SemianiakaVY/elsa-core
1
0
Fork 0
Code Issues Pull requests Actions 1 Packages Projects Releases Wiki Activity
6968 commits 2 branches 0 tags 117 MiB
Commit graph

6968 commits

This branch
This branch
All branches
Author SHA1 Message Date
Sipke Schoorstra b4e6f0f57e
Clear decoded secret hash buffers 2026-05-21 01:27:12 +02:00
Sipke Schoorstra df12667af2
Clear temporary secret hashing buffers 2026-05-21 01:16:12 +02:00
Sipke Schoorstra 32ff56d1ac
Address identity secret hasher review feedback 2026-05-21 00:57:33 +02:00
Sipke Schoorstra 8b9f005f1d
Merge remote-tracking branch 'origin/main' into codex/security-identity-secret-hashing 
# Conflicts:
#	src/modules/Elsa.Identity/README.md
 2026-05-21 00:49:15 +02:00
Sipke Schoorstra d23e61e9be
[codex] Require opt-in for localhost authorization grants (#7498) 
* Require opt-in for localhost auth grant

* Preserve custom authorization configuration

* Address localhost auth review feedback

* Address localhost bootstrap review comments
 2026-05-21 00:40:57 +02:00
Sipke Schoorstra d0c75a9fde
Merge remote-tracking branch 'origin/main' into codex/security-identity-secret-hashing 2026-05-21 00:40:47 +02:00
Sipke Schoorstra 3fc87945fd