| #805 |
Review check_event race condition
check_event() in jumper_client.py:1353-1390 uses simple SELECT without locking. Another thread could...
|
closed |
critical |
2026-01-02 20:50 |
- |
|
| #804 |
Add workflow_run_id to async logging task spawn
inline_executor.py:664-671 spawns logging task WITHOUT workflow_run_id parameter. Creates orphaned w...
|
closed |
critical |
2026-01-02 20:50 |
- |
|
| #803 |
Fix schema mismatch for register_worker_heartbeat
Function exists in TWO schemas (highway and public) with different signatures. Migration 47 created ...
|
wont-do |
critical |
2026-01-02 20:50 |
- |
|
| #799 |
Cross-tenant data leak in activities.py list endpoint
Issue B: CRITICAL SECURITY - The activities.py list endpoint did NOT filter by tenant_id, allowing a...
|
closed |
critical |
2026-01-02 20:23 |
- |
|
| #798 |
Missing highway schema prefix in code_versioning.py
Issue A: code_versioning.py lines 219 and 247 called get_code_version_hash and update_code_version_h...
|
closed |
critical |
2026-01-02 20:23 |
- |
|
| #795 |
Workflow marked completed prematurely when main task yields for branches
When tools.workflow.execute completes at a fork point to spawn branches, the workflow_run status is ...
|
closed |
critical |
2026-01-02 19:37 |
- |
|
| #794 |
JumperClient singleton ignores queue_name parameter causing queue contamination
Root Cause: get_jumper_client() singleton caches queue_name from first call, ignores subsequent. Whe...
|
closed |
critical |
2026-01-02 19:11 |
- |
|
| #780 |
CRITICAL: cleanup_expired_rate_leases row-by-row loop has race condition
Function deletes leases and refills tokens row-by-row without atomic locking. Concurrent consume_rat...
|
closed |
critical |
2026-01-02 03:32 |
- |
|
| #779 |
CRITICAL: DLQ insert without idempotency check causes duplicates
INSERT into jumper.dead_letter has no ON CONFLICT clause. If move_to_dlq is called twice (retry bug ...
|
closed |
critical |
2026-01-02 03:32 |
- |
|
| #778 |
CRITICAL: sync_workflow_run_from_jumper_run trigger missing row-level lock
Trigger reads workflow_run.status without FOR UPDATE locking. Two parallel branch completions can ra...
|
closed |
critical |
2026-01-02 03:32 |
- |
|
| #777 |
CRITICAL: event_gateway_service.py missing workflow_run_id on emit_event
Multiple emit_event calls in EventGatewayService lack workflow_run_id (lines 146, 189, 349). Will ca...
|
closed |
critical |
2026-01-02 03:32 |
- |
|
| #776 |
CRITICAL: approval_service.py missing workflow_run_id on emit_event
ApprovalService.approve() and reject() methods emit events without passing workflow_run_id. Since mi...
|
closed |
critical |
2026-01-02 03:32 |
- |
|
| #767 |
CRITICAL: Multi-tenant isolation gap in checkpoint queries
jumper_client.py:947-959 has unsafe fallback allowing queries without tenant_id filter. Cross-tenant...
|
closed |
critical |
2026-01-02 00:53 |
- |
|
| #766 |
CRITICAL: TOCTOU in orchestrator task claiming
orchestrator.py:520-530 checks claimed_by but not state='claimed'. Between claim_task() and UPDATE (...
|
closed |
critical |
2026-01-02 00:53 |
- |
|
| #765 |
CRITICAL: State machine violation in _fail_run() unconditional reset
orchestrator.py:1117-1122 unconditionally sets state='running' without checking current state or cla...
|
closed |
critical |
2026-01-02 00:53 |
- |
|
| #764 |
CRITICAL: HeartbeatService/TimeoutService uncoordinated liveness signals
HeartbeatService updates last_heartbeat but TimeoutService checks claim_expires_at - two uncoordinat...
|
closed |
critical |
2026-01-02 00:53 |
- |
|
| #759 |
Fix Jumper race condition: HeartbeatService vs cleanup field mismatch
claim_expires_at not extended by heartbeat, causing spurious task failures. HeartbeatService updates...
|
closed |
critical |
2026-01-01 22:32 |
- |
|
| #756 |
Fixed missing OrderedDict import in durable_context.py
The OrderedDict import was missing from durable_context.py, causing all workflows to fail with 'Name...
|
closed |
critical |
2026-01-01 18:08 |
- |
|
| #752 |
Zombie transaction blocks stuck task detection causing cascading lock convoy
ROOT CAUSE ANALYSIS:
A worker crash (SystemExit, OOM, etc.) leaves a transaction in 'idle in transac...
|
closed |
critical |
2026-01-01 10:35 |
- |
|
| #750 |
[BUGFIX] Health metrics endpoint broken with NULL tenant
Fix: PostgreSQL NULL type resolution fails when passing Python None for tenant_id. Error: function g...
|
closed |
critical |
2025-12-30 02:47 |
- |
|