Review backlog (correctness): doInit follows a symlinked project .prompts entry #298

Activity

1. hivecommons-hive

   added

   agent/reviewerCreated by Hive for agent-filed issue provenanceCreated by Hive for agent-filed issue provenance

   on Oct 20, 2026
2. github-actions

   added

   help wantedDenotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.

   on Oct 20, 2026
3. hivecommons-hive

   added

   stage/010-actionableTriaged; eligible for the hive to pick upTriaged; eligible for the hive to pick up

   hive/claimed-by-scanner

   stage/020-claimedClaimed by the scanner or a relay contributorClaimed by the scanner or a relay contributor

   and removed

   stage/010-actionableTriaged; eligible for the hive to pick upTriaged; eligible for the hive to pick up

   on Oct 20, 2026
4. hivecommons-hive commented on Oct 20, 2026

   

   hivecommons-hiveBot

   on Oct 20, 2026 – with hivecommons-hive

   ContributorAuthor

   More actions

   🔒 Claimed by agent scanner (agent on hive hosted-available-oke-11-placeholder-r05x). The claim lasts 2h0m0s without activity and renews while the work continues. Reply /unclaim to release, or /claim to take it over if you outrank the holder.
5. hivecommons-hive

   added

   stage/030-pr-in-progressAn agent kick is running; no PR yetAn agent kick is running; no PR yet

   stage/040-covered-by-prAn open PR covers this issueAn open PR covers this issue

   stage/020-claimedClaimed by the scanner or a relay contributorClaimed by the scanner or a relay contributor

   and removed

   stage/020-claimedClaimed by the scanner or a relay contributorClaimed by the scanner or a relay contributor

   stage/030-pr-in-progressAn agent kick is running; no PR yetAn agent kick is running; no PR yet

   stage/040-covered-by-prAn open PR covers this issueAn open PR covers this issue

   on Oct 20, 2026
6. hivecommons-hive commented on Oct 20, 2026

   

   hivecommons-hiveBot

   on Oct 20, 2026 – with hivecommons-hive

   ContributorAuthor

   More actions

   Folded finding. This was filed as a separate issue, but 1 open agent-filed issue (plus 4 closed as completed in the last 14 days) already cite src/commands.ts, so it was folded into the oldest of them instead of opening another. Treat this issue as the tracker for that component: prefer one structural fix that covers every folded variant over a PR per variant.

   Review backlog (security): Non-ENOENT lstat errors in doInit surface as an uncaught throw rather than a diag line

   Filed from an out-of-scope finding in the Hive review of PR #299.

   PR: #299 (#299)
   Perspective: security
   Severity: info (P3)
   Evidence: src/commands.ts:35 (

   promptargs/src/commands.ts

   Line 35 in a46532a

   } catch (err) {

   )
   Finding: Non-ENOENT lstat errors in doInit surface as an uncaught throw rather than a diag line

   src/commands.ts:34-36 rethrows any lstatSync error other than ENOENT (e.g. EACCES/ENOTDIR on a parent), producing a stack trace; the loader guard it mirrors (src/loader.ts:36-40) reports these via diag('loader_dir_unreadable'). Not a security issue and not worse than pre-head behavior (existsSync would return false and mkdirSync would throw), so advisory only.

   Fingerprint: 5631c9628452783b3eb51369dcafc03d069fa6915e1bc757e33776973a988805

   filed by Hive review backlog
7. hivecommons-hive commented on Oct 20, 2026

   

   hivecommons-hiveBot

   on Oct 20, 2026 – with hivecommons-hive

   ContributorAuthor

   More actions

   Linked again from the Hive review of PR #299.
8. hivecommons-hive

   closed this as completedin #299on Oct 20, 2026
9. hivecommons-hive

   removed

   hive/claimed-by-scanner

   stage/020-claimedClaimed by the scanner or a relay contributorClaimed by the scanner or a relay contributor

   on Oct 20, 2026