| #259 |
Implement Platform Tenant (_platform) for super admin access
## Overview
Implement a special '_platform' tenant that serves as the administrative domain for plat...
|
closed |
critical |
2025-12-04 18:17 |
- |
|
| #258 |
Implement super admin tenant management APIs
Create tenant CRUD endpoints for super admin users to manage customer tenants.
Required endpoints:
...
|
closed |
high |
2025-12-04 17:50 |
- |
|
| #257 |
SECURITY: API Key rotation did not deactivate old keys
Critical security vulnerability discovered in API key rotation:
**Issues Found:**
1. Rotation kept ...
|
closed |
high |
2025-12-04 16:08 |
- |
|
| #256 |
test_workflow_with_artifact fails - workflow status is failed instead of completed
tests/integration/test_artifact_system.py::TestArtifactWorkflowExecution::test_workflow_with_artifac...
|
closed |
high |
2025-12-04 12:10 |
- |
|
| #255 |
test_retrieve_artifact fails with 401 unauthorized
Test tests/integration/test_artifact_system.py::TestArtifactAPI::test_retrieve_artifact returns 401 ...
|
closed |
high |
2025-12-04 12:06 |
- |
|
| #253 |
Consolidate worker config to config.ini and increase concurrency
Current: 8 workflow workers + 4 activity workers, each with batch_size=1 and low concurrency. Goal: ...
|
closed |
high |
2025-12-04 11:19 |
- |
|
| #252 |
Audit logging not integrated into API endpoints
The admin_audit.py utility exists with helper functions (log_api_key_created, log_token_created, log...
|
closed |
high |
2025-12-04 09:57 |
- |
|
| #251 |
[PHASE 3] DSL Converter Security Hardening
Phase 3: DSL converter security improvements:
1. Replace blacklist with whitelist approach
2. Add sa...
|
closed |
high |
2025-12-04 09:22 |
- |
|
| #250 |
[PHASE 2] Add RBAC Permissions to High Priority Endpoints
Phase 2: Add @require_permission decorators to:
1. signals.py - manage_workflows permission
2. queri...
|
closed |
high |
2025-12-04 09:22 |
- |
|
| #249 |
[PHASE 1] Add RBAC Permissions to Critical Endpoints
Phase 1: Add @require_permission decorators to:
1. artifacts.py - manage_artifacts permission
2. app...
|
closed |
critical |
2025-12-04 09:22 |
- |
|
| #248 |
[CRITICAL] Security Audit: Missing RBAC Permission Checks on Multiple Endpoints
COMPREHENSIVE SECURITY AUDIT FINDINGS - See Phase 1 breakdown for fix plan
|
closed |
critical |
2025-12-04 09:22 |
- |
|
| #247 |
Per-activity circuit breaker configuration via DSL
Allow users to optionally configure circuit breaker per activity in DSL. Default: disabled (workflow...
|
closed |
medium |
2025-12-03 21:38 |
- |
|
| #246 |
Activity worker should use LISTEN/NOTIFY instead of polling
Activity workers poll every 1s for new activities. Should use PostgreSQL LISTEN/NOTIFY like orchestr...
|
closed |
critical |
2025-12-03 20:51 |
- |
|
| #245 |
Activity worker should use BulkheadSync for parallel execution
Activity worker processes activities sequentially (1 at a time). Should use BulkheadSync like orches...
|
closed |
critical |
2025-12-03 20:30 |
- |
|
| #244 |
Critical: Activity worker holds DB connection for entire shell execution duration
## Problem
Activity worker holds a database connection checked out from the pool for the ENTIRE dur...
|
closed |
critical |
2025-12-03 15:53 |
- |
|
| #243 |
BUG: Workflow cancel doesn't kill shell child processes
When a workflow is cancelled, shell processes spawned by tools.shell.run are NOT terminated.
Curren...
|
closed |
critical |
2025-12-03 15:27 |
- |
|
| #242 |
BUG: Workflow retry leaves completed_at set causing corrupted state
When a workflow fails and Absurd retries it, _update_workflow_run_if_exists_first_start() sets statu...
|
closed |
high |
2025-12-03 15:24 |
- |
|
| #241 |
Highway MCP Server - Enable LLMs to Generate Workflows
# Highway MCP Server - Enable LLMs to Generate Workflows
## Overview
Create an MCP SERVER that exp...
|
closed |
critical |
2025-12-03 06:37 |
- |
|
| #239 |
DataShard Logs: Pagination and Search API
## Overview
Add pagination and search capabilities to the DataShard logs API for handling large log ...
|
closed |
high |
2025-12-03 03:03 |
- |
|
| #238 |
Implement default app bootstrap system for multi-tenant deployment
## Overview
Highway needs a bootstrap system that pre-installs a curated set of apps for all tenant...
|
closed |
high |
2025-12-02 19:02 |
- |
|