SemianiakaVY/elsa-core
1
0
Fork 0
Code Issues Pull requests Actions 1 Packages Projects Releases Wiki Activity
7323 commits 2 branches 0 tags 117 MiB
Commit graph

7323 commits

This branch
This branch
All branches
Author SHA1 Message Date
Sipke Schoorstra 6a7ff8d48a
Address identity secret hashing review feedback 2026-05-21 00:04:21 +02:00
Sipke Schoorstra 65caa73d6f
Restore best-effort application hash upgrade saves 2026-05-20 23:51:38 +02:00
Sipke Schoorstra 182f524d83
Harden readiness health check reporting 2026-05-20 23:43:25 +02:00
Sipke Schoorstra 65ec6f4029
Narrow user hash upgrade save catch 2026-05-20 23:43:25 +02:00
Sipke Schoorstra 9cdff8c318
Handle missing distributed lock provider in readiness check 2026-05-20 23:39:35 +02:00
Sipke Schoorstra 505334bc9d
Address identity hashing review feedback 2026-05-20 23:34:22 +02:00
Sipke Schoorstra d6903fdb76
docs: clarify readiness probe timeout 2026-05-20 23:33:13 +02:00
Sipke Schoorstra 37c02c74ff
[codex] Authorize workflow imports before persistence (#7510) 
* Authorize workflow imports before persistence

* Address import authorization review feedback

* Fix import authorization test fixture data
 2026-05-20 23:29:35 +02:00
Sipke Schoorstra e7dc936c67
Merge remote-tracking branch 'origin/main' into codex/security-identity-secret-hashing 
# Conflicts:
#	doc/changelogs/3.6.0.md
#	src/modules/Elsa.Identity/README.md
 2026-05-20 23:04:02 +02:00
Sipke Schoorstra f72ed4edab
Harden timestamp filter validation null handling 2026-05-20 22:50:13 +02:00
Sipke Schoorstra 125ab7fbd8
Merge origin/main into codex/security-health-checks 2026-05-20 22:33:42 +02:00
Sipke Schoorstra a77c1af817
Merge origin/main into codex/security-timestamp-filter-columns 2026-05-20 22:33:42 +02:00
Sipke Schoorstra e9d59bc5b1
[codex] Fail fast on default JWT signing keys (#7496) 
* Fail fast on default JWT signing keys

* Address JWT signing key review feedback

* Refine JWT signing key validation feedback

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Co-authored-by: sfmskywalker <938393+sfmskywalker@users.noreply.github.com>

* Reject JWT signing keys with surrounding whitespace

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: sfmskywalker <938393+sfmskywalker@users.noreply.github.com>
 2026-05-20 22:30:49 +02:00
Sipke Schoorstra 5080bb7007
Suppress Discord release announcement embeds 2026-05-20 22:07:23 +02:00
Sipke Schoorstra 8d76db9e96
Merge branch 'codex/elsa-release-skill' 
# Conflicts:
#	Elsa.sln
 2026-05-20 22:05:06 +02:00
Sipke Schoorstra 3523804efd
docs: add security & quality assessments 
Add comprehensive security and software-quality artifacts (architecture patterns, ISO‑25010 profile, technology profile, software quality scan, and findings) and publish an updated roadmap. Also integrate Elsa.Diagnostics.ConsoleLogs into the solution and ModularServer app, and apply small config/whitespace fixes to support the addition.

These documents are intended for review and human validation; no runtime behavior changes are introduced beyond the project wiring and minor appsettings/formatting fixes.
 2026-05-20 22:00:30 +02:00
Sipke Schoorstra 746ba96a1f
[codex] Remove production-usable default admin credentials (#7500) 
* Remove default admin credentials

* Fix shell admin API key configuration
 2026-05-20 20:58:03 +02:00
Sipke Schoorstra a860846b50
[codex] Enforce HTTP workflow request body limits while reading (#7497) 
* Enforce HTTP request body size while reading

* Address HTTP body limit review feedback

* Avoid request size limit overflow
 2026-05-20 20:57:57 +02:00
Sipke Schoorstra d21da0afce
Add Elsa release skill 2026-05-20 20:23:30 +02:00
Sipke Schoorstra 0856d79093
Harden Python expression execution (#7507) 
* Secure Python workflow expressions

* Preflight Python authorization for bulk publish

* Preflight Python auth for import files

* Name Python expression descriptor type
 2026-05-20 14:19:47 +02:00
Sipke Schoorstra e2587f74b5
Address identity validator compatibility feedback 2026-05-20 14:11:19 +02:00
Sipke Schoorstra 1da8709e2c
Distinguish refresh tokens from API access tokens (#7509) 
* Separate access and refresh token use

* Address Greptile identity token feedback
 2026-05-20 14:04:28 +02:00
Sipke Schoorstra 435c25793b
Scope HTTP bookmark lookup to tenant (#7508) 
* Scope HTTP bookmarks to current tenant

* Improve HTTP bookmark tenant test
 2026-05-20 14:04:24 +02:00
Sipke Schoorstra c32a5a192c
[codex] Enforce role assignment authorization (#7501) 
* Enforce role assignment authorization

