All pull requests

Pull requests

• docs(uninstall): add an uninstall page and a test that keeps it in sync with the code

  #451·nhuelstng opened Nov 1, 2026Contributor·

  ·
  1

• Fix/serve desktop projects and password

  #447·thomas-endres-tng opened Nov 1, 2026Contributor·

  ·
  1

• fix(security): Filesystem grants derived from the inner command must not follow interpreter or symlink content that lives where the confined process can write, and each derived directory needs a bounded taint decision.

  do-not-merge
  #446·github-actions[bot] opened Oct 31, 2026Bot·

  ·
  3

• fix(security): Route construction for approved skills at launch must stamp the same mount ownership field the serve-mode installer sets, so the existing ownership guard can protect a running skill's route from replacement.

  do-not-merge
  #445·github-actions[bot] opened Oct 31, 2026Bot·

  ·
  3

• fix(security): The Linux kernel port grants are enforced with no address dimension, so the security guarantee, the launch-time audit notice, and the accepted-risk record must state the residual reach of every granted port instead of implying loopback-only mediation.

  do-not-merge
  #444·github-actions[bot] opened Oct 31, 2026Bot·

  ·
  5

• fix(sandbox): point zsh TMPPREFIX into TMPDIR on macOS

  #443·NoRiceToday opened Oct 30, 2026Contributor·

  ·
  1

• fix(cli): keep OpenCode v2 model state across omac sessions

  #441·NoRiceToday opened Oct 29, 2026Contributor·

  ·
  1

• feat(cli): scope protected-file warnings to a project

  #440·NoRiceToday opened Oct 29, 2026Contributor·

  ·
  1

• feat(start): add --skip-unregistered to launch despite unregistered skills

  #436·nhuelstng opened Oct 28, 2026Contributor·

  ·
  1

  1

• feat(cli): omac approvals, register summary and docs (#428, 4/4)

  #433·mathiasburger opened Oct 27, 2026Contributor·

  ·

• feat(approver): approval dialog, verdict store and wiring (#428, 3/4)

  #432·mathiasburger opened Oct 27, 2026Contributor·

  ·

• feat(facade): closed-world gate for declared sidecar endpoints (#428, 2/4)

  #431·mathiasburger opened Oct 27, 2026Contributor·

  ·

• feat(approval): endpoint declaration schema, matcher and path cleaning (#428, 1/4)

  #430·mathiasburger opened Oct 27, 2026Contributor·

  ·

• refactor(vm): reach the VM's Docker only over SSH

  up for discussion
  #427·NoRiceToday opened Oct 27, 2026Contributor·

  ·

• feat(vm): VM lifecycle manager

  up for discussion
  #424·NoRiceToday opened Oct 26, 2026Contributor·3/8·

  ·

• feat(skills): builtin omac-vm skill

  up for discussion
  #423·NoRiceToday opened Oct 26, 2026Contributor·8/8·

  ·

• feat(cli): omac vm exec

  up for discussion
  #422·NoRiceToday opened Oct 26, 2026Contributor·7/8·

  ·

• feat(vm): worktree copy, remote exec and JDK provisioning

  up for discussion
  #421·NoRiceToday opened Oct 26, 2026Contributor·6/8·

  ·

• feat(cli): attach sessions to the omac VM with --vm

  up for discussion
  #420·NoRiceToday opened Oct 26, 2026Contributor·5/8·

  ·

• feat(cli): omac vm subcommand

  up for discussion
  #419·NoRiceToday opened Oct 26, 2026Contributor·4/8·

  ·

• feat(vm): limactl, SSH, key, docker-probe and image-pull seams

  up for discussion
  #418·NoRiceToday opened Oct 26, 2026Contributor·2/8·

  ·

• feat(vm): VM config, state and Lima config rendering

  up for discussion
  #417·NoRiceToday opened Oct 26, 2026Contributor·1/8·

  ·

• fix(security): Activation candidates must be resolved against symlinks before root policy checks so linked targets cannot bypass the allowlist.

  do-not-merge
  #412·github-actions[bot] opened Oct 24, 2026Bot·

  ·

• fix(security): The approval snapshot and the integrity hash must apply one shared exclusion predicate so unreviewed files cannot be frozen.

  do-not-merge
  #411·github-actions[bot] opened Oct 24, 2026Bot·

  ·

• fix(security): Upgrade-time approval migration must anchor on the hash recorded at registration so mutated skill content cannot inherit trust.

  do-not-merge
  #410·github-actions[bot] opened Oct 24, 2026Bot·

  ·