| #98 |
HIGH: Callback tasks marked executed to prevent re-scheduling
inline_executor.py:1044-1046 - on_success/on_failure callback tasks marked as executed after running...
|
closed |
high |
2025-11-26 20:52 |
- |
|
| #97 |
HIGH: Wait operators can re-execute on workflow resume
inline_executor.py:1091-1110 - WaitOperator and WaitForEventOperator NOT marked as executed when sle...
|
closed |
high |
2025-11-26 20:52 |
- |
|
| #96 |
HIGH: Failure handler savepoint rollback before logging
inline_executor.py:1182-1188 - After task fails, PostgreSQL aborts transaction. Rollback to savepoin...
|
closed |
high |
2025-11-26 20:52 |
- |
|
| #95 |
HIGH: Deep copy workflow_state for parallel branch isolation
operators.py:463-465 - Branch contexts require deep copy of parent workflow_state for isolation. Ena...
|
closed |
high |
2025-11-26 20:51 |
- |
|
| #94 |
HIGH: Never log plaintext or ciphertext in encryption operations
encryption.py:218,281 - Encryption/decryption logs NEVER include plaintext or ciphertext. Only logs ...
|
closed |
high |
2025-11-26 20:51 |
- |
|
| #93 |
HIGH: Immutable workflow definition storage for audit integrity
workflow_versioning_service.py:170 - Workflow JSON NEVER modified after storage. Each unique hash st...
|
closed |
high |
2025-11-26 20:51 |
- |
|
| #92 |
HIGH: Durable cron definition_id injection for workflow.execute
durable_cron.py:344-352 - For tools.workflow.execute tasks, definition_id injected into target_param...
|
closed |
high |
2025-11-26 20:51 |
- |
|
| #91 |
HIGH: Durable cron schedule inactive check stops zombie jobs
durable_cron.py:226-227 - Cron loop checks if schedule marked inactive (deleted) and stops iteration...
|
closed |
high |
2025-11-26 20:51 |
- |
|
| #90 |
HIGH: Mini-workflow executed_tasks state persistence to parent
workflow_executor.py:179-185 - Mini-workflows' executed_tasks state persisted to parent workflow con...
|
closed |
high |
2025-11-26 20:51 |
- |
|
| #89 |
HIGH: Mini-workflow sequential execution prevents recursive spawning
workflow_executor.py:172-177 - Mini-workflows execute with enable_concurrent_levels=False. Only top-...
|
closed |
high |
2025-11-26 20:51 |
- |
|
| #88 |
HIGH: SQL injection prevention via sql.Identifier for dynamic tables
timeout_service.py:174,311 dead_letter_service.py:189,204 heartbeat_service.py:182 - All services us...
|
closed |
high |
2025-11-26 20:51 |
- |
|
| #45 |
Fix ALL remaining mypy type errors in engine/cli/ directory
Run mypy engine/cli/ --ignore-missing-imports to verify. Fix type annotations in monitor_steps.py, s...
|
closed |
high |
2025-11-26 06:55 |
- |
|
| #44 |
Fix mypy type errors in 7 files
workflow_logging_injector.py, secure_logging.py, registry.py, base.py, sandbox.py, db_helpers.py, sc...
|
closed |
high |
2025-11-26 06:55 |
- |
|
| #43 |
Fix all mypy type errors in API and engine files
Fix mypy type errors in: api/fix_logging.py, api/replace_console_logs.py, api/oauth_handlers/oauth2....
|
closed |
high |
2025-11-26 06:47 |
- |
|
| #42 |
Fix all mypy type errors in api/middleware/ directory
Add proper type annotations to all middleware files without changing logic. Files: error_handlers.py...
|
closed |
high |
2025-11-26 06:47 |
- |
|
| #41 |
Fix mypy type errors in engine/security/ and engine/services/
Fix ~45 total mypy errors across security and services directories. Add type annotations without cha...
|
closed |
high |
2025-11-26 06:47 |
- |
|
| #39 |
Fix mypy type errors across codebase
Run mypy and fix all type errors
|
closed |
high |
2025-11-26 06:45 |
- |
|
| #38 |
Demos must use demo tenant, not default/test
All demo workflows should run on demo tenant. test tenant is reserved for pytest only.
|
closed |
high |
2025-11-26 06:42 |
- |
|
| #37 |
demo-disaster: Template var substitution failing
make demo-disaster fails - {item} and {loop_counter} not substituted
|
closed |
high |
2025-11-26 06:37 |
- |
|
| #36 |
Run pytest -n0 --stepwise and fix all test failures
Run all integration tests sequentially and fix any failures found
|
closed |
high |
2025-11-26 05:29 |
- |
|