Repository navigation

fix: 81 validated findings from the 2026-10-11 bug hunt - #316

Merged

jkyberneees merged 105 commits into

mainfrom

fix/bughunt-2026-10-11

Oct 11, 2026

Merged

fix: 81 validated findings from the 2026-10-11 bug hunt#316
jkyberneees merged 105 commits into
mainfrom
fix/bughunt-2026-10-11

Commits on Oct 11, 2026
- fix(loop): batch denial blocks only the checks shown on the refused card
  
  jkyberneees
  and
  claude
  committed
  c0dc466
- fix(loop): calls that never start leave plan check state untouched
  
  jkyberneees
  and
  claude
  committed
  7db458c
- fix(loop): sort tool definitions by name for a stable cache prefix
  
  jkyberneees
  and
  claude
  committed
  aebf693
- fix(loop): bound check_replace evidence-note descriptions to the resume cap
  
  jkyberneees
  and
  claude
  committed
  7e97535
- fix(loop): reject check_replace replacements that duplicate a sibling id
  
  jkyberneees
  and
  claude
  committed
  f1e3041
- fix(loop): clamp check_replace justification to the revision reason cap
  
  jkyberneees
  and
  claude
  committed
  0db9c5f
- fix(loop): reopen a done step when check_replace installs a pending check
  
  jkyberneees
  and
  claude
  committed
  7985bd8
- fix(loop): split args_summary argv0 quote-aware so assignment values never leak
  
  jkyberneees
  and
  claude
  committed
  8581088
- fix(redact): redact AWS secret access key and session token
  
  jkyberneees
  and
  claude
  committed
  362ff37
- fix(redact): redact HTTP Basic Authorization credentials
  
  jkyberneees
  and
  claude
  committed
  aea9b38
- fix(redact): redact Bearer tokens in JSON/JS header objects
  
  jkyberneees
  and
  claude
  committed
  ed9bab6
- fix(redact): redact OAuth refresh_token values
  
  jkyberneees
  and
  claude
  committed
  70c7d95
- fix(redact): replace the longest known secret first
  
  jkyberneees
  and
  claude
  committed
  af4d086
- fix(guard): flag PKCS#8 and encrypted private keys in the local scan
  
  jkyberneees
  and
  claude
  committed
  e15c50d
- fix(cleanup): keep pinned sessions out of the dry-run preview
  
  jkyberneees
  and
  claude
  committed
  041b737
- fix(cleanup): preview runtime-log expiry with the sweep's clamp
  
  jkyberneees
  and
  claude
  committed
  56a6d7c
- fix(maintenance): age out quarantined audit log copies
  
  jkyberneees
  and
  claude
  committed
  fbd888b
- fix(audit): match untrusted sources on path boundaries
  
  jkyberneees
  and
  claude
  committed
  3ee8749
- fix(logging): keep the Telegram allow-all warning's operation label
  
  jkyberneees
  and
  claude
  committed
  7b901f7
- perf(redact): bound the Basic-auth pass on large inputs
  
  jkyberneees
  and
  claude
  committed
  fca522f
- fix(redact): redact the X-Amz-Security-Token header and query param
  
  jkyberneees
  and
  claude
  committed
  658820a
- fix(serve): clear expired approvals from headless REST runs
  
  jkyberneees
  and
  claude
  committed
  247ef93
- fix(serve): count each wake once in the wake-on-complete rate limit
  
  jkyberneees
  and
  claude
  committed
  8a9928f
- fix(serve): release MCP servers and guard when agent setup fails
  
  jkyberneees
  and
  claude
  committed
  3a1bf00
- fix(serve): read a run's session id under its lock in the subagent registry
  
  jkyberneees
  and
  claude
  committed
  74ecdc3
- fix(serve): cancel in-flight headless runs on graceful shutdown
  
  jkyberneees
  and
  claude
  committed
  75bff67
- fix(serve): redact a new session's title before truncating it
  
  jkyberneees
  and
  claude
  committed
  2b0eda0
- fix(serve): honour the trusted config and env sandbox opt-outs
  
  jkyberneees
  and
  claude
  committed
  4cc0fa3
- fix(serve): deny late approvals on a cancelled headless run at once
  
  jkyberneees
  and
  claude
  committed
  7da259d
- fix(serve): redact background-job command heads in GET /api/jobs
  
  jkyberneees
  and
  claude
  committed
  417376c
- fix(serve): refuse headless runs once the shutdown sweep has begun
  
  jkyberneees
  and
  claude
  committed
  e3a9d4a
- fix(introspect): config_view parses its JSON arguments
  
  jkyberneees
  and
  claude
  committed
  b9ecb5b
- fix(file): patch diff shows the edited region
  
  jkyberneees
  and
  claude
  committed
  d444dc2
- fix(file): glob and search_files walk a symlinked root directory
  
