v0.1.7

v0.1.7

Features

• compat: support DSH 0.2.1-alpha.3 through 0.2.1-rc.2 (#13) (eaf2d8f)
• plugin: three-state root access with cross-mode enforcement (B9) (#12) (55c6260)
• client: fork the native files tree to browse additional roots (P11) (ffed061)
• client: fork ui-open-in-app to open the selected root (P9) (45def89)
• client: confirm read-write upgrade through a layered DSH modal (P8) (de163c7)
• client: badge beside the name, every path its own copy control (6ed341d)
• client: style the add-row access picker as a host dropdown (6ca3dcb)
• client: refresh the take-over tree in place, without the flash (9fe0ad4)
• client: move the take-over reload into the Files header (89bdf75)
• client: show the selected root's full path beside the switcher (0c50edc)
• client: browse additional roots from the Files header (252b927)
• client: icon-only gear launcher ahead of the Files reload button (79f6934)
• scope: describe per-root and per-platform authority to the model (a7f3d20)
• scope: cap additional-root writes per tool through the dispatch context (1758885)
• command: expose per-root access on the command and the panel (ff0df46)
• sandbox: grant only writable additional roots on every surface (df5e98b)
• registry: record per-root read-only access without a version bump (99a443f)
• providers: fail closed when a foreign plugin owns ctx.fs or ctx.sandbox (2a36d5f)
• registry: cap stored additional roots per primary root (067933f)

Bug Fixes

• plugin: align related reads and restore StrictMode guards (2cf3f67)
• plugin: bound the read surface, the pane session, and nested-modal Tab (9011378)
• client: pin the fork's remote compile face to the dev-pin signature (c7b27b2)
• client: adopt the refreshed root row for the current selection (a5d9e55)
• client: reconcile the root selection after manager close or a failed list (eb30b86)
• client: satisfy the fork's upstream names on every supported manifest (c75777a)
• client: hide the native open-in-app item through the data-slot anchor (P10) (ebc2264)
• publish root order and gate journey shell assertions (b9b8500)
• tests: pin native Windows ACL utilities independently of PATH (9c2a27a)
• preserve legacy panel responses and report fail-closed access accurately (4f1ae1e)
• panel: keep the revive route open at the root limit and never send an unnamed access (1c5b769)
• command: send an access level only when the operator names one (ebae13a)
• tests: parse ConPTY verdicts by marker instead of line equality (6964ea3)
• tests: make the new PowerShell write probes catch terminating errors (8e770c9)
• registry: decide revive from the fresh classification (395e32b)
• registry: reclassify before every mutation (a3240b1)
• windows: make the standalone ACL runner resolvable from an installed plugin (7702ffb)
• pack-check: launch pnpm through its exported entry so Windows can pack (d2f2605)
• harden B1-B3 multi-root consumers and add native Windows coverage (9f9a1df)

Documentation

• release: prepare v0.1.7 (cab047a)
• readme: drop the stale unreleased notice and align command comments (75f667c)
• streamline README and add user guide (3de8f21)
• record P3-P5 in the files-header plan and the roadmap ledger (50c3805)
• record the green PR review and Windows robustness matrix (601e8e2)
• record the PR #10 review rework (45ff2fd)
• record the green cross-platform CI evidence for B4-B8 (2b7e26c)
• record the B4-B8 access model, limits, and provider gate (923f6a9)
• record defect #7 and the final 11x3 CI evidence for the B1-B3 hardening (2133605)
• record B1-B3 hardening, Windows limits and install recovery; fix journey JSON path checks (78b5595)
• record v0.1.6 release (01d5ea9)

Other Changes

• release: v0.1.7 (9e821ae)
• Merge pull request #11 from cherrchen/feat/p2-uiux-adjust (a43cbc0)
• Merge pull request #10 from cherrchen/feat/b4-b8-p2 (c79228f)
• windows: preserve ACL control while building foreign-owned fixtures (266669f)
• tests: annotate the intentional control-character regex (f4fc3df)
• journey: prove per-tool caps through the real bash tool (980b925)
• B1–B3 hardening and full Windows validation (#9) (a385f06)
• pin Windows Ctrl+C forwarding, ACL-verified lockout and MSYS startup parity (1f72fb5)
• lock the foreign-owned root with a deny ACE and pick an interruptible Ctrl+C probe (a0cfe22)
• run native Windows smokes and verify the packed artifact (af962fd)

Full Changelog: v0.1.6...v0.1.7