feat: v11 scope security and ownPropertyOnly hardening (#898) - #938

Merged

harttle merged 24 commits into

nextfrom

feat/scope-security

Jul 23, 2026

Commits on Jul 15, 2026

feat: block dangerous scope keys and harden findScope (#898)

harttle
and
cursoragent
committed
docs: fix ownPropertyOnly default in security model

harttle
and
cursoragent
committed

Commits on Jul 18, 2026

feat: harden scope writes, iteration, and readSize (#898)

harttle
and
cursoragent
committed

Commits on Jul 19, 2026

fix: tie proto key blocking to ownPropertyOnly policy

harttle
and
cursoragent
committed
fix: revert ownPropertyOnly iteration hardening

harttle
and
cursoragent
committed
docs: fix ownPropertyOnly blocked-keys wording in options

harttle
and
cursoragent
committed
fix: unify blocked-key checks in findScope

harttle
and
cursoragent
committed
test: trim redundant scope-security integration tests

harttle
and
cursoragent
committed
refactor: move readSize to Context methods

harttle
and
cursoragent
committed
refactor: wrap plain scopes in Context.push()
harttle
committed

Commits on Jul 23, 2026