Issues

• feat: protect secrets with a Linux user boundary and box-local MCP execution

  enhancementsecurity
  defangdevs/agent-box#922 · Filter by author defangdevs opened on Oct 23, 2026
  1

  

• Expose MCP tools on HTTPS for use in locally running harnesses

  defangdevs/agent-box#918 · Filter by author lionello opened on Oct 23, 2026
  1

  

• Codex Remote Control threads are invisible to Agentbox session discovery and routing

  defangdevs/agent-box#914 · Filter by author defangdevs opened on Oct 22, 2026

• How to move a local thread/session to a remote agent-box?

  question
  defangdevs/agent-box#911 · Filter by author lionello opened on Oct 22, 2026
  1

• Webhook VM can race a lingering session after stopping the supervisor

  bug
  defangdevs/agent-box#893 · Filter by author defangdevs opened on Oct 19, 2026

• Sessions: schedule active turns separately from resident runtimes

  featureP2
  defangdevs/agent-box#891 · Filter by author defangdevs opened on Oct 19, 2026

• Sessions: park idle webhook workers and wake their exact conversation on delivery

  enhancementP2
  defangdevs/agent-box#890 · Filter by author defangdevs opened on Oct 19, 2026

• Expose why sessions cannot be hibernated when capacity refuses new work

  enhancementP2
  defangdevs/agent-box#888 · Filter by author defangdevs opened on Oct 19, 2026

• Coalesced webhook batches seed ownership and lease only for the newest object

  bugP2
  defangdevs/agent-box#887 · Filter by author defangdevs opened on Oct 19, 2026
  3

  

• CLI and settings starts refuse at capacity without reclaiming an eligible idle runtime

  bugP2
  defangdevs/agent-box#886 · Filter by author defangdevs opened on Oct 19, 2026

• One malformed session aborts hibernation selection for all other idle runtimes

  bugP2
  defangdevs/agent-box#885 · Filter by author defangdevs opened on Oct 19, 2026

• Expired webhook subscriptions indefinitely block hibernation of idle sessions

  bugP2
  defangdevs/agent-box#884 · Filter by author defangdevs opened on Oct 19, 2026

• Hibernation can kill a Claude runtime after new input arrives and leave its turn stopped

  bugclaudeP1
  defangdevs/agent-box#883 · Filter by author defangdevs opened on Oct 19, 2026
  

• feat(acp): package and map the Buzz reply helper

  feature
  defangdevs/agent-box#878 · Filter by author defangdevs opened on Oct 19, 2026
  7

  

• Spawned sessions for Slack (non-GitHub) events get a GitHub-shaped claim, so follow-ups in the thread start new sessions

  defangdevs/agent-box#875 · Filter by author raphaeltm opened on Oct 19, 2026

• Run local-slack as its own system user, with tokens as credentials kept out of agent sessions

  defangdevs/agent-box#873 · Filter by author raphaeltm opened on Oct 19, 2026
  1

• Investigate SOPS for agent-box

  defangdevs/agent-box#872 · Filter by author lionello opened on Oct 16, 2026
  1

• Slack policy section: render local-slack's recommended settings into channels.json (companion to #863)

  defangdevs/agent-box#864 · Filter by author defangdevs opened on Oct 15, 2026
  4

• Slack connection (local-slack): Slack threads as bus events, settle timer, guarded send tools — spec

  defangdevs/agent-box#863 · Filter by author raphaeltm opened on Oct 15, 2026
  2

• WhatsApp: acknowledgement prevents progress and final replies

  defangdevs/agent-box#852 · Filter by author christineay opened on Oct 13, 2026
  1

  

• deploy/gcp: launch agent-box on Google Compute Engine (plan + live-tested prototype)

  defangdevs/agent-box#848 · Filter by author defang-sam opened on Oct 12, 2026
  10

• Document the native Ubuntu vs NixOS deployment decision

  documentation
  defangdevs/agent-box#846 · Filter by author defangdevs opened on Oct 8, 2026
  1

  

• agent-box-session tell: hand work to another session and say whether it landed

  defangdevs/agent-box#840 · Filter by author defangdevs opened on Oct 8, 2026

• Feature: Secure human browser takeover for interactive website login and MFA

  defangdevs/agent-box#837 · Filter by author lionello opened on Oct 8, 2026
  1

• WhatsApp /connect/start always resets the routing profile when the caller omits it

  defangdevs/agent-box#831 · Filter by author defangdevs opened on Oct 4, 2026