google/capsem

View on GitHub

Stars: 73
Forks: 13
Open beginner issues: 7
Indexed issues: 99
Avg merge: 21h 55m
Merged PRs (30d): 6

Dominant language: Rust
License: Apache-2.0
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

99 open issues indexed

Flaky: mounted_mcp_routes_are_profile_scoped_mechanics_only fails intermittently in the full service run Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

google/capsem#226 · Opened Sep 19, 2026
A stalled ledger writer can freeze a capsem-process runtime worker; DNS ignores its admission result Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

google/capsem#225 · Opened Sep 19, 2026
Engine-owned session counters and one telemetry crate with OpenTelemetry Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

google/capsem#223 · Opened Sep 18, 2026
security(preview): session expiry does not end admitted connections; no per-session revoke Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

google/capsem#222 · Opened Sep 18, 2026
capsem-mcp-builtin runs a second auto-snapshot scheduler on the session directory Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

google/capsem#221 · Opened Sep 18, 2026
Guest exec output is cut to 1 KiB before the session ledger sees it Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

google/capsem#220 · 1 comment · Opened Sep 18, 2026
Observed credentials are redacted in body previews but not in stored headers Open

Difficulty 3/5 1-2 days Newbie friendliness 76/100

google/capsem#218 · Opened Sep 17, 2026
ready() runs PRAGMA integrity_check on every route request Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

google/capsem#215 · Opened Sep 17, 2026
High RAM usage due to in-memory SQLite database Open

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

google/capsem#213 · Opened Sep 15, 2026
Policy admission for service-owned container image pulls Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

google/capsem#212 · Opened Sep 15, 2026
Guest exec stdin, stderr separation and cancellation Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

google/capsem#211 · Opened Sep 15, 2026
Unify internal IPC and VSOCK codecs with bounded framing and serde_bytes Open

Difficulty 5/5 Over a week Newbie friendliness 38/100

google/capsem#209 · 2 comments · Opened Sep 15, 2026
Byte-safe REST payloads for exec and file routes Open

Difficulty 5/5 Over a week Newbie friendliness 38/100

google/capsem#210 · Opened Sep 15, 2026
Browser preview for exposures through the confined router Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

google/capsem#208 · Opened Sep 15, 2026
Move OCI container control and port exposure behind one authenticated HTTP path; retire the CLI's direct VM-owner channel Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

google/capsem#207 · Opened Sep 15, 2026
P1: Enforce cross-VM host isolation, extract the sandboxed proxy, add capsem proxy, and document the architecture Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

google/capsem#206 · Opened Sep 14, 2026
test_release_test_composition ordering assertion is stale after the frontend-build/verify split Open

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

google/capsem#204 · Opened Sep 13, 2026
Security ledger event_json.decision says allow on blocked HTTP and DNS requests Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

google/capsem#203 · Opened Sep 11, 2026
Profile mutation routes race each other and write policy files non-atomically Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

google/capsem#202 · Opened Sep 11, 2026
MITM TLS/HTTP inspection runs inside the privileged VM owner process Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

google/capsem#201 · Opened Sep 11, 2026
VM Freeze on `capsem-pty-agent` Exit Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

google/capsem#198 · Opened Sep 9, 2026
Error installing capsem 0.6.3 on macOS Open

Difficulty 3/5 1-2 days Newbie friendliness 70/100

google/capsem#197 · 1 comment · Opened Sep 8, 2026
URLs spanning multiple lines are corrupted by margins in capsem shell Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

google/capsem#196 · Opened Sep 8, 2026
ci: make Codecov publication a blocking gate after reliability soak Open

component: CI

Difficulty 4/5 3-5 days Newbie friendliness 45/100

google/capsem#190 · 1 comment · Opened Sep 1, 2026
[triage:process-blocking-terminal-io] Remaining synchronous terminal I/O runs on Tokio workers Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

google/capsem#189 · Opened Aug 28, 2026
[triage:service-live-log-buffering] Active service log stream remains empty during live route handling Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

google/capsem#188 · Opened Aug 28, 2026
Harden typed gate composition identity and graph guard coverage Open

type:bug

Difficulty 4/5 3-5 days Newbie friendliness 58/100

google/capsem#186 · Opened Aug 20, 2026
The macOS package's declared minimum is never proved, the way the deb's was not Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

google/capsem#184 · Opened Aug 16, 2026
Distribution channels: Homebrew cask and Snap Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

google/capsem#183 · Opened Aug 16, 2026
Ship a musl/Alpine package so Alpine is supported, not just refused Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

google/capsem#182 · 2 comments · Opened Aug 16, 2026
Lower the release glibc floor to cover every supported Debian/Ubuntu Open

