Search results

[Bug] PlanOrchestrator cancel() races with runPrompt errors — PTY processes not killed

Status: Open.

#25 In Ark0N/Codeman;

· noahwaldner opened on Feb 27, 2026

[Bug] Ralph Loop tick() uses Promise.all — partial assignTasks failure corrupts task queue state

Status: Open.

#24 In Ark0N/Codeman;

· noahwaldner opened on Feb 27, 2026

[Bug] PTY exit handler does not clean up session listeners or Maps — dead sessions accumulate

Status: Open.

#23 In Ark0N/Codeman;

· noahwaldner opened on Feb 27, 2026

[Bug] sendInput() fire-and-forget — runPrompt errors never reach task queue; tasks stuck permanently

Status: Open.

#22 In Ark0N/Codeman;

· noahwaldner opened on Feb 27, 2026

[Bug] StateStore silently discards state mutations that arrive during async write

Status: Open.

#21 In Ark0N/Codeman;

· noahwaldner opened on Feb 27, 2026

[Bug] PlanOrchestrator leaks Session objects after runPrompt failure

Status: Open.

#20 In Ark0N/Codeman;

· noahwaldner opened on Feb 27, 2026

[Security] INFO: unsafe-inline CSP negates script injection mitigations

Status: Open.

#19 In Ark0N/Codeman;

· noahwaldner opened on Feb 27, 2026

[Security] LOW: Stored XSS via unescaped case names in quick-start dropdown

Status: Open.

#18 In Ark0N/Codeman;

· noahwaldner opened on Feb 27, 2026

[Security] MEDIUM: Shell injection via unquoted $HOOK_DATA in generated hook scripts

Status: Open.

#17 In Ark0N/Codeman;

· noahwaldner opened on Feb 27, 2026

[Security] MEDIUM: Overly broad tail-file allowlist exposes ~/.cache credentials

Status: Open.

#16 In Ark0N/Codeman;

· noahwaldner opened on Feb 27, 2026

[Security] HIGH: Symlink path traversal in file browser endpoints

Status: Open.

#15 In Ark0N/Codeman;

· noahwaldner opened on Feb 27, 2026