Beagle SCM

Active ticket board

Index of Beagle's open work: one topic per dir of numbered Plan-shaped tickets, cleared by the parallel Issues fix-and-land loop. Each topic lists its OPEN tickets as one-liners; per-topic detail lives in todo/<TOPIC>/README.mkd, landed history in be log. A fully-landed ticket drops from its topic; a closed topic drops from here.

Active topics

• BE — the be/ JS project (dispatcher + kernel + verbs + views); 2026-07-07 review → BE-010..025 (digest BE/REVIEW.mkd); 2026-07-09 hive/context audit → BE-031..035. - BE-031 HIGH — the hive: S1..S3 DONE 2026-07-09 uncommitted (srcRoot→<meta>/work, get seeds cells, live-smoked); open: S4 tests/prose, S5 self-hosting ruling, drop the SRC_ROOT shell export - BE-032 HIGH — CLI drops the cwd sub-path: verbs resolve args at the wt ROOT (cd MAIN/src && be cat main.c silently empty); verified still open post-a763a86a; pager/CLI disagree - BE-033 MED — RULED+implemented 2026-07-09 uncommitted: cached-remote dropped, scheme-less //X = worktree or NAVNONE; cached tests dropped/flipped, suite = baseline; pending land only - BE-034 MED — be get //name FFs the NAMED wt to its branch tip; spec: checkout the rev that wt is ON, into the context wt (compounds BE-030) - BE-035 LOW — ls/status silently drop a ?rev context; _snapBe omits authority/verb, leaks spell scope past pager reentry - BE-037 HIGH — FIXED 2026-07-09 uncommitted: ./ canonicalized (diff/cat/why), // = topWt everywhere (memoized launchTop), NAVNONE on any miss; repro cases added, suite = baseline; pending land - BE-030 HIGH — context-confined path resolution: get anchors write/clone on raw io.cwd() (:get in a //parent context with cwd in a submod writes the sub's wtlog); resolve() //authority-in-rel escapes the tree → unify resolve(context,base,rel) under $SRC_ROOT/<name> (continues BE-011) - BE-010 CRIT — JS PATCH weaves the COMMIT tree as ours → clobbers dirty wt edits (native PATCH-002/JGET-004 twin) - BE-011 HIGH — wtdir SRC_ROOT confinement is lexical; //../name escapes the root (DOG-009 twin) - BE-012 HIGH — emitPack 256B deflate slack overflows on >4MB incompressible blobs → push aborts - BE-013 HIGH — wire.js child/fd lifecycle: push() finally leaks stdin → reap HANGS; curl leaks - BE-014 HIGH — DELETE ignores the Host slot → be delete //origin?feat tombstones the LOCAL branch - BE-015 HIGH — POST #/#!/#msg! message forms unimplemented (reuse missing, forget-! dropped) - BE-016 HIGH — pager emits file-content control bytes to the tty (ANSI/OSC injection) - BE-017 HIGH — io.mmap-and-never-unmap leak class, 4 sites (ignore/diff/gitmodules/why); gated on JAB-006 - BE-018 MED — hunk-body tok32 end wraps at 16 MiB (log/why) → large-file views corrupt - BE-019 MED — thin-pack buffer sizing: silent object drop + >1GB balloon on corrupt input - BE-020 MED — verb URI-slot gaps: HEAD drops Path, pathless PUT force-pushes, host decoded 3 ways - BE-021 MED — classify: exec bit ignored, dir/merge baseline mismatch, nested .be DIR floods unk - BE-022 MED — be/ helper duplication sweep (~9 sites) - BE-023 MED — view semantics: grep/spot drop args, theme bold sticks, pager escape-split leak - BE-024 MED — robustness/doctrine: unguarded parse aborts walk, non-crash-safe _book, wrong-target rollback +4 - BE-025 LOW — perf/style: repeated full-wtlog scans, double hunk retention, redundant re-encode, whitespace - BE-029 — verb discovery must be-climb from CWD (nested be/ shards): html/be publication verbs found while core inherits up-tree; wt done, pending land (prereq for MARK mark) - BE-003 — uniform error line: name+verb+URI+code; needs a ruling - BE-008 — bare be put sub-recursion still sprays PUTNONE/NONE + banner hunk (post-arm gitlink bump landed quiet) - BE-036 LOW — pager word spells expand shell-style globs (put *.c, delete src/*); reuse Tab-completion's confined FS