Issues

• [Bug]: Grok background shell SIGTERM leaves thread stuck on Monitoring

  brentkelly/t3code-orchestrator#163 · Filter by author samkelly880 opened on Oct 7, 2026

• [Bug] board.card.start-stage-thread has no stage gate — the only spawn path that does not check the build role before emitting a thread request

  brentkelly/t3code-orchestrator#142 · Filter by author samkelly880 opened on Sep 29, 2026

• [Security] sourceControl.cloneRepository passes remoteUrl to git clone with no -- separator — confirmed arbitrary command execution via --upload-pack

  brentkelly/t3code-orchestrator#138 · Filter by author samkelly880 opened on Sep 29, 2026

• [Bug] autoMergeDeferredUntilUnblocked is never reaped on card delete — fireDueAutoMerges iterates board.cards, which no longer contains it

  brentkelly/t3code-orchestrator#134 · Filter by author samkelly880 opened on Sep 29, 2026

• [Security] Pairing credentials stored in plaintext in a world-readable state.sqlite — 33 live admin-scope tokens readable by any local user

  brentkelly/t3code-orchestrator#123 · Filter by author samkelly880 opened on Sep 29, 2026

• [Bug] commandId dedup is keyed on the aggregate, not the command — a reused id silently no-ops a different command and returns a stale sequence

  brentkelly/t3code-orchestrator#120 · Filter by author samkelly880 opened on Sep 29, 2026

• [Bug]: little annoying white square in the bottom right of my screen.

  bugneeds-triage
  brentkelly/t3code-orchestrator#113 · Filter by author samkelly880 opened on Sep 22, 2026