fix(go): close all 17 high-divergence parity findings (H1-H17) by rado0x54 · Pull Request #235 · rado0x54/ShellWatch

fix(go): Hydra revoke-all sends all=true (H13) + audit duration_ms persisted on session close (H16) (#210)

rado0x54

committed

216aa60

fix(go): enforce passkey signature-counter regression (clone detection) in VerifyAssertion — H14 (#210)

rado0x54

committed

793bc12

feat(go): idle-session janitor — 30-min timeout, 1-min sweep, reason idle-timeout; input now bumps lastActivityAt (H6, #210)

rado0x54

committed

55f93f6

fix(go): MCP session lifecycle security — cross-account Mcp-Session-Id replay gets uniform 404 (H4), session close destroys the AgentSession so owned terminals close with agent-disconnect (H5); cap…

rado0x54

committed

1c5a0ea

feat(go): account-deleted teardown — close live sessions (account-deleted), drop MCP transports (DropAccount, M17), revoke Hydra login+consent sessions; 90-day cleanup routes through the same path …

rado0x54

committed

e44a080

fix(go): file-key connection auth is approval-gated (key-approve action, deny falls through as skip) and file keys are admin-only + DB-enabled + on-disk for session auth and forwarding; file keys o…

rado0x54

committed

8a4aa89

feat(go): HTTP middleware parity — per-route rate limits on unauthenticated surfaces w/ fastify-shaped 429s (H9), CORS reflect+preflight before the bearer gate (H10), server.trustProxy client-IP re…

rado0x54

committed

e8fd037

feat(go): Web Push delivery channel (webpush-go, VAPID) with expired-subscription pruning (H7) + push-endpoint SSRF allowlist wired as AllowedEndpoint, routes mounted only with VAPID configured (H8…

rado0x54

committed

a7b460e

feat(go): same-data-dir cutover — adopt Node/drizzle databases by stamping goose's version table (with half-migrated guard), stamp drizzle's journal on Go-created DBs so a Node rollback applies not…

rado0x54

committed

2f664b5

fix(go): review follow-ups — approval expiry/cancel skips to next key on both signer paths (closes M11), MCP teardown armed on first message not notifications/initialized, stale Mcp-Session-Id gets…

rado0x54

committed

e9d6c58

feat(go): MCP idle-session expiry (mcp.sessionTimeoutMinutes, default 30m, 0=off) — vanished clients unwind fully via the Wait teardown incl. their SSH sessions; maxOwned cap prunes janitor-closed …

rado0x54

committed

4c5fa9e

Navigation Menu

fix(go): close all 17 high-divergence parity findings (H1-H17) - #235

fix(go): close all 17 high-divergence parity findings (H1-H17)#235
rado0x54 merged 11 commits into
go-backendfrom
go-parity-highs

Commits on Jul 5, 2026

fix(go): Hydra revoke-all sends all=true (H13) + audit duration_ms persisted on session close (H16) (#210)

fix(go): enforce passkey signature-counter regression (clone detection) in VerifyAssertion — H14 (#210)

feat(go): idle-session janitor — 30-min timeout, 1-min sweep, reason idle-timeout; input now bumps lastActivityAt (H6, #210)

fix(go): MCP session lifecycle security — cross-account Mcp-Session-Id replay gets uniform 404 (H4), session close destroys the AgentSession so owned terminals close with agent-disconnect (H5); cap…

feat(go): account-deleted teardown — close live sessions (account-deleted), drop MCP transports (DropAccount, M17), revoke Hydra login+consent sessions; 90-day cleanup routes through the same path …

fix(go): file-key connection auth is approval-gated (key-approve action, deny falls through as skip) and file keys are admin-only + DB-enabled + on-disk for session auth and forwarding; file keys o…

feat(go): HTTP middleware parity — per-route rate limits on unauthenticated surfaces w/ fastify-shaped 429s (H9), CORS reflect+preflight before the bearer gate (H10), server.trustProxy client-IP re…

feat(go): Web Push delivery channel (webpush-go, VAPID) with expired-subscription pruning (H7) + push-endpoint SSRF allowlist wired as AllowedEndpoint, routes mounted only with VAPID configured (H8…

feat(go): same-data-dir cutover — adopt Node/drizzle databases by stamping goose's version table (with half-migrated guard), stamp drizzle's journal on Go-created DBs so a Node rollback applies not…

fix(go): review follow-ups — approval expiry/cancel skips to next key on both signer paths (closes M11), MCP teardown armed on first message not notifications/initialized, stale Mcp-Session-Id gets…

feat(go): MCP idle-session expiry (mcp.sessionTimeoutMinutes, default 30m, 0=off) — vanished clients unwind fully via the Wait teardown incl. their SSH sessions; maxOwned cap prunes janitor-closed …