Issues

• Decide: keep createdAt's database now() default, or adopt Prisma rc.12's app-side generator

  needs-triage
  OpenSaasAU/stack#1693 · Filter by author borisno2 opened on Sep 29, 2026

• Write-only permit: let a permitted non-ADMIN create a row (and get its id) on an ADMIN-query-only list without sudo()

  enhancement
  OpenSaasAU/stack#1686 · Filter by author borisno2 opened on Sep 28, 2026

• Hook-only writable fields and declarative state transitions (a field no caller, including sudo(), may write directly)

  enhancement
  OpenSaasAU/stack#1684 · Filter by author borisno2 opened on Sep 25, 2026

• extendList()'s field merge is shallow per-key, so a later plugin can silently discard an earlier plugin's field-level access

  bugneeds-triage
  OpenSaasAU/stack#1676 · Filter by author borisno2 opened on Sep 25, 2026

• OAuth discovery helpers forward every inbound header to a URL derived from the request

  bugneeds-triagepriority:lowPrisma8
  OpenSaasAU/stack#1662 · Filter by author borisno2 opened on Sep 25, 2026

• db update consent: the parked-change message names a remedy Prisma refuses, and --confirm is not bound to the printed plan

  bugneeds-triagepriority:lowPrisma8
  OpenSaasAU/stack#1660 · Filter by author borisno2 opened on Sep 25, 2026
  

• Dev database accepts any credentials as superuser, and its data directory is world-readable

  bugneeds-triagepriority:lowPrisma8
  OpenSaasAU/stack#1659 · Filter by author borisno2 opened on Sep 25, 2026

• MCP: OAuth token scopes are never checked

  bugneeds-triagepriority:lowPrisma8
  OpenSaasAU/stack#1657 · Filter by author borisno2 opened on Sep 25, 2026

• Unique-constraint violations reveal that a row the session cannot read has a given value

  bugneeds-triagepriority:lowPrisma8
  OpenSaasAU/stack#1654 · Filter by author borisno2 opened on Sep 25, 2026

• A caller's own where() on a to-one include nulls the parent's foreign key

  bugneeds-triagepriority:lowPrisma8
  OpenSaasAU/stack#1653 · Filter by author borisno2 opened on Sep 25, 2026

• extendUserList fields never reach the better-auth session, so the documented sessionFields role recipe does nothing

  bugneeds-triagepriority:mediumPrisma8
  OpenSaasAU/stack#1649 · Filter by author borisno2 opened on Sep 25, 2026

• Dev loop: an additive schema change leaves the running app on the previous client until a manual restart

  bugneeds-triagepriority:mediumPrisma8
  OpenSaasAU/stack#1648 · Filter by author borisno2 opened on Sep 25, 2026

• RAG keeps a stale embedding when the source is cleared or regeneration fails

  bugpriority:mediumPrisma8ready-for-agent
  OpenSaasAU/stack#1647 · Filter by author borisno2 opened on Sep 25, 2026

• Multi-column storage fields: raw part columns bypass the logical field's validation and hooks

  bugneeds-triagepriority:mediumPrisma8
  OpenSaasAU/stack#1645 · Filter by author borisno2 opened on Sep 25, 2026

• Field-level write rules veto a list's own resolveInput output

  bugneeds-triagepriority:mediumPrisma8
  OpenSaasAU/stack#1643 · Filter by author borisno2 opened on Sep 25, 2026

• create, update and delete accept select/include in their types but ignore them at runtime

  bugneeds-triagepriority:mediumPrisma8
  OpenSaasAU/stack#1642 · Filter by author borisno2 opened on Sep 25, 2026

• Declared createdAt/updatedAt fields have their access rules ignored and their writes dropped; system keys in payloads are discarded silently

  bugneeds-triagepriority:mediumPrisma8
  OpenSaasAU/stack#1639 · Filter by author borisno2 opened on Sep 25, 2026

• Admin serverAction returns raw non-database error messages to the browser

  bugneeds-triagepriority:mediumPrisma8
  OpenSaasAU/stack#1638 · Filter by author borisno2 opened on Sep 25, 2026

• Dev/test database: after a failed query, PGlite sometimes delivers its error to the next statement

  bugneeds-triagepriority:highPrisma8
  OpenSaasAU/stack#1635 · Filter by author borisno2 opened on Sep 25, 2026

• embedding({ index }) derives a vector index that is never built — the pgvector pack registers no index types

  enhancementpriority:mediumPrisma8ready-for-human
  OpenSaasAU/stack#1265 · Filter by author borisno2 opened on Sep 7, 2026
  2

• Reintroduce a to-many count predicate through the Where vocabulary

  enhancementpriority:mediumPrisma8ready-for-human
  OpenSaasAU/stack#1230 · Filter by author borisno2 opened on Sep 6, 2026
  2