-
Notifications
You must be signed in to change notification settings - Fork 10
OpenAug 27, 2026
Overdue by 1 month(s)
•Due by July 17, 2026
•Last updated Next release target
32% complete
List view
0 of 98 selected 0 issues of 98 selected
[MCP] #1095 follow-ups: programmatic static-properties schema wiring + MCP/convergence test coverage
area:mcpModel Context Protocol (MCP) server: protocol, profiles, stdio CLIModel Context Protocol (MCP) server: protocol, profiles, stdio CLIStatus: Open.#1920 In HarperFast/harper;[docs] Document programmatic Resource static properties for MCP/OpenAPI schema authoring
area:mcpModel Context Protocol (MCP) server: protocol, profiles, stdio CLIModel Context Protocol (MCP) server: protocol, profiles, stdio CLIStatus: Open.#1923 In HarperFast/harper;[MCP/OpenAPI] hidden is not honored on nested sub-properties, and leaks as a schema key in OpenAPI
area:mcpModel Context Protocol (MCP) server: protocol, profiles, stdio CLIModel Context Protocol (MCP) server: protocol, profiles, stdio CLIStatus: Open.#1941 In HarperFast/harper;[MCP/OpenAPI] The two schema type mappers disagree: unrecognized types, nested enum/format/const, and nullability
area:mcpModel Context Protocol (MCP) server: protocol, profiles, stdio CLIModel Context Protocol (MCP) server: protocol, profiles, stdio CLIStatus: Open.#1942 In HarperFast/harper;[MCP] detectVerbs manufactures create_* tools for every Resource subclass, including built-in login
area:mcpModel Context Protocol (MCP) server: protocol, profiles, stdio CLIModel Context Protocol (MCP) server: protocol, profiles, stdio CLIStatus: Open.#1945 In HarperFast/harper;CLI: add_user/alter_user unusable in CI/CD — auth creds and new-user payload share username=/password=
area:cliCommand-line interface, bin/ scriptsCommand-line interface, bin/ scriptsarea:securitySecurity, TLS/certs, authentication, authorizationSecurity, TLS/certs, authentication, authorizationbugSomething isn't workingSomething isn't workingStatus: Open.- Status: Open.#2069 In HarperFast/harper;
- Status: Open.
copy-db produces a silently corrupt, non-restorable copy and exits 0 — four independent channels in bin/copyDb.ts
area:cliCommand-line interface, bin/ scriptsCommand-line interface, bin/ scriptsarea:storageStorage engine, LMDB/RocksDB, compactionStorage engine, LMDB/RocksDB, compactionbugSomething isn't workingSomething isn't workingStatus: Open.Mid-log corrupt transaction-log frame silently truncates replay and replication — acknowledged writes lost
area:replicationReplication, clusteringReplication, clusteringarea:storageStorage engine, LMDB/RocksDB, compactionStorage engine, LMDB/RocksDB, compactionbugSomething isn't workingSomething isn't workingStatus: Open.Live-subscription re-auth sweep and admitted-target retention scale per subscription
area:securitySecurity, TLS/certs, authentication, authorizationSecurity, TLS/certs, authentication, authorizationenhancementNew feature or requestNew feature or requestStatus: Open.#2078 In HarperFast/harper;- Status: Open.
- Status: Open.#1997 In HarperFast/harper;
- Status: Open.
Payload-deployed components are never reinstalled, so a broken install cannot recover
area:componentsComponents / applications subsystemComponents / applications subsystembugSomething isn't workingSomething isn't workingStatus: Open.Component reports healthy when its dependencies are missing from disk
area:componentsComponents / applications subsystemComponents / applications subsystemarea:metricsMetrics, analytics, and observabilityMetrics, analytics, and observabilitybugSomething isn't workingSomething isn't workingStatus: Open.- Status: Open.
- Status: Open.
- Status: Open.
- Status: Open.
- Status: Open.
Torn audit entry throws RangeError out of transaction-log iteration instead of degrading
area:storageStorage engine, LMDB/RocksDB, compactionStorage engine, LMDB/RocksDB, compactionbugSomething isn't workingSomething isn't workingStatus: Open.[security] ReDoS: attacker-controlled SQL LIKE pattern compiled to an unbounded per-row regex
area:securitySecurity, TLS/certs, authentication, authorizationSecurity, TLS/certs, authentication, authorizationStatus: Open.install.command bypasses --ignore-scripts, so allowInstallScripts: false is not binding
area:componentsComponents / applications subsystemComponents / applications subsystemarea:securitySecurity, TLS/certs, authentication, authorizationSecurity, TLS/certs, authentication, authorizationbugSomething isn't workingSomething isn't workingStatus: Open.- Status: Open.