3 people f53c1bb10b fix(mcp): address 14 audit findings across MCP module (#1094) ...

* fix(mcp): address 14 audit findings across MCP module

- Replace panicking assert! in new_with_config with Result return (Critical)
- Fix initialize() race condition using tokio::sync::OnceCell (High)
- Fix localhost check bypass via proper URL parsing (High)
- Extract shared stream_transport_send() to deduplicate stdio/unix send logic
- Use atomic write (tmp+rename) for config file persistence
- Filter SSE responses by request_id to prevent wrong-response dispatch
- Share a single reqwest::Client for OAuth via fallible OnceLock
- Log notification send errors instead of silently discarding
- Fix unwrap_or(0) that could steal id=0 responses
- Store InitializeResult in OnceCell so callers can access server capabilities
- Add redirect logging in OAuth discovery
- Reuse is_localhost_url() in auth.rs
- Add McpToolWrapper unit tests and regression tests
- URL-encode PKCE challenge for consistency

Co-Authored-By: Claude Opus 4.6 <[email protected]>

* chore: retrigger CI with skip-regression-check label

Co-Authored-By: Claude Opus 4.6 <[email protected]>

---------

Co-authored-by: Claude Opus 4.6 <[email protected]>

2026-03-13 17:37:51 +00:00

..

agent

fix: 5 critical/high-priority bugs (auth bypass, relay failures, unbounded recursion, context growth) (#1083)

2026-03-13 16:04:55 +00:00

channels

fix(http): replace .expect() with match in webhook handler (#1133)

2026-03-13 17:01:34 +00:00

cli

style: fix formatting in cli/mod.rs and mcp/auth.rs (#1071)

2026-03-12 13:21:49 -07:00

config

chore: periodic sync main into staging (resolved conflicts) (#1098)

2026-03-12 21:32:19 -07:00

context

fix: resolve deferred review items from PRs #883, #848, #788 (#915)

2026-03-11 07:12:45 +00:00

db

fix: resolve bug_bash UX/logging issues (#1054 #1055 #1058) (#1072)

2026-03-12 15:27:50 -07:00

document_extraction

feat: WASM channel attachments with LLM pipeline integration (#596)

2026-03-07 18:01:40 +00:00

estimation

Add automated QA: schema validator, CI matrix, Docker build, and P1 test coverage (#353)

2026-02-27 09:09:45 +04:00

evaluation

chore: remove dead code (#648) (#703)

2026-03-08 08:26:04 +00:00

extensions

fix(extensions): fix lifecycle bugs + comprehensive E2E tests (#1070)

2026-03-12 16:36:08 -07:00

history

fix(agent): block thread_id-based context pollution across users (#760)

2026-03-11 16:52:31 -07:00

hooks

feat: extend lifecycle hooks with declarative bundles (#176)

2026-02-19 23:00:54 +00:00

import

fix(ci): WASM WIT compat sqlite3 duplicate symbol conflict (#953)

2026-03-11 11:48:24 -07:00

llm

fix(security): make unsafe env::set_var calls safe with explicit invariants (#968)

2026-03-12 00:59:58 +00:00

observability

feat: 10 infrastructure improvements from zeroclaw (#126)

2026-02-17 19:35:56 +00:00

orchestrator

refactor: centralize test credential constants into testing::credentials (#829)

2026-03-10 13:25:32 -07:00

pairing

fix(security): use OsRng for all security-critical key and token generation (#519)

2026-03-06 02:36:38 +00:00

registry

fix(ci): disambiguate WASM bundle filenames to prevent tool/channel collision (#964)

2026-03-11 17:02:11 -07:00

safety

refactor: extract safety module into ironclaw_safety crate (#1024)

2026-03-12 17:54:24 +00:00

sandbox

fix(security): require explicit SANDBOX_ALLOW_FULL_ACCESS to enable FullAccess policy (#967)

2026-03-12 00:57:05 +00:00

secrets

refactor: centralize test credential constants into testing::credentials (#829)

2026-03-10 13:25:32 -07:00

setup

fix(setup): preserve model selection on provider re-run (#679) (#987)

2026-03-12 01:14:25 +00:00

skills

feat(skills): exclude_keywords veto in skill activation scoring (#688)

2026-03-08 20:23:41 -07:00

testing

feat(routines): enable tool access in lightweight routine execution (#257) (#730)

2026-03-12 11:38:27 -07:00

tools

fix(mcp): address 14 audit findings across MCP module (#1094)

2026-03-13 17:37:51 +00:00

transcription

feat: WASM channel attachments with LLM pipeline integration (#596)

2026-03-07 18:01:40 +00:00

tunnel

fix: drain tunnel pipes to prevent zombie process (#735)

2026-03-11 16:53:38 -07:00

webhooks

Add generic host-verified /webhook/tools/{tool} ingress (#757)

2026-03-11 03:36:25 +00:00

worker

fix: 5 critical/high-priority bugs (auth bypass, relay failures, unbounded recursion, context growth) (#1083)

2026-03-13 16:04:55 +00:00

workspace

chore: periodic sync main into staging (resolved conflicts) (#1098)

2026-03-12 21:32:19 -07:00

app.rs

fix: add tool_info schema discovery for WASM tools (#1086)

2026-03-12 16:30:38 -07:00

boot_screen.rs

Fix skills system: enable by default, fix registry and install (#300)

2026-02-23 10:04:02 -08:00

bootstrap.rs

fix(security): make unsafe env::set_var calls safe with explicit invariants (#968)

2026-03-12 00:59:58 +00:00

error.rs

refactor: make src/llm/ self-contained for crate extraction (#767)

2026-03-09 22:31:17 +00:00

lib.rs

Add generic host-verified /webhook/tools/{tool} ingress (#757)

2026-03-11 03:36:25 +00:00

main.rs

feat(cli): add cron subcommand for managing scheduled routines (#1017)

2026-03-12 12:47:23 -07:00

NETWORK_SECURITY.md

fix: Network Security Findings (#201)

2026-02-19 22:01:57 +00:00

service.rs

fix(service): set CLI_ENABLED=false in macOS launchd plist (#1079)

2026-03-12 15:26:37 -07:00

settings.rs

fix: job token budget, iteration cap → Failed, web cancel stops worker (#788)

2026-03-10 02:19:56 +00:00

timezone.rs

feat(timezone): add timezone-aware session context (#671)

2026-03-08 08:01:56 +00:00

tracing_fmt.rs

refactor: encapsulate leaked abstractions into owning modules (#778)

2026-03-10 04:39:51 +00:00

util.rs

merge: resolve conflicts for PR #800 and #822 into staging (#881)

2026-03-10 11:19:23 -07:00