security(vscode): authenticate host→webview messages with a per-boot token - #378

Merged

nedtwigg merged 6 commits into

mainfrom

security/vscode-webview-message-token

Aug 16, 2026

Commits on Aug 16, 2026

security(vscode): authenticate host→webview messages with a per-boot token

nedtwigg
and
claude
committed
80c05af
security(vscode): make the message-token invariant a type error to break

nedtwigg
and
claude
committed
51acdd1
Update docs/specs/vscode.md

nedtwigg
and
dormouse-bot
authored
bf121e9
Update docs/specs/vscode.md

nedtwigg
and
dormouse-bot
authored
4f959c8
Update lib/src/lib/platform/vscode-adapter.test.ts

nedtwigg
and
dormouse-bot
authored
e7361db
Update lib/src/lib/platform/vscode-adapter.test.ts

nedtwigg
and
dormouse-bot
authored
09ac024