Issues

Sharing rules with a business-unit recipient silently grant nothing when the unit row has organization_id = NULL

#14547

· baozhoutao opened

on Sep 2, 2026

[finding] docs: the client SDK page shows `analytics.query` / `meta` / `explain` and `automation.trigger` calls with no read of the resolved value — after #13079 the page should show the payload read (`result.rows`, `run.status`)

finding

#14546

· os-trump opened

on Sep 2, 2026

Routes exiting through `handleRouteError` answer the engine's `DUPLICATE_RECORD` envelope from `resolveErrorResponse`'s `.status` passthrough — `field` and `object` dropped, `mapDataError`'s structured 409 arms never consulted

#14541

· os-trump opened

on Sep 2, 2026

skills: Definition-of-done wording for `packages/cli` cards — owe the `unit` vitest tier locally, declare `integration` to CI (governed half of #13504)

pm:queue

#14539

· os-trump opened

on Sep 2, 2026

`protocol-recorded-by-null.test.ts` declares `recorded_by` with the rejected alias `referenceTo` under a comment claiming it is "the real declaration"

#14535

· os-musk opened

on Sep 2, 2026

claimSeedOwnership writes up to 20k single-id system updates in a loop, so per-record sharing materialisation cannot batch them

finding

#14530

· claude opened

on Sep 2, 2026

134 `eslint-disable` comments across 45 source files are structurally inert — `pnpm lint` runs `--no-inline-config`

#14529

· huangyiirene opened

on Sep 2, 2026

[finding] `MetadataPlugin.init` prints a leftover debug probe on every boot — an undisabled `console.log` three lines under the `ctx.logger.info` it should have been

domain:engine

pm:queue

priority:p3

#14527

· os-musk opened

on Sep 2, 2026

SCIM provisioning writes run outside any engine transaction on @better-auth/scim 1.7.2 — the #3653 `scimRequestScope` stamped in `verifyBearerToken` is not observed at write time (0 `engine.transaction` calls across POST + PATCH /Users)

#14522

· claude opened

on Sep 2, 2026

[finding] check:pm-dispatch-gates repeatedly holds the shared verify lock 500-900s+, starving the queue

#14521

· baozhoutao opened

on Sep 2, 2026

spec: `tenant.zod.ts` idleTimeout / sessionTimeout publish a describe with no unit, while the JSDoc one line above says seconds

domain:spec

pm:queue

priority:p3

#14519

· huangyiirene opened

on Sep 2, 2026

showcase: eight authored validation messages on showcase_account / showcase_task are not on the translation channel, so they refuse in English on a zh-CN session

#14518

· hotlong opened

on Sep 2, 2026

Navigation Menu

Uh oh!

All issues

Sharing rules with a business-unit recipient silently grant nothing when the unit row has organization_id = NULL

[finding] docs: the client SDK page shows `analytics.query` / `meta` / `explain` and `automation.trigger` calls with no read of the resolved value — after #13079 the page should show the payload read (`result.rows`, `run.status`)

Routes exiting through `handleRouteError` answer the engine's `DUPLICATE_RECORD` envelope from `resolveErrorResponse`'s `.status` passthrough — `field` and `object` dropped, `mapDataError`'s structured 409 arms never consulted

skills: Definition-of-done wording for `packages/cli` cards — owe the `unit` vitest tier locally, declare `integration` to CI (governed half of #13504)

`protocol-recorded-by-null.test.ts` declares `recorded_by` with the rejected alias `referenceTo` under a comment claiming it is "the real declaration"

claimSeedOwnership writes up to 20k single-id system updates in a loop, so per-record sharing materialisation cannot batch them

134 `eslint-disable` comments across 45 source files are structurally inert — `pnpm lint` runs `--no-inline-config`

[finding] `MetadataPlugin.init` prints a leftover debug probe on every boot — an undisabled `console.log` three lines under the `ctx.logger.info` it should have been

SCIM provisioning writes run outside any engine transaction on @better-auth/scim 1.7.2 — the #3653 `scimRequestScope` stamped in `verifyBearerToken` is not observed at write time (0 `engine.transaction` calls across POST + PATCH /Users)

[finding] check:pm-dispatch-gates repeatedly holds the shared verify lock 500-900s+, starving the queue

spec: `tenant.zod.ts` idleTimeout / sessionTimeout publish a describe with no unit, while the JSDoc one line above says seconds

showcase: eight authored validation messages on showcase_account / showcase_task are not on the translation channel, so they refuse in English on a zh-CN session

Uh oh!

Search results