issues Search Results · language:Edge language:Python linked:pr language:Java language:Python language:JavaScript
Filter by
5.9M results
Goal
Create stable synthetic Quillan fixtures for paper workflow tests.
This ticket should add a small, coherent set of repository-safe test fixtures that future paper workflow tickets can
reuse for ...
data-model
fixtures
synthetic-data
Summary
AssetStore._save_index() rewrites videos/asset_index.json in place with a plain write_text(). If the process is killed
(or the disk fills) mid-write, the file is left truncated. On the next startup ...
area: backend
bug
priority: P2
Summary
The async upload handlers call AssetStore.inspect_bytes() directly, which performs synchronous heavy work on the uvicorn
event loop: sha256 over the full payload, write_bytes() of up to 50 MB ...
area: backend
area: web-ui
bug
priority: P2
Found by /review completeness + adversarial passes on PR #245.
For downloaded-team installs, .modastack/agent.yaml is deliberately check-in-able. A git worktree add of such a repo
therefore contains the ...
agent
bug
status:in-review
Found by /review red-team pass on PR #245 (confidence verified by reading code).
_cleanup_worktree_action (workflow/orchestrator.py:~588) computes repo_root = _find_project_root(cwd), which post-#245 ...
agent
bug
status:in-review
Summary
BirdIdentificationPipeline.process_video() and process_images() permanently replace self.prior when the job has GPS
coordinates, and never restore the config-level prior afterwards. The next job ...
area: backend
area: metadata
bug
priority: P1
Summary
The theme-switch endpoint validates its next redirect target with only next.startswith( / ), which accepts
protocol-relative URLs like //evil.example. Browsers resolve Location: //evil.example ...
area: auth
area: web-ui
bug
priority: P1
背景
tokenmp/manager#67 发现多个需要 Authorization 的敏感 JSON API 未返回 Cache-Control: no-store。
示例:
- GET /api/v1/admin/requests/list
- GET /api/v1/admin/users/list
- GET /api/v1/admin/providers/list
- ...
背景
多个 manager issue 反映 API 响应暴露敏感或内部字段:
- tokenmp/manager#62:Admin upstream key list 暴露 key_prefix / key_suffix / encryption_version
- tokenmp/manager#63:Provider endpoints list 返回 raw headers / ...
背景
tokenmp/manager#61 发现模型可在没有任何 upstream provider mapping 的情况下创建并显示为 active,容易让用户/admin 误认为可调用。
需要调整的 contracts 范围
- openapi/schemas/model.yaml
- CatalogModel
- CreateModelRequest
...

Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.