Repository navigation
Fixes from the docs: pairing security, hand-off permissions, updates, uninstaller - #44
Merged
Merged
Conversation
…ravity stays read-only unless the manager has full access, and says so
…one with their secrets masked (URL userinfo and query values, token/key flags and assignments, Bearer values)
…ds aside then, so the two never share the shortcut
…le the daily check at launch, and say so when a build has no update feed
…), and the copyright is xBot's own
… pairing's Keychain items and drops 1.x wording; create-dmg's usage and hints match the release; sign-mac-remote's DerivedData is repo-local
…n test runs only for the CLIs that can plan
…rketer replaces the Product planner that overlapped the Product manager in suggested agents
…urns, the 2.0 uninstaller and Info.plist, ⌘↩ and Home's four CLIs, as the code now is
… the key used; iCloud batches authenticated - Invites are withdrawn when the pairing sheet closes, expire after 10 minutes, and are removed at relaunch if never used. Only paired devices' keys and live invites are accepted, on both lanes; other keys in the Keychain open nothing. The sheet says how long the code works and offers a new one once it expires. - A code pairs one device: the phone sends an installation id in its hello; the first installation to use a key is the device, and the key is refused from any other. - Local lane: the listener's PSK selection block records which key each handshake used (PSKChoices); a hello naming any other identity closes the connection. - iCloud lane: sender, recipient and sequence number are AES-GCM authenticated data; only accepted batches move the replay mark, and the mark persists across relaunches on both sides. Every phone batch starts with its hello, checked against the paired installation. Mail from keys the Mac doesn't accept is deleted unread. - iOS: "Paste a pairing link" (clipboard or a text field); opening a pairing link while paired asks "Replace the pairing with <Mac>?". - Docs: security and iPhone pages describe the new behaviour; fixed weaknesses removed.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Fixes for what the documentation rewrite (#43) found. Two parts, each test-first.
Pairing and the remote
xbot://pairlink while paired asks before replacing the pairing.Everything else
Info.plist: version fromXBOT_VERSION(2.0.0-dev), copyright no longer credits the old engine.uninstall-xbot.commandremoves the automations LaunchAgent and the pairing keys;create-dmg.shandsign-mac-remote.shtidied.HarnessKindcomment fixed; the live plan test only runs for CLIs that can plan; dead iOS code removed; Compass became Spark (Marketer).Verified: 473 package tests pass (30 new; new remote suites run 10×). Live phone tests against a debug Mac: new chat, abilities, org chart, terminal, world sync, projects all pass (abilities flaked once on the first ability refresh after relaunch, then passed). iOS builds. Phone and Mac must be updated together (older phones without an install id are refused).