fix: critical security and concurrency fixes (C1-H16, Phase 1-3) - #165

Merged

Patel230 merged 14 commits into

mainfrom

fix/critical-security-and-concurrency

Aug 2, 2026

Commits on Aug 2, 2026

fix(tool): make sandbox fail-closed in Bash, bg Bash, PowerShell
Patel230
committed
fix(multiagent): fix worktree and temp-dir leaks on failure
Patel230
committed
fix(engine): snapshot distiller state for async use; fix bg pool cancel
Patel230
committed
fix(engine): populate outcome tool/files usage; compact before retry overflow
Patel230
committed
fix(tool): schema-driven input validation with required fields
Patel230
committed
fix(permissions): hard-deny destructive commands under bypass; harden guardian
Patel230
committed
feat(daemon): global concurrency cap, per-IP rate limits, /v1/cancel
Patel230
committed
fix(session): thread ctx through SQLite store; fsync graph; stream search
Patel230
committed
fix(observability): redact span errors; require explicit telemetry opt-in
Patel230
committed
fix(sandbox): enable userns remap when supported; harden legacy runner
Patel230
committed
fix(acp): cap sessions at 64 and cancel on serve exit
Patel230
committed
fix(provider): retry gateway init; inject constructor for tests
Patel230
committed
fix(config): invalidate settings cache on global save
Patel230
committed
fix(multiagent): make worktree cleanup tests deterministic in CI
Patel230
committed