All issues

Search results

Injected credentials visible in sandbox process listings (passed as command-line args)

Status: Open.

#917 In yc-software/qm;

· brAperia2025 opened on Sep 3, 2026

miniapp tool is not exposed in web personal DMs (surfaceName only set with surfaceTools)

Status: Open.

#899 In yc-software/qm;

· lookfree opened on Sep 2, 2026

Auxiliary model calls write usage rows under the caller's session_id but the one-shot's own (turn_seq, step) — always (1, 0)

Status: Open.

#889 In yc-software/qm;

· ianTPE opened on Sep 1, 2026

Deployments stay 'running' forever when the app container exits immediately (docker provider)

Status: Open.

#886 In yc-software/qm;

· irisfeng opened on Sep 1, 2026

Channel-scope crons can never receive env-delivered service credentials (allInternal gate always false)

Status: Open.

#875 In yc-software/qm;

· RichmanNeumann opened on Aug 31, 2026

OIDC logout clears only the local session and silently signs back in

Status: Open.

#873 In yc-software/qm;

· valeriyproklov opened on Aug 31, 2026

qm up: deployment-layer sync races core's own redeploy, fails almost every run with no retry

Status: Open.

#869 In yc-software/qm;

· RichmanNeumann opened on Aug 31, 2026

Security screen flags/release have no Admin UI; the flags log is in-memory and lost on every core redeploy

Status: Open.

#868 In yc-software/qm;

· RichmanNeumann opened on Aug 30, 2026

ssh console-based commands hard-fail on Windows; fly machine exec doesn't hit the same bug

Status: Open.

#867 In yc-software/qm;

· RichmanNeumann opened on Aug 30, 2026

Agent confidently described a nonexistent Admin UI page

Status: Open.

#866 In yc-software/qm;

· RichmanNeumann opened on Aug 30, 2026

deployment.md / references/fly.md never mention Fly Sprites

Status: Open.

#865 In yc-software/qm;

· RichmanNeumann opened on Aug 30, 2026

qm check/secrets push don't apply the implicit SANDBOX_BACKEND=sprites default for Fly

Status: Open.

#864 In yc-software/qm;

· RichmanNeumann opened on Aug 30, 2026