Issues

• upgrade zod dependency - versions below 4.6.6 are affected by CVE-2023-54404

  bugpkg:pi-permission-system
  gotgenes/pi-packages#1090 · Filter by author robertpeteuil opened on Oct 26, 2026
  1

• /subagents:sessions renders every tool call expanded, and the transcript is not click-to-expandable like the main session

  bugpkg:pi-subagents
  gotgenes/pi-packages#1088 · Filter by author Asianfleet opened on Oct 25, 2026

• Fork @eko24ive/pi-ask as @gotgenes/pi-ask: prune, text-first guard, fix upstream defects

  enhancementscope:repo
  gotgenes/pi-packages#1087 · Filter by author gotgenes opened on Oct 24, 2026

• cd ~/… leaves the effective directory unknown and resolves later tokens against the cwd

  gotgenes/pi-packages#1083 · Filter by author Susensio opened on Oct 24, 2026

• Windows: slash flags (/s, /q, /f) are gated as external MSYS paths, blocking built-in commands under external_directory deny

  gotgenes/pi-packages#1082 · Filter by author yonikremer opened on Oct 22, 2026

• [pi-permission-system] Agent-facing bash denial omits evaluated command and matched rule, causing models to infer tool-wide bans

  gotgenes/pi-packages#1081 · Filter by author BillyOutlast opened on Oct 20, 2026

• vitest's global #src alias captures a dependency's own #src subpath imports

  scope:repo
  gotgenes/pi-packages#1078 · Filter by author gotgenes opened on Oct 17, 2026

• Implementation of background processes

  enhancementscope:repo
  gotgenes/pi-packages#1076 · Filter by author ReStranger opened on Oct 16, 2026

• Using pi-durable for subagents

  enhancementpkg:pi-subagents
  gotgenes/pi-packages#1075 · Filter by author ReStranger opened on Oct 16, 2026
  1

• pi-permission-system: allow 'cd' into current working directory

  enhancementpkg:pi-permission-system
  gotgenes/pi-packages#1074 · Filter by author AaronAsAChimp opened on Oct 14, 2026

• bash lane: permission.bash cannot scope by destination path — extract cp/mv/install/dd/rsync/tee write targets into the path_write lane

  bugpkg:pi-permission-system
  gotgenes/pi-packages#1071 · Filter by author nilbounce1 opened on Oct 13, 2026

• pi-permission-system: bash lane bypasses path_write via cp/mv/tee destinations (extract write targets + mid-pattern * fix)

  bugpkg:pi-permission-system
  gotgenes/pi-packages#1070 · Filter by author nilbounce1 opened on Oct 13, 2026
  1

• pi-permission-system: untyped wire ingestion in readForwardedPermissionRequest and unsafe event object assertions

  bugpkg:pi-permission-system
  gotgenes/pi-packages#1069 · Filter by author mxr576 opened on Oct 13, 2026

• pi-permission-system: directory escape in forwarding tree via encodeSessionIdForPath

  bugpkg:pi-permission-system
  gotgenes/pi-packages#1068 · Filter by author mxr576 opened on Oct 13, 2026

• pi-permission-system: path traversal and arbitrary JSON file write via unvalidated forwarded request.id

  bugpkg:pi-permission-system
  gotgenes/pi-packages#1067 · Filter by author mxr576 opened on Oct 13, 2026
  2

• Re-evaluate the rumdl 0.2.24 pin now that rvben/rumdl#933 is fixed in 0.2.79

  scope:repo
  gotgenes/pi-packages#1066 · Filter by author gotgenes opened on Oct 11, 2026

• pi-permission-system: a wrapper fused to its command by a non-breaking space still suggests the wrapper's whole session grant

  bugpkg:pi-permission-system
  gotgenes/pi-packages#1065 · Filter by author gotgenes opened on Oct 11, 2026

• pi-permission-system: a session grant for an interpreter or find covers its -c / -exec forms

  bugpkg:pi-permission-system
  gotgenes/pi-packages#1063 · Filter by author gotgenes opened on Oct 10, 2026

• pi-permission-system: a bash external_directory prompt doesn't show which word of the command produced the path

  pkg:pi-permission-system
  gotgenes/pi-packages#1062 · Filter by author gotgenes opened on Oct 10, 2026

• Support patch-based tools for pi-autoformat

  enhancementpkg:pi-autoformat
  gotgenes/pi-packages#1061 · Filter by author michaelmior opened on Oct 9, 2026

• invisible-characters crashes with EISDIR on a tracked directory symlink

  bugscope:repo
  gotgenes/pi-packages#1060 · Filter by author chris-lasher-tinyig opened on Oct 9, 2026

• unicode-escapes treats .tsx and .jsx as markdown, flagging escapes in string literals

  bugscope:repo
  gotgenes/pi-packages#1059 · Filter by author chris-lasher-tinyig opened on Oct 9, 2026

• pi-subagents: withheld notifications cross resume boundaries and emit stale or contradictory run status

  bugpkg:pi-subagents
  gotgenes/pi-packages#1058 · Filter by author tonybro233 opened on Oct 9, 2026

• pi-permission-system: GNU time's abbreviated --out/--form misplace the wrapped command, and the remaining table wrappers lack an option grammar

  bugpkg:pi-permission-system
  gotgenes/pi-packages#1057 · Filter by author gotgenes opened on Oct 9, 2026

• pi-permission-system: the serving heartbeat rewrites a file every second per session, even with no forwarding child waiting

  pkg:pi-permission-system
  gotgenes/pi-packages#1052 · Filter by author dopamine911 opened on Oct 9, 2026
  1