-
Notifications
You must be signed in to change notification settings - Fork 13
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
- Status: Open.#530 In initializ/forge;
harden(forge-core/oauth): sanitize credential-store keys against path traversal (defense-in-depth, follow-up to #518)
enhancementNew feature or requestNew feature or requestforge-coreAffects the forge-core library (runtime, security, types, llm, mcp, auth)Affects the forge-core library (runtime, security, types, llm, mcp, auth)securitySecurity vulnerability fixesSecurity vulnerability fixesStatus: Open.#519 In initializ/forge;feat(#455 slice 3): reuse the OIDC login for the platform/MCP broker identity (dev-time delegated MCP)
enhancementNew feature or requestNew feature or requestforge-cliAffects the forge-cli command-line tool (init, run, build, mcp commands)Affects the forge-cli command-line tool (init, run, build, mcp commands)forge-coreAffects the forge-core library (runtime, security, types, llm, mcp, auth)Affects the forge-core library (runtime, security, types, llm, mcp, auth)Status: Open.#516 In initializ/forge;feat(#455 slice 5, optional): dual-header mode — send gateway token as both Authorization: Bearer and X-Api-Key
enhancementNew feature or requestNew feature or requestforge-coreAffects the forge-core library (runtime, security, types, llm, mcp, auth)Affects the forge-core library (runtime, security, types, llm, mcp, auth)Status: Open.#493 In initializ/forge;feat(#455 slice 4): per-request gateway token refresh for long-lived runs
enhancementNew feature or requestNew feature or requestforge-cliAffects the forge-cli command-line tool (init, run, build, mcp commands)Affects the forge-cli command-line tool (init, run, build, mcp commands)forge-coreAffects the forge-core library (runtime, security, types, llm, mcp, auth)Affects the forge-core library (runtime, security, types, llm, mcp, auth)Status: Open.#492 In initializ/forge;feat(#455 slice 3): per-fallback / per-endpoint gateway auth (overlay is primary-only)
enhancementNew feature or requestNew feature or requestforge-coreAffects the forge-core library (runtime, security, types, llm, mcp, auth)Affects the forge-core library (runtime, security, types, llm, mcp, auth)Status: Open.#491 In initializ/forge;- Status: Open.#482 In initializ/forge;
[Feature]: Shared streaming agent-loop for builder surface, forge run, and A2A
enhancementNew feature or requestNew feature or requestStatus: Open.#476 In initializ/forge;[Feature]: server-managed settings — control-plane fetch + local cache (managed tier, #454 follow-up)
enhancementNew feature or requestNew feature or requestStatus: Open.#463 In initializ/forge;[Feature]: OAuth/OIDC login to the model gateway — acquire + inject a short-lived token on LLM calls (apiKeyHelper analog)
enhancementNew feature or requestNew feature or requestStatus: Open.#455 In initializ/forge;[Feature]: forge settings surface — user + managed (MDM) layers for enabled channels / models / tools / gateway
enhancementNew feature or requestNew feature or requestStatus: Open.#454 In initializ/forge;- Status: Open.#444 In initializ/forge;