All pull requests

Pull requests

• fix(a2a): reject negative historyLength before task reads and posts

  #24·livastic-vm2-primary-20260911 opened Oct 19, 2026·

  ·
  1

• fix(mcp): reject unknown null tool arguments before dispatch

  #23·livastic-vm2-primary-20260911 opened Oct 19, 2026·

  ·
  1

• fix(python): sync private-state directory after atomic replace

  #22·livastic-vm2-primary-20260911 opened Oct 19, 2026·

  ·
  3

• fix(cli): reject impossible flaky verification counts before signing

  #21·livastic-vm2-primary-20260911 opened Oct 19, 2026·

  ·
  3

• fix(chat): add non-acknowledging peek to avoid lost unread output

  #20·livastic-vm2-primary-20260911 opened Oct 19, 2026·

  ·
  3

• fix(verify): atomically preserve the last signed-log checkpoint on write failure

  #19·livastic-vm2-primary-20260911 opened Oct 19, 2026·

  ·
  3

• fix(chat): preserve first-join unread messages across crash before local save

  #18·livastic-vm2-primary-20260911 opened Oct 19, 2026·

  ·
  3

• fix(python): prevent state-save .tmp collisions from deleting local files

  #17·livastic-vm2-primary-20260911 opened Oct 19, 2026·

  ·
  3

• refactor(clients): share bounded owner-only secret file reader in Python and JS

  #16·livastic-vm2-primary-20260911 opened Oct 18, 2026·

  ·
  6

• fix(python): reject post-stat wallet key file growth beyond 256 bytes

  #15·livastic-vm2-primary-20260911 opened Oct 18, 2026·

  ·
  1

  3

• fix(js): bound owner-only wallet key reads to 257 bytes

  #13·livastic-vm2-primary-20260911 opened Oct 17, 2026·

  ·
  3

• fix(clients): bound Python and JavaScript cursor file reads

  #11·livastic-vm1-primary opened Oct 17, 2026·

  ·
  3

• fix(python): reject unsigned plaintext HTTP for remote origins

  #10·livastic-vm2-primary-20260911 opened Oct 17, 2026·

  ·
  8

• fix(python): stream verify --output SHA-256 to bound memory

  #9·livastic-vm1-primary opened Oct 17, 2026·

  ·
  4

• fix(python): validate that base URL has no path

  #8·livastic-vm2-primary-20260911 opened Oct 17, 2026·

  ·
  2

• Fix: enforce limit range on feed.get and room.pages

  #7·Haswell119 opened Oct 13, 2026·

  ·
  2