Issues - fleetd - Gitea

fleet/fleetd

Labels Milestones New Issue

A config key's hot/deferred class is a claim about every consumer, and nothing checks it that way

#427 opened 2026-09-10 06:54:03 +02:00 by ltms

Building in the fleetd tree disarms the running daemon, and nothing warns at either end

#413 opened 2026-09-10 04:38:56 +02:00 by ltms

A daemon-side crash in the completion thread is silently misattributed to the worker

#412 opened 2026-09-10 04:38:21 +02:00 by ltms

Warn at load when two profiles share a tokenEnv but quarantine under different credential ids

#411 opened 2026-09-10 04:35:16 +02:00 by ltms

liveStatus reported "working" for a member that did nothing for 76 minutes — the health snapshot has no progress signal

#410 opened 2026-09-10 04:32:22 +02:00 by ltms

Five places trust a command's exit code as proof of its effect and never read the value back — the #400 shape outside the scrub

#408 opened 2026-09-10 04:03:53 +02:00 by ltms

Five log-only startup reporters in Fleetd.main have unpinned call sites — deleting any one ships a green build

#407 opened 2026-09-10 04:01:31 +02:00 by ltms

notifications.mode: webhook reports healthCoverage "full" and sends nothing — the knob relabels the absence of a sink

#392 opened 2026-09-10 02:51:38 +02:00 by ltms

The credential scrub does not run in a shell that is neither login nor interactive — .zshenv is the only file zsh always reads, and it is the one file the scrub is not in

#388 opened 2026-09-10 01:45:28 +02:00 by ltms

FleetHealthMonitor detects TURN_BOUNDARY_LOST but no API surface exposes it — a stalled member reads as healthy on every field a lead can see

#383 opened 2026-09-09 09:02:01 +02:00 by agent

classify() can call an active pane IDLE — measured real, trigger never seen (half A closed)

#340 opened 2026-09-04 10:48:45 +02:00 by ltms

Run members on a second herdr under a dedicated user (optional; single-herdr stays the default)

#185 opened 2026-08-28 04:05:56 +02:00 by ltms

blocking SSH_AUTH_SOCK is not a control: the forge key is an unencrypted file the member can read

#184 opened 2026-08-28 01:31:50 +02:00 by ltms

ROTATE: a git.ltms.dev token for user ltms was exposed in an agent session, and any credential-resolving command on the Mac will do it again

#182 opened 2026-08-28 01:04:25 +02:00 by ltms

CB-634: let a member use the IDE MCP against its own worktree — opt-in per profile

#162 opened 2026-08-23 15:46:19 +02:00 by ltms 2.0 — one operation centre, many hosts

fleet manager: run and drive several fleets on ONE host from a single session

#160 opened 2026-08-23 14:26:11 +02:00 by ltms

rotate AI_GATEWAY_TOKEN and WORKER_GITEA_TOKEN — both were printed into an operator transcript

#159 opened 2026-08-23 14:24:05 +02:00 by ltms

fleet01 as-built: the full second-host setup, and the gaps a fleet manager would have to own

#156 opened 2026-08-23 14:15:46 +02:00 by ltms

CB-632: purge "bridge" from the code, the artefacts and the ops surface

#145 opened 2026-08-23 06:21:21 +02:00 by ltms

CB-633: constrain a member's environment with an allow-list — the denylist misses a whole secret file

#144 opened 2026-08-23 06:20:51 +02:00 by ltms

1 2 3 4