didericis/bot-bottle
1
0
Fork 0
Code Issues 33 Pull Requests 9 Actions Packages Releases Wiki Activity

fix: quality cleanup - shared storage permissions (chunk 11/11) #532

Closed
didericis-codex wants to merge 1 commits from fix/shared-storage-permissions into fix/bounded-heavy-operations
pull from: fix/shared-storage-permissions
merge into: didericis:fix/bounded-heavy-operations
Conversation 0 Commits 1 Files Changed 5
+124 -18
didericis-codex commented 2026-07-27 00:47:25 -04:00
Collaborator
Copy Link
Copy Source

Stacked on #531. Final quality-cleanup hardening chunk tracked by #444 and PRD 0082.

  • Creates and verifies the shared SQLite directory and database with private modes before SQLite can write control-plane state.
  • Repairs existing modes and propagates permission-enforcement failures instead of continuing best-effort.
  • Applies gateway credential directory and file modes after copying, consistently across Docker, Apple Container, and Firecracker transports.
  • Keeps the policy in the shared store and backend-neutral gateway provisioner rather than duplicating it in concrete backends.

Validation: all 2,520 unit tests pass; affected-file Pyright reports 0 errors; affected-file Pylint scores 10.00/10; git diff --check passes.

Refs #444.

Stacked on #531. Final quality-cleanup hardening chunk tracked by #444 and PRD 0082. - Creates and verifies the shared SQLite directory and database with private modes before SQLite can write control-plane state. - Repairs existing modes and propagates permission-enforcement failures instead of continuing best-effort. - Applies gateway credential directory and file modes after copying, consistently across Docker, Apple Container, and Firecracker transports. - Keeps the policy in the shared store and backend-neutral gateway provisioner rather than duplicating it in concrete backends. Validation: all 2,520 unit tests pass; affected-file Pyright reports 0 errors; affected-file Pylint scores 10.00/10; git diff --check passes. Refs #444.
didericis added 1 commit 2026-07-27 00:59:58 -04:00
fix: enforce shared storage permissions
lint / lint (push) Failing after 1m2s
Details
test / image-input-builds (pull_request) Successful in 1m1s
Details
test / unit (pull_request) Successful in 55s
Details
test / integration-docker (pull_request) Failing after 1m3s
Details
test / coverage (pull_request) Has been skipped
Details
tracker-policy-pr / check-pr (pull_request) Failing after 14m45s
Details
38a67d2767
didericis force-pushed fix/shared-storage-permissions from 7d0e57fbe6 to 38a67d2767 2026-07-27 00:59:58 -04:00 Compare
didericis-codex closed this pull request 2026-07-27 01:36:12 -04:00
Some checks are pending
lint / lint (push) Failing after 1m2s
Details
test / image-input-builds (pull_request) Successful in 1m1s
Details
test / unit (pull_request) Successful in 55s
Details
test / integration-docker (pull_request) Failing after 1m3s
Details
test / coverage (pull_request) Has been skipped
Details
tracker-policy-pr / check-pr (pull_request) Failing after 14m45s
Details

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Compat/Breaking
Breaking change that won't be backward compatible
 Kind/Bug
Something is not working
 Kind/Documentation
Documentation changes
 Kind/Enhancement
Improve existing functionality
 Kind/Feature
New functionality
 Kind/Security
This is security issue
 Kind/Testing
Issue or pull request related to testing
Priority
Critical
1
The priority is critical
Priority
High
2
The priority is high
Priority
Low
4
The priority is low
Priority
Medium
3
The priority is medium
Status
Abandoned
3
Somebody has started to work on this but abandoned work
Status
Blocked
1
Something is blocking this issue or pull request
Status
Need More Info
2
Feedback is required to reproduce issue or to continue work
Status/Needs Triage
Awaiting initial classification
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
didericis-claude (didericis (claude)) didericis-codex (didericis (codex)) didericis-gemma (gemma) didericis
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: didericis/bot-bottle#532
Delete Branch "fix/shared-storage-permissions"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?