[email protected]andClaude Opus 4.6 4006ba2a12 fix: address PR #1626 review feedback — bounded LRU cache, admin auth, FK cleanup ...

- Replace HashMap with lru::LruCache in DbAuthenticator so the token
  cache is hard-bounded at 1024 entries (evicts LRU, not just expired)
- Gate admin user endpoints (list/detail/update/suspend/activate) with
  AdminUser extractor so members get 403 instead of full access
- Add api_tokens to libSQL delete_user cleanup list to prevent orphaned
  tokens (libSQL has no FK cascade)
- Add regression tests for all three fixes

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>

2026-03-25 18:46:21 -07:00

..

agent

Merge remote-tracking branch 'origin/feat/multi-tenant-isolation-phases-2-4' into feat/db-user-management

2026-03-25 16:56:17 -07:00

channels

fix: address PR #1626 review feedback — bounded LRU cache, admin auth, FK cleanup

2026-03-25 18:46:21 -07:00

cli

feat(cli): show credential auth status in tool info (#1572)

2026-03-24 23:01:19 -07:00

config

Merge remote-tracking branch 'origin/feat/multi-tenant-isolation-phases-2-4' into feat/db-user-management

2026-03-25 16:56:17 -07:00

context

fix: register sandbox jobs in ContextManager for query tool visibility (#1426)

2026-03-19 23:22:34 -07:00

db

fix: address PR #1626 review feedback — bounded LRU cache, admin auth, FK cleanup

2026-03-25 18:46:21 -07:00

document_extraction

fix: eliminate panic paths in production code (#1184)

2026-03-15 03:17:03 +00:00

estimation

Add automated QA: schema validator, CI matrix, Docker build, and P1 test coverage (#353)

2026-02-27 09:09:45 +04:00

evaluation

chore: remove dead code (#648) (#703)

2026-03-08 08:26:04 +00:00

extensions

refactor: extract AppEvent to crates/ironclaw_common (#1615)

2026-03-24 23:02:46 -07:00

history

feat: user deletion, self-service profile, per-user job limits, usage API

2026-03-25 01:01:12 -07:00

hooks

feat: extend lifecycle hooks with declarative bundles (#176)

2026-02-19 23:00:54 +00:00

import

fix(ci): WASM WIT compat sqlite3 duplicate symbol conflict (#953)

2026-03-11 11:48:24 -07:00

llm

Merge remote-tracking branch 'origin/staging' into feat/multi-tenant-isolation-phases-2-4

2026-03-25 16:43:03 -07:00

observability

feat: 10 infrastructure improvements from zeroclaw (#126)

2026-02-17 19:35:56 +00:00

orchestrator

feat(agent): thread per-tool reasoning through provider, session, and all surfaces (#1513)

2026-03-25 08:35:41 -07:00

pairing

fix(security): use OsRng for all security-critical key and token generation (#519)

2026-03-06 02:36:38 +00:00

registry

refactor(registry): move MCP servers from code to JSON manifests (#1144)

2026-03-14 18:59:55 +00:00

safety

refactor: extract safety module into ironclaw_safety crate (#1024)

2026-03-12 17:54:24 +00:00

sandbox

feat(sandbox): add retry logic for transient container failures (#1232)

2026-03-16 07:53:45 +00:00

secrets

refactor(setup): extract init logic from wizard into owning modules (#1210)

2026-03-16 04:58:17 +00:00

setup

fix(tests): eliminate env mutex poison cascade (#1558)

2026-03-22 14:36:24 -07:00

skills

fix: eliminate panic paths in production code (#1184)

2026-03-15 03:17:03 +00:00

testing

feat: add TenantCtx for compile-time tenant isolation

2026-03-25 16:36:11 -07:00

tools

Normalize cron schedules on routine create (#1648)

2026-03-25 13:47:12 -07:00

tunnel

refactor: remove GATEWAY_USER_TOKENS, fix review feedback

2026-03-24 22:34:05 -07:00

webhooks

Add generic host-verified /webhook/tools/{tool} ingress (#757)

2026-03-11 03:36:25 +00:00

worker

Merge remote-tracking branch 'origin/staging' into feat/multi-tenant-isolation-phases-2-4

2026-03-25 16:43:03 -07:00

workspace

Fix libsql prompt scope regressions (#1651)

2026-03-25 14:36:53 -07:00

app.rs

Merge remote-tracking branch 'origin/feat/multi-tenant-isolation-phases-2-4' into feat/db-user-management

2026-03-25 16:56:17 -07:00

boot_screen.rs

feat(ux): complete UX overhaul — design system, onboarding, web polish (#1277)

2026-03-21 23:50:49 -07:00

bootstrap.rs

fix(tests): eliminate env mutex poison cascade (#1558)

2026-03-22 14:36:24 -07:00

error.rs

feat(workspace): multi-scope workspace reads (#1117)

2026-03-22 22:56:26 -07:00

lib.rs

feat: add TenantCtx for compile-time tenant isolation

2026-03-25 16:36:11 -07:00

main.rs

Merge remote-tracking branch 'origin/feat/multi-tenant-isolation-phases-2-4' into feat/db-user-management

2026-03-25 16:56:17 -07:00

NETWORK_SECURITY.md

fix: Network Security Findings (#201)

2026-02-19 22:01:57 +00:00

profile.rs

feat: chat onboarding and routine advisor (#927)

2026-03-19 22:20:34 -07:00

service.rs

Add owner-scoped permissions for full-job routines (#1440)

2026-03-19 18:32:47 -07:00

settings.rs

fix(agent): persist /model selection to .env, TOML, and DB (#1581)

2026-03-23 22:24:26 -07:00

tenant.rs

feat: add TenantCtx for compile-time tenant isolation

2026-03-25 16:36:11 -07:00

timezone.rs

feat(timezone): add timezone-aware session context (#671)

2026-03-08 08:01:56 +00:00

tracing_fmt.rs

refactor: encapsulate leaked abstractions into owning modules (#778)

2026-03-10 04:39:51 +00:00

util.rs

fix: ensure LLM calls always end with user message (closes #763) (#1259)

2026-03-25 10:31:44 +03:00