Repository Issue Activity (beta)

#358 Goroutine leak in serveOnPipe blocks http.Server.Serve on Accept indefinitely

#355 Peer bans do not survive a node restart: the connection gater's persistent ban check is never written

#352 Unrestricted IP proxying in `newReverseProxyHandler`

#349 Token refresh challenge is vulnerable to replay attacks

#320 Device-flow enrollment cannot complete against dex on any release (fix merged, untagged)

#333 Node relay authentication fails to enforce biscuit expiry and revocation

#318 Move network/admin MCP tools to /admin REST endpoints + sam-node admin CLI

#321 Startup should attempt refresh-token recovery before FATALing on a stale identity

#325 Public hub: fresh enrollment cannot verify router biscuits ('no valid key found for verification') — key distribution looks inconsistent

#323 Stamp X-Peer-Id on the service reverse-proxy (parity with the inference facade)

#322 discover_remote_services requires type — cannot browse the whole swarm

#332 Add a opt-in mechanism to make the node output logs in JSON format

#331 Convert all logs to structured logging for consistency

#317 Control Plane Mesh connector

#296 Expired biscuits are accepted on the node dataplane: SamNode.Authorize does not inject the time fact / expiration check

#313 Feature request: find_remote_tools - implement semantic/intent-based filtering

#297 Bootstrap enrollment cannot complete: clients POST to /enroll/status but the server only accepts GET (405)

#193 Feature Request: Hierarchical Network Topology

#176 Enforce that a node only discovers the tools it's authorized to call

#277 Scalability testing

#239 Agent cop on sam mesh

#275 console: Users view is always empty

#243 (sam-console) Can't set the TTL of a generated token

#244 Sam console is not mobile friendly

#142 Define local tools for mesh diagnosis and debugging