clawbot b7d6ab99f4 Validate session snapshots and wipe keys on logout (closes #10) ...

Client.fromJSON checks every snapshot field and each key's decoded length
and throws an error naming the bad field. toJSON reads the token through a
new ApiClient.getAuthToken and throws when there is none. logout zeroes the
key buffers in place; collectionsSince re-checks for logout after its
request so it never decrypts with zeroed keys. The CLI now reports a
corrupt session file separately from a missing one.

Model: opus-5-5

2026-09-23 02:08:02 +02:00

..

api

Narrow the replay errno set to failures that prove no connection existed

2026-08-09 05:41:59 +00:00

auth

Red: mock server must serialize empty 2FA fields like Go does

2026-06-10 11:25:25 -07:00

cli

Sanitize file names taken from server metadata (closes #9)

2026-09-23 02:04:31 +02:00

client

Validate session snapshots and wipe keys on logout (closes #10)

2026-09-23 02:08:02 +02:00

crypto

Guard streamTagFinal() against being made eager

2026-08-09 02:45:35 +00:00

download

Sanitize file names taken from server metadata (closes #9)

2026-09-23 02:04:31 +02:00

filename

Sanitize file names taken from server metadata (closes #9)

2026-09-23 02:04:31 +02:00

integration

Green: unseal shared collection keys with the account keypair

2026-06-10 11:46:51 -07:00

library

Sanitize file names taken from server metadata (closes #9)

2026-09-23 02:04:31 +02:00

model

Sanitize file names taken from server metadata (closes #9)

2026-09-23 02:04:31 +02:00

packaging

Revert the 16 commits pushed to next on 2026-09-04 by an agent outside the managed fleet

2026-09-05 09:33:23 +00:00

retry

Narrow the replay errno set to failures that prove no connection existed

2026-08-09 05:41:59 +00:00

thumbnails

Port the quak CLI to the library API (closes #52)

2026-09-23 00:00:55 +02:00

smoke.test.ts

Rename quack to quak

2026-05-13 18:02:55 -07:00