18903853fb
fix: A single entities read failure wont clear all entities
2026-07-25 22:20:52 +01:00
c4531b344e
fix(executor): sanitize unsafe chars in log filenames
...
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-24 07:12:03 +01:00
25b80e1460
fmt: Code style and linter
2026-07-18 22:46:05 +01:00
e2bf82ff9c
fix( #952 ): carry arguments when rerunning an action
...
The Rerun button ignored the original arguments and always started
actions with an empty argument set, so actions that take arguments
threw instead of re-running.
Rerun now reuses the arguments stored on the log entry: complete
runs restart directly, and incomplete ones (missing values, or
password / very_dangerous_raw_string fields) open the argument form
pre-filled via history.state. Justification-required actions always
re-prompt so each execution is explicitly justified.
Storable arguments are copied onto the log entry only after argument
parsing succeeds, so failed executions no longer persist arguments
that could be replayed.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-17 17:06:04 +01:00
4ef86abee7
security: GHSA-vc6p-m6vx-6cwq (HIGH) harden shellAfterCompleted execution
...
Route output and exitCode through OUTPUT/EXITCODE environment variables
instead of shell interpolation, and block shellAfterCompleted for webhook
actions.
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-08 12:29:37 +01:00
1396184777
fix(executor): always anchor custom regex patterns and harden shellAfterCompleted
...
Wrap regex: patterns in a non-capturing group before applying ^...$ so
alternation cannot bypass full-string matching. Return template parse
errors from buildShellAfterCommand, and guard nil binding/action before
building shellAfterCompleted commands.
2026-07-08 10:46:13 +01:00
5fca2d9482
Merge branch 'next' into feat/better-prometheus-metrics
2026-06-28 23:17:28 +01:00
42003da384
fix: rerun args
2026-06-26 23:25:24 +01:00
d1787a3823
feat: Better prometheus support
2026-06-25 23:05:47 +01:00
03d188337e
fix: Parse templates in action ( #1035 )
2026-06-20 00:26:13 +01:00
7bd6e77ae2
chore: fix race conditions and little bugs
2026-06-19 09:56:41 +01:00
633d9ecd82
feat: action group sizing
2026-06-18 23:33:27 +01:00
de63793b3a
feat: circle indicator for running actions, justification support
2026-06-17 23:29:30 +01:00
f4b3c4289a
chore: Fix many little niggly bugs, test flakes, etc
2026-06-17 22:18:26 +01:00
6aa672e6c0
feat: Logs filtering, and log queue with group concurrency
2026-06-16 14:16:43 +01:00
ebffd9f040
security: GHSA-prj9-97mp-mwh2 (HIGH) Treat all ot_ system arguments as reserved, preventing RCE
...
Ensure OliveTin-owned arguments are injected only after filtering and validate system values before command execution.
2026-05-31 22:44:40 +01:00
2f77000de4
security: GHSA-364q-w7vh-vhpc (HIGH) Unsafe parsing of UniqueTrackingId can be used to write files
2026-03-08 23:29:00 +00:00
00cb5a2abf
fix: action triggers were broken #914
2026-03-04 23:12:20 +00:00
0c47564652
chore: logs are written with 0600 instead of 0644
2026-03-04 23:12:20 +00:00
4744169aa0
chore: code cleanup, remove todos, etc
2026-02-26 23:07:07 +00:00
38d6b57077
chore: codefmt
2026-02-25 23:24:02 +00:00
4bbd2eab15
security: GHSA-49gm-hh7w-wfvf
2026-02-22 10:19:08 +00:00
b777d599aa
fix: Massive cleanup of template parsing
2026-02-07 00:09:46 +00:00
54080efdf3
Fix move tpl to global ( #848 )
2026-01-26 11:33:36 +00:00
0e0bbd3fdb
fix: Nil binding on entity logs caused a NPE
2026-01-26 00:34:39 +00:00
b37f035ea6
fix: Move templating functionality to global, making it possible to replace templates across the config
2026-01-25 10:32:22 +00:00
e3c785319a
fix: Kill entire process group on timeout ( #605 )
2026-01-21 23:52:35 +00:00
a10088a040
chore: Fix duplicate code in executor when trying to reduce cyclo
2026-01-11 23:12:34 +00:00
b75d590343
Merge branch 'beta' into next
2026-01-11 23:09:49 +00:00
f173a0b725
chore: reduce gocyclo
2026-01-11 22:34:23 +00:00
242149f5a4
chore: reduce cyclo
2026-01-11 09:20:50 +00:00
832db4e135
chore: Log datetime parse failures from cal
2026-01-11 08:51:31 +00:00
a36e69b8f8
chore: calendar fixes
2026-01-11 01:50:27 +00:00
a4ff326625
chore: calendar logging fixes
2026-01-11 01:48:17 +00:00
84bd405ca9
chore: gocyclo fixes
2026-01-11 01:29:27 +00:00
6493f7bee7
feat: block notifications, and cleanup of action/binding IDs
2026-01-11 01:10:20 +00:00
be7c754043
feat: Rebuild authentication system to support 3k authentication
2025-11-26 22:33:19 +00:00
d1ec688c9a
chore: cleanup executor.go
2025-11-16 00:47:03 +00:00
5b57cf2480
fix: Logs were being displayed in the wrong order
2025-11-11 23:32:00 +00:00
de7129e1d7
chore: reduce cyclomatic complexity
2025-11-10 23:15:18 +00:00
e6a02ac614
chore: fix various cyclo checks
2025-10-30 15:25:57 +00:00
7abffedb14
Merge branch 'next' into fix-require-guests-login
2025-10-30 13:15:37 +00:00
a4e50bfb54
fix: panic when executing action with no arguments
2025-10-30 13:04:12 +00:00
c3d5da1981
chore: reduce cyclo complexity in service
2025-10-30 12:52:58 +00:00
57390be16f
feat: ActionDetailsView component, show timeout and logs for action. Fix output streaming.
2025-10-29 22:45:26 +00:00
2ea35697d0
fix : #672 Empty execution tracking ID in InternalLogEntry
2025-10-27 15:42:13 +00:00
c86bf629f9
bugfix: Added nil checks
2025-10-26 17:32:26 +00:00
c917d1b1e7
bugfix: #639 Exec support, disallow URL and similar arguments with
2025-10-26 16:40:44 +00:00
b330fbd1a5
fix: all broken integration tests
2025-10-11 00:45:41 +01:00
a464e6a445
fix: broken tests after changing the way arguments are parsed
2025-10-01 22:20:56 +01:00
jamesread