Kaoru0822 d0ff57a45c fix(domain): report target read-permission denials as access_denied ...

Opening a target the current user cannot read returned
`target_unavailable`, the same code as a missing target, although the
reason named EACCES. Clients that branch on the error code could not choose
read-access recovery, contrary to the boundary contract that separates host
permission denial from unavailable targets.

A BinaryTargetError whose cause is an OS EACCES or EPERM now records that
system code and projects as `access_denied` with `system_code`, the
filesystem-read boundary, and read-access remediation, while keeping its
specific reason and path. This covers target files, app bundle paths and
Info.plist reads, and selected plist reads, since every site passes the OS
error as the cause.

Fixes #1188

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-09 03:56:38 +00:00

..

acceptance

fix(cli): cancel routed JavaScript analysis in rea analyze (#1156)

2026-10-09 09:48:10 +08:00

boundary

fix(domain): report target read-permission denials as access_denied

2026-10-09 03:56:38 +00:00

composition

fix(application): budget bridge candidate projection by bytes

2026-10-09 05:15:23 +08:00

conformance

fix(hopper): reserve Linux demo application before launch (#1158)

2026-10-09 10:14:25 +08:00

evaluation

test: prune redundant cases and promote configuration lifecycle coverage

2026-10-09 02:58:03 +08:00

fixtures

perf(mcp): reuse input schemas without losing caller guidance (#1162)

2026-10-09 11:38:07 +08:00

process-global

feat(clients): register Grok Build and Grok Bot during setup (#1134)

2026-10-09 06:08:29 +08:00

support

test: consolidate failure guards and trim unused fixture APIs

2026-10-09 03:13:43 +08:00

processOwnershipRunner.ts

test(process): retire native caches at worker teardown

2026-10-09 04:12:49 +08:00