<div class="prc-Truncate-Truncate-2G1eo" title="Issues" style="--truncate-max-width:100%">Issues

pleaseai/shunt#893 · opened

on Nov 5, 2026

docs(metrics): replace stale src/metrics.rs line anchors in dashboard-metrics.md with symbol names

Docs

pleaseai/shunt#891 · opened

on Nov 3, 2026

chore(agent-memory): re-verify three stale review-agent verdicts

pleaseai/shunt#887 · opened

on Nov 2, 2026

feat(auth): opt-in to trust email from JWT issuers that never send email_verified

pleaseai/shunt#885 · opened

on Nov 2, 2026

1

Keep the admin_surface pool tests off the real Antigravity and xAI account stores

pleaseai/shunt#880 · opened

on Oct 30, 2026

Same-origin gate fills in the Origin scheme's default port when Host has none

pleaseai/shunt#879 · opened

on Oct 30, 2026

chatgpt-plan sign-in without the plan scope drops refresh tokens without revoking them

pleaseai/shunt#878 · opened

on Oct 30, 2026

chatgpt-plan login can overwrite a newer sign-in after an intervening logout

pleaseai/shunt#877 · opened

on Oct 30, 2026

fix(codex): display Business Standard and Premium plan names

pleaseai/shunt#875 · opened

on Oct 30, 2026

Japanese provider pages translate 'advertise an alias' as 広告

pleaseai/shunt#874 · opened

on Oct 30, 2026

Count when a pooled session moves to a different account

pleaseai/shunt#872 · opened

on Oct 30, 2026

Map response.incomplete max_output_tokens to Anthropic stop_reason max_tokens

pleaseai/shunt#868 · opened

on Oct 30, 2026

Same-origin check refuses same-origin browser requests behind a reverse proxy that rewrites Host

pleaseai/shunt#867 · opened

on Oct 30, 2026

Log gateway-side refusals separately from upstream failures in the proxy error log

pleaseai/shunt#866 · opened

on Oct 30, 2026

feat(codex): close the inbound WebSocket after a per-turn 401

pleaseai/shunt#864 · opened

on Oct 30, 2026

feat(cli): preview the store's one-time snapshot import in shunt check

pleaseai/shunt#861 · opened

on Oct 29, 2026

feat(auth): validate that an inbound JWT subject_prefix ends at a delimiter

pleaseai/shunt#855 · opened

on Oct 27, 2026

Test the same-host redirect rule on the Kimi, gateway and Antigravity token paths

pleaseai/shunt#853 · opened

on Oct 27, 2026

Warn when a SHUNT_*_TOKEN_URL override is ignored on the credential-store refresh path

pleaseai/shunt#852 · opened

on Oct 27, 2026

Log refused OIDC callbacks so a forged-state flood is visible to the operator

pleaseai/shunt#851 · opened

on Oct 27, 2026

feat(accounts): warn when a store scan skips a file with an invalid account name

pleaseai/shunt#849 · opened

on Oct 27, 2026

refactor(anthropic): fix stale pool-skip comments and split account_refusal.rs and failover/chain.rs

Refactor

pleaseai/shunt#830 · opened

on Oct 23, 2026

test(failover): assert a stated resume time becomes the recorded skip or cooldown

Task

pleaseai/shunt#829 · opened

on Oct 23, 2026

fix(anthropic): a stalled refusal body can hold the response past the caller's idle limit

pleaseai/shunt#827 · opened

on Oct 23, 2026

Warm the tiktoken encoder when a config reload adds the first local-counting provider