first code audit#1

Open

sigma wants to merge 387 commits intoaudit-basefrom

This pull request is big! We're only showing the most recent 250 commits

Commits on Feb 7, 2026

Commits on Feb 10, 2026

Commits on Feb 11, 2026

Commits on Feb 12, 2026

Commits on Feb 20, 2026

fix: config.json permissions and secret handling
sigma
committed
fix: disable tmux automatic-rename to prevent wezterm tab title flicker

sigma
and
claude
committed
refactor: consolidate shell quoting with go-shellquote
sigma
committed
refactor: consolidate workspaceBackendFor into workspace package
sigma
committed
refactor: replace safePath with filepath-securejoin, delete no-op normalizeNixPackageName
sigma
committed
chore: add TODO annotations for AGENTS.md detection and skills.nix agent list
sigma
committed
refactor: architecture/placement cleanups (wezterm connect, claude tmpfiles, claude wrapper, skills trampolines)
sigma
committed
refactor: replace hand-rolled git/jj config parsers with git CLI and BurntSushi/toml
sigma
committed
refactor: centralize picker/connection flow into gateway.Connect
sigma
committed
refactor: template-ize nftables and dnsmasq config generation
sigma
committed
refactor: add LogViewer interface and fix shell command description
sigma
committed
refactor: make hardcoded values configurable (network prefix, username, workspace path, stateVersion)
sigma
committed
fix: update vendorHash and add git/jj to nativeCheckInputs for nix build
sigma
committed
fix: replace filepath-securejoin with lexical path validation
sigma
committed
fix: always run extra-container destroy during cleanup to remove unit files

sigma
and
claude
committed
fix: patch extra-container for nixos-init compat with latest nixpkgs-unstable

sigma
and
claude
committed
style: reformat patchedExtraContainer nix expression
sigma
committed
fix: replace bash -c with writeShellScript for identity service
sigma
committed
fix: use jj/git CLI for identity resolution instead of file parsing
sigma
committed
fix: update vendorHash after removing BurntSushi/toml dependency
sigma
committed
fix: make identity tests hermetic for nix build sandbox
sigma
committed
fix: set HOME in process env for jj identity tests
sigma
committed
fix: use Nix interpolation for store paths in identity script
sigma
committed
feat: add initCommands option to template config
sigma
committed
feat: add InitCommandResult type and wire into CreateResult
sigma
committed
feat: implement runInitCommands and integrate into Create()
sigma
committed
feat: display init command results in up and pick commands
sigma
committed
test: add tests for initCommands config and creator logic
sigma
committed
docs: document initCommands and per-project .forage/init
sigma
committed
ci: add GitHub Actions workflow to deploy docs to GitHub Pages
sigma
committed
fix: nix formatting issues
sigma
committed

Commits on Feb 21, 2026

Commits on Feb 24, 2026

Commits on Feb 25, 2026

Commits on Feb 26, 2026

Commits on Mar 20, 2026