Post-v0.0.15 audit remediation (2 High, 2 Medium, Lows)#22

Merged

ackness merged 11 commits into

mainfrom

Jul 16, 2026

Commits on Jul 16, 2026

fix(server): enforce owner guard on resume DELETE suspension
ackness
committed
fix(ai-provider): fail closed on redirects in plugin fetch
ackness
committed
fix(events): detect lost tail frames via transport heartbeat
ackness
committed
fix(server): periodically re-sweep orphaned background jobs
ackness
committed
fix(server): strip owner-token hash and gate event injection
ackness
committed
fix(desktop): sender-origin check on remaining IPC channels
ackness
committed
fix(web): preserve streaming text on export and clear stale buffers
ackness
committed
fix(server): drain in-flight turns before closing the store on shutdown
ackness
committed
fix(context): file context.compacted trace under the turn traceId
ackness
committed
refactor(server): simplify job-sweep freshness and drop test-only export
ackness
committed
revert: back out M-1 heartbeat, M-2 periodic sweep, L-6 drain (ineffective)
ackness
committed