Joseph Doherty 34a7453ac3 fix(sessions): restrict the worker named pipe to the gateway's account (#187) ...

On Windows each worker pipe is created via NamedPipeServerStreamAcl with a
protected DACL granting FullControl only to the gateway process user (the
worker is launched under the same account) and denying NETWORK logons. On
non-Windows hosts (test matrix) the pipe uses PipeOptions.CurrentUserOnly.
Tests assert the factory ACL and the ACL read back from the created pipe
(Windows), and that a same-user client still connects.

2026-11-06 15:45:50 -05:00

..

plans

docs: point markdown backlogs at Gitea issues (status lives in Gitea)

2026-11-06 15:32:27 -05:00

runbooks

docs(runbook): record the 08-11/08-12 wonder deploys and the backup-chain technique

2026-08-12 04:20:38 -04:00

style-guides

docs(TST-27,WRK-26,CLI-42,CLI-43,IPC-28): P1 doc-drift batch, discharges IPC-29

2026-08-07 07:26:58 -04:00

superpowers/plans

docs(plan): AckMsg-as-operator alarm acknowledgement plan

2026-10-19 19:15:20 -04:00

AlarmClientDiscovery.md

fix(worker): review 2026-10-21 stream E — cache eviction, phased ReadBulk, poll/STA fault handling

2026-10-22 06:19:32 -04:00

AlarmProbeFindings.md

fix(worker): classify ack interop failures at the COM call; ignore late completions

2026-10-20 07:18:02 -04:00

Authentication.md

fix(auth): single-flight API-key verification misses; prune key-id index on eviction

2026-10-22 06:33:18 -04:00

Authorization.md

feat(security): opt-in authentication for /metrics (SEC-14)

2026-10-22 06:37:31 -04:00

ClientBehaviorFixtures.md

fix(CLI-40): scrub the credential from the redacted error's structured reply, route MXACCESS_FAILURE to MxAccess (Rust), fix Go Subscribe terminal-error drop

2026-08-07 07:04:56 -04:00

ClientLibrariesDesign.md

fix(CLI-40): scrub the credential from the redacted error's structured reply, route MXACCESS_FAILURE to MxAccess (Rust), fix Go Subscribe terminal-error drop

2026-08-07 07:04:56 -04:00

ClientPackaging.md

docs: record cycle-3 client release

2026-08-25 12:47:54 -04:00

ClientProtoGeneration.md

fix(IPC-27): close descriptor-freshness blind spots for enums, services, and Galaxy

2026-08-07 07:47:18 -04:00

Contracts.md

docs: alarm acknowledgement writes AckMsg as the authenticated operator

2026-10-19 19:44:21 -04:00

CrossLanguageSmokeMatrix.md

fix(CLI-47,CLI-48,CLI-49,CLI-50): align alarm feed clients

2026-08-25 11:25:47 -04:00

DashboardInterfaceDesign.md

docs: cover admin dashboard actions + API key Delete

2026-05-24 07:35:25 -04:00

DesignDecisions.md

fix(metrics-auth): DisableLogin no longer opens /metrics; log correlation pair; host-level tests

2026-10-22 06:47:36 -04:00

Diagnostics.md

fix(diagnostics): redact WriteSecuredBulk/WriteSecured2Bulk payloads (#193)

2026-11-06 15:45:50 -05:00

GalaxyRepository.md

fix(SEC-33,SEC-34): address code review — missed docs, key-id guard comment, test consolidation

2026-08-07 06:49:24 -04:00

GatewayConfiguration.md

fix(sessions): restrict the worker named pipe to the gateway's account (#187)

2026-11-06 15:45:50 -05:00

GatewayDashboardDesign.md

fix(dashboard): re-check hub viewers under lock before starting a pump; document alarm send-timeout tradeoff

2026-10-22 06:32:17 -04:00

GatewayProcessDesign.md

fix(worker): bound ShutdownAsync's envelope enqueue by the shutdown timeout

2026-10-22 06:10:52 -04:00

GatewayTesting.md

ci(TST-35): run gateway suite on windev nightly

2026-08-25 11:56:35 -04:00

Grpc.md

docs: dashboard live-data session reaping, subscriber-refusal code, distributor-based StreamEvents model

2026-10-22 08:43:41 -04:00

ImplementationPlanClients.md

rename: prefix gateway projects/namespaces with ZB.MOM.WW + sln→slnx

2026-05-23 16:22:23 -04:00

ImplementationPlanGateway.md

fix(dashboard): conditionally restore __Host- cookie prefix (SEC-03)

2026-07-09 14:53:19 -04:00

ImplementationPlanIndex.md

…

ImplementationPlanMxAccessWorker.md

rename: prefix gateway projects/namespaces with ZB.MOM.WW + sln→slnx

2026-05-23 16:22:23 -04:00

Metrics.md

fix(grpc): count a worker fault once, not once per StreamEvents subscriber

2026-10-22 08:42:35 -04:00

MxAccessWorkerInstanceDesign.md

docs(clients): ReadBulk timeout is one shared deadline for the command, not per tag

2026-10-22 08:46:29 -04:00

ParityFixtureMatrix.md

rename: prefix gateway projects/namespaces with ZB.MOM.WW + sln→slnx

2026-05-23 16:22:23 -04:00

Sessions.md

docs: dashboard live-data session reaping, subscriber-refusal code, distributor-based StreamEvents model

2026-10-22 08:43:41 -04:00

ToolchainLinks.md

docs(toolchain): windev protoc-gen-go-grpc updated to pinned 1.6.2

2026-08-18 07:23:37 -04:00

WorkerBootstrap.md

fix(worker): review 2026-10-21 stream E — cache eviction, phased ReadBulk, poll/STA fault handling

2026-10-22 06:19:32 -04:00

WorkerConversion.md

docs: document MxSparseArray default-fill writes and bare-name array AddItem

2026-06-18 03:00:19 -04:00

WorkerFrameProtocol.md

fix(IPC-33): bound the DrainEvents byte budget against the gRPC send cap, not just the pipe frame max

2026-08-20 09:30:39 -04:00

WorkerProcessLauncher.md

fix(IPC-36,IPC-37): guard secondary contracts

2026-08-25 11:14:14 -04:00

WorkerSta.md

fix(worker): review follow-up — ghost cache entries, ReadBulk dedupe/pumping, fault hygiene

2026-10-22 08:23:05 -04:00