| #766 |
Comprehensive review fixes: webhook crash-safety, dedup, disconnect cleanup, security hardening
3-reviewer pass (security/correctness/consistency) fixes. CORRECTNESS: dispatch_reaction never raise...
|
closed |
high |
2026-06-22 01:59 |
- |
|
| #765 |
Telegram connector + real-time triggers on the reusable reaction framework
Second channel, validated e2e. Net-new only: TelegramApp (enterprise/apps/pre_installed/telegram.py,...
|
closed |
high |
2026-06-22 01:12 |
- |
|
| #764 |
Phase B-2: Gmail real-time triggers via Cloud Pub/Sub — ingestion validated
Gmail users.watch -> Pub/Sub topic (projects/highway-481210/topics/Gmail+Highway) -> push to POST /a...
|
open |
high |
2026-06-22 00:06 |
- |
|
| #763 |
Phase B: Gmail triggers (watch_gmail) — durable poll-and-react
watch_gmail(match, instruction, interval_minutes) + stop_gmail_watch(watch_id) MCP tools. Reuses the...
|
closed |
high |
2026-06-21 23:27 |
- |
|
| #762 |
Gmail connector (Highway app) + managed per-tenant OAuth + Vault-backed config
First real connector, end-to-end on demo. (1) ENGINE FIX: docker/highway-core/engine/config.py get_s...
|
closed |
high |
2026-06-21 22:45 |
- |
|
| #760 |
Security: network-isolated sandbox for tools.shell.run (contained host/DB/secrets)
Wired tools.shell.run to the enterprise Docker sandbox with network_mode=none. run_shell_in_sandbox ...
|
closed |
high |
2026-06-21 03:07 |
- |
|
| #759 |
Deploy: Highway MCP server public at https://mcp.highway.rodmena.app (multi-tenant)
Published the Highway MCP server as a public, multi-tenant HTTPS endpoint. (1) DNS: mcp.highway.rodm...
|
closed |
high |
2026-06-21 02:23 |
- |
|
| #758 |
Scheduling: MCP schedule_goal + durable_cron for recurring/scheduled agentic workflows
Added recurring scheduling via Highway durable_cron. New no-HITL scheduled-agent definition (agent_s...
|
closed |
high |
2026-06-21 01:32 |
- |
|
| #757 |
Agent items 2+3: idempotency (#750 partial), prompt-injection defense, cost/budget metering, eval harness
run_goal hardening (validated on demo): (1) COST METERING: token_budget param + per-run token accoun...
|
closed |
high |
2026-06-21 01:06 |
- |
|
| #756 |
Agent tool catalog: wire http/db/email (+shell) into run_goal with framework-injected credentials
Added enterprise/tools/agent_catalog.py build_agent_tools(catalog, config): maps friendly keys (shel...
|
closed |
high |
2026-06-21 00:52 |
- |
|
| #754 |
Drop functiongemma:270m as agent function model; use gemma4:31b-cloud (270M too weak for multi-step)
Empirical (demo tenant): functiongemma:270m emits malformed/empty tool args on compound prompts (run...
|
open |
high |
2026-06-21 00:17 |
- |
|
| #751 |
call_llm implements only Ollama; Anthropic/OpenAI raise NotImplementedError (blocks Claude)
engine/tools/llm/core/providers.py:87-112 _call_anthropic/_call_openai/etc raise NotImplementedError...
|
open |
high |
2026-06-20 22:48 |
- |
|
| #750 |
run_goal tool execution is at-least-once; needs scoped sub-step for exactly-once
run_goal gates each tool observation with a workflow variable (agent_tool_<turn>_<i>). A crash betwe...
|
closed |
high |
2026-06-20 22:48 |
- |
|
| #749 |
Phase 0: MCP front-door + durable run_goal agent tool
Highway Agents Phase 0 (option B). Engine: tools.agent.run_goal + tools.agent.init_goal (durable one...
|
in-progress |
high |
2026-06-20 22:48 |
- |
|
| #745 |
Cross-run event pollution causes deadlock in parallel workflows
Static event names in DSL templates persist in jumper.e_highway_default between runs. When a subsequ...
|
closed |
high |
2026-02-08 23:38 |
- |
|
| #744 |
Bootstrap only registers pre-installed apps, not example apps
The register_apps internal tool only scans enterprise/apps/pre_installed/ (8 apps). The 9 example ap...
|
closed |
high |
2026-02-08 21:47 |
- |
|
| #740 |
Enterprise CLI submit broken after modularization
hwe submit fails with TypeError: submit_workflow() got unexpected keyword argument queue. Signature ...
|
closed |
high |
2026-02-08 20:59 |
- |
|
| #739 |
engine.config.get_secret does not read from Vault despite Vault access
get_secret() only checks SECRET_* env vars and [secrets] INI section. It never reads from Vault even...
|
closed |
high |
2026-02-07 23:18 |
- |
|
| #738 |
ProxyDurableContext missing 'now' property causes isoformat error in IPC apps
ProxyDurableContext.__getattr__ catches all attribute access and returns a method_proxy function. Wh...
|
closed |
high |
2026-02-07 23:14 |
- |
|
| #737 |
Ollama provider does not auto-resolve API key from env/config
In _route_to_provider (engine/tools/llm/core/providers.py), the ollama provider reads base_url from ...
|
closed |
high |
2026-02-07 23:12 |
- |
|