Claude 5891a88d7e fix(daemon): timing-safe token comparison and daemon.json permission hardening ...

Use crypto.timingSafeEqual (via SHA-256 digests, length-independent) for the
three daemon token checks, and chmod daemon.json to 0600 after writes since
writeFileSync only applies mode on creation.

https://claude.ai/code/session_01LXZXzxi55sZ11DSyqWyBA2

2026-06-10 06:32:46 +00:00

..

__tests__

feat: record replay test videos (#712)

2026-06-09 14:17:32 +02:00

cli

perf: lazy load daemon handlers and report bundle size (#608)

2026-05-30 16:49:21 +02:00

commands

refactor(types): consolidate duplicated types across src/ into single sources of truth (#717)

2026-06-09 19:13:55 +02:00

compat

refactor(types): consolidate duplicated types across src/ into single sources of truth (#717)

2026-06-09 19:13:55 +02:00

core

refactor(types): consolidate duplicated types across src/ into single sources of truth (#717)

2026-06-09 19:13:55 +02:00

daemon

fix(daemon): timing-safe token comparison and daemon.json permission hardening

2026-06-10 06:32:46 +00:00

mcp

refactor(types): consolidate duplicated types across src/ into single sources of truth (#717)

2026-06-09 19:13:55 +02:00

platforms

refactor(types): consolidate duplicated types across src/ into single sources of truth (#717)

2026-06-09 19:13:55 +02:00

recording

build: enable noUncheckedIndexedAccess (#600)

2026-05-28 11:02:43 +02:00

replay

fix: improve React Navigation Maestro reliability (#628)

2026-05-30 22:52:45 +02:00

utils

fix(daemon): timing-safe token comparison and daemon.json permission hardening

2026-06-10 06:32:46 +00:00

alert-contract.ts

refactor(types): consolidate duplicated types across src/ into single sources of truth (#717)

2026-06-09 19:13:55 +02:00

android-adb.ts

fix: improve Android text entry stability (#540)

2026-05-15 12:16:06 +02:00

android-snapshot-helper.ts

feat: add Android snapshot helper (#454)

2026-04-27 16:01:37 -04:00

artifacts.ts

fix: restore helper subpath exports (#402)

2026-04-11 22:16:32 +02:00

backend.ts

refactor(types): consolidate duplicated types across src/ into single sources of truth (#717)

2026-06-09 19:13:55 +02:00

batch-contract.ts

perf: lazy load daemon handlers and report bundle size (#608)

2026-05-30 16:49:21 +02:00

batch.ts

feat: expose structured MCP command tools (#593)

2026-05-28 09:20:55 +02:00

bin.ts

perf: lazy load daemon handlers and report bundle size (#608)

2026-05-30 16:49:21 +02:00

cli-test-progress.ts

fix: stabilize Maestro replay on iOS (#713)

2026-06-09 14:12:57 +02:00

cli-test-trace.ts

refactor: deepen replay test attempt module (#715)

2026-06-09 15:07:30 +02:00

cli-test.ts

refactor: deepen replay test attempt module (#715)

2026-06-09 15:07:30 +02:00

cli.ts

fix: improve session ownership and recovery guidance (#674)

2026-06-02 14:06:00 -07:00

client-companion-tunnel-contract.ts

refactor: finish companion tunnel naming (#446)

2026-04-26 11:42:30 -04:00

client-companion-tunnel-worker.ts

refactor: add provider-first device lab tests (#542)

2026-05-18 14:50:52 +02:00

client-companion-tunnel.ts

fix: stabilize remote DevTools and install workflow (#490)

2026-05-01 07:27:36 -04:00

client-metro-companion.ts

refactor: extract companion tunnel core (#442)

2026-04-25 20:31:21 -04:00

client-metro.ts

fix: tighten env var surface (#560)

2026-05-19 17:11:31 +02:00

client-normalizers.ts

feat: record replay test videos (#712)

2026-06-09 14:17:32 +02:00

client-react-devtools-companion.ts

chore: add fallow quality gate (#449)

2026-04-26 13:53:35 -04:00

client-shared.ts

fix: scope runner diagnostics to sessions (#704)

2026-06-07 11:35:38 +02:00

client-types.ts

refactor(types): consolidate duplicated types across src/ into single sources of truth (#717)

2026-06-09 19:13:55 +02:00

client.ts

fix: improve session ownership and recovery guidance (#674)

2026-06-02 14:06:00 -07:00

command-catalog.ts

refactor(types): consolidate duplicated types across src/ into single sources of truth (#717)

2026-06-09 19:13:55 +02:00

companion-tunnel.ts

refactor: finish companion tunnel naming (#446)

2026-04-26 11:42:30 -04:00

contracts.ts

refactor(types): consolidate duplicated types across src/ into single sources of truth (#717)

2026-06-09 19:13:55 +02:00

daemon-client-progress.ts

fix: stabilize Maestro replay on iOS (#713)

2026-06-09 14:12:57 +02:00

daemon-client.ts

refactor(types): consolidate duplicated types across src/ into single sources of truth (#717)

2026-06-09 19:13:55 +02:00

daemon-error.ts

chore: codebase cleanup pass (dedup, types, dead code, cycles) (#420)

2026-04-17 13:22:46 +02:00

daemon-runtime.ts

perf: lazy load daemon handlers and report bundle size (#608)

2026-05-30 16:49:21 +02:00

daemon.ts

refactor: add provider-first device lab tests (#542)

2026-05-18 14:50:52 +02:00

finders.ts

fix: restore helper subpath exports (#402)

2026-04-11 22:16:32 +02:00

index.ts

fix: handle platform alerts (#562)

2026-05-20 14:51:17 +02:00

install-source.ts

fix: restore helper subpath exports (#402)

2026-04-11 22:16:32 +02:00

io.ts

feat: add runtime command boundary (#412)

2026-04-16 13:03:31 +02:00

metro-types.ts

chore: codebase cleanup pass (dedup, types, dead code, cycles) (#420)

2026-04-17 13:22:46 +02:00

metro.ts

refactor(types): consolidate duplicated types across src/ into single sources of truth (#717)

2026-06-09 19:13:55 +02:00

observability-redaction.ts

feat: export observability helpers (#444)

2026-04-25 20:24:01 -04:00

remote-config-core.ts

refactor: expose metro and remote config node apis (#372)

2026-04-10 13:03:13 +02:00

remote-config-schema.ts

refactor(types): consolidate duplicated types across src/ into single sources of truth (#717)

2026-06-09 19:13:55 +02:00

remote-config.ts

refactor: expose metro and remote config node apis (#372)

2026-04-10 13:03:13 +02:00

remote-connection-state.ts

perf: lazy load daemon handlers and report bundle size (#608)

2026-05-30 16:49:21 +02:00

runtime-contract.ts

chore: codebase cleanup pass (dedup, types, dead code, cycles) (#420)

2026-04-17 13:22:46 +02:00

runtime.ts

chore: codebase cleanup pass (dedup, types, dead code, cycles) (#420)

2026-04-17 13:22:46 +02:00

selectors.ts

fix: restore helper subpath exports (#402)

2026-04-11 22:16:32 +02:00

upload-client.ts

refactor: add provider-first device lab tests (#542)

2026-05-18 14:50:52 +02:00