  jkyberneees
  and
  claude
  committed
  581fd8d
- fix(file): ** glob patterns keep bracket character classes
  
  jkyberneees
  and
  claude
  committed
  4f42647
- fix(browser): wrap the result page URL in the untrusted boundary
  
  jkyberneees
  and
  claude
  committed
  1840a7a
- fix(http_request): gate mutating or credentialed requests as network_upload
  
  jkyberneees
  and
  claude
  committed
  64d3f36
- fix(file): patch matches multi-line text in CRLF files
  
  jkyberneees
  and
  claude
  committed
  ede2f68
- fix(json_query): index nested arrays with chained [N][M]
  
  jkyberneees
  and
  claude
  committed
  798f399
- fix(diff): report a final-newline-only difference
  
  jkyberneees
  and
  claude
  committed
  286d6c3
- fix(bgproc): report killed/timeout for a 143/137 exit after a forced stop
  
  jkyberneees
  and
  claude
  committed
  a6af37f
- fix(config): merge planning.remind from global and project config
  
  jkyberneees
  and
  claude
  committed
  0daaa46
- fix(config): strip secrets.env inline comments after a tab
  
  jkyberneees
  and
  claude
  committed
  8468c12
- fix(mcpclient): echo the Streamable HTTP Mcp-Session-Id
  
  jkyberneees
  and
  claude
  committed
  97b3352
- fix(mcpclient): send notifications/initialized on stdio
  
  jkyberneees
  and
  claude
  committed
  269e0c4
- fix(mcpclient): answer server ping and reject other server requests
  
  jkyberneees
  and
  claude
  committed
  d446837
- fix(repl): decode escape sequences from the buffered input
  
  jkyberneees
  and
  claude
  committed
  312eb5b
- fix(skills): require --force to promote any project-dir skill
  
  jkyberneees
  and
  claude
  committed
  691f1d1
- fix(subagent): fail closed on unrecognised trust labels
  
  jkyberneees
  and
  claude
  committed
  4713fc9
- fix(artifact): percent-encode file:// URIs odek builds for artifact refs
  
  jkyberneees
  and
  claude
  committed
  066eebb
- fix(skills): require a 3-letter stem for prefix keyword matches
  
  jkyberneees
  and
  claude
  committed
  13cf43f
- test(mcpclient): cover notify, server-reply and session-id edge paths
  
  jkyberneees
  and
  claude
  committed
  82c10d4
- fix(skills): let short keywords match their plurals and inflections
  
  jkyberneees
  and
  claude
  committed
  e248c22
- fix(mcpclient): drop Mcp-Session-Id on cross-host redirects
  
  jkyberneees
  and
  claude
  committed
  209b6a8
- fix(mcpclient): keep server-request replies off the client request queue
  
  jkyberneees
  and
  claude
  committed
  4ba5a02
- fix(telegram): record daily token spend even when it overshoots the budget
  
  jkyberneees
  and
  claude
  committed
  d6875bf
- fix(telegram): announce each background-job exit to the chat once
  
  jkyberneees
  and
  claude
  committed
  00ab9fc
- fix(telegram): let exits join an open wake window at the spend cap
  
  jkyberneees
  and
  claude
  committed
  a520e5b
- fix(telegram): cut verbose tool-progress arguments on a rune boundary
  
  jkyberneees
  and
  claude
  committed
  d734440
- fix(telegram): split commands from arguments at any whitespace
  
  jkyberneees
  and
  claude
  committed
  aa8a478
- fix(telegram): do not toast 'Approved' for a rejected approval press
  
  jkyberneees
  and
  claude
  committed
  5db78e0
- fix(telegram): escape backslashes for MarkdownV2 in prose and code
  
  jkyberneees
  and
  claude
  committed
  583a76c
- fix(telegram): never split a MarkdownV2 escape pair across chunks
  
  jkyberneees
  and
  claude
  committed
  3b1091f
- fix(telegram): escape unpaired '*' instead of emitting an unclosed italic
  
  jkyberneees
  and
  claude
  committed
  81d90cc
- fix(schedule): do not catch up a job on re-enable after a disable
  
  jkyberneees
  and
  claude
  committed
  9eb24c2
- fix(telegram): escape unpaired backticks instead of opening a code span
  
  jkyberneees
  and
  claude
  committed
  46450f0
- fix(telegram): deliver the daily-budget overshoot warning as plain text
  
  jkyberneees
  and
  claude
  committed
  a3a86ad
- fix(telegram): bill daily token spend for failed and cancelled runs
  
  jkyberneees
  and
  claude
  committed
  67381db
- fix(session): redact secrets in the per-session audit log
  
  jkyberneees
  and
  claude
  committed
  9a8fcf3
- fix(session): rebuild a corrupt session index from the session files
  
