google/capsem

Stars: 72
Forks: 13
Open beginner issues: 0
Indexed issues: 91
Avg merge: 1d 2h
Merged PRs (30d): 5

Dominant language: Rust
License: Apache-2.0
Last GitHub push: Sep 15, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Open All

91 open issues indexed

[triage:tooling-04-no-warmup-and-spawn-skew-in-throughput] Throughput timing includes worker-spawn skew and has no warmup; first-request connection setup is counted Open

type:bug

google/capsem#148 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[triage:tooling-05-missing-tests-summarize-aggregation] No test covers `summarize()` — the core aggregation that turns samples into the reported throughput/error schema Open

type:bug

google/capsem#149 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[triage:tooling-06-missing-tests-mock-http-routing-shapes] Mock server HTTP routing and response shapes are almost entirely untested Open

type:bug

google/capsem#150 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[triage:tooling-07-duplicated-worker-harness-http-dns] Worker/timing harness is duplicated between `run_http_scenario` and `run_dns_scenario` Open

type:other

google/capsem#151 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[triage:ui-02-gateway-client-duplication] Gateway client logic forked across capsem-tray and capsem-tui Open

component: tray type:other

google/capsem#152 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[triage:ui-04-tui-runtime-and-client-per-poll] TUI builds a fresh tokio runtime + reqwest client on every poll/action Open

type:performance type:UI

google/capsem#154 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[triage:ui-05-app-deeplink-fixed-sleep-race] Cold-start deep-link dispatch relies on a fixed 1500ms sleep (race) Open

component:app type:bug

google/capsem#155 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Link can't be clicked Open

google/capsem#156 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
callback port Open

google/capsem#157 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
dashboard tab appears multiple time Open

google/capsem#158 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
oauth credential don't carry over from one VM to another Open

google/capsem#159 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
check that we can have multiple sigmal rules Open

type:documentation

google/capsem#160 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Make doctor mock-server port run-scoped to preserve parallelism Open

google/capsem#162 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Preserve host-builder cache across the canonical just test gate Open

google/capsem#166 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Security rule `action = "ask"` has no resolution path Open

google/capsem#172 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Investigate per-profile exec latency: co-work boots ~20% slower than code Open

google/capsem#173 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
No releases available for download? Open

google/capsem#177 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 16, 2026
Bootstrap does not install docs and marketing site dependencies Open

google/capsem#178 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Lower the release glibc floor to cover every supported Debian/Ubuntu Open

google/capsem#181 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Ship a musl/Alpine package so Alpine is supported, not just refused Open

google/capsem#182 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Distribution channels: Homebrew cask and Snap Open

google/capsem#183 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
The macOS package's declared minimum is never proved, the way the deb's was not Open

google/capsem#184 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Harden typed gate composition identity and graph guard coverage Open

type:bug

google/capsem#186 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[triage:service-live-log-buffering] Active service log stream remains empty during live route handling Open

google/capsem#188 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[triage:process-blocking-terminal-io] Remaining synchronous terminal I/O runs on Tokio workers Open

google/capsem#189 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
ci: make Codecov publication a blocking gate after reliability soak Open

component: CI

google/capsem#190 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
URLs spanning multiple lines are corrupted by margins in capsem shell Open

google/capsem#196 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Error installing capsem 0.6.3 on macOS Open

google/capsem#197 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
VM Freeze on `capsem-pty-agent` Exit Open

google/capsem#198 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
MITM TLS/HTTP inspection runs inside the privileged VM owner process Open

google/capsem#201 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Profile mutation routes race each other and write policy files non-atomically Open

google/capsem#202 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Security ledger event_json.decision says allow on blocked HTTP and DNS requests Open

google/capsem#203 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
test_release_test_composition ordering assertion is stale after the frontend-build/verify split Open

google/capsem#204 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
P1: Enforce cross-VM host isolation, extract the sandboxed proxy, add capsem proxy, and document the architecture Open

google/capsem#206 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Move OCI container control and port exposure behind one authenticated HTTP path; retire the CLI's direct VM-owner channel Open

google/capsem#207 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Browser preview for exposures through the confined router Open

google/capsem#208 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Unify internal IPC and VSOCK codecs with bounded framing and serde_bytes Open

google/capsem#209 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Byte-safe REST payloads for exec and file routes Open

google/capsem#210 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Guest exec stdin, stderr separation and cancellation Open

google/capsem#211 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
Policy admission for service-owned container image pulls Open

google/capsem#212 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
High RAM usage due to in-memory SQLite database Open

google/capsem#213 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026

A short digest of beginner-friendly GitHub issues.