walk, pager multiplies raw words, verbs still resolve - BE-038 MED — todo view verb: :todo open-ticket board, :todo TOPIC topic list, :todo TOPIC-123 one ticket; titles, ticket ids and wiki links clickable - BE-040 MED — done verb LANDED 9dad5857; residual: [done] buttons in :todo rows staged in wt work/BE-040, pending land - BE-041 MED — [put] buttons on pager status rows (unk/mod/new), plain byte-unchanged; DONE in wt work/BE-041, pending land - BE-042 OPEN — formal context model: context(cwd) total — tree root //+first segment (wiki/ → //wiki), hive wt //N, sub = parent+mount; two //X rulings await gritzko - BE-039 HIGH — pager put/delete crossing a sub mount: authorityRepo anchors the run on arg0's FULL path → repo = the SUB, raw rest args resolve in the wrong tree (delete can mis-target); repro in the ticket dir
• BRO — the interactive pager + hunk renderer; 2026-07-07 nav audit → BRO-015..023 (context-URI navigation, input/mouse layer). - BRO-015 HIGH — back/R re-execute MUTATION verbs (post ?ref bare-advance replay) + drop rest args (grep pattern lost on refresh) - BRO-016 HIGH — follow/click resolver stale post-URI-014: relative follows drop //authority+slots; unify onto the one composer - BRO-017 HIGH — initial view loses its address (loop.js verb:-only banner) → empty context, bare-verb re-fire on R - BRO-018 MED — mergeUri slot edits: FILE ctx joined as DIR, RESET eats ?ref, verb!/scheme: tokens mis-peel - BRO-019 MED — address bar: arrows erase it, Alt-q quits, typed UTF-8 dropped/pasted mojibake, multi-line paste joins - BRO-020 MED — mouse mapping: status-row/past-EOF/bar-open clicks navigate; wide-char + diff-side column miscount - BRO-021 LOW — G clamp strands one row; W throws w/o be.wrap; junk wrap"" key; UTF-16 truncation - BRO-022 MED — Tab completion ignores the view's authority/dir context (launch-tree readdir, bad ./ inserts) - BRO-023 LOW — wiki drift rulings: Nav.mkd todo_root machinery unbuilt; Bro.mkd keymap = C bro, not the JS pager - BRO-025 OPEN — three-part O-link spells (context · verb · args), wire form = the invite line; :work update hit the landed mount instead of the row's tree
• DIS — cross-cutting spec/impl discrepancies (001/002/003/008/031/042/052/053/054/055/056/057/060 landed, 024 stale; 6 open). - DIS-058 — be/ JS submodule umbrella: core+D10/D17/D18 landed; open: D8 per-sub push (now unblocked), D11 head no-descend, D14 Edited axis inert, D15/D16 spec updates
• MEM — memory-safety audit (digest MEM/MEM.mkd).
• GIT — pack-log format & sync. - GIT-011 — ZINFInflate wraps full-slice output vs NOROOM (corruption) - GIT-012 — JS smart-fetch transports: core landed 4370d67e; residue: git:// still misroutes to ssh (split or refuse) - GIT-015 — jab post ref-target resolution: fixes landed 234b0f54; residue: an end-to-end POSTNOREF repro test - GIT-020 JS — JS keeper serve side: upload-pack landed 261680bf; open: jab receive-pack serve, get/be+cached test flips, ssh-remote form - GIT-017 — remote-tracking refs must record remote host + FULL ABSOLUTE branch (?/project/branch); saveRemoteRef/clone/add strip query to ? → branches collapse onto trunk key (split from GIT-016 T3)
• PACK — the OFS-only pack-log format (index-emit, writer, deltas). - PACK-001 — PIDXScan from_off: C core landed 8df1e213; open: jab binding fromOff arg (pack.hpp hardcodes 0) + a JS tail-scan test - PACK-002 — JS pack writer emits OFS_DELTA (offset-only); jab post feeds RAW today → non-native/bloated packs (follow-up to PACK-001)
