| #660 |
Missing tool rate limits for http.request and llm.call
tenant_defaults.yaml only has rate limits for tools.email.send. Missing rate limits for: tools.http....
|
closed |
medium |
2025-12-22 12:46 |
- |
|
| #657 |
Suspension/reactivation has no notifications
When a tenant is suspended (deactivate_tenant) or reactivated (reactivate_tenant) in engine/security...
|
closed |
medium |
2025-12-22 12:46 |
- |
|
| #653 |
Bootstrap workflow ignores system_tenants.yaml - hardcoded tenant owner emails
YAML exists but platform_bootstrap.py has hardcoded demo@highway.local and test-admin@highway.test. ...
|
closed |
medium |
2025-12-21 16:01 |
- |
|
| #652 |
Tenant Suspend/Reactivate Workflows
Workflows for tenant lifecycle management.
Workflows on _platform tenant:
- _system.tenant.suspend ...
|
closed |
medium |
2025-12-21 05:45 |
- |
|
| #651 |
Tenant API Key Management Workflows
Workflows for API key lifecycle.
Workflows on _platform tenant:
- _system.tenant.add_api_key - Crea...
|
closed |
medium |
2025-12-21 05:45 |
- |
|
| #649 |
Health Check Workflows
Scheduled health monitoring workflows.
Workflows on _platform tenant:
- _system.health.api - Check ...
|
closed |
medium |
2025-12-21 05:45 |
- |
|
| #648 |
Internal Health Tools
Implement internal.health.* tools for platform monitoring.
Tools:
- internal.health.check_endpoint ...
|
closed |
medium |
2025-12-21 05:45 |
- |
|
| #637 |
Time-based capacity variations for rate limiting
Currently the schedule system only supports on/off (allowed/blocked) time windows. Need to support v...
|
closed |
medium |
2025-12-21 01:31 |
- |
|
| #635 |
Add distributed rate limiter decorator (@with_rate_limit)
Executive Summary
Implement enterprise-grade rate limiting for Highway tools that combines:
1...
|
closed |
medium |
2025-12-20 15:56 |
- |
|
| #634 |
Create sample app demonstrating database tool
Write pre-installed app using database tool. Test with separate postgres container. Store secrets in...
|
closed |
medium |
2025-12-20 05:57 |
- |
|
| #629 |
Sandbox containers can't reach host.docker.internal API
Python sandbox containers fail to connect to the host API at host.docker.internal:7822, causing all ...
|
closed |
medium |
2025-12-19 02:48 |
- |
|
| #625 |
Architectural: Don't hold DB transaction during long task execution
**Current Behavior:**
The inline_executor creates a SAVEPOINT before task execution (line 1560-1562)...
|
closed |
medium |
2025-12-19 00:11 |
- |
|
| #620 |
Cython: Optimize chunking.py
Convert ChunkedDBResultWriter/Reader to Cython. Simple buffer operations and index math - good ROI.
|
closed |
medium |
2025-12-18 21:52 |
- |
|
| #616 |
Feature Marked as Broken, Work Halted
A user reported that Lia advised against further work on a specific feature, stating it is broken. N...
|
closed |
medium |
2025-12-18 14:09 |
- |
|
| #614 |
RAG generated incorrect tools.python.run usage with inline code
The dsl_reference.rst documentation incorrectly showed tools.python.run accepting inline Python code...
|
closed |
medium |
2025-12-18 00:08 |
- |
|
| #611 |
Nested .get() calls without default handling
Chained .get().get() calls may fail. Example: operators.py:897. Consider using proper nested dict ac...
|
closed |
medium |
2025-12-17 22:28 |
- |
|
| #606 |
Bare except Exception: clauses in engine module
167 bare except clauses. Most intentional: config fallback (return defaults), cleanup/shutdown code....
|
closed |
medium |
2025-12-17 22:27 |
- |
|
| #605 |
Unnecessary list() conversions
Multiple files use list(dict.keys()) where iteration would suffice. Check: workflow_logging_injector...
|
closed |
medium |
2025-12-17 22:27 |
- |
|
| #604 |
Inefficient len() checks: multiple files
Use 'not x' instead of 'len(x)==0', use 'x' instead of 'len(x)>0'. Files: inline_executor.py, operat...
|
closed |
medium |
2025-12-17 22:27 |
- |
|
| #573 |
[MEDIUM] cron.py TOCTOU in create_schedule/update_schedule
Race condition in cron.py: SELECT to check if schedule exists, then INSERT/UPDATE. Concurrent reques...
|
closed |
medium |
2025-12-17 16:32 |
- |
|