spawn/packages/cli/src
A 210519a590
fix(security): document PKCE migration path for DigitalOcean OAuth (#2056)
Adds explicit monitoring obligation and step-by-step migration
checklist to the DO_CLIENT_SECRET comment. Tracks when PKCE was last
verified unsupported (2026-03) and what to do when it becomes
available, addressing the technical debt tracking request from #2041.

Fixes #2041

Agent: security-auditor

Co-authored-by: B <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-01 04:11:40 -05:00
..
__tests__ fix(security): replace validateLaunchCmd blocklist with allowlist (#2053) 2026-03-01 03:12:27 -05:00
aws refactor: Remove dead exports across TypeScript modules (#2044) 2026-02-28 20:39:38 -05:00
daytona refactor: Remove dead exports across TypeScript modules (#2044) 2026-02-28 20:39:38 -05:00
digitalocean fix(security): document PKCE migration path for DigitalOcean OAuth (#2056) 2026-03-01 04:11:40 -05:00
gcp refactor: Remove dead exports across TypeScript modules (#2044) 2026-02-28 20:39:38 -05:00
hetzner fix: replace module-level process.env.HOME with homedir() in config paths (#2026) 2026-02-28 12:54:12 -08:00
local fix: extend HOME hardening to local.ts and commands.ts (missed by #2026/#2036) (#2037) 2026-02-28 15:27:29 -08:00
shared refactor: Remove dead exports across TypeScript modules (#2044) 2026-02-28 20:39:38 -05:00
sprite fix: extend HOME hardening to ssh-keys, sprite, gcp (3 files missed by #2026) (#2036) 2026-02-28 13:51:09 -08:00
commands.ts fix: spawn last reconnects to existing VM instead of always reprovisioning (#2051) 2026-03-01 01:49:36 -05:00
flags.ts feat: Bun workspace monorepo — packages/cli + packages/shared (#1853) 2026-02-23 22:07:05 -08:00
guidance-data.ts feat: Bun workspace monorepo — packages/cli + packages/shared (#1853) 2026-02-23 22:07:05 -08:00
history.ts refactor: Remove dead exports across TypeScript modules (#2044) 2026-02-28 20:39:38 -05:00
index.ts feat: Bun workspace monorepo — packages/cli + packages/shared (#1853) 2026-02-23 22:07:05 -08:00
manifest.ts refactor: Remove dead code and consolidate duplicate parseJson helpers (#1963) 2026-02-26 16:17:47 -05:00
picker.ts refactor: extract shared TTY scaffolding in picker.ts (#1999) 2026-02-27 13:17:01 -05:00
security.ts fix(security): replace validateLaunchCmd blocklist with allowlist (#2053) 2026-03-01 03:12:27 -05:00
unicode-detect.ts feat: Bun workspace monorepo — packages/cli + packages/shared (#1853) 2026-02-23 22:07:05 -08:00
update-check.ts refactor: Remove dead exports across TypeScript modules (#2044) 2026-02-28 20:39:38 -05:00