[spark-compete wave 1] install & build right — 30 PRs → 6 consolidated commits#1455

Draft

vibeforge1111 wants to merge 6 commits into

spark-compete/wave1-install-build

Commits on Jun 24, 2026

wave1(input-hardening): module-name sanitization, SQL allowlist, malformed-script tolerance, unicode injection defense

authored and
Meta Alchemist
committed
wave1(approval-gating): require approval for container-escape and identity-mutation commands

authored and
Meta Alchemist
committed
wave1(cli-robustness): provider-key errors, doctor partial-report, trace dedup, SPARK_HOME write-guard, restart/SSH/install fixes

authored and
Meta Alchemist
committed
wave1(cli-ux): helpful bare-subcommand menus + platform-safe Desktop fallback

authored and
Meta Alchemist
committed
wave1(redaction): redact internal filesystem/secret paths from user-facing CLI output

authored and
Meta Alchemist
committed
wave1(misc-output): trace-ref cap, builder-overlap disclosure guard, --lines help, uninstall-feedback + list/output cleanups

authored and
Meta Alchemist
committed