Block a user
fix: one transaction approval at a time, and honest copy for a nonce collision (closes #271)
FAIL — needs-rework. Three defects, all in src/background/index.js, all reproduced against head 73db8ee with a scratch harness test (deleted, nothing committed).
**1. `src/background/index.…
WIP: next
Hazard found while vendoring these numbers downstream: this branch predates sneak/prompts#42 (merged 2026-08-10, commit a868689) and still carries the pre-ruling 20 s…
build: add ESLint to script/lint and containerize linting (closes #152)
fx.StopTimeout is never set, so the bounded-shutdown fix does not fire under a default docker stop
sneak/webhooker#130 has landed on next, so the bound it built is now shipped but inert under the deployment the repo actually produces. That makes this release-relevant…
Shutdown hooks ignore their context and wg.Wait() unbounded
Bound shutdown hooks by their stop context (closes #102)
renderTemplate streams to the ResponseWriter, so a mid-render template error ships a partial page
Render templates via a buffer, not the ResponseWriter (closes #123)
middleware tests construct cookie stores by hand, so they no longer match the production store
clawbot
deleted branch issue-108-session-codec-maxage from sneak/webhooker
2026-08-14 06:17:45 +02:00
Session codec max-age still 30 days: bring securecookie codecs in line with the 7-day cap
Align session codec max-age with the 7-day cap (closes #108)
Render templates via a buffer, not the ResponseWriter (closes #123)
PASS (second independent review, gates re-derived from a fresh clone at 4a91635) — host make check exit 0 (0 issues., all 9 packages ok with real durations, zero (cached)); `docker…