• SUBS — submodule recursion. - SUBS-013 — git submodule add parity - SUBS-025 — sub GET leaks raw fetch progress to stderr, not hunks - SUBS-027b — R1 emission, Edited + coord-mismatch axes, loud force/diverged refusal, get reapply, test matrix (be head axis landed b9c6b647) - SUBS-032 MED — nested abc sub resolves to WRONG source: be head → no-refs HOMENOPROJ; be patch fetches official github, not the local shard - SUBS-038 LOW — sub re-get with changed .gitmodules url basename fetches the wrong shard → child object-not-found (latent) - SUBS-039 — submodule-path delegation: PUT arm landed 1c4a97c8; open: DELETE arm (delStage has no sub-crossing split) + shared splitter - SUBS-040 HIGH — submodule branch tracking: I1-I3 fixed live (untagged); open: dot-branch-advance repro assert + native I4/I5 - SUBS-041 — sub nesting depth cap landed 6388c34e (MAX_SUBMODULE_DEPTH=8); open: a bounded-chain repro test - SUBS-045 MED — descended read views: core landed 36b1aec0; open: blob:/size: still sub-blind + status/diff/ls nav-target audit
• POST — commit-path gaps (POST-023 landed 100cd237). - POST-006 — POSTCFLCT false-fires on marker strings → DIS-040
• GET — checkout / fetch / sync. - GET-044 HIGH — wire.fetch pack-in-RAM (linux clone died: RangeError at EOF concat); streaming fix DONE on wt branch GET-044 (6.45GB GitHub gate at 46.7MB RSS), pending inspect/merge; checkout walled by JAB-007/GIT-021 - GET-009 — be:// sync umbrella (reachability-based serving) - GET-017 — --nosub won't advance a store-backed switch-worktree - GET-018 — make be get's wt update atomic on mid-write failure - GET-022 — be get <path>?<rev> drops the path (no per-file checkout) - GET-032 — be get offline sub mount: ok yet no files written - GET-034 — graf/GET.c id maps sized 4096 « GET_MAX_VERS=200000 → silent id drop - GET-036 — be/ self-locator mis-creation: checkout+mount-classify arms landed b24446c0/f0269b27; open: repro tests, runtime basename-link recheck, jab local-script resolution - GET-037 — be self-gitlink crash class fixed dbb828e6/064c15f5; open: legacy-160000 repro test; e2e beagle-ext clone still fails (GET-041) - GET-038 — wt-source store-anchor redirect in-tree (resolveLocalStore) but NO ticket-coded commit; close pending hashlet + GET-041 ruling - GET-039 — symlinks-as-blobs core landed 3026a5fb/d31b52ea (isSelfLocator gone); open: formal close under the GET-041 ruling
• URI — URI grammar, slots & remote-intake shapes (URI-009 c436efa; URI-011..014 landed 2ff62ff6/c43324f4/0f8bc010/3edf5cb4). - URI-015 MED — scp-form remote intake: JS landed 082b172c; remainder: file the C twin (keeper/WIRECLI.c wcli_spawn has no scp handling)
• JGET — JS jab get divergences from native (differential-probe batch). - JGET-001 UMBRELLA 13 jab-get defects vs native (severity table + evidence) - JGET-002 CRIT no FF/ancestry gate → silently clobbers committed local commits (27/28/58) - JGET-003 CRIT be get ? trunk-switch records WRONG branch → next post rewrites that branch's history - JGET-005 HIGH ?<branch> fetches TRUNK for non-main/master — pickWant refs/ vs refs/heads/ (case 24) - JGET-006 HIGH pre-existing empty .be/ dir crashes jab get (hermetic-shield shape; masks many cases) - JGET-007 HIGH sub fetch by exact pin: LOCAL sources fixed d80bdb5c (SUBS-046); WIRE sources still exact-pin-only, no branch-fetch fallback - JGET-010 MED bareword path-vs-branch misroute: no branch-switch / bare-sha detach / ?.. (DIS-017) - JGET-011 MED parseRemote misderives store root for bare file:<store> (case 29; the .be-FILE-mount half landed as GET-038) - JGET-012 MED relative submodule url ../sub not resolved against parent source (case 50, SUBS-020) - JGET-013 MED --force leaves a tracked orphan on disk (no orphan sweep; case 49, GET-016) - JGET-014 LOW same-line weave: jab cnf/rc=1 vs native mrg/rc=0, ours/theirs swapped (case 66)
• BLAME — blame perf + output. - BLAME-001 — core plan subsumed by BLAME-002 1a5acce8; residue: unindexed-commit fallback still byte-dedups + close-as-subsumed ruling - BLAME-003 — parallelize residual blob inflates; needs a ruling (premise stale: UNPK.c fork workers now exist as a pattern)
