fix(secrets,worktrees): fix secret redaction leakage and prune stale worktrees - #632

Closed

euxaristia wants to merge 26 commits into

Gitlawb:mainfrom

euxaristia:fix/secrets-redaction-and-worktrees

Commits on Jul 22, 2026

fix(secrets,worktrees): fix secret redaction leakage and prune stale worktrees
euxaristia
committed
fa6dfac
fix(secrets,worktrees): close tail-leak edge case and worktree data-loss risk
euxaristia
committed
cfba521
fix(worktrees): check exit codes on removal, fail closed on inspection errors
euxaristia
committed
548cdfe
fix(secrets,worktrees): catch appended-suffix keys and scope pruning to owned worktrees
euxaristia
committed
008220b
fix(worktrees): make nested-activity test exercise the deep walk it claims to
euxaristia
committed
e70513f
fix(worktrees): lock zero-created worktrees and treat ignored files as dirty
euxaristia
committed
59939e8
fix(worktrees): release Zero's Prepare lock so Clean can reclaim finished worktrees
euxaristia
committed
fc516b5
fix(worktrees): normalize release path, aggregate Clean errors, unlock deleted worktrees
euxaristia
committed
477dc28
style(worktrees): align aggregation test comments to gofmt output
euxaristia
committed
ab34fb6
fix(worktrees,cli): restore reuse lease and scope unlock to owned locks
euxaristia
committed
c83e81f
fix(worktrees,cli): reject in-use leases, validate before cleanup, add release -C
euxaristia
committed
cf0a1cf
test(worktrees): canonicalize test roots to physical spelling
euxaristia
committed
e90ef18
fix(worktrees): preserve orphaned commits, verify release ownership, canonicalize base dir

euxaristia
and
claude
committed
10e9f9c
fix(worktrees): recoverable PID leases and reclaimable released worktrees

euxaristia
and
claude
committed
aafb4b4
fix(worktrees): address review feedback on lease detection and release safety
euxaristia
committed
6c9a9ae
fix(worktrees): canonicalize paths for clean/release ownership checks
euxaristia
committed
8419e9a
fix(worktrees,secrets): address jatmn review findings on #632
euxaristia
committed
b225c8a
fix(worktrees): prove Prepare ownership with a git-admin marker
euxaristia
committed
88ca1fe
fix(cli): complete worktrees release in shell completions
euxaristia
committed
cd5991e
test(worktrees,cli): add coverage for linked-worktree Clean, forged lease rejection, and completions
euxaristia
committed
21bfdbc

Commits on Jul 23, 2026

Navigation Menu

Uh oh!

fix(secrets,worktrees): fix secret redaction leakage and prune stale worktrees - #632

fix(secrets,worktrees): fix secret redaction leakage and prune stale worktrees#632
euxaristia wants to merge 26 commits into
Gitlawb:mainfrom
euxaristia:fix/secrets-redaction-and-worktrees

Commits on Jul 22, 2026

fix(secrets,worktrees): fix secret redaction leakage and prune stale worktrees

fix(secrets,worktrees): close tail-leak edge case and worktree data-loss risk

fix(worktrees): check exit codes on removal, fail closed on inspection errors

fix(secrets,worktrees): catch appended-suffix keys and scope pruning to owned worktrees

fix(worktrees): make nested-activity test exercise the deep walk it claims to

fix(worktrees): lock zero-created worktrees and treat ignored files as dirty

fix(worktrees): release Zero's Prepare lock so Clean can reclaim finished worktrees

fix(worktrees): normalize release path, aggregate Clean errors, unlock deleted worktrees

style(worktrees): align aggregation test comments to gofmt output

fix(worktrees,cli): restore reuse lease and scope unlock to owned locks

fix(worktrees,cli): reject in-use leases, validate before cleanup, add release -C

test(worktrees): canonicalize test roots to physical spelling

fix(worktrees): preserve orphaned commits, verify release ownership, canonicalize base dir

fix(worktrees): recoverable PID leases and reclaimable released worktrees

fix(worktrees): address review feedback on lease detection and release safety

fix(worktrees): canonicalize paths for clean/release ownership checks

fix(worktrees,secrets): address jatmn review findings on #632

fix(worktrees): prove Prepare ownership with a git-admin marker

fix(cli): complete worktrees release in shell completions

test(worktrees,cli): add coverage for linked-worktree Clean, forged lease rejection, and completions

Commits on Jul 23, 2026

fix(redaction,worktrees): sort extra secret values by length descending and canonicalize worktree paths

fix(secrets,worktrees): restore Anthropic key redaction and handle legacy worktree cleanup

Commits on Jul 24, 2026

fix(secrets): add bash output redaction regression test for Anthropic API keys

Commits on Jul 30, 2026

fix(worktrees): touch worktree mtime on reuse to prevent stale pruning

fix(worktrees): properly handle os.Chtimes error on reused worktree path

Commits on Jul 31, 2026

fix(worktrees,secrets): unlock using porcelain entry path, set RepoRoot to primaryRoot, and add anthropic_key pattern