| #421 |
Bug Report
Test desc
Reporter: test@example.com
|
closed |
medium |
2025-12-14 12:16 |
- |
|
| #420 |
Bug Report
Test bug: clicking the submit button does nothing
Reporter: test@example.com
|
closed |
medium |
2025-12-14 12:16 |
- |
|
| #419 |
Test Bug Report
Test description
Reporter: test@example.com
|
closed |
medium |
2025-12-14 12:16 |
- |
|
| #418 |
Test Bug
Test bug
Reporter: test@example.com
|
closed |
medium |
2025-12-14 12:15 |
- |
|
| #416 |
Test Issue
Test description
|
closed |
medium |
2025-12-14 12:15 |
- |
|
| #414 |
Long-held transactions during task execution cause connection pool pressure
## Problem
During test execution, observed up to 34 idle_in_transaction connections with total conne...
|
closed |
medium |
2025-12-12 20:22 |
- |
|
| #413 |
Fix: Platform roles missing view_logs permission
Platform roles (platform_owner, platform_admin, platform_support) were missing the 'view_logs' permi...
|
closed |
medium |
2025-12-12 17:35 |
- |
|
| #412 |
CONSOLIDATED: Low Priority Fixes and Minor Improvements
## Consolidated Low Priority Issues
### Code Quality
1. ~~**Logger f-string** (ex #371, #396)~~: FI...
|
closed |
low |
2025-12-12 14:48 |
- |
|
| #411 |
CRITICAL: Sandbox all user Python code execution
Security flaw: tools.python.run gives tenant code raw DB access via ctx.db_connection. In multi-tena...
|
closed |
critical |
2025-12-12 06:40 |
- |
|
| #410 |
ARTIFACT mode in code_versioning doesn't auto-load from code_artifacts table
Review Gap 3 incomplete: CodeVersionMode.ARTIFACT is defined but python_task.py doesn't auto-load co...
|
closed |
high |
2025-12-12 06:11 |
- |
|
| #409 |
Automated partition management (Janitor service)
Review Rec 3: Integrate Janitor service to automatically manage and create future database partition...
|
closed |
low |
2025-12-12 06:06 |
- |
|
| #408 |
ParallelGroup DSL context manager for safer parallel workflows
Review Rec 4: The fork-only parallel model is safe but developer-hostile. Introduce a ParallelGroup ...
|
closed |
low |
2025-12-12 06:06 |
- |
|
| #407 |
HTTP Idempotency-Key auto-injection for exactly-once semantics
Review Gap 1: Side-Effect Atomicity. HTTP requests in tools.http.request execute BEFORE transaction ...
|
closed |
high |
2025-12-12 06:06 |
- |
|
| #406 |
absurd_client.py inconsistent use of _table() method vs f-strings
engine/absurd_client.py:1023,1107 uses f-strings for table names despite having safe _table() method...
|
closed |
low |
2025-12-12 05:49 |
- |
|
| #405 |
orchestrator.py uses f-strings for SQL table names instead of sql.Identifier()
engine/orchestrator.py:277,372,553,762,794,988 uses f-strings for absurd table names. While queue_na...
|
closed |
low |
2025-12-12 05:49 |
- |
|
| #404 |
assert statements in db.py can be bypassed with Python -O flag
engine/db.py:445-448 uses assert for validation. When Python runs with -O flag, asserts are stripped...
|
closed |
low |
2025-12-12 05:49 |
- |
|
| #403 |
circuit_breaker_reset.py CLI still uses /tmp flag files
engine/cli/circuit_breaker_reset.py:13-18 still uses /tmp flag file mechanism that was supposed to b...
|
closed |
medium |
2025-12-12 05:49 |
- |
|
| #402 |
Weak PRNG in tracing.py for trace/span ID generation
engine/utils/tracing.py:94,103 uses random.getrandbits() instead of secrets module for trace/span ID...
|
closed |
medium |
2025-12-12 05:49 |
- |
|
| #401 |
LOW: API pagination offset unbounded for DoS
API endpoints (logs.py:1220, schedules.py:685) don't bound offset. Large offset=999999999 forces Pos...
|
closed |
low |
2025-12-11 22:44 |
- |
|
| #400 |
LOW: Bare except clause in sandbox catches SystemExit
sandbox.py:306 - Uses bare 'except:' catching all exceptions including SystemExit and KeyboardInterr...
|
closed |
low |
2025-12-11 22:44 |
- |
|