Repository Issue Activity (beta)

#11464 Workspace inheritance reuses a cancelled issue's worktree — no terminal-status guard in getWorkspaceInheritanceIssue

#10402 supersedeOnUserComment resolves ask_user_questions/request_confirmation on ANY comment, not just an answer

#11472 Issues linked to a closed execution workspace reject ALL comments with 409 — including human/board comments recording decisions

#11470 Agent spawn fails with ENOENT when the repo/instance path contains a space (acpx doesn't quote the command path)

#11469 pnpm dev:stop doesn't always kill the actual server child process, causing port shift / EADDRINUSE on next start

#11468 pnpm dev watch mode self-restarts mid-boot because it watches its own build output (packages/plugins/sdk/dist)

#11467 Embedded PostgreSQL crashes immediately when starting with --authenticated-private / --bind lan

#11446 Production deployment feedback: 10 feature requests (interaction routing, policy gates, API contracts)

#7755 [Bug] EPIPE crash in adapter-utils server-utils.js:1687 — unhandled Socket error on stdin.write after pipe close

#11455 Wakes with no issue id skip persisted execution workspace bindings, with no signal

#7496 Bound missing-disposition recovery refire loop

#11453 Security: full OpenAPI schema public (unauthenticated) — attack aid

#11452 Security: agent http adapter test-environment HEAD probe oracle

#11451 Security: broker token-exchange URL unguarded — parent vault credential POST to attacker URL

#11450 Security: cloud-upstreams unvalidated discovery + arbitrary targetOrigin (SSRF)

#11449 Security: portable company bundle can self-attest forged originHash + provenance for catalog skills

#11448 Security: cross-tenant run ID survives in audit event sinks (board/legacy-key)

#6217 Hourly backup cadence creates ~28GB permanent baseline — no UI/API to reduce frequency

#11444 Agent API key cannot satisfy the mutation contract: 401 without a run id, 500 with any run id the client can produce

#11442 codex_local: a model_provider whose env_key is unset fails with an untraceable codex error

#11440 OpenClaw external agent cannot bootstrap as first company CEO

#11439 Secrets-injection allowlist is closed and undocumented; agents outside the bundled list (e.g. CEO) cannot receive injected env vars like MGC_PAPERCLIP_TELEGRAM_BOT_TOKEN

#11436 codex_local: managed CODEX_HOME inherits the host config's model_provider/model pin, breaking every run

#10344 Recovery misclassifies Claude session/weekly-limit failures as stuck work, minting permanent `blocked` issues instead of using the existing provider-quota wait

#11434 Comments mutate unrelated state: a board comment silently expires pending interaction cards, and on a closed issue reopens it and clears completedAt permanently