  jkyberneees
  and
  claude
  committed
  674037c
- fix(session): taint episodes that read through a symlink escaping the workspace
  
  jkyberneees
  and
  claude
  committed
  769599e
- fix(memory): rebuild the episode recall index when its corpus changed
  
  jkyberneees
  and
  claude
  committed
  5648c6e
- fix(memory): reject fact text with a partial entry separator at its edge
  
  jkyberneees
  and
  claude
  committed
  c7b9b7c
- fix(memory): re-check merged facts before merge-on-write persists them
  
  jkyberneees
  and
  claude
  committed
  862f64c
- fix(memory): keep the extended-memory LLM rerank order in recall results
  
  jkyberneees
  and
  claude
  committed
  b407b13
- fix(memory): stop refitting the shared atom-index embedder under readers
  
  jkyberneees
  and
  claude
  committed
  267cc6d
- fix(memory): escape terminal control bytes in memory review listings
  
  jkyberneees
  and
  claude
  committed
  3214cae
- fix(session-search): match deep search on the single usable query token
  
  jkyberneees
  and
  claude
  committed
  f6c582e
- fix(session): fail saves loudly when index.json is not a regular file
  
  jkyberneees
  and
  claude
  committed
  bd14265
- fix(memory): store the new fact separately when its merge would be unsafe
  
  jkyberneees
  and
  claude
  committed
  5f9cdfd
- fix(danger): classify git grep -O / --open-files-in-pager as code execution
  
  jkyberneees
  and
  claude
  committed
  091b3c9
- fix(danger): classify git send-email program options and uploads
  
  jkyberneees
  and
  claude
  committed
  aff3869
- fix(danger): treat git credential plumbing as a secret read
  
  jkyberneees
  and
  claude
  committed
  4ab7e0c
- fix(danger): treat gpg secret-key export as a secret read
  
  jkyberneees
  and
  claude
  committed
  ff72346
- fix(danger): classify sqlite3 pipe dot-commands and edit() as code execution
  
  jkyberneees
  and
  claude
  committed
  d690140
- fix(danger): classify scripts fed to sqlite3 on stdin
  
  jkyberneees
  and
  claude
  committed
  209e516
- fix(danger): path-classify sqlite3 writefile() and VACUUM INTO targets
  
  jkyberneees
  and
  claude
  committed
  6ac240c
- fix(danger): classify zip move mode and 7z -sdel as destructive
  
  jkyberneees
  and
  claude
  committed
  1543e33
- fix(danger): classify moving a home directory away as system_write
  
  jkyberneees
  and
  claude
  committed
  b373e60
- fix(danger): classify permission and compression changes of a home directory
  
  jkyberneees
  and
  claude
  committed
  9105064
- fix(danger): classify alias definitions by the body they run
  
  jkyberneees
  and
  claude
  committed
  4c01ca1
- fix(danger): path-classify git format-patch output directories
  
  jkyberneees
  and
  claude
  committed
  e427919
- fix(danger): classify git apply --unsafe-paths as a write outside the repo
  
  jkyberneees
  and
  claude
  committed
  cfe8a8a
- test(danger): cover edge spellings of the new classifier adapters
  
  jkyberneees
  and
  claude
  committed
  3cf3fdc
- fix(danger): track alias definitions and classify alias uses by expansion
  
  jkyberneees
  and
  claude
  committed
  d25e449
- fix(danger): treat gpg --export-secret-ssh-key as a secret read
  
  jkyberneees
  and
  claude
  committed
  e5cdd93
- fix(danger): judge whole sqlite3 writefile/VACUUM INTO arguments
  
  jkyberneees
  and
  claude
  committed
  0340127
- fix(danger): path-classify sqlite3 write dot-commands everywhere
  
  jkyberneees
  and
  claude
  committed
  a90bf7e
- docs(agents): describe alias tracking and the sqlite3 write targets
  
  jkyberneees
  and
  claude
  committed
  cd58d72
- fix(danger): expand aliases after time/! and scope the self-expansion guard
  
  jkyberneees
  and
  claude
  committed
  2949429
- fix(danger): path-classify one-letter sqlite3 dot-commands, .trace and .archive
  
  jkyberneees
  and
  claude
  committed
  00c2120
- fix(danger): read sqlite3 writefile/VACUUM INTO across line breaks and quoted schemas
  
  jkyberneees
  and
  claude
  committed
  011b106
- style(danger): factor the alias plain-rune check into a helper
  
  jkyberneees
  and
  claude
  committed
  861cee9
- fix(audit): match untrusted sources on raw strings, not redacted keys
  
  jkyberneees
  and
  claude
  committed
  dd91cbf
- fix(audit): match persisted ingest resources against redacted sources
  
  jkyberneees
  and
  claude
  committed
  ee63ac2

Commits

Commits on Oct 11, 2026