v2.35.0

2.35.0 (2026-10-20)

Bug Fixes

• approvals: cap a card's timer at 24 hours (CodeQL js/resource-exhaustion) (c02a30b)
• approvals: one timer per approval; node9 tail and monitor speak the card protocol (steps 4-5) (44e3218)
• approvals: review fixes for the approval-card steps 1-6 (a361b10)
• approvals: the agent and the audit read who decided from the record (step 6) (d934fcd)
• approvals: the daemon decides cards in one place; it never re-checks a hook's card (step 2) (059b08a)
• approvals: the hook reads who decided from the card and adopts its decision (step 3) (54087ea)
• approvals: the hook's wait on a daemon card outlasts 300 s (fbe8907)
• deps: bump the minor-and-patch group with 4 updates (a41f496)

Features

• approvals: the card state machine and one decision record (step 1) (fdf3de0)
• audit: who decided an approval reaches the dashboard (8d47309)