ZakiandClaude Opus 4.6 52d935d744 fix(agent): eliminate TOCTOU race in approval thread resolution (#1486) ...

Restructure process_approval() to hold the session lock for the entire
check-take-verify-mutate sequence. Previously, the lock was dropped after
taking the pending approval and re-acquired to verify request_id and set
state, creating a window where concurrent operations could modify thread
state or lose the pending approval.

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

2026-03-21 10:07:58 -07:00

..

agent

fix(agent): eliminate TOCTOU race in approval thread resolution (#1486)

2026-03-21 10:07:58 -07:00

channels

feat(workspace): layered memory with sensitivity-based privacy redirect (#1112)

2026-03-20 22:15:29 -07:00

cli

feat(llm): Add OpenAI Codex (ChatGPT subscription) as LLM provider (#1461)

2026-03-20 08:14:20 -07:00

config

feat(llm): add GitHub Copilot as LLM provider (#1512)

2026-03-21 00:02:00 -07:00

context

fix: register sandbox jobs in ContextManager for query tool visibility (#1426)

2026-03-19 23:22:34 -07:00

db

feat(webhooks): add public webhook trigger endpoint for routines (#736)

2026-03-20 15:50:31 -07:00

document_extraction

fix: eliminate panic paths in production code (#1184)

2026-03-15 03:17:03 +00:00

estimation

Add automated QA: schema validator, CI matrix, Docker build, and P1 test coverage (#353)

2026-02-27 09:09:45 +04:00

evaluation

chore: remove dead code (#648) (#703)

2026-03-08 08:26:04 +00:00

extensions

fix: persist startup-loaded MCP clients in ExtensionManager (#1509)

2026-03-20 23:57:19 -07:00

history

feat(webhooks): add public webhook trigger endpoint for routines (#736)

2026-03-20 15:50:31 -07:00

hooks

feat: extend lifecycle hooks with declarative bundles (#176)

2026-02-19 23:00:54 +00:00

import

fix(ci): WASM WIT compat sqlite3 duplicate symbol conflict (#953)

2026-03-11 11:48:24 -07:00

llm

feat(llm): add GitHub Copilot as LLM provider (#1512)

2026-03-21 00:02:00 -07:00

observability

feat: 10 infrastructure improvements from zeroclaw (#126)

2026-02-17 19:35:56 +00:00

orchestrator

feat: structured fallback deliverables for failed/stuck jobs (#236)

2026-03-19 13:43:04 -07:00

pairing

fix(security): use OsRng for all security-critical key and token generation (#519)

2026-03-06 02:36:38 +00:00

registry

refactor(registry): move MCP servers from code to JSON manifests (#1144)

2026-03-14 18:59:55 +00:00

safety

refactor: extract safety module into ironclaw_safety crate (#1024)

2026-03-12 17:54:24 +00:00

sandbox

feat(sandbox): add retry logic for transient container failures (#1232)

2026-03-16 07:53:45 +00:00

secrets

refactor(setup): extract init logic from wizard into owning modules (#1210)

2026-03-16 04:58:17 +00:00

setup

feat(llm): add GitHub Copilot as LLM provider (#1512)

2026-03-21 00:02:00 -07:00

skills

fix: eliminate panic paths in production code (#1184)

2026-03-15 03:17:03 +00:00

testing

fix(routines): surface errors when sandbox unavailable for full_job routines (#769)

2026-03-19 21:20:41 -07:00

tools

feat(workspace): layered memory with sensitivity-based privacy redirect (#1112)

2026-03-20 22:15:29 -07:00

transcription

feat(transcription): add Chat Completions API provider for audio transcription (#1130)

2026-03-16 07:57:58 +00:00

tunnel

fix: drain tunnel pipes to prevent zombie process (#735)

2026-03-11 16:53:38 -07:00

webhooks

Add generic host-verified /webhook/tools/{tool} ingress (#757)

2026-03-11 03:36:25 +00:00

worker

Use live owner tool scope for autonomous routines and jobs (#1453)

2026-03-20 10:12:32 -07:00

workspace

feat(workspace): layered memory with sensitivity-based privacy redirect (#1112)

2026-03-20 22:15:29 -07:00

app.rs

fix: persist startup-loaded MCP clients in ExtensionManager (#1509)

2026-03-20 23:57:19 -07:00

boot_screen.rs

Fix skills system: enable by default, fix registry and install (#300)

2026-02-23 10:04:02 -08:00

bootstrap.rs

fix(security): make unsafe env::set_var calls safe with explicit invariants (#968)

2026-03-12 00:59:58 +00:00

error.rs

feat(workspace): layered memory with sensitivity-based privacy redirect (#1112)

2026-03-20 22:15:29 -07:00

lib.rs

feat: chat onboarding and routine advisor (#927)

2026-03-19 22:20:34 -07:00

main.rs

feat(llm): Add OpenAI Codex (ChatGPT subscription) as LLM provider (#1461)

2026-03-20 08:14:20 -07:00

NETWORK_SECURITY.md

fix: Network Security Findings (#201)

2026-02-19 22:01:57 +00:00

profile.rs

feat: chat onboarding and routine advisor (#927)

2026-03-19 22:20:34 -07:00

service.rs

Add owner-scoped permissions for full-job routines (#1440)

2026-03-19 18:32:47 -07:00

settings.rs

feat(llm): add GitHub Copilot as LLM provider (#1512)

2026-03-21 00:02:00 -07:00

timezone.rs

feat(timezone): add timezone-aware session context (#671)

2026-03-08 08:01:56 +00:00

tracing_fmt.rs

refactor: encapsulate leaked abstractions into owning modules (#778)

2026-03-10 04:39:51 +00:00

util.rs

merge: resolve conflicts for PR #800 and #822 into staging (#881)

2026-03-10 11:19:23 -07:00