memnox good first issues (TypeScript)

tests: run the OS guard for real (Landlock on Ubuntu, Seatbelt on macOS) in CI 26 days ago

enhancement help wanted ✨ goal: improvement 🟨 priority: medium 🤖 aspect: dx

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

policy: invalid 'windows' either crash the validator or silently switch a rule off 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

egress: ALL_PROXY points at an HTTP proxy, and there is no SOCKS listener (OSS-5.9) 27 days ago

enhancement help wanted 💻 aspect: code ⭐ goal: addition 🟩 priority: low

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

mcp wrap: a config with comments is skipped, and every line of the file is reformatted 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟨 priority: medium

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

explain <agent>: state effective capability by joining logged-in CLIs to the agent's shell (section 23) 27 days ago

enhancement help wanted 💻 aspect: code ⭐ goal: addition 🟨 priority: medium

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

config: make circuit-breaker thresholds and session limits configurable (section 15) 27 days ago

enhancement good first issue 💻 aspect: code ⭐ goal: addition 🟨 priority: medium hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

rewind --dry-run: show what a session changed, and what a rewind cannot undo (section 20) 27 days ago

enhancement help wanted ⭐ goal: addition 🕹 aspect: interface 🟨 priority: medium

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

proxy: hold a write tool that appears on an MCP server until a person accepts it (capability drift, section 17) 27 days ago

enhancement help wanted 💻 aspect: code ⭐ goal: addition 💬 talk: discussion 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

scan --share: render the share card as an SVG image, counts only (OSS-8.8) 27 days ago

enhancement help wanted ⭐ goal: addition 🕹 aspect: interface 🟩 priority: low hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

trace: show the output of the action asked about, not the tail of the whole session (OSS-9.10) 27 days ago

enhancement help wanted 💻 aspect: code ✨ goal: improvement 🟨 priority: medium

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

run --transcript writes secrets to disk unredacted 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

purge: transcripts are never deleted, though trace says they share the ledger's retention 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟨 priority: medium hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

tests: upgrade the ledger from every past schema version, and prove a failed migration rolls back 27 days ago

enhancement good first issue ✨ goal: improvement 🏁 status: ready for dev 🟨 priority: medium 🤖 aspect: dx

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

tests: extend the conformance matrix beyond the shell seam (OSS-5.11) 27 days ago

enhancement help wanted ✨ goal: improvement 🟨 priority: medium 🤖 aspect: dx

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

proxy: govern HTTP and Streamable-HTTP MCP servers, not only stdio ones (OSS-4.3) 27 days ago

enhancement help wanted 💻 aspect: code ⭐ goal: addition 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

cli: make flag names consistent (-y, -a, and protect --for meaning a name rather than a time) 27 days ago

enhancement good first issue ✨ goal: improvement 🕹 aspect: interface 🟩 priority: low

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

docs: document the MEMNOX_* environment variables and NO_COLOR, and add FAQ entries for Windows and removal 27 days ago

good first issue 🏁 status: ready for dev 📄 aspect: text 🟩 priority: low hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

protect --apply-native crashes on a malformed agent settings file (unchecked JSON.parse as T) 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟨 priority: medium

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

docs: rewrite the dead I.NN and II.NN vision citations to plain section numbers 27 days ago

good first issue 🏁 status: ready for dev 📄 aspect: text 🟩 priority: low

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

docs: em dashes in npm package descriptions and GitHub templates 27 days ago

good first issue 🏁 status: ready for dev 📄 aspect: text 🟩 priority: low hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

docs: replace em dashes in docs prose with the linking word they stand for 27 days ago

good first issue help wanted 📄 aspect: text 🟩 priority: low hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

dx: prettier and typecheck skip the root configs, scripts/ and test-setup/ 27 days ago

enhancement good first issue ✨ goal: improvement 🏁 status: ready for dev 🟩 priority: low 🤖 aspect: dx hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

bench: measure proxy and interceptor overhead, and run benchmarks in CI 27 days ago

enhancement help wanted ⭐ goal: addition 🟨 priority: medium 🤖 aspect: dx

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

ci: coverage is configured but never run 27 days ago

enhancement good first issue ✨ goal: improvement 🏁 status: ready for dev 🟩 priority: low 🤖 aspect: dx hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

docs: the Node version floor says 20 in several places, but engines require 22 27 days ago

good first issue 🏁 status: ready for dev 📄 aspect: text 🟩 priority: low hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

doctor: does not warn on Windows, although ADR 0001 says it does 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟨 priority: medium

