Commit Graph

129 Commits

Author SHA1 Message Date
jamesread 7ecc7791d8 chore: golangci-lint fixes 2026-07-29 00:30:57 +01:00
jamesread aee6db3263 chore: migrated from experimental go slices to stdlib slices 2026-07-28 22:27:41 +01:00
jamesread a1f03e7d33 chore: fieldalignment across code base to reduce memory usage 2026-07-28 22:26:51 +01:00
jamesread a080f4ee2d chore: Turn up golang lint, and fix some minor error handling stuff 2026-07-28 22:11:37 +01:00
jamesread 7c4eefa378 fix: Max of 16 clients in an event stream 2026-07-28 17:22:34 +01:00
jamesread c7646166f2 chore: Missed a couple of files in the last commit 2026-07-28 13:23:19 +01:00
jamesread e1f8c01fe5 chore: coderabbit suggestions 2026-07-24 16:26:13 +01:00
jamesread fe1ac20935 feat: Show config issues in diagnostics 2026-07-24 15:27:02 +01:00
jamesread c72d180fae fix: Dashboards now can have ACLs (#445) 2026-07-18 23:57:09 +01:00
jamesread 5b1a29db7f docs: Standardize on "Server Diagnostics", update many screenshots 2026-07-09 11:30:16 +01:00
jamesread 1396184777 fix(executor): always anchor custom regex patterns and harden shellAfterCompleted
Wrap regex: patterns in a non-capturing group before applying ^...$ so
  alternation cannot bypass full-string matching. Return template parse
  errors from buildShellAfterCommand, and guard nil binding/action before
  building shellAfterCompleted commands.
2026-07-08 10:46:13 +01:00
jamesread 904616b1b1 security: GHSA-jm28-2wcr-qf3h (LOW) enforce logs ACL on sync execution endpoints
StartActionAndWait and StartActionByGetAndWait now apply the same logs
permission check used by GetLogs and ExecutionStatus.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-08 09:52:30 +01:00
jamesread a58e2fe0c3 chore: fix flakey test 2026-07-07 10:32:33 +01:00
jamesread 9dc51df01d fix: harden checklist JSON wire format, entity pagination, and review findings across API and UI 2026-07-07 10:14:17 +01:00
James Read 1325ba6a72
Merge branch 'next' into feat/entity-list-related-actions-api 2026-07-06 23:57:06 +01:00
jamesread 58dc804e78 fix: coderabbit suggestions on the justification 2026-07-06 23:35:04 +01:00
jamesread afd9f9033a feat: expand entity list and detail APIs with properties and related actions
Support filtered paginated entity lists, configurable instance columns, and
entity-scoped actions with prefilled arguments for richer entity workflows.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-06 20:37:26 +01:00
jamesread a530dca579 refactor: collapse action justification into a string template field
Use a single justification string for both requirement and templating so
empty values skip prompts while templates can prefill audit reasons at start.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-06 20:36:30 +01:00
jamesread b18518ebea fix: add support for entities in checklists 2026-07-06 12:17:03 +01:00
jamesread 03af6890c2 fix: flakey unit tests 2026-06-29 16:25:10 +01:00
jamesread c5cd5295b0 chore: fix race condition in tests 2026-06-29 00:39:49 +01:00
jamesread 57f3ef46ad fix: several merge messes 2026-06-28 22:52:16 +01:00
jamesread 42003da384 fix: rerun args 2026-06-26 23:25:24 +01:00
jamesread 7bd6e77ae2 chore: fix race conditions and little bugs 2026-06-19 09:56:41 +01:00
jamesread 633d9ecd82 feat: action group sizing 2026-06-18 23:33:27 +01:00
jamesread 03a9a05e38 fix: action group display fixes 2026-06-18 11:55:14 +01:00
jamesread de63793b3a feat: circle indicator for running actions, justification support 2026-06-17 23:29:30 +01:00
jamesread d9c8cfb573 feat: Logs filtering, and log queue with group concurrency 2026-06-16 14:30:39 +01:00
jamesread 6aa672e6c0 feat: Logs filtering, and log queue with group concurrency 2026-06-16 14:16:43 +01:00
jamesread 37cde0d982 fix: custom CSS and custom JS (#804 and #803) hopefully 2026-06-16 11:56:14 +01:00
jamesread 92f564ab45 feat: Action grouping for concurrency limit and queuing 2026-06-16 01:34:41 +01:00
jamesread 8f6d53a029 chore: tweak reconnect login to avoid reconnect spam 2026-06-15 00:50:04 +01:00
jamesread 65ed5c1ff4 feat: more intelligent reconnect method 2026-06-15 00:10:07 +01:00
jamesread 9ac6acefd0 fix: emoji names regression, and webhook execution helper info 2026-06-01 00:29:48 +01:00
jamesread cbed6d68c2 feat: Show exec conditions in the UI, and allow right clicking buttons for action details 2026-05-23 10:32:50 +01:00
James Read 437255e247
Merge commit from fork
security: GHSA-f637-w7p2-m7fx (LOW) Validation endpoints allow argument enumeration
2026-05-22 00:10:49 +01:00
jamesread a3865704c8 security: GHSA-f637-w7p2-m7fx (LOW) Validation endpoints allow argument enumeration 2026-05-22 00:08:47 +01:00
jamesread 246e33d565 feat: API Key (bearer) auth 2026-05-21 22:59:12 +01:00
jamesread fe68264c2b feat: popupOnStart history, and logs in reverse order on action details view 2026-05-19 23:19:42 +01:00
jamesread 841ef770f3 chore: Dep update March 24th 2026-03-24 22:52:17 +00:00
jamesread cb3aa3362e chore: fix potential panic in tests 2026-03-11 00:29:56 +00:00
jamesread 606b705bdd chore: fix potential panic in tests 2026-03-11 00:27:42 +00:00
jamesread acd6cb839e security: GHSA-228v-wc5r-j8m7 (HIGH) Unauthorized Action Output Disclosure via EventStream 2026-03-10 23:47:35 +00:00
jamesread b298a6bd8c chore: Treat root fieldset separately for ordering 2026-03-09 09:31:40 +00:00
jamesread dcb5bd0c82 chore: Allow entity key ordering for actionless components 2026-03-09 09:18:24 +00:00
jamesread 93a9636a82 chore: additional test coverage for view permission 2026-03-09 08:55:47 +00:00
jamesread 71bb999950 security: Actions that people didnt have permission to view were being returned (#921) 2026-03-08 22:45:46 +00:00
jamesread 5ff6b5d080 fix: Entity ordering (#886, #762) 2026-03-08 22:16:24 +00:00
jamesread b032ae5e5e chore: fix regression on arguments not being found 2026-03-05 08:29:30 +00:00
James Read 93d983c506
Merge branch 'next' into advisory-fix-1 2026-03-05 03:24:12 -05:00