Search results

allowed_tools: [] emits no allow-list at all, so a "tool-less" trigger is not tool-less (and the source comment says the opposite)

hardeningSecurity/robustnessSecurity/robustness

Status: Open.

#647 In edspencer/paddock;

· edspencer opened on Aug 3, 2026

Mermaid diagram renders blank inside a long send_file markdown body

Status: Open.

#644 In edspencer/paddock;

· edspencer opened on Aug 2, 2026

check-no-nul-bytes only scans packages/*.ts — scripts/, test/ and .mjs files are unguarded

Status: Open.

#642 In edspencer/paddock;

· edspencer opened on Aug 2, 2026

Publish Paddock to npm as @edspencer/paddock so npx spins up a local instance

featureNew featureNew feature

Status: Open.

#637 In edspencer/paddock;

· edspencer opened on Aug 2, 2026

Stop is a permanent no-op on slash-command turns (/compact): no jobId emitted, no liveSessions registration

Status: Open.

#632 In edspencer/paddock;

· edspencer opened on Aug 2, 2026

Compaction boundary chip renders above the /compact that produced it (file order vs timestamp order)

Status: Open.

#630 In edspencer/paddock;

· edspencer opened on Aug 2, 2026

P3: a second client silently overwrites the first client's queued message (single slot, never broadcast)

Status: Open.

#629 In edspencer/paddock;

· edspencer opened on Aug 2, 2026

Appended queued text is silently destroyed when the enqueue timestamp is reused (drain dedups on ts alone)

Status: Open.

#628 In edspencer/paddock;

· edspencer opened on Aug 2, 2026

Queued message is stranded by every turn path except chat:send (/compact, background sub-agents, wakes, triggers)

Status: Open.

#627 In edspencer/paddock;

· edspencer opened on Aug 2, 2026

Paddock should own its Claude home; ~/.claude should be read-only

Status: Open.

#620 In edspencer/paddock;

· edspencer opened on Aug 2, 2026

list_chats names 41% of chats after their own sessionId — the real ai-title is on disk and nothing reads it

bugSomething isn't workingSomething isn't working

Status: Open.

#614 In edspencer/paddock;

· edspencer opened on Aug 2, 2026

read_chat returns every tool call as an empty string — 62% of a review window is blank, and agent *actions* are structurally invisible

bugSomething isn't workingSomething isn't working

Status: Open.

#613 In edspencer/paddock;

· edspencer opened on Aug 2, 2026