cd61239451 perf(tools): linear duplicate-key scan keyed on SimpleFold orbit

mathias commented on pull request mathias/hyperguild#170

2026-10-05 05:04:25 +00:00

fix: brain_tunnel, brain_update and session_log confine caller-supplied paths (#169)

Note for the session holding ~/worktrees/hg-tunnel: fix/tunnel-traversal was rebased onto main 77e32de and force-pushed with lease (expected 87fa28e). The new head is 6325c2b. It adds the…

mathias commented on issue mathias/hyperguild#157

2026-10-05 05:04:24 +00:00

SECURITY: symlinks anywhere in the Syncthing-shared brain dir are followed by search, vectorstore, context and graph readers

Slice 4 merged and live, v0.23.0 (PR #168 → 77e32de). Covers graphsync and wiki inventory/index, plus ReadRegular SameFile, which covers every reader. Pod runs ingestion:77e32de. The…

mathias commented on issue mathias/hyperguild#167

2026-10-05 05:04:20 +00:00

brainfs: fd-relative walk to close the directory-swap race (accepted residual from #157)

A related static case, from the PR #170 round-2 review (verified by execution). This issue so far covers read-side races. On write paths, a static intermediate in-brain directory symlink…

mathias commented on pull request mathias/gitea-mcp#66

2026-10-05 05:04:06 +00:00

fix(tools): reject case-variant arg keys and ref-shaped branch names (#65)

pr-gatekeeper verdict, round 2 — code APPROVED, NOT MERGED (PR mode, head 31a3dd3)

Round-1 blocker closed (checked by running it). Against parseArgs at 31a3dd3:

the #65 repro with a…

mathias commented on issue mathias/tapir#61

2026-10-05 05:04:02 +00:00

Uploads: choose the transcription language (Swedish / other / auto-detect), route to the right engine

Interim fix shipped and deployed: v0.33.0 (PR #62, merge b9643f5, CI green; production now runs image 813e679, which contains it plus the parallel v0.32.1 (#59, x/text) and #63 (#56) from…

mathias commented on issue mathias/hyperguild#83

2026-10-05 05:03:41 +00:00

ingestion: retry OIDC discovery instead of exiting on cold-boot 502

Closed by 432e09d. The retry itself shipped in 9a232ad; this commit adds the stated regression test against a real issuer. I extracted main()'s closure into buildJWTValidator without…

mathias pushed to main at mathias/hyperguild

2026-10-05 05:03:36 +00:00

b6ef11600b fix(deps): bump x/net and x/text past called vulns

432e09d122 test(ingestion): OIDC discovery 502s then 200 against a real issuer (#83)

Compare 2 commits »

mathias closed issue mathias/hyperguild#83

2026-10-05 05:03:36 +00:00

ingestion: retry OIDC discovery instead of exiting on cold-boot 502

mathias opened issue mathias/hyperguild#174

2026-10-05 05:03:30 +00:00

DetectTunnels blocks on a FIFO under wiki/, hanging brain_update and brain_write

mathias opened issue mathias/hyperguild#173

2026-10-05 05:03:27 +00:00

Writes follow a static intermediate in-brain directory symlink (brain_update, brain_tunnel, session_log)

mathias created pull request mathias/hyperguild#172

2026-10-05 05:02:50 +00:00

test(brainfs): per-caller in-brain symlink targets for slices 1-3 (#171)

mathias pushed to test/in-brain-targets-171 at mathias/hyperguild

2026-10-05 05:02:42 +00:00

bf3646c0c7 test(brainfs): per-caller in-brain symlink targets for slices 1-3 (#171)

mathias created branch test/in-brain-targets-171 in mathias/hyperguild

2026-10-05 05:02:42 +00:00