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

cli: usage errors exit 1 instead of 2, some call sites hard-code 1, and exit codes are undocumented 27 days ago

bug good first issue 🕹 aspect: interface 🏁 status: ready for dev 🛠 goal: fix 🟨 priority: medium

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

cli: add shell completion (memnox completion bash|zsh|fish) 27 days ago

enhancement help wanted ⭐ goal: addition 🟩 priority: low 🤖 aspect: dx hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

tests: eleven CLI commands have no command-level test 27 days ago

enhancement good first issue help wanted ✨ goal: improvement 🟨 priority: medium 🤖 aspect: dx hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

cli: read-only commands without --json (budget list, lock --list, rewind --list, policy test and more) 27 days ago

enhancement good first issue help wanted ⭐ goal: addition 🕹 aspect: interface 🟨 priority: medium hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

docs: commands.md contradicts the code for collisions, timeline, config, approvals and the default command 27 days ago

good first issue 🏁 status: ready for dev 📄 aspect: text 🟨 priority: medium hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

docs: commands.md is missing several commands, and nothing keeps it complete 27 days ago

good first issue 🏁 status: ready for dev 📄 aspect: text 🟨 priority: medium hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

cli: numeric flags are not validated (timeline --limit abc reaches SQLite as LIMIT NaN) 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟨 priority: medium hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

cli: report --since and next --since read '2h' as 2 days and an ISO date as thousands of days 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟨 priority: medium hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

tests: add direct tests for untested core and interceptor modules 27 days ago

enhancement good first issue help wanted ✨ goal: improvement 🟩 priority: low 🤖 aspect: dx hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

tests: the approval card's key handling has no tests 27 days ago

enhancement good first issue ✨ goal: improvement 🏁 status: ready for dev 🟨 priority: medium 🤖 aspect: dx hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

intercept: describeRm only recognizes exact '-rf' tokens, so 'rm -r -f' and 'rm -rfv' read as 'a delete' 27 days ago

bug good first issue 🕹 aspect: interface 🏁 status: ready for dev 🛠 goal: fix 🟩 priority: low hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

recovery: no checkpoint before shred, truncate, unlink, git stash clear or git checkout --force 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟨 priority: medium hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

policy: classifyRisk does not split on '-', so most verb-table actions get the wrong risk level 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

discovery: the JSON MCP reader drops URL servers, and Claude Desktop's servers are never read on Linux 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

discovery: add detectors for OpenCode, Aider, Copilot CLI and Zed 27 days ago

enhancement good first issue help wanted 💻 aspect: code ⭐ goal: addition 🟨 priority: medium hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

discovery: add Gemini CLI and Windsurf detectors, which hooks and README already claim to support 27 days ago

enhancement good first issue 💻 aspect: code ⭐ goal: addition 🏁 status: ready for dev 🟧 priority: high hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

discovery: PGPASSWORD, MYSQL_PWD, PASSWORD and SECRET_KEY_BASE are not seen as credentials, and 'export NAME=' lines are misread 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟨 priority: medium hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

discovery: gcloud, heroku, netlify, psql and mysql are never reported as authenticated 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

intercept: mariadb, redis-cli, pgcli and mycli are not recognized as database clients 27 days ago

enhancement good first issue 💻 aspect: code ⭐ goal: addition 🟨 priority: medium hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

sql: WHERE is checked once per script, so a second statement hides an unbounded DELETE or UPDATE 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

shell: the prefix and interpreter lists have drifted between the normalizer and the resolver 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟨 priority: medium

