All pull requests

Pull requests

• fix(sign): keep signer guidance ASCII-safe

  #966·Packae opened Oct 6, 2026·4 tasks done·

  ·
  1

• fix(app): re-check ownership after _burn_nonce to close TOCTOU window

  #964·forumevi opened Oct 6, 2026·4 tasks·

  ·
  4

• test(http): avoid duplicate-ref assertion false positives

  #960·almondous opened Oct 6, 2026Contributor·

  ·
  1

• fix(humans): follow empty-response cursor corrections

  #959·almondous opened Oct 5, 2026Contributor·

  ·
  1

• fix(mcp): enforce Worker deadlines through response bodies

  #958·almondous opened Oct 5, 2026Contributor·

  ·
  2

• fix(edge): keep healthz body failures inside the timeout guard

  #957·almondous opened Oct 5, 2026Contributor·4 tasks done·

  ·
  2

• fix(store): a sweep refusal names the field it refused, and no lane that refuses it too

  #956·doc-kinoko opened Oct 5, 2026·4 tasks done·

  ·
  2

• fix: clear room allow-list on ownership handover (#953)

  #954·mrchandu1462-ux opened Oct 2, 2026·

  ·
  9

• fix(store): preserve sequence state across I/O failures

  #950·almondous opened Oct 2, 2026Contributor·4 tasks done·

  ·
  3

• fix(store): make the reaper throttle atomic between workers

  #948·almondous opened Sep 30, 2026Contributor·7 tasks done·

  ·
  6

• fix(mcp): bind a bracketed IPv6 HOST without the brackets

  #946·Bornoz opened Sep 30, 2026·4 tasks done·

  ·
  1

  1

• fix(mcp): don't let a redirect turn a write into a read

  #944·Bornoz opened Sep 30, 2026·4 tasks done·

  ·
  1

  6

• fix(humans): keep the latest sign-in choice

  #942·almondous opened Sep 29, 2026Contributor·4 tasks done·

  ·
  3

• fix(http): expose response metadata to allowed browser origins

  #941·almondous opened Sep 29, 2026Contributor·4 tasks done·

  ·
  3

• fix(store): handle clock rollback in ephemeral rooms

  #940·batuhankocyigit opened Sep 29, 2026·

  ·
  9

• fix(humans): ignore stale delegation reads

  #939·almondous opened Sep 28, 2026Contributor·4 tasks done·

  ·
  4

• fix(store): preserve room guards when room stats fail

  #938·almondous opened Sep 28, 2026Contributor·5 tasks done·

  ·
  6

• fix(humans): keep the sender identity across async signing

  #937·almondous opened Sep 28, 2026Contributor·4 tasks done·

  ·
  3

• test(docs): pin the room-size and idle constants SKILL.md states

  #935·zkasuran opened Sep 27, 2026Contributor·

  ·

• test(limit): pin the duplicate-ring window edge as inclusive

  #934·zkasuran opened Sep 27, 2026Contributor·

  ·

• test(store): pin the clean_text character cap as inclusive

  #933·zkasuran opened Sep 27, 2026Contributor·

  ·

• docs(interop): link mcp/ absolutely so the served copy resolves

  #932·manukyancloud opened Sep 27, 2026·4 tasks done·

  ·
  1

• fix(edge): keep private fill replies with their callers

  #931·almondous opened Sep 27, 2026Contributor·5 tasks done·

  ·
  3

• fix(mcp): re-sign above the floor a nonce refusal names

  #930·omerbek opened Sep 27, 2026·4 tasks done·

  ·
  1

  3

• fix(rooms): refresh note gauges outside the room cache

  #929·almondous opened Sep 27, 2026Contributor·6 tasks done·

  ·
  3