| #847 |
Encryption master key has an on-host env fallback next to the PostgreSQL data directory
EARS SPEC:
- The Highway platform shall source the JSONB encryption master key from Vault only; if V...
|
open |
high |
2026-08-03 20:47 |
- |
|
| #845 |
Replay simulation runs while-loop to the 10000 cap: agent_scheduled never terminates under mocked side effects
EARS SPEC:
- The Highway replay service shall bound simulation of a while loop to the iteration coun...
|
closed |
high |
2026-08-03 16:44 |
- |
|
| #842 |
Back-channel logout: accept identity logout_token, revoke Highway OIDC sessions
EARS SPEC:
- When identity POSTs a logout_token to /api/v1/auth/oidc/backchannel-logout, the API sha...
|
closed |
high |
2026-07-31 12:54 |
- |
|
| #839 |
Upgrade auth to 3.0.0 (strict-default flip with grandfathering; client always raises)
EARS SPEC:
- The Highway platform shall pin auth>=3.0.0 and deploy it with the migrations entrypoint...
|
closed |
high |
2026-07-31 01:53 |
- |
|
| #838 |
Adopt key-backed users (auth rak_ API keys) per auth deprecation notice 2/2 (SPEC 0008)
EARS SPEC:
- When auth 3.0.0 strict identity becomes default, every Highway authorization subject (u...
|
closed |
high |
2026-07-31 00:50 |
- |
|
| #836 |
postgres max_connections=80 saturates: FATAL too many clients during test runs
EARS SPEC:
- The postgres max_connections value shall exceed worst-case pool demand with headroom: a...
|
closed |
high |
2026-07-31 00:20 |
- |
|
| #835 |
OPS: Vault at vault.rodmena.app is SEALED - tenant secrets API returns 500
EARS SPEC:
- While Vault is sealed, the platform shall be considered degraded: /api/v1/tenant/secret...
|
closed |
high |
2026-07-31 00:20 |
- |
|
| #834 |
Upgrade auth lib to >=2.4.0 (auth 3.0.0 deprecation notice) + answer runflow RF-58 fix-notice
EARS SPEC:
- The Highway platform shall pin the auth Python library to >=2.4.0 (the 3.0.0 migration ...
|
closed |
high |
2026-07-30 23:26 |
- |
|
| #827 |
CLI hwe terminate/reset fully broken: UPDATE on phantom 'jumper_runs' table rolls back the whole command
engine/cli/workflow_cmd/lifecycle.py:96 (cmd_terminate) and :310 (cmd_reset) run UPDATE jumper_runs ...
|
closed |
high |
2026-07-19 05:26 |
- |
|
| #825 |
Cancel endpoint cannot cancel claimed in-flight workflow runs (409); no cooperative boundary cancellation
POST /workflows/<id>/cancel only calls jumper cancel_task on the wrapper (tools.workflow.execute) ru...
|
closed |
high |
2026-07-19 01:04 |
- |
|
| #824 |
Visual editor n8n-parity push (phased): reliability, execution loop, canvas ops, expressions
Comprehensive review found major gaps vs n8n. Phased build (user approved all, in order): P1 reliabi...
|
in-progress |
high |
2026-07-15 01:31 |
- |
|
| #823 |
Expression editor + variable picker for the visual workflow editor
Add n8n-style expression support to the visual editor's inspector fields. Highway interpolates {{ va...
|
open |
high |
2026-07-14 21:44 |
- |
|
| #822 |
Introspect real tool signatures for the visual editor (self-documenting param forms)
The visual editor only had rich param forms for 14 hand-curated tools; the other ~90 fell back to a ...
|
closed |
high |
2026-07-14 21:07 |
- |
|
| #821 |
Visual workflow editor rebuild: Svelte Flow + real tools + correct compiler + round-trip
The dashboard visual editor is useless: dsl-generator.convertNodeToTask only emits task+parallel and...
|
open |
high |
2026-07-14 00:40 |
- |
|
| #819 |
Dashboard UX review 2026-07-11: 62 verified findings (truth-telling bugs, dead controls, older-runs regression, mobile)
Comprehensive 11-dimension UX review of highway-dashboard (code + 17 desktop + 17 mobile screenshots...
|
open |
high |
2026-07-12 00:39 |
- |
|
| #818 |
Workflows list perf: dashboard fetches + client-groups ALL runs (9845); add grouped-summary endpoint (#agentic)
The dashboard workflows page fetches every run (days-windowed, ~9845 for a busy tenant) with no work...
|
open |
high |
2026-07-10 22:08 |
- |
|
| #817 |
DB failover breaks durability: duplicate side effects (exactly-once) + run failures under postgres restart (#agentic)
Chaos harness with --db-restarts 3 (postgres restarts mid-flight) on 20 canary runs: 3 runs FAILED a...
|
closed |
high |
2026-07-09 01:40 |
- |
|
| #816 |
Production-readiness: fault-injection / chaos harness for the durable engine (#agentic)
Add tests/chaos: a fault-injection harness that SIGKILLs workers mid-flight and asserts durability i...
|
closed |
high |
2026-07-08 23:55 |
- |
|
| #812 |
AppToolBridge.is_waiting_tool hardcoded False -> waiting app actions with long timeout mis-routed to activity and FAIL (#agentic)
is_waiting_tool (tool_bridge.py:200) returns False unconditionally (TODO). task.py:80 routes a waiti...
|
closed |
high |
2026-07-06 00:42 |
- |
|
| #798 |
Stage 1 epic: structured output through the LLM gateway + Anthropic prompt caching
Agentic plan Stage 1: (a) response_format JSON-schema param through call_llm to all providers (opena...
|
closed |
high |
2026-07-01 23:01 |
- |
|