| #251 |
[PHASE 3] DSL Converter Security Hardening
Phase 3: DSL converter security improvements:
1. Replace blacklist with whitelist approach
2. Add sa...
|
closed |
high |
2025-12-04 09:22 |
- |
|
| #250 |
[PHASE 2] Add RBAC Permissions to High Priority Endpoints
Phase 2: Add @require_permission decorators to:
1. signals.py - manage_workflows permission
2. queri...
|
closed |
high |
2025-12-04 09:22 |
- |
|
| #249 |
[PHASE 1] Add RBAC Permissions to Critical Endpoints
Phase 1: Add @require_permission decorators to:
1. artifacts.py - manage_artifacts permission
2. app...
|
closed |
critical |
2025-12-04 09:22 |
- |
|
| #248 |
[CRITICAL] Security Audit: Missing RBAC Permission Checks on Multiple Endpoints
COMPREHENSIVE SECURITY AUDIT FINDINGS - See Phase 1 breakdown for fix plan
|
closed |
critical |
2025-12-04 09:22 |
- |
|
| #247 |
Per-activity circuit breaker configuration via DSL
Allow users to optionally configure circuit breaker per activity in DSL. Default: disabled (workflow...
|
closed |
medium |
2025-12-03 21:38 |
- |
|
| #246 |
Activity worker should use LISTEN/NOTIFY instead of polling
Activity workers poll every 1s for new activities. Should use PostgreSQL LISTEN/NOTIFY like orchestr...
|
closed |
critical |
2025-12-03 20:51 |
- |
|
| #245 |
Activity worker should use BulkheadSync for parallel execution
Activity worker processes activities sequentially (1 at a time). Should use BulkheadSync like orches...
|
closed |
critical |
2025-12-03 20:30 |
- |
|
| #244 |
Critical: Activity worker holds DB connection for entire shell execution duration
## Problem
Activity worker holds a database connection checked out from the pool for the ENTIRE dur...
|
closed |
critical |
2025-12-03 15:53 |
- |
|
| #243 |
BUG: Workflow cancel doesn't kill shell child processes
When a workflow is cancelled, shell processes spawned by tools.shell.run are NOT terminated.
Curren...
|
open |
critical |
2025-12-03 15:27 |
- |
|
| #242 |
BUG: Workflow retry leaves completed_at set causing corrupted state
When a workflow fails and Absurd retries it, _update_workflow_run_if_exists_first_start() sets statu...
|
closed |
high |
2025-12-03 15:24 |
- |
|
| #241 |
Highway MCP Server - Enable LLMs to Generate Workflows
# Highway MCP Server - Enable LLMs to Generate Workflows
## Overview
Create an MCP SERVER that exp...
|
open |
critical |
2025-12-03 06:37 |
- |
|
| #240 |
MCP Server Integration for Highway DSL
# MCP (Model Context Protocol) Server Integration for Highway DSL
## Overview
Implement comprehens...
|
open |
high |
2025-12-03 06:30 |
- |
|
| #239 |
DataShard Logs: Pagination and Search API
## Overview
Add pagination and search capabilities to the DataShard logs API for handling large log ...
|
closed |
high |
2025-12-03 03:03 |
- |
|
| #238 |
Implement default app bootstrap system for multi-tenant deployment
## Overview
Highway needs a bootstrap system that pre-installs a curated set of apps for all tenant...
|
open |
high |
2025-12-02 19:02 |
- |
|
| #237 |
Docker tools tests failing after OpenAPI changes
Two Docker tests are failing with 'Expected workflow status completed, but got failed':
- test_docke...
|
closed |
high |
2025-12-02 18:14 |
- |
|
| #236 |
Complete OpenAPI request/response documentation for all endpoints
Continue adding Pydantic models for query parameters and response schemas to all API endpoints. UUID...
|
open |
high |
2025-12-02 09:20 |
- |
|
| #235 |
Comprehensive OpenAPI documentation for all 159 API endpoints
Complete OpenAPI/Swagger documentation coverage for all API endpoints.
## Current Status
- Infra...
|
closed |
high |
2025-12-02 08:55 |
- |
|
| #234 |
Fix OpenAPI response serialization - UUIDs and response structure
Spectree response validation failed: UUIDs as objects, missing pagination field. Temp fix: removed r...
|
closed |
medium |
2025-12-02 08:44 |
- |
|
| #233 |
OpenAPI: SDK Generation and Documentation Portal
## Overview
Generate client SDKs and create documentation portal from OpenAPI spec.
## Requirements...
|
closed |
medium |
2025-12-02 08:16 |
- |
|
| #232 |
OpenAPI: Utility & System Endpoints (13 endpoints)
## Scope
Document utility and system endpoints:
- `api/blueprints/v1/health.py` (2 endpoints)
- `api...
|
closed |
low |
2025-12-02 08:16 |
- |
|