ZakiandClaude Opus 4.6 74cbe5c2ea fix(security): eliminate TOCTOU race in approval request_id check (#1486) ...

Hold session lock for the entire take-verify sequence so pending approval
cannot be lost if a concurrent operation modifies the thread between
take and restore.

Closes #1486

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

2026-03-22 23:26:49 -07:00

..

agent

fix(security): eliminate TOCTOU race in approval request_id check (#1486)

2026-03-22 23:26:49 -07:00

channels

feat(workspace): multi-scope workspace reads (#1117)

2026-03-22 22:56:26 -07:00

cli

fix(tests): eliminate env mutex poison cascade (#1558)

2026-03-22 14:36:24 -07:00

config

feat(workspace): multi-scope workspace reads (#1117)

2026-03-22 22:56:26 -07:00

context

fix: register sandbox jobs in ContextManager for query tool visibility (#1426)

2026-03-19 23:22:34 -07:00

db

feat(workspace): multi-scope workspace reads (#1117)

2026-03-22 22:56:26 -07:00

document_extraction

fix: eliminate panic paths in production code (#1184)

2026-03-15 03:17:03 +00:00

estimation

Add automated QA: schema validator, CI matrix, Docker build, and P1 test coverage (#353)

2026-02-27 09:09:45 +04:00

evaluation

chore: remove dead code (#648) (#703)

2026-03-08 08:26:04 +00:00

extensions

fix(tests): eliminate env mutex poison cascade (#1558)

2026-03-22 14:36:24 -07:00

history

feat(webhooks): add public webhook trigger endpoint for routines (#736)

2026-03-20 15:50:31 -07:00

hooks

feat: extend lifecycle hooks with declarative bundles (#176)

2026-02-19 23:00:54 +00:00

import

fix(ci): WASM WIT compat sqlite3 duplicate symbol conflict (#953)

2026-03-11 11:48:24 -07:00

llm

fix: generate Mistral-compatible 9-char alphanumeric tool call IDs (#1242)

2026-03-22 18:07:03 -07:00

observability

feat: 10 infrastructure improvements from zeroclaw (#126)

2026-02-17 19:35:56 +00:00

orchestrator

fix(tests): eliminate env mutex poison cascade (#1558)

2026-03-22 14:36:24 -07:00

pairing

fix(security): use OsRng for all security-critical key and token generation (#519)

2026-03-06 02:36:38 +00:00

registry

refactor(registry): move MCP servers from code to JSON manifests (#1144)

2026-03-14 18:59:55 +00:00

safety

refactor: extract safety module into ironclaw_safety crate (#1024)

2026-03-12 17:54:24 +00:00

sandbox

feat(sandbox): add retry logic for transient container failures (#1232)

2026-03-16 07:53:45 +00:00

secrets

refactor(setup): extract init logic from wizard into owning modules (#1210)

2026-03-16 04:58:17 +00:00

setup

fix(tests): eliminate env mutex poison cascade (#1558)

2026-03-22 14:36:24 -07:00

skills

fix: eliminate panic paths in production code (#1184)

2026-03-15 03:17:03 +00:00

testing

Fix owner-scoped message routing fallbacks (#1574)

2026-03-22 20:33:52 -07:00

tools

feat(workspace): multi-scope workspace reads (#1117)

2026-03-22 22:56:26 -07:00

tunnel

feat(ux): complete UX overhaul — design system, onboarding, web polish (#1277)

2026-03-21 23:50:49 -07:00

webhooks

Add generic host-verified /webhook/tools/{tool} ingress (#757)

2026-03-11 03:36:25 +00:00

worker

Fix owner-scoped message routing fallbacks (#1574)

2026-03-22 20:33:52 -07:00

workspace

feat(workspace): multi-scope workspace reads (#1117)

2026-03-22 22:56:26 -07:00

app.rs

feat(workspace): multi-scope workspace reads (#1117)

2026-03-22 22:56:26 -07:00

boot_screen.rs

feat(ux): complete UX overhaul — design system, onboarding, web polish (#1277)

2026-03-21 23:50:49 -07:00

bootstrap.rs

fix(tests): eliminate env mutex poison cascade (#1558)

2026-03-22 14:36:24 -07:00

error.rs

feat(workspace): multi-scope workspace reads (#1117)

2026-03-22 22:56:26 -07:00

lib.rs

refactor(llm): move transcription module into src/llm/ (#1559)

2026-03-22 00:25:54 -07:00

main.rs

refactor(llm): move transcription module into src/llm/ (#1559)

2026-03-22 00:25:54 -07:00

NETWORK_SECURITY.md

fix: Network Security Findings (#201)

2026-02-19 22:01:57 +00:00

profile.rs

feat: chat onboarding and routine advisor (#927)

2026-03-19 22:20:34 -07:00

service.rs

Add owner-scoped permissions for full-job routines (#1440)

2026-03-19 18:32:47 -07:00

settings.rs

feat(llm): add GitHub Copilot as LLM provider (#1512)

2026-03-21 00:02:00 -07:00

timezone.rs

feat(timezone): add timezone-aware session context (#671)

2026-03-08 08:01:56 +00:00

tracing_fmt.rs

refactor: encapsulate leaked abstractions into owning modules (#778)

2026-03-10 04:39:51 +00:00

util.rs

merge: resolve conflicts for PR #800 and #822 into staging (#881)

2026-03-10 11:19:23 -07:00