Issues

• [BUG] WebSocket 重连后 orphanBinaryPayloads / pendingReplayStreamIds 未清空，导致跨连接数据污染

  spencerkit/coder-studio#18 · Filter by author pallyoung opened on Apr 30, 2026

• [BUG] terminal.created WS 事件未填充 terminalMetaAtomFamily，外部创建的终端面板空白

  spencerkit/coder-studio#17 · Filter by author pallyoung opened on Apr 30, 2026

• [BUG] 客户端异常断开时 fencing token 未释放，30 秒内其他 tab 无法获取 controller

  spencerkit/coder-studio#16 · Filter by author pallyoung opened on Apr 30, 2026

• [BUG] terminal.input 命令含 [DEBUG] console.log，每次击键泄漏明文输入内容

  spencerkit/coder-studio#15 · Filter by author pallyoung opened on Apr 30, 2026

• FencingManager heartbeat orphaned on expired token takeover

  bug
  spencerkit/coder-studio#14 · Filter by author pallyoung opened on Apr 28, 2026

• Session DB uses dynamic column mapping instead of explicit prepared statements

  enhancement
  spencerkit/coder-studio#13 · Filter by author pallyoung opened on Apr 28, 2026

• Auth login endpoint has no rate limiting

  enhancement
  spencerkit/coder-studio#12 · Filter by author pallyoung opened on Apr 28, 2026

• Security: CORS allows all origins with credentials; auth cookie missing Secure flag

  bug
  spencerkit/coder-studio#11 · Filter by author pallyoung opened on Apr 28, 2026