* Address role authorization review feedback

* Address role authorization review follow-up
 2026-05-20 14:04:20 +02:00
Sipke Schoorstra 9415d220c0
Document identity validator constructor dependencies 2026-05-20 14:00:02 +02:00
Sipke Schoorstra f12204496c
Avoid shared distributed lock probe names 2026-05-20 13:59:56 +02:00
Sipke Schoorstra 481c1aaa81
Guard persistence health check store probes 2026-05-20 13:51:43 +02:00
Sipke Schoorstra 94df64b2b9
Make identity rehash persistence best effort 2026-05-20 13:50:36 +02:00
Sipke Schoorstra a8390d8d64
Address health check review feedback 2026-05-20 13:47:39 +02:00
Sipke Schoorstra 95640cbf7d
Address identity hasher review feedback 2026-05-20 13:47:25 +02:00
Sipke Schoorstra 28ee3d6fb3
Address identity secret hashing review feedback 2026-05-20 13:36:04 +02:00
Sipke Schoorstra 1e41f6fdf8
Add Elsa runtime readiness health checks 2026-05-20 13:34:25 +02:00
Sipke Schoorstra 304e990319
Harden identity secret generation and hashing 2026-05-20 13:20:46 +02:00
Sipke Schoorstra e7b1f8055b
Fix tenant coordinator test options reference 
Fixes a compile failure in TenantTaskLifecycleCoordinatorTests by qualifying Options.Create after Elsa.Options introduced a namespace collision.
 2026-05-20 13:11:28 +02:00
Sipke Schoorstra 752570c4ec
Address timestamp filter review feedback 2026-05-20 13:04:52 +02:00
Sipke Schoorstra 37de3404cd
Whitelist workflow timestamp filter columns 2026-05-20 12:56:18 +02:00
Sipke Schoorstra e2e00ff235
Add secrets module (#7468) 
* Add secrets module

* Address Greptile feedback for secrets module

* Handle unavailable secrets in provider adapter

* Address path combine review comments

* Address additional Greptile secrets review

* Address final Greptile secrets feedback

* Handle secrets test payload failures

* address greptile feedback on secrets rotation

* fix secret recreation concurrency

* address greptile secrets followups

* address greptile secrets reliability feedback

* align secret store capabilities
 2026-05-20 11:48:01 +02:00
Sipke Schoorstra 37cf451ec0
Fix bulk dispatch component test hang 2026-05-19 22:31:44 +02:00
Sipke Schoorstra fcfc78f659
Add updated roadmap 2026-05-19 16:03:41 +02:00
github-actions[bot] cd1748bf35
Refresh codebase wiki (#7466) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-05-19 09:03:59 +02:00
github-actions[bot] e6b4719fb1
Refresh codebase wiki (#7464) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-05-19 00:49:27 +02:00
Sipke Schoorstra ee4e0ad5ed
Update package manifest generator preview (#7465) 2026-05-18 23:42:12 +02:00
Jan-Willem de Bruyn 02cd8085c6
fix: do not resume interrupted workflows that are already finished (#7435) 
* Fix: do not resume interrupted workflows that are already finished

* Avoid fixed timestamps in restart workflow test

---------

Co-authored-by: Sipke Schoorstra <sipkeschoorstra@outlook.com>
 2026-05-18 21:19:23 +02:00
Sipke Schoorstra 4eeb26feca
Fix update wiki workflow action 2026-05-18 20:17:09 +02:00
Sipke Schoorstra 550685ea3f
[codex] Add package manifest feature metadata (#7463) 
* Add package manifest feature metadata

* Address package manifest review feedback

* Address structured log manifest defaults

* Use infrastructure attributes in manifests
 2026-05-18 15:39:22 +02:00
Sipke Schoorstra 43108c2e48
Add diagnostics console logs (#7462) 
* feat: add diagnostics console logs

* test: avoid secret-like redaction fixtures

* fix: address console logs review feedback

* fix: harden console log capture lifecycle

* fix: report console log drop summaries

* fix: address diagnostics review cleanups
 2026-05-18 02:16:46 +02:00
Sipke Schoorstra 6485f05a87
Add state machine activity (#7457) 
* Add state machine activity

* address greptile state machine feedback

* address state machine trigger cancellation feedback
 2026-05-18 02:09:03 +02:00
Sipke Schoorstra 63dec9f5e4
Enhance logging configuration and add SQLite structured log persistence. Secure default admin credentials. 2026-05-18 01:06:44 +02:00
Sipke Schoorstra 0687b5f9f3
Fix SQLite structured log shell lifecycle (#7461) 
* Fix SQLite structured log shell lifecycle

* Address Greptile lifecycle feedback

* Tighten structured log lifecycle guards

* Address structured log background task review
 2026-05-18 01:04:04 +02:00
Sipke Schoorstra 60e742b0e3
Fix structured log write buffer shutdown flush (#7460) 
* Fix structured log write buffer shutdown flush

* Address structured log buffer review feedback
 2026-05-17 19:33:29 +02:00