Issues

• migrate-task-source-ref-identity: the ordering note says "safe either way", but dropping the legacy index before the deploy removes the old code's race backstop

  Team-Commonly/commonly#1959 · Filter by author lilyshen0722 opened on Sep 27, 2026
  1

• npm-publish: the cli read-back gives the registry 60s and reports a successful publish as a failure

  Team-Commonly/commonly#1747 · Filter by author lilyshen0722 opened on Sep 18, 2026

• cli: the pi adapter keeps only stdio MCP servers, so a pi seat holding a room grant never sees the broker tools

  Team-Commonly/commonly#1740 · Filter by author lilyshen0722 opened on Sep 18, 2026

• cli: codex seats resume one thread forever — sprint-impl's Sharpen rollout is 246 MB since 07-28; rotate threads by size/age

  Team-Commonly/commonly#1533 · Filter by author lilyshen0722 opened on Sep 4, 2026

• ops: wrapper seats do not survive a host reboot — add a supervisor (launchd per seat, or one relauncher)

  Team-Commonly/commonly#1532 · Filter by author lilyshen0722 opened on Sep 4, 2026
  1

• cli device login: /cli/authorize page 404s in production while the backend device endpoints are live

  Team-Commonly/commonly#1516 · Filter by author lilyshen0722 opened on Sep 3, 2026

• deploy: wire TELEGRAM_SECRET_TOKEN before the fail-closed webhook (#1422) reaches a live-bridge env

  Team-Commonly/commonly#1467 · Filter by author lilyshen0722 opened on Sep 1, 2026

• Activity approve/reject routes have no membership or owner check — any authenticated user can resolve any approval

  Team-Commonly/commonly#1452 · Filter by author lilyshen0722 opened on Sep 1, 2026
  2

• ADR-027 cites a rejection that does not exist in ADR-025, and inherits from a Draft

  Team-Commonly/commonly#1424 · Filter by author lilyshen0722 opened on Sep 1, 2026
  4

• docs(guides): custom-agent HTTP guide teaches a 404 — /api/pods/:podId/messages has no route

  Team-Commonly/commonly#1417 · Filter by author lilyshen0722 opened on Aug 31, 2026
  1

• requireApiTokenScopes fails open on an empty scope list, and the default install path produces one

  Team-Commonly/commonly#1416 · Filter by author lilyshen0722 opened on Aug 31, 2026

• review-checklist.md: six open PRs each clean against main, all 30 pairs conflict — first merge breaks the other five

  Team-Commonly/commonly#1414 · Filter by author lilyshen0722 opened on Aug 31, 2026

• v2: .v2-byo__hint lacks margin:0, adding 24px to the hosted panel after #1412's span→p change

  Team-Commonly/commonly#1413 · Filter by author lilyshen0722 opened on Aug 31, 2026

• review-checklist: add "authorization gates key on provenance, not credential format" — earned by the #1405 /refresh bypass

  Team-Commonly/commonly#1411 · Filter by author lilyshen0722 opened on Aug 31, 2026

• CodeQL PR gate reports the whole repo baseline as 'new alerts in code changed by this pull request'

  Team-Commonly/commonly#1408 · Filter by author lilyshen0722 opened on Aug 31, 2026

• Gate sweeps have a false positive: a review is pinned to the head at SUBMIT time, not the head it read — 3 instances measured across open PRs

  Team-Commonly/commonly#1407 · Filter by author lilyshen0722 opened on Aug 31, 2026
  3

• commonly_read_file: passing a file's display name 404s with "File not found in this pod" — indistinguishable from a genuinely absent file, and the listings are too truncated to recover the storage key

  Team-Commonly/commonly#1403 · Filter by author lilyshen0722 opened on Aug 31, 2026

• docs/adr: three open PRs collide on ADR numbers and all merge clean — ADR-027 twice, ADR-025 against main, and ADR-018 already duplicated for 22 days

  Team-Commonly/commonly#1402 · Filter by author lilyshen0722 opened on Aug 31, 2026
  4

• board UX: no v2-native API-key/connect surface (verified), and a task-panel readability report from an external team

  Team-Commonly/commonly#1400 · Filter by author lilyshen0722 opened on Aug 31, 2026
  1

• Claim by a wake-on-message seat that resolves to NO_REPLY silently swallows a human message for the whole pod

  Team-Commonly/commonly#1394 · Filter by author lilyshen0722 opened on Aug 31, 2026

• No UI control for per-agent wakeOnMessage — backend PATCH and CLI exist, frontend has nothing

  Team-Commonly/commonly#1395 · Filter by author lilyshen0722 opened on Aug 31, 2026

• SEO guide /guides/ai-agent-events/ documents two event types that no code emits (integration.event, task.assigned)

  Team-Commonly/commonly#1391 · Filter by author lilyshen0722 opened on Aug 31, 2026
  2

• Widen the CSS brace guard past v2.css — 13 other stylesheets have no syntax check

  Team-Commonly/commonly#1382 · Filter by author lilyshen0722 opened on Aug 30, 2026
  2

• main has almost no merge protection: 1 of 11 checks required, no review gate, admins exempt (decision needed)

  Team-Commonly/commonly#1373 · Filter by author lilyshen0722 opened on Aug 30, 2026
  1

• SEO guides grow as a chain, not a mesh: the 4 original guides link to none of the 3 newest

  Team-Commonly/commonly#1372 · Filter by author lilyshen0722 opened on Aug 30, 2026