• PTR — pointer-discipline / slice-safety audit. - PTR-001 — abc/ BSDDiff, URIMergePath, TLV casts (GATED; the "done, awaits review" diff is LOST — redo against trunk) - PTR-007 — woof/ + bro/ raw pool ptr + manual parse (woof gates) - PTR-008 — mark/+js/+beagle/ ptr discipline: MKDT prefix fix landed 9bfb0157; rest discarded, needs fresh rework if pursued
• DIFF — the diff: view. - DIFF-007 — diff:<largefile> silently empty (outtoks overflow) - DIFF-009 — tree diff silently drops unreadable files (exit 0); to-set guard landed untagged; open: CI verify, deletion-loop soft-skip, signature B
• DOG — shared dog-layer reworks + libdog code-quality review (2026-07-06). - DOG-007 — libdog split done; open: publish (libdog abc pin 11 ahead of libabc origin → fresh clone can't init; beagle push target ambiguous) - DOG-008 CRIT — WEAVE codec trusts wire inserter/remover indices + token offsets → OOB write/read; validate + one decoder - DOG-009 HIGH — HOME adopts untrusted .be anchors (CVE-2022-24765 class): store-root redirect, .. escape, symlink-follow, TOML injection - DOG-010 HIGH — ULOG row injection via unescaped URI bytes + one-bad-line permanent rebuild DoS - DOG-011 HIGH — HUNK BASS use-after-rewind in relay; unified-diff 4096-cap drops lines / inconsistent @@ headers - DOG-012 HIGH — BRAM fallback double-counts region (silent wrong diff); unseeded-hash equality; align/recursion hardening - DOG-013 MED — dog/ reuse: dup WEAVE decoders, hand-rolled u64map vs HASHx, dup ULOG walks + HUNK render blocks - DOG-014 MED — git/PACKResolveOfs ping-pong sizing invariant (half<=baselen) undocumented → latent heap overflow - DOG-015 MED — git/IGNOGlob catastrophic backtracking ReDoS from an untrusted .gitignore - DOG-016 LOW — correctness/API grab-bag: signed-overflow ts, sha1 aliasing, unchecked FILE_WANT_BUFSfd, NEILShift bound - DOG-017 MED — WEAVEMerge global qsort ≈ half the merge → anchor bucketing + probe-free DFS (retroactive; implemented, awaiting landing)
• KEEP — keeper object pool, refs & wire-pack paths. - KEEP-003 HIGH — keeper post self-deadlocks on the per-shard .lock (its receive-pack child)
• ABC — core library primitives (2026-07-07 full review → ABC-005..018; ABC-004 landed 7dafb8d7). - ABC-010 MED — overlong UTF-8 accepted, JSON surrogate pairs → CESU-8, decimal drains wrap u64 silently - ABC-011 HIGH — HTTP serializer emits zero headers (same-pointer slice); empty reason-phrase rejected - ABC-012 HIGH — NETInfo returns OK w/o copying result, aNETAddress stack OOB, bind walk aborts, CURL OK-on-OOM - ABC-013 HIGH — FILEFlushThreshold loses data on short write, FILE_BOOK uninit sentinel, FSW watches unremovable - ABC-014 HIGH — PACK crafted-trailer wild pointer, PACKClose leak, SLOG 64-vs-127 skip mismatch, NESTFeed self-corrupt - ABC-015 MED — templates: SSTx.h bit-rot (ruling), HASHx stale-hash converge, MSET wrong-comparator seek, X-clobber traps - ABC-016 MED — bedrock: popc64 32-bit builtin, sha256empty unaligned reads, MAIN exit truncation, SAN.h gaps, OK.h statics - ABC-017 MED — build/CI: no -Wall, WITH_INET+fuzz never in CI, LEX generator drift (fbreak vs goto) blocks regens - ABC-018 GATED — style sweep: DNS/NFA manual parsers, slice-from-arith cluster, naming/error-code drift - ABC-021 HIGH — SORTu64 emits garbage: Yx tie-loop swapped args + eqs[0]-only y + ping-pong extents; smoke-fuzz red
• RON — the ron60 timestamp codec (abc/RON.c). - RON-001 — clamp landed ffc0624b (dog/abc/RON.c); open: generators must not emit ms≥1000 (keeper keep_next_pup_key, jab _ulog_now)
• STATUS — the be status view. - STATUS-004 — classifier reports del for an untracked-path delete (status 1 del vs post POSTNONE); classify.js must gate del on baseline presence
• LOG — the log: view. - LOG-004 — TTY jab log EMFILEs on a ~130-pack store; probable fd/mmap leak in be/ JS store reads (piped log + status fine)
