Commit graph

6959 commits

Author SHA1 Message Date
Sipke Schoorstra 65caa73d6f
Restore best-effort application hash upgrade saves 2026-05-20 23:51:38 +02:00
Sipke Schoorstra 65ec6f4029
Narrow user hash upgrade save catch 2026-05-20 23:43:25 +02:00
Sipke Schoorstra 505334bc9d
Address identity hashing review feedback 2026-05-20 23:34:22 +02:00
Sipke Schoorstra e7dc936c67
Merge remote-tracking branch 'origin/main' into codex/security-identity-secret-hashing
# Conflicts:
#	doc/changelogs/3.6.0.md
#	src/modules/Elsa.Identity/README.md
2026-05-20 23:04:02 +02:00
Sipke Schoorstra e9d59bc5b1
[codex] Fail fast on default JWT signing keys (#7496)
* Fail fast on default JWT signing keys

* Address JWT signing key review feedback

* Refine JWT signing key validation feedback

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Co-authored-by: sfmskywalker <938393+sfmskywalker@users.noreply.github.com>

* Reject JWT signing keys with surrounding whitespace

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: sfmskywalker <938393+sfmskywalker@users.noreply.github.com>
2026-05-20 22:30:49 +02:00
Sipke Schoorstra 5080bb7007
Suppress Discord release announcement embeds 2026-05-20 22:07:23 +02:00
Sipke Schoorstra 8d76db9e96
Merge branch 'codex/elsa-release-skill'
# Conflicts:
#	Elsa.sln
2026-05-20 22:05:06 +02:00
Sipke Schoorstra 3523804efd
docs: add security & quality assessments
Add comprehensive security and software-quality artifacts (architecture patterns, ISO‑25010 profile, technology profile, software quality scan, and findings) and publish an updated roadmap. Also integrate Elsa.Diagnostics.ConsoleLogs into the solution and ModularServer app, and apply small config/whitespace fixes to support the addition.

These documents are intended for review and human validation; no runtime behavior changes are introduced beyond the project wiring and minor appsettings/formatting fixes.
2026-05-20 22:00:30 +02:00
Sipke Schoorstra 746ba96a1f
[codex] Remove production-usable default admin credentials (#7500)
* Remove default admin credentials

* Fix shell admin API key configuration
2026-05-20 20:58:03 +02:00
Sipke Schoorstra a860846b50
[codex] Enforce HTTP workflow request body limits while reading (#7497)
* Enforce HTTP request body size while reading

* Address HTTP body limit review feedback

* Avoid request size limit overflow
2026-05-20 20:57:57 +02:00
Sipke Schoorstra d21da0afce
Add Elsa release skill 2026-05-20 20:23:30 +02:00
Sipke Schoorstra 0856d79093
Harden Python expression execution (#7507)
* Secure Python workflow expressions

* Preflight Python authorization for bulk publish

* Preflight Python auth for import files

* Name Python expression descriptor type
2026-05-20 14:19:47 +02:00
Sipke Schoorstra e2587f74b5
Address identity validator compatibility feedback 2026-05-20 14:11:19 +02:00
Sipke Schoorstra 1da8709e2c
Distinguish refresh tokens from API access tokens (#7509)
* Separate access and refresh token use

* Address Greptile identity token feedback
2026-05-20 14:04:28 +02:00
Sipke Schoorstra 435c25793b
Scope HTTP bookmark lookup to tenant (#7508)
* Scope HTTP bookmarks to current tenant

* Improve HTTP bookmark tenant test
2026-05-20 14:04:24 +02:00
Sipke Schoorstra c32a5a192c
[codex] Enforce role assignment authorization (#7501)
* Enforce role assignment authorization

* Address role authorization review feedback

* Address role authorization review follow-up
2026-05-20 14:04:20 +02:00
Sipke Schoorstra 9415d220c0
Document identity validator constructor dependencies 2026-05-20 14:00:02 +02:00
Sipke Schoorstra 94df64b2b9
Make identity rehash persistence best effort 2026-05-20 13:50:36 +02:00
Sipke Schoorstra 95640cbf7d
Address identity hasher review feedback 2026-05-20 13:47:25 +02:00
Sipke Schoorstra 28ee3d6fb3
Address identity secret hashing review feedback 2026-05-20 13:36:04 +02:00
Sipke Schoorstra 304e990319
Harden identity secret generation and hashing 2026-05-20 13:20:46 +02:00
Sipke Schoorstra e7b1f8055b
Fix tenant coordinator test options reference
Fixes a compile failure in TenantTaskLifecycleCoordinatorTests by qualifying Options.Create after Elsa.Options introduced a namespace collision.
2026-05-20 13:11:28 +02:00
Sipke Schoorstra e2e00ff235
Add secrets module (#7468)
* Add secrets module

