kimi-code/apps
Haozhe 71ff2a0fff
fix(kimi-code): close pre-trust-gate bare command resolution on Windows (#2695)
On Windows, cmd.exe / CreateProcess resolve a bare command name from the
current directory before PATH. Several startup-path child processes ran
before the workspace trust prompt, so a binary planted in an untrusted
workspace (stty.exe, npm.cmd, fd.exe) could execute before the user
confirmed trust.

- skip the POSIX-only stty save/restore entirely on win32
- defer fd detection from the KimiTUI field initializer to
  startBackgroundFdAutocomplete(), which runs after the trust gate
- add resolveCommandPath(): resolve commands through PATH (PATHEXT-aware
  on win32) to an absolute path and refuse hits inside the cwd
- route update-preflight package-manager spawns and the npm global-prefix
  probe through it
- run the workspace trust prompt before the migration branch as well,
  closing the blind spot where a pending ~/.kimi migration skipped it
- document the no-bare-command-before-trust-gate rule in
  apps/kimi-code/AGENTS.md
2026-08-11 12:53:52 +08:00
..
kimi-code fix(kimi-code): close pre-trust-gate bare command resolution on Windows (#2695) 2026-08-11 12:53:52 +08:00
kimi-inspect feat(agent-core-v2): add the L3 unit layer and the Feature seam (#2678) 2026-08-06 18:22:36 +08:00
vis fix(agent-core): replay v2 profile.bind records so resumed sessions keep their tools (#2567) 2026-08-03 20:59:46 +08:00
vscode ci: release packages (#2403) 2026-07-31 19:29:29 +08:00