Quality sweep: tighten ssh argument handling and clear batched review findings - #7

Merged

tphakala merged 13 commits into

mainfrom

Sep 26, 2026

Commits on Sep 26, 2026

refactor(wire,seal): marshal messages in place, grow bodies exactly, reject invalid seal directions
tphakala
committed
bd1e33c
refactor(etcp): refuse to recover past the int32 sequence range and drop duplicated state
tphakala
committed
a9c0eac
refactor(console): share the resize step, report non-terminal open errors plainly, keep the Windows read buffer
tphakala
committed
12df311
fix(bootstrap): reject shell metacharacters, pass the user with -l and end ssh options with --
tphakala
committed
dd007df
fix(bootstrap): accept the user names OpenSSH accepts
tphakala
committed
5fe1946
fix(et): give ssh -G the same argument shape as the bootstrap ssh
tphakala
committed
8bd6bf1
fix(wire): let a reused read buffer grow geometrically again
tphakala
committed
095c724
perf(console): keep the Windows write count off the heap
tphakala
committed
4509d21
docs(etcp,console,wire): correct stale claims and pin untested boundaries
tphakala
committed
ae9b332
fix(et): refuse ssh:// destinations instead of mangling them
tphakala
committed
badca4d
fix(bootstrap): name the context error once when the cause wraps it
tphakala
committed
0370b04
test: pin the no-terminal classification, the since copy and the early message refusal
tphakala
committed
162208c
fix(bootstrap): reject glob characters in the destination
tphakala
committed
5e94391