Owner

GCWing

1 indexed repository · View on GitHub

OpenBitFun
OpenBitFun combines a high-performance agent runtime written in Rust with a polished desktop application. It pairs the depth of a Code Ag...

Rust · 2273 stars

Open All

[Bug]: unused_mut warning for the browser webview builder in release builds Open

GCWing/OpenBitFun#2581 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Bug]: stale allow(unused_mut) on the main window builder hides future regressions Open

GCWing/OpenBitFun#2582 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Security]: RUSTSEC-2026-0187: lopdf 0.41.0 in Cargo.lock (stack overflow via deeply nested PDF objects) Open

GCWing/OpenBitFun#2586 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Security]: RUSTSEC-2026-0253: lru 0.12.5 in Cargo.lock is unsound (use-after-free via LruCache eviction) Open

GCWing/OpenBitFun#2587 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Security]: mermaid SVG output is injected into HTML without sanitization (XSS via label HTML in loose mode) Open

GCWing/OpenBitFun#2602 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Security]: generative widget accepts postMessage updates from any window (HTML injection via forged bitfun-widget:update) Open

GCWing/OpenBitFun#2603 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Security]: SessionHistory tool allows cross-session transcript export without authorization Open

GCWing/OpenBitFun#2604 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Security]: session JSON artifacts are written world-readable on unix (0o644 default umask) Open

GCWing/OpenBitFun#2605 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Security]: SessionControl list enumerates sessions in any workspace without caller-ownership check Open

GCWing/OpenBitFun#2606 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Bug]: remaining cargo metadata validation steps omit --format-version=1 Open

GCWing/OpenBitFun#2616 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Security]: dompurify 3.3.1 in pnpm-lock.yaml is affected by XSS advisories (fixed in 3.4.8+) Open

GCWing/OpenBitFun#2631 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Security]: lodash-es 4.17.x in pnpm-lock.yaml is affected by prototype pollution advisories (fixed in 4.18.1) Open

GCWing/OpenBitFun#2632 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Security]: linkify-it 5.0.0 in pnpm-lock.yaml is affected by ReDoS advisories (fixed in 5.0.2) Open

GCWing/OpenBitFun#2633 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Security]: mermaid's uuid dependency in pnpm-lock.yaml is affected by GHSA-c4c3-pg64-4m4v (prototype pollution, fixed in 11.1.1) Open

GCWing/OpenBitFun#2634 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Security]: yaml 2.8.2 in src/web-ui is affected by prototype pollution/ReDoS advisories (fixed in 2.8.3+) Open

GCWing/OpenBitFun#2635 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Bug]: session metadata can be written to and read from different directories under CI tempdirs Open

GCWing/OpenBitFun#2636 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Bug]: CLI treats a macOS process group as exited while TERM-resistant children remain alive Open

GCWing/OpenBitFun#2645 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Bug]: opencode-adapter instruction and tool source tests depend on the host git environment Open

GCWing/OpenBitFun#2648 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Bug]: git trust and review output tests can escape the test tempdir through the host environment Open

GCWing/OpenBitFun#2652 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Bug]: terminal exec windows tests intermittently fail on quoted PowerShell sleep scripts Open

GCWing/OpenBitFun#2654 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Bug]: chat UI can stay stuck processing when a dialog turn completion event is dropped Open

GCWing/OpenBitFun#2656 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Bug]: queued chat messages fail visibly when the session turns busy during queue drain Open

GCWing/OpenBitFun#2660 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Bug]: Antigravity 订阅握手 loadCodeAssist 返回 400 Bad Request Open

GCWing/OpenBitFun#2704 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
[Bug]: 流式输出的助手文本被重复渲染多次（模型实际只输出一次） Open

GCWing/OpenBitFun#2778 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Linux: Embed AppImage update information Open

GCWing/OpenBitFun#3016 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Bug]: 1.0.0登录窗口无法打开 Open

GCWing/OpenBitFun#3052 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Bug]: Switching device surface can leave a completed turn stuck in "receiving parameters" Open

GCWing/OpenBitFun#3056 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Bug]: Transcript re-measures every frame while a thinking card grows, causing stutter during reasoning Open

GCWing/OpenBitFun#3069 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
[Bug]: 连接远程设设备，加载远程会话时内存会爆增 Open

GCWing/OpenBitFun#3072 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Feature: surface ACP prompt-result usage (token counts) in the existing token usage UI Open

GCWing/OpenBitFun#3077 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Feature: per-agent usageCommand in acpClients to surface subscription plan quota Open

GCWing/OpenBitFun#3078 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Bug] Windows: ExecControl kill/interrupt does not terminate non-TTY processes started through an App Execution Alias Open

GCWing/OpenBitFun#3084 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026

GCWing

Get new issues in your inbox