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

shell: curl | sudo bash, curl | python3, bash -c "$(curl ...)" and bash <(curl ...) are not flagged as remote code 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟥 priority: critical

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

intercept: classifyPackageManager misreads the verb when flags come first (pnpm --filter web add x) 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟨 priority: medium

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

intercept: publishing through pnpm, yarn, bun or cargo, and helm or pulumi destroy, bypass every rule 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

verbs: aws commands that return credentials are not tagged secrets, and assume-role and kms decrypt are unknown 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟧 priority: high hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

verbs: kubectl short resource names (ns, deploy, pvc, type/name) bypass the specific delete actions 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

verbs: git reflog expire is a read, and '+refspec' force pushes bypass the git.push-force rule 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟥 priority: critical

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

verbs: vercel misses bare 'vercel', 'env pull', 'remove', 'promote', 'rollback' and 'alias' 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟨 priority: medium hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

verbs: fly, heroku and netlify tables are thin, and flyctl has no table at all 27 days ago

enhancement good first issue 💻 aspect: code ⭐ goal: addition 🏁 status: ready for dev 🟨 priority: medium hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

verbs: docker table misses rm, volume, prune and compose verbs 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟨 priority: medium hacktoberfest

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

self-protection: agents can edit the hook files Memnox installs for Codex, Cursor, Gemini CLI and Windsurf 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟥 priority: critical

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

mcp-proxy: --name with no value swallows the next flag 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟩 priority: low

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

LineBuffer is quadratic on one very large line, and the proxy ignores stdout backpressure 27 days ago

enhancement help wanted 💻 aspect: code ✨ goal: improvement 🟩 priority: low

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

memnox-shell: argv mode joins arguments without quoting, so rulings see the wrong command 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟨 priority: medium

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

interceptor: resolveReal can pick a directory or a non-executable file named like the binary 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟩 priority: low

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

shell edits skip every file when the user's gitconfig sets diff.noprefix 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟩 priority: low

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

containment: a write through a symlink that points outside the repository counts as inside it 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

edit hook: the destination of a Codex apply_patch '*** Move to:' is never checked for containment 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

daemon-client: a daemon that closes without replying can make the wrapper exit with the wrong status 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟨 priority: medium

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

git hooks: installed into .git/hooks even when core.hooksPath is set, and fail in worktrees and submodules 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟨 priority: medium

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

interceptors: SIGTERM and SIGHUP are not forwarded, so the real command outlives its wrapper 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

interceptors: a command killed by a signal is reported as refused (77) or as failed (1) 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

memnox-shell: positional args after -c are dropped, a later -- switches mode, and -o pipefail is misparsed 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

egress: binary request bodies are corrupted and bodies over 1 MB are sent upstream empty 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

egress: one malformed request crashes the whole proxy (IPv6 CONNECT, bad Proxy-Authorization, https absolute form) 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

proxy: notifications/cancelled is ignored, so open calls leak and a cancelled held call still runs 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟨 priority: medium

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

proxy: a server killed by a signal reports exit 0, and spawn failures and EPIPE crash the proxy 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟨 priority: medium

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

proxy: a multi-byte character split across two stream chunks is corrupted 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟨 priority: medium

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

proxy: instruction-shaped text in embedded resources and structuredContent is never framed 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

proxy: a paginated tools/list (nextCursor) wipes the manifest and raises false new-tool alerts 27 days ago

bug help wanted 💻 aspect: code 🛠 goal: fix 🟨 priority: medium

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

proxy: a request the server starts is mistaken for a tool result when the ids collide 27 days ago

bug good first issue 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟧 priority: high

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

proxy: a JSON-RPC batch reaches the server without passing the tools/call gate 27 days ago

bug help wanted 💻 aspect: code 🏁 status: ready for dev 🛠 goal: fix 🟥 priority: critical

Memnox/memnox

2

See what your AI coding agents can actually do on your machine, and put the dangerous actions behind ask or deny. Local policy, approval and audit for Claude Code, Codex, Cursor and more. Deterministic, and no model ever decides.

TypeScript

Memnox/memnox

Open Issues Need Help