Jiang Bohan cb70fbe796 fix(daemon/gc): address review — 404 safety + decimal/overflow in duration parser ...

Two issues flagged in PR review:

1. 404-immediate-clean is unsafe. The /gc-check endpoint returns 404 for
   both "issue deleted" AND "daemon token has no access to the workspace"
   (anti-enumeration, see requireDaemonWorkspaceAccess). Clean-on-404
   would let a scoped-down daemon token wipe taskDirs whose issues are
   still live. Restore the mtime gate against GCOrphanTTL. With the new
   72h default we still shrink the original 30d window dramatically
   without the cross-workspace hazard. Lock the behavior in with a new
   test that asserts a recent 404 is skipped.

2. parseFlexDuration mishandled decimals and swallowed Atoi errors:
   "0.5d" → 7m12s (regex matched only the "5d"), "1.5d" → 1h7m12s,
   and 20+ digit day values Atoi-errored silently to 0. Match the full
   decimal number with `\d*\.\d+|\d+` and parse with ParseFloat so
   fractional days and oversized inputs both go through
   time.ParseDuration correctly — fractions as sub-hour durations,
   overflow as a returned error.

2026-04-23 17:25:33 +08:00

..

cmd

fix(cli): make browser-login work from a machine that isn't the server (#1556)

2026-04-23 16:41:29 +08:00

internal

fix(daemon/gc): address review — 404 safety + decimal/overflow in duration parser

2026-04-23 17:25:33 +08:00

migrations

feat(feedback): in-app feedback flow + Help launcher (#1546)

2026-04-23 10:35:55 +08:00

pkg

fix: pass model to Hermes ACP and add hermes to InjectRuntimeConfig (#1203)

2026-04-23 12:43:30 +08:00

go.mod

feat(realtime): phase 0 — extract Broadcaster interface + add metrics (MUL-1138) (#1429)

2026-04-23 13:36:55 +08:00

go.sum

feat(realtime): phase 0 — extract Broadcaster interface + add metrics (MUL-1138) (#1429)

2026-04-23 13:36:55 +08:00

sqlc.yaml

feat: pivot to AI-native task management platform (#232)

2026-03-20 17:55:49 +08:00