| #854 |
EPIC: 50 source files exceed the 550-line hard cap - split without module shadowing
EARS SPEC (program-level):
- Every source file in the Highway stack shall be at most 500 lines (soft...
|
closed |
high |
2026-08-22 11:45 |
- |
|
| #848 |
Adopt bulkman 2.0.1 - pin >=2.0.0,<3 and verify shutdown semantics change
EARS SPEC:
- The Highway engine shall pin bulkman to >=2.0.0,<3 so the major-version adoption is exp...
|
closed |
medium |
2026-08-03 20:48 |
- |
|
| #845 |
Replay simulation runs while-loop to the 10000 cap: agent_scheduled never terminates under mocked side effects
EARS SPEC:
- The Highway replay service shall bound simulation of a while loop to the iteration coun...
|
closed |
high |
2026-08-03 16:44 |
- |
|
| #844 |
circuit-breakers 503: Vault password for resilient_circuit_db never applied to the postgres role
EARS SPEC:
- When GET /api/v1/circuit-breakers is called by an authorized caller, the Highway API sh...
|
closed |
critical |
2026-08-03 16:44 |
- |
|
| #843 |
health/metrics 500s: get_health_metrics builds jumper.r_%I, breaks on queue named "default"
EARS SPEC:
- When get_health_metrics builds a per-queue SQL statement, the Highway health metrics fu...
|
closed |
critical |
2026-08-03 16:44 |
- |
|
| #842 |
Back-channel logout: accept identity logout_token, revoke Highway OIDC sessions
EARS SPEC:
- When identity POSTs a logout_token to /api/v1/auth/oidc/backchannel-logout, the API sha...
|
closed |
high |
2026-07-31 12:54 |
- |
|
| #841 |
auth 3.0.1: drop local varchar reconciliation (upstreamed as _reconcile_text_columns)
EARS SPEC:
- When auth 3.0.1 is deployed, Highway shall remove its local varchar->TEXT reconciliatio...
|
closed |
medium |
2026-07-31 10:56 |
- |
|
| #840 |
Integrate RODMENA Identity (OIDC) as sign-in option for highway-dashboard
EARS SPEC:
- When a user chooses 'Sign in with RODMENA ID', the Highway API shall run an authorizati...
|
closed |
medium |
2026-07-31 10:55 |
- |
|
| #839 |
Upgrade auth to 3.0.0 (strict-default flip with grandfathering; client always raises)
EARS SPEC:
- The Highway platform shall pin auth>=3.0.0 and deploy it with the migrations entrypoint...
|
closed |
high |
2026-07-31 01:53 |
- |
|
| #838 |
Adopt key-backed users (auth rak_ API keys) per auth deprecation notice 2/2 (SPEC 0008)
EARS SPEC:
- When auth 3.0.0 strict identity becomes default, every Highway authorization subject (u...
|
closed |
high |
2026-07-31 00:50 |
- |
|
| #836 |
postgres max_connections=80 saturates: FATAL too many clients during test runs
EARS SPEC:
- The postgres max_connections value shall exceed worst-case pool demand with headroom: a...
|
closed |
high |
2026-07-31 00:20 |
- |
|
| #835 |
OPS: Vault at vault.rodmena.app is SEALED - tenant secrets API returns 500
EARS SPEC:
- While Vault is sealed, the platform shall be considered degraded: /api/v1/tenant/secret...
|
closed |
high |
2026-07-31 00:20 |
- |
|
| #834 |
Upgrade auth lib to >=2.4.0 (auth 3.0.0 deprecation notice) + answer runflow RF-58 fix-notice
EARS SPEC:
- The Highway platform shall pin the auth Python library to >=2.4.0 (the 3.0.0 migration ...
|
closed |
high |
2026-07-30 23:26 |
- |
|
| #833 |
CATASTROPHIC: /simulate re-executed REAL tool side effects + crashed on incomplete mock client
User report: opening the Simulate/Replay tab on a real workflow produced a 500 with 'ReplayJumperCli...
|
closed |
critical |
2026-07-19 17:26 |
- |
|
| #832 |
Hardening batch: defensive guards + observability from the jumper/core audit (low severity)
Bundle of verified-low findings from the 2026-07-19 audit: (1) jumper schedule_run's TASK-table UPDA...
|
closed |
low |
2026-07-19 05:26 |
- |
|
| #831 |
Lifecycle boundary checks do not reach foreach/while loop bodies — pause/cancel latency inside long loops
The #825/#826 boundary check (_lifecycle_signal) runs only in execute_workflow_graph's main ready-ta...
|
closed |
medium |
2026-07-19 05:26 |
- |
|
| #830 |
Sweeper fail-path can block up to DB-wide statement_timeout (2min) on a live wrapper's jumper-row lock
docker-compose.yml:159 sets statement_timeout=120000 DB-wide (SHOW confirms 2min). The wrapper holds...
|
closed |
medium |
2026-07-19 05:26 |
- |
|
| #829 |
completed_at metadata anomalies: claim-time timestamps on multi-minute runs; repair paths COALESCE stale values
Observed: run 6d2f34ac showed completed_at ~1s after creation despite ~2min execution; reconciled zo...
|
closed |
medium |
2026-07-19 05:26 |
- |
|
| #828 |
Status filter allowlists incomplete: 'orphaned' unfilterable; VALID_WORKFLOW_STATUSES dead constant missing 3 statuses
api/blueprints/v1/workflows.py:804 _status_keys = (completed,failed,running,pending,sleeping,paused,...
|
closed |
medium |
2026-07-19 05:26 |
- |
|
| #827 |
CLI hwe terminate/reset fully broken: UPDATE on phantom 'jumper_runs' table rolls back the whole command
engine/cli/workflow_cmd/lifecycle.py:96 (cmd_terminate) and :310 (cmd_reset) run UPDATE jumper_runs ...
|
closed |
high |
2026-07-19 05:26 |
- |
|