Repository navigation

feat(file-safety): atomic text publish primitive + safeWriteJson refactor (A4, #1375) - #1395

Open

easonLiangWorldedtech wants to merge 39 commits into

Zoo-Code-Org:mainfrom

easonLiangWorldedtech:feat/atomic-publish-s3

Commits on Aug 27, 2026
- feat(file-safety): atomic text publish primitive + safeWriteJson refactor (A4, #1375)
  easonliang28
  committed
  a37dd24
Commits on Aug 30, 2026
- chore(ci): empty commit — re-trigger CI and the CodeRabbit current-head review gate (no code change)
  easonliang28
  committed
  7fd49bc
Commits on Oct 6, 2026
- merge(upstream): take main into the atomic publish unit
  easonLiangWorldedtech
  committed
  744f3a3
- fix(file-safety): keep the target in place and track the DACL dump on failure
  easonLiangWorldedtech
  committed
  8f9cf8b
- fix(file-safety): narrow the DACL dump path before the restore call
  easonLiangWorldedtech
  committed
  14d26dc
- test(utils): bring the safeWriteJson backup tests onto the copy semantics
  easonLiangWorldedtech
  committed
  df2694b
- fix(file-safety): give each write its own DACL dump and assert the save-failure fallback
  easonLiangWorldedtech
  committed
  db3cc26
- fix(file-safety): keep the unique DACL dump in the target directory
  easonLiangWorldedtech
  committed
  34b37ae
- test(file-safety): put the failure-path cases inside the describe that owns their setup
  easonLiangWorldedtech
  committed
  d3aec7c
- fix(file-safety): close the staging symlink hole, surface unconfirmed durability, drop the dead backup copy
  easonLiangWorldedtech
  committed
  8b838f3
- test(file-safety): assert the icacls arguments and the staged file cleanup
  easonLiangWorldedtech
  committed
  e7843fb
- fix(file-safety): re-create the staging directory if a concurrent write removes it mid-write
  easonLiangWorldedtech
  committed
  8e37bc1
- fix(utils): stage the JSON temp with the target mode instead of the process default
  easonLiangWorldedtech
  committed
  99fee2c
- fix(utils): keep the staged JSON file owner-writable and surface non-ENOENT stat failures
  easonLiangWorldedtech
  committed
  febe20d
- fix(utils): key the safeWriteJson lock on the canonical publish target
  easonLiangWorldedtech
  committed
  e367bdb
- test(file-safety): cover the staging-directory ownership rejection
  easonLiangWorldedtech
  committed
  5ce4613
Commits on Oct 7, 2026
- chore: trigger a fresh review pass at this head
  easonLiangWorldedtech
  committed
  964ec83
Commits on Oct 8, 2026
- fix(file-safety): never discard a committed file, and cover the retry/staging branches
  easonLiangWorldedtech
  committed
  ed72010
- test(file-safety): wrap the fsync spy so the durability case type-checks
  easonLiangWorldedtech
  committed
  1a0430c
- fix(file-safety): keep the write-permission contract and follow dangling links
  easonLiangWorldedtech
  committed
  7470a19
- fix(file-safety): apply the target mode with fchmodSync on the staged file
  easonLiangWorldedtech
  committed
  157946f
- test+fix(file-safety): pin the symlink-cycle guard and stop abandoning cleanup artifacts
  easonLiangWorldedtech
  committed
  41c1de3
- test(editor): assert the write-permission guard is handed the absolute target
  easonLiangWorldedtech
  committed
  f65e913
- fix(file-safety): keep the backup when the DACL restore failed, and close the fd on mode failure
  easonLiangWorldedtech
  committed
  843176e
- fix(file-safety): remove a partially copied backup, and cover the failed backup cleanup
  easonLiangWorldedtech
  committed
  4b2193c
- fix(file-safety): fail closed when a Windows target's DACL cannot be captured
  easonLiangWorldedtech
  committed
  4d45c87
- fix(file-safety): propagate a failed lstat in resolvePublishTarget, and cover the dump cleanup
  easonLiangWorldedtech
  committed
  aa85a3d
- fix(file-safety): judge the DACL capture by its artifact on both callbacks, and tolerate only ENOENT in the probe
  easonLiangWorldedtech
  committed
  4f0a85c
- test(file-safety): make the target-probe propagation tests load-bearing
  easonLiangWorldedtech
  committed
  fa740b0
- fix(file-safety): release a staging directory this call created, and pin the W_OK guard argument
  easonLiangWorldedtech
  committed
  823a0e7
- test(file-safety): cover the parent-directory create/verify failures in safeWriteText
  easonLiangWorldedtech
  committed
  568f981
- fix(file-safety): remove a partial backup after a successful publish, and cover the parent-dir failures
  easonLiangWorldedtech
  committed
  6df83d8
- test(file-safety): cover the zero-byte icacls dump in the win32 DACL capture
  easonLiangWorldedtech
  committed
  80de8fb
Commits on Oct 9, 2026
- fix(file-safety): classify staging-directory release errors instead of swallowing them
  easonLiangWorldedtech
  committed
  de893fa
- fix(file-safety): do not strand a staging directory when the post-create probe errors
  easonLiangWorldedtech
  committed
  110f944
- test(file-safety): exercise safeWriteText against a real filesystem
  easonLiangWorldedtech
  committed
  56dad4d
- test(file-safety): cover the win32 DACL restore retry that succeeds on the second attempt
  easonLiangWorldedtech
  committed
  4468ee7
- test(file-safety): cover the non-regular DACL dump branch
  easonLiangWorldedtech
  committed
  65e6dc9
- fix(file-safety): retry the staging temp unlink instead of swallowing its failure
  easonLiangWorldedtech
  committed
  1a2c41b

Commits

Commits on Aug 27, 2026

Commits on Aug 30, 2026

Commits on Oct 6, 2026

Commits on Oct 7, 2026

Commits on Oct 8, 2026

Commits on Oct 9, 2026