Difficulty 3/5 1-2 days Newbie friendliness 72/100

google/capsem#181 · 2 comments · Opened Aug 16, 2026
Bootstrap does not install docs and marketing site dependencies Open

Difficulty 3/5 1-2 days Newbie friendliness 76/100

google/capsem#178 · 1 comment · Opened Aug 11, 2026
No releases available for download? Open

google/capsem#177 · 1 comment · 1 assignee · Opened Aug 10, 2026
Investigate per-profile exec latency: co-work boots ~20% slower than code Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

google/capsem#173 · Opened Jul 31, 2026
Security rule `action = "ask"` has no resolution path Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

google/capsem#172 · Opened Jul 30, 2026
Preserve host-builder cache across the canonical just test gate Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

google/capsem#166 · Opened Jul 18, 2026
Make doctor mock-server port run-scoped to preserve parallelism Open

Difficulty 4/5 3-5 days Newbie friendliness 52/100

google/capsem#162 · Opened Jul 9, 2026
check that we can have multiple sigmal rules Open

type:documentation

Difficulty 2/5 1-3 hours Newbie friendliness 62/100

google/capsem#160 · Opened Jul 6, 2026
oauth credential don't carry over from one VM to another Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

google/capsem#159 · Opened Jul 4, 2026
dashboard tab appears multiple time Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

google/capsem#158 · Opened Jul 4, 2026
callback port Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

google/capsem#157 · Opened Jul 4, 2026
Link can't be clicked Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

google/capsem#156 · Opened Jul 4, 2026
[triage:ui-05-app-deeplink-fixed-sleep-race] Cold-start deep-link dispatch relies on a fixed 1500ms sleep (race) Open

component:app type:bug

Difficulty 4/5 3-5 days Newbie friendliness 55/100

google/capsem#155 · Opened Jul 4, 2026
[triage:ui-04-tui-runtime-and-client-per-poll] TUI builds a fresh tokio runtime + reqwest client on every poll/action Open

type:performance type:UI

Difficulty 4/5 3-5 days Newbie friendliness 55/100

google/capsem#154 · Opened Jul 4, 2026
[triage:ui-02-gateway-client-duplication] Gateway client logic forked across capsem-tray and capsem-tui Open

component: tray type:other

Difficulty 4/5 3-5 days Newbie friendliness 48/100

google/capsem#152 · Opened Jul 4, 2026
[triage:tooling-07-duplicated-worker-harness-http-dns] Worker/timing harness is duplicated between `run_http_scenario` and `run_dns_scenario` Open

type:other

Difficulty 4/5 3-5 days Newbie friendliness 48/100

google/capsem#151 · Opened Jul 4, 2026
[triage:tooling-06-missing-tests-mock-http-routing-shapes] Mock server HTTP routing and response shapes are almost entirely untested Open

type:bug

Difficulty 4/5 3-5 days Newbie friendliness 64/100

google/capsem#150 · Opened Jul 4, 2026
[triage:tooling-05-missing-tests-summarize-aggregation] No test covers `summarize()` — the core aggregation that turns samples into the reported throughput/error schema Open

type:bug

Difficulty 3/5 1-2 days Newbie friendliness 76/100

google/capsem#149 · Opened Jul 4, 2026
[triage:tooling-03-dns-bind-failure-sample-count-mismatch] DNS worker bind failure collapses `count` requests into one sample, corrupting `failed`/`successful`/throughput Open

type:bug

Difficulty 3/5 1-2 days Newbie friendliness 76/100

google/capsem#147 · Opened Jul 4, 2026
[triage:tooling-04-no-warmup-and-spawn-skew-in-throughput] Throughput timing includes worker-spawn skew and has no warmup; first-request connection setup is counted Open

type:bug

Difficulty 4/5 3-5 days Newbie friendliness 55/100

google/capsem#148 · Opened Jul 4, 2026

google/capsem

Get new issues in your inbox