| #635 |
Add distributed rate limiter decorator (@with_rate_limit)
Executive Summary
Implement enterprise-grade rate limiting for Highway tools that combines:
1...
|
closed |
medium |
2025-12-20 15:56 |
- |
|
| #634 |
Create sample app demonstrating database tool
Write pre-installed app using database tool. Test with separate postgres container. Store secrets in...
|
closed |
medium |
2025-12-20 05:57 |
- |
|
| #629 |
Sandbox containers can't reach host.docker.internal API
Python sandbox containers fail to connect to the host API at host.docker.internal:7822, causing all ...
|
closed |
medium |
2025-12-19 02:48 |
- |
|
| #625 |
Architectural: Don't hold DB transaction during long task execution
**Current Behavior:**
The inline_executor creates a SAVEPOINT before task execution (line 1560-1562)...
|
closed |
medium |
2025-12-19 00:11 |
- |
|
| #620 |
Cython: Optimize chunking.py
Convert ChunkedDBResultWriter/Reader to Cython. Simple buffer operations and index math - good ROI.
|
closed |
medium |
2025-12-18 21:52 |
- |
|
| #616 |
Feature Marked as Broken, Work Halted
A user reported that Lia advised against further work on a specific feature, stating it is broken. N...
|
closed |
medium |
2025-12-18 14:09 |
- |
|
| #614 |
RAG generated incorrect tools.python.run usage with inline code
The dsl_reference.rst documentation incorrectly showed tools.python.run accepting inline Python code...
|
closed |
medium |
2025-12-18 00:08 |
- |
|
| #611 |
Nested .get() calls without default handling
Chained .get().get() calls may fail. Example: operators.py:897. Consider using proper nested dict ac...
|
closed |
medium |
2025-12-17 22:28 |
- |
|
| #606 |
Bare except Exception: clauses in engine module
167 bare except clauses. Most intentional: config fallback (return defaults), cleanup/shutdown code....
|
closed |
medium |
2025-12-17 22:27 |
- |
|
| #605 |
Unnecessary list() conversions
Multiple files use list(dict.keys()) where iteration would suffice. Check: workflow_logging_injector...
|
closed |
medium |
2025-12-17 22:27 |
- |
|
| #604 |
Inefficient len() checks: multiple files
Use 'not x' instead of 'len(x)==0', use 'x' instead of 'len(x)>0'. Files: inline_executor.py, operat...
|
closed |
medium |
2025-12-17 22:27 |
- |
|
| #573 |
[MEDIUM] cron.py TOCTOU in create_schedule/update_schedule
Race condition in cron.py: SELECT to check if schedule exists, then INSERT/UPDATE. Concurrent reques...
|
closed |
medium |
2025-12-17 16:32 |
- |
|
| #572 |
[MEDIUM] steps.py unbounded list growth in batch operations
Batch step operations can accumulate large in-memory lists without bounds. For very large workflows ...
|
closed |
medium |
2025-12-17 16:32 |
- |
|
| #571 |
[MEDIUM] Inconsistent error logging - some use exception() some use error()
Error logging is inconsistent across API endpoints. Some use logger.exception() which includes stack...
|
closed |
medium |
2025-12-17 16:32 |
- |
|
| #570 |
[MEDIUM] Inconsistent timezone handling in API responses
Some timestamps use timezone-aware datetimes while others use naive datetimes. This can cause issues...
|
closed |
medium |
2025-12-17 16:32 |
- |
|
| #569 |
[MEDIUM] analytics.py unused time_range query parameter
time_range parameter is parsed but never used in some analytics queries, wasting processing. Fix: Ei...
|
closed |
medium |
2025-12-17 16:32 |
- |
|
| #568 |
[MEDIUM] Public endpoint lists scattered across files
PUBLIC_PATHS and skip-auth endpoint lists are defined in multiple places (rbac.py, auth.py) leading ...
|
closed |
medium |
2025-12-17 16:32 |
- |
|
| #567 |
[MEDIUM] Missing workflow_id in permission check logs
Permission check audit logs in api/middleware/rbac.py don't include workflow_id when checking workfl...
|
closed |
medium |
2025-12-17 16:32 |
- |
|
| #566 |
[MEDIUM] security_headers.py CSP nonce generated but unused
CSP nonce is generated on every request but never actually used in responses. This is wasted computa...
|
closed |
medium |
2025-12-17 16:32 |
- |
|
| #565 |
[MEDIUM] apps.py N+1 query in list_versions endpoint
N+1 query pattern in list_versions endpoint. Each version fetches related data in separate queries i...
|
closed |
medium |
2025-12-17 16:32 |
- |
|