Repository Issue Activity (beta)

#965 security: web_search follows redirects without re-checking SSRF

#962 security: sensitive-file checks can be bypassed through symlink aliases

#960 security: prevent imported skills from following external symlinks

#942 HeuristicRouter can never escalate to a cloud model: parameter_count_b=0.0 makes _largest_model always pick the local model

#955 CI: Publish to PyPI fails with 400 Project size too large (10 GB quota exhausted by per-commit dev releases)

#949 Rich swallows [skills.sources] as markup in three "no sources configured" messages

#948 A transient network failure blocks installing a skill already in the cache: sync() runs git pull --ff-only with check=True unconditionally

#946 `jarvis skill run` can never execute a tool step: SkillManager is built with no ToolExecutor, and a 0-step skill reports "Success"

#836 The capability gate is a no-op — four independent defects

#941 Installer's `git clone --depth 1` breaks hatch-vcs versioning, causing a permanent phantom update prompt

#947 NativeReActAgent silently stops after one step with any model that emits JSON: _parse_response has no JSON fallback

#392 native weather tool with OpenWeatherMap integration

#779 OperativeAgent wipes persisted state on any turn with empty content

#778 Empty-content retry re-runs the whole tool-calling turn, duplicating effects

#835 sms_draft_reply silently drops the SMS body and reports success

#766 jarvis doctor probes every engine's health three separate times, taking minutes

#765 EventBus.publish() aborts remaining subscribers when one callback raises

#764 TelemetryStore.close() never unsubscribes from the event bus

#762 Several async routes run blocking work directly on the event loop

#927 bug(agents): start_tick can admit duplicate concurrent ticks

#944 AgentExecutor builds RouterPolicy with available_models=[model], so routing is always a no-op

#777 croniter is optional; missing it silently degrades cron to hourly

#776 Cron-scheduled tasks and managed agents ignore the configured timezone

#775 Managed agent ticks always resolve to hardcoded gemma4:31b model

#754 chunk_text() silently drops short paragraphs below min_chunk_size