* Address Greptile feedback for secrets module

* Handle unavailable secrets in provider adapter

* Address path combine review comments

* Address additional Greptile secrets review

* Address final Greptile secrets feedback

* Handle secrets test payload failures

* address greptile feedback on secrets rotation

* fix secret recreation concurrency

* address greptile secrets followups

* address greptile secrets reliability feedback

* align secret store capabilities
2026-05-20 11:48:01 +02:00
Sipke Schoorstra 37cf451ec0
Fix bulk dispatch component test hang 2026-05-19 22:31:44 +02:00
Sipke Schoorstra fcfc78f659
Add updated roadmap 2026-05-19 16:03:41 +02:00
github-actions[bot] cd1748bf35
Refresh codebase wiki (#7466)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-19 09:03:59 +02:00
github-actions[bot] e6b4719fb1
Refresh codebase wiki (#7464)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-05-19 00:49:27 +02:00
Sipke Schoorstra ee4e0ad5ed
Update package manifest generator preview (#7465) 2026-05-18 23:42:12 +02:00
Jan-Willem de Bruyn 02cd8085c6
fix: do not resume interrupted workflows that are already finished (#7435)
* Fix: do not resume interrupted workflows that are already finished

* Avoid fixed timestamps in restart workflow test

---------

Co-authored-by: Sipke Schoorstra <sipkeschoorstra@outlook.com>
2026-05-18 21:19:23 +02:00
Sipke Schoorstra 4eeb26feca
Fix update wiki workflow action 2026-05-18 20:17:09 +02:00
Sipke Schoorstra 550685ea3f
[codex] Add package manifest feature metadata (#7463)
* Add package manifest feature metadata

* Address package manifest review feedback

* Address structured log manifest defaults

* Use infrastructure attributes in manifests
2026-05-18 15:39:22 +02:00
Sipke Schoorstra 43108c2e48
Add diagnostics console logs (#7462)
* feat: add diagnostics console logs

* test: avoid secret-like redaction fixtures

* fix: address console logs review feedback

* fix: harden console log capture lifecycle

* fix: report console log drop summaries

* fix: address diagnostics review cleanups
2026-05-18 02:16:46 +02:00
Sipke Schoorstra 6485f05a87
Add state machine activity (#7457)
* Add state machine activity

* address greptile state machine feedback

* address state machine trigger cancellation feedback
2026-05-18 02:09:03 +02:00
Sipke Schoorstra 63dec9f5e4
Enhance logging configuration and add SQLite structured log persistence. Secure default admin credentials. 2026-05-18 01:06:44 +02:00
Sipke Schoorstra 0687b5f9f3
Fix SQLite structured log shell lifecycle (#7461)
* Fix SQLite structured log shell lifecycle

* Address Greptile lifecycle feedback

* Tighten structured log lifecycle guards

* Address structured log background task review
2026-05-18 01:04:04 +02:00
Sipke Schoorstra 60e742b0e3
Fix structured log write buffer shutdown flush (#7460)
* Fix structured log write buffer shutdown flush

* Address structured log buffer review feedback
2026-05-17 19:33:29 +02:00
Sipke Schoorstra 8416ea8af4
[codex] Add wiki update workflow (#7454)
* Add wiki update workflow

* Update greploop skill automation

* Harden wiki update workflow

* Fix wiki workflow review findings

* Address reviewer workflow feedback

* Harden wiki change validation

* Scope wiki PR lookup to repository

* Address greptile wiki workflow feedback

* Skip wiki link check without changes

* Address greptile read tool feedback
2026-05-17 19:32:37 +02:00
Sipke Schoorstra 50f858a8ce
Update safe dependency patch versions (#7459)
* Update dependency patch versions

* Align NuGet packaging dependency pin
2026-05-17 19:10:19 +02:00
Sipke Schoorstra d1b36c59ca
Remove video overview GIF from README
Removed video overview GIF from README.
2026-05-17 19:07:24 +02:00
Sipke Schoorstra 27ae1fae64
[codex] Resolve build warnings (#7458)
* Resolve build warnings

* Address Greptile review feedback

* Remove dead metadata null guard

* Preserve tenant-agnostic workflow activities
2026-05-17 14:58:10 +02:00
Heku ec43976e30
Add missing Obsolete attribute to IWorkflowBuilder (#7448) 2026-05-17 14:34:22 +02:00
Sipke Schoorstra 263bb18099
Fix structured log diagnostics registration 2026-05-17 08:42:23 +02:00
Sipke Schoorstra efe4700bd1
Harden EF trigger persistence 2026-05-16 13:50:34 +02:00
Sipke Schoorstra 3be8856c9f
Stabilize packages CI component tests 2026-05-16 13:35:30 +02:00
Sipke Schoorstra 835ef74ca7
Add Elsa README video assets (#7455) 2026-05-16 12:20:22 +02:00
Sipke Schoorstra b9664a954d
[codex] Add codebase wiki (#7453)
* Add codebase wiki

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Document resilient restore workflow

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-05-16 11:54:27 +02:00
Sipke Schoorstra 6dee7094f0
[codex] Increase structured log relational test coverage (#7451)
* Increase structured log relational test coverage

* Address structured log coverage review comments
2026-05-16 11:05:52 +02:00
Sipke Schoorstra 06b757bc95
Merge remote-tracking branch 'origin/main' 2026-05-16 11:04:05 +02:00
Sipke Schoorstra 8bd54bf4d7
Update Elsa.PackageManifest.Generator to version 0.0.1-preview.28 in package configuration 2026-05-16 11:03:53 +02:00
Sipke Schoorstra 6866d74127
[codex] Increase structured log persistence test coverage (#7450)
* Increase structured log persistence test coverage

* Increase structured log persistence test coverage

* Address structured log coverage review feedback

* Address structured log coverage review feedback

* Address structured log test review comments
2026-05-16 10:15:21 +02:00