Pinky ad01b708f8 feat(buzz-agent): persist the OAuth token cache owner-only on Windows ...

On Windows the token cache was memory-only because std has no way to set
an owner-only DACL, and the Win32 calls need `unsafe`, which buzz-agent
forbids. Each process therefore ran its own sign-in, and Databricks
stayed gated off on Windows in the desktop app.

The new buzz-private-file crate holds that FFI behind a safe API, so
buzz-agent keeps `forbid(unsafe_code)` on every platform:

- `create_new` creates a file with the protected DACL `D:P(A;;FA;;;OW)`
  set atomically at creation, the Windows counterpart of `mode(0o600)`.
- `open_owned` opens without following a final link, refuses anything
  but a regular file owned by the process's default owner, and then
  re-applies that DACL on the open handle, like the Unix `O_NOFOLLOW` +
  `fchmod` repair.

auth.rs now persists and reads the cache on Windows through these, with
the same temp-file + rename lifecycle as Unix. Tests that were Unix-only
only because Windows had no disk cache now run on both, and Windows CI
runs the helper crate (including its elevated planted-owner and symlink
tests) plus the buzz-agent token-cache unit tests.

Signed-off-by: Pinky <5f5ab050ec58ae208332edd544ebf705221e24c1b86d82a6ca07038a7a8f6ac9@buzz.block.builderlab.xyz>

2026-09-30 11:05:14 -06:00

..

ci/minio

fix(ci): bootstrap the reusable MinIO image in GHCR (#7869)

2026-09-24 11:36:10 -04:00

ISSUE_TEMPLATE

docs(security): route reports through private advisories (#6728)

2026-08-24 15:07:08 -07:00

scripts

fix(ci): gate security review on repo write access (#7986)

2026-09-30 12:19:56 -04:00

workflows

feat(buzz-agent): persist the OAuth token cache owner-only on Windows

2026-09-30 11:05:14 -06:00

CODEOWNERS

Add mobile VISION (#7710)

2026-09-18 19:17:10 +00:00

PULL_REQUEST_TEMPLATE.md

docs(contributing): set PR expectations and require UI screenshots (#3140)

2026-07-27 11:57:09 -04:00