Repository navigation

fix: 15 findings from the whole-repo code review - #130

Merged

PhantomDave merged 19 commits into

mainfrom

fix/review-findings

Oct 22, 2026

Merged

fix: 15 findings from the whole-repo code review#130
PhantomDave merged 19 commits into
mainfrom
fix/review-findings

Commits on Oct 22, 2026
- fix(core): bind the API to 127.0.0.1 instead of 0.0.0.0
  
  PhantomDave
  and
  claude
  committed
  c7a014c
- fix(core): apply the loopback Host/Origin guard to every route
  
  PhantomDave
  and
  claude
  committed
  afc5fc5
- fix(core): stop duplicating global env vars on every edit
  
  PhantomDave
  and
  claude
  committed
  7d3b857
- fix(core): resolve a process's env from the profile that launched it
  
  PhantomDave
  and
  claude
  committed
  eee995e
- fix(core): run overlapping restarts of a command one at a time
  
  PhantomDave
  and
  claude
  committed
  52af96b
- fix(core): don't report the force-kill before a respawn as a crash
  
  PhantomDave
  and
  claude
  committed
  2df1199
- fix(core): don't treat a dependency stopped by hand as ready
  
  PhantomDave
  and
  claude
  committed
  9f3fdec
- fix(core): time out command healthchecks that hang
  
  PhantomDave
  and
  claude
  committed
  91929a2
- fix(core): make command move and membership sync all-or-nothing
  
  PhantomDave
  and
  claude
  committed
  079a436
- fix(core): drain process output before a session closes its DB
  
  PhantomDave
  and
  claude
  committed
  6bf4ebd
- fix(config): reject unknown stop_signal names
  
  PhantomDave
  and
  claude
  committed
  70e42dd
- fix(core): follow chained ${VAR} references in env values
  
  PhantomDave
  and
  claude
  committed
  5d33433
- fix(ui,core): let a profile's description be cleared
  
  PhantomDave
  and
  claude
  committed
  e7bbad7
- fix(desktop): don't orphan managed processes when the sidecar is killed
  
  PhantomDave
  and
  claude
  committed
  8f8f8ff
- fix(desktop): offer updates instead of installing them at startup
  
  PhantomDave
  and
  claude
  committed
  2f3f02e
- test(core): make the env-var and profile-env tests pass on Windows
  
  PhantomDave
  and
  claude
  committed
  93bc02c
- fix(core): drop trailing log lines after close instead of waiting to drain
  
  PhantomDave
  and
  claude
  committed
  1436d78
- test(core): retry removing the env-var test's temp dir on Windows
  
  PhantomDave
  and
  claude
  committed
  acbcec9
- test(core): tolerate Windows' slow release of temp dirs under Bun 1.4.4
  
  PhantomDave
  and
  claude
  committed
  f4f620f

Commits

Commits on Oct 22, 2026