jamesread
5741c8ea2c
feat: Alpha support for search (behind feature gate)
2026-08-06 22:24:05 +01:00
jamesread
0b2a5995ff
chore: coderabbit knows better than me
2026-07-29 01:25:44 +01:00
jamesread
7ecc7791d8
chore: golangci-lint fixes
2026-07-29 00:30:57 +01:00
jamesread
a1f03e7d33
chore: fieldalignment across code base to reduce memory usage
2026-07-28 22:26:51 +01:00
jamesread
a080f4ee2d
chore: Turn up golang lint, and fix some minor error handling stuff
2026-07-28 22:11:37 +01:00
jamesread
7c4eefa378
fix: Max of 16 clients in an event stream
2026-07-28 17:22:34 +01:00
jamesread
c7646166f2
chore: Missed a couple of files in the last commit
2026-07-28 13:23:19 +01:00
jamesread
fe1ac20935
feat: Show config issues in diagnostics
2026-07-24 15:27:02 +01:00
jamesread
5b1a29db7f
docs: Standardize on "Server Diagnostics", update many screenshots
2026-07-09 11:30:16 +01:00
jamesread
904616b1b1
security: GHSA-jm28-2wcr-qf3h (LOW) enforce logs ACL on sync execution endpoints
...
StartActionAndWait and StartActionByGetAndWait now apply the same logs
permission check used by GetLogs and ExecutionStatus.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-08 09:52:30 +01:00
jamesread
afd9f9033a
feat: expand entity list and detail APIs with properties and related actions
...
Support filtered paginated entity lists, configurable instance columns, and
entity-scoped actions with prefilled arguments for richer entity workflows.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-06 20:37:26 +01:00
jamesread
a530dca579
refactor: collapse action justification into a string template field
...
Use a single justification string for both requirement and templating so
empty values skip prompts while templates can prefill audit reasons at start.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-06 20:36:30 +01:00
jamesread
57f3ef46ad
fix: several merge messes
2026-06-28 22:52:16 +01:00
jamesread
42003da384
fix: rerun args
2026-06-26 23:25:24 +01:00
jamesread
7bd6e77ae2
chore: fix race conditions and little bugs
2026-06-19 09:56:41 +01:00
jamesread
633d9ecd82
feat: action group sizing
2026-06-18 23:33:27 +01:00
jamesread
de63793b3a
feat: circle indicator for running actions, justification support
2026-06-17 23:29:30 +01:00
jamesread
d9c8cfb573
feat: Logs filtering, and log queue with group concurrency
2026-06-16 14:30:39 +01:00
jamesread
6aa672e6c0
feat: Logs filtering, and log queue with group concurrency
2026-06-16 14:16:43 +01:00
jamesread
92f564ab45
feat: Action grouping for concurrency limit and queuing
2026-06-16 01:34:41 +01:00
jamesread
8f6d53a029
chore: tweak reconnect login to avoid reconnect spam
2026-06-15 00:50:04 +01:00
jamesread
65ed5c1ff4
feat: more intelligent reconnect method
2026-06-15 00:10:07 +01:00
James Read
437255e247
Merge commit from fork
...
security: GHSA-f637-w7p2-m7fx (LOW) Validation endpoints allow argument enumeration
2026-05-22 00:10:49 +01:00
jamesread
a3865704c8
security: GHSA-f637-w7p2-m7fx (LOW) Validation endpoints allow argument enumeration
2026-05-22 00:08:47 +01:00
jamesread
246e33d565
feat: API Key (bearer) auth
2026-05-21 22:59:12 +01:00
jamesread
fe68264c2b
feat: popupOnStart history, and logs in reverse order on action details view
2026-05-19 23:19:42 +01:00
jamesread
acd6cb839e
security: GHSA-228v-wc5r-j8m7 (HIGH) Unauthorized Action Output Disclosure via EventStream
2026-03-10 23:47:35 +00:00
jamesread
b032ae5e5e
chore: fix regression on arguments not being found
2026-03-05 08:29:30 +00:00
James Read
93d983c506
Merge branch 'next' into advisory-fix-1
2026-03-05 03:24:12 -05:00
jamesread
d7962710e7
security: GHSA-jf73-858c-54pg (MODERATE) View permission not being checked when returning dashboards
2026-03-05 08:20:02 +00:00
James Read
5e0c052e68
Merge branch 'next' into advisory-fix-1
2026-03-04 19:16:07 -05:00
James Read
6202736d53
Merge commit from fork
...
security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest
2026-03-04 19:05:48 -05:00
jamesread
cb46a597b2
security: GHSA-p443-p7w5-2f7f (MODERATE) RestartAction always runs actions as guest
2026-03-05 00:04:58 +00:00
jamesread
d6a0abc375
security: GHSA-gq2m-77hf-vwgh (MODERATE) Session Fixation: Logout Fails to Invalidate Server-Side Session
2026-03-04 23:31:15 +00:00
jamesread
bb14c5da3e
security: (MED) GHSA-fwhj-785h-43hh Crash on NPE by calling APIs with invalid bindings or log references
2026-03-04 22:51:58 +00:00
jamesread
aa2bd95ccb
feat(policy): add policy to show/hide version number
...
Made-with: Cursor
2026-02-27 21:26:55 +00:00
jamesread
54eb2a6586
fix: User login log message fixed when password matches, but user lookup fails
2026-02-27 00:10:45 +00:00
jamesread
03da2ff2e7
security: Try to set cookies secure, with force override option
2026-02-26 23:43:50 +00:00
jamesread
4744169aa0
chore: code cleanup, remove todos, etc
2026-02-26 23:07:07 +00:00
jamesread
e9a3863b1b
chore: codestyle
2026-02-26 20:56:51 +00:00
jamesread
4af4d516be
fix: ShowDiagnostics now behind policy checks
2026-02-26 20:43:14 +00:00
jamesread
24cced0c8c
security: IDOR on ExecutionStatus API
2026-02-26 20:23:48 +00:00
jamesread
a7be68b359
security: 10-slot Semaphore around password hash functions to prevent resource exhaustion attacks
2026-02-26 16:49:29 +00:00
jamesread
1335302e80
chore: codestyle
2026-02-26 00:48:21 +00:00
jamesread
ea4cdf9df2
fix: Logs page pagination ( #883 )
2026-02-19 20:33:51 +00:00
jamesread
1248ee8765
chore: remove extranious comments
2026-02-13 23:36:16 +00:00
James Read
54080efdf3
Fix move tpl to global ( #848 )
2026-01-26 11:33:36 +00:00
jamesread
561cd9c431
fix: Various coderabbit suggestions on tpl ext
2026-01-26 00:46:17 +00:00
jamesread
0e0bbd3fdb
fix: Nil binding on entity logs caused a NPE
2026-01-26 00:34:39 +00:00
James Read
cf00d179bf
Merge branch 'next' into fix-move-tpl-to-global
2026-01-25 22:53:02 +00:00