• JAB — the jab JS runtime (src/jab bindings). - JAB-007 HIGH — Buf | 0 int32 cursors cap every io.mmap view at 2^31-1: >2GB file → silently WRONG subarray, git.pack.mmap aborts; blocks GET-044's linux-scale index/checkout - JAB-006 MED — buf.cpp breaks API.md: Buf.feedStr silently truncates on full IDLE; io.book/close/trim documented but unimplemented (blocks BE-017) — from the 2026-07-07 be/ review
• JS — JABC (JavaScriptCore) bindings (JS-046..051/055/056/061/065/069/071/073/075/082/093/094/095/098/100 landed). - JS-026 — richer extension exit codes (no process.exit; jab main.cpp maps return→0/throw→1 only) - JS-037 — pack feed base offset|hash, REF_DELTA (JS-036 gate cleared 742c06ff) - JS-096 port 10 beagle/test/get store-internals cases to jab get (be/test/get) - JS-097 MED jab get aborts the whole checkout on a committed .be/.git tree entry (should skip silently, like native POST-015) - JS-099 HIGH pack-run naming collides same-tick (ingest.js ron.now) → unindexed/clobbered runs; per-site buildIndex pairing verified done - jab runtime code-review batch (JS-101..115, 2026-07-07, proposed) — see JS README; HIGHs: - JS-102 HIGH ulog handle = raw pointer in a JS number — double free / UAF / forgeable - be/ code-review batch (JS-065..090, 2026-06-25) — see JS README; by severity: - JS-066 HIGH .gitignore glob ReDoS (REGRESSED: the 06-25 fix never reached be/) - JS-072 HIGH patchscope.lca stale merge base + unbounded - JS-085 HIGH log.js test-only _packs() + dup resolveHexAny - JS-067 MED wire.js ssh host argv injection + unquoted PATH - JS-070 MED untrusted regex per-line ReDoS - JS-074 MED registry.build masks module load errors - JS-076 MED wire.fetch leaks child stdin fd - JS-077 MED orphan keeper pack on lost CAS - JS-080 MED put rewrites wtlog per arg O(N^2) (proposed ulog.appendInPlace API died with job.js — needs a new streaming helper) - JS-081 MED bro fd-1 monkey-patch re-entry (JAB-029) - JS-086 MED store.js god module split + reader.shard - JS-087 MED core/shared depend upward on view/ (shQuote) - JS-088 MED require-path resolution dup 5x - JS-089 MED loop→bro→loop require cycle - JS-083 MED checkout.apply empty file on missing obj (elevated: submount.js now calls apply — path is LIVE) - JS-084 LOW confirmed-minor cleanup batch - JS-090 LOW modularity cleanup batch - JS-091 LOW rev-anchored path descent #<sha>./path broken in size/blob/type (← JS-082)
• CODE — code-redundancy cleanup (CODE-001..019 landed/abandoned; C sweep). - CODE-020 — be/ JS duplication: wtblob+wire groups landed 57ff502a/69e56b20; open: resolveHashlet/isMeta reconcile + uriarg/hunkbuild/fs/tok32 extracts - CODE-021 — be/ JS dedup net ≥1000 LoC reduction target + accounting (quantifies CODE-020); adds verb-entry factory + beCtx shim + spot/bro/store/argline twins
• MARK — the StrictMark renderer (beagle/mark: C + ragel; 2026-07-07 diagnostic review → MARK-002..010). - MARK-001 MED — same-depth list continuation rendered as nested <p>; FIXED in-tree (uncommitted), pending land + re-render + ~/bin/mark redeploy - MARK-002 HIGH — output cap len*8+16384 under-sizes dense-todo pages → wholesale BNOROOM, fails whole dir builds - MARK-003 HIGH — unknown CLI flags silently ignored; a --strict typo disarms the CI gate (needs MARKARG) - MARK-004 MED — EOF inside an open fence misnests </li></ul> into <pre><code> - MARK-005 MED — quote-marker continuations render per-line: wrapped reflinks break, quotes skip budgets - MARK-006 MED — .md handled inconsistently (walk/dropext/refdef vs implicit links) → dead links; needs a ruling - MARK-007 MED — >512 refdefs silently dropped → links misresolve to implicit targets, no warning - MARK-008 LOW — CRLF input leaks r into HTML + budget counts - MARK-009 LOW — mark_refdef hand-rolled byte scanner (ragel doctrine), scanned twice per line - MARK-010 LOW — raw stack arrays/indexing vs a_pad/carve/u8csAt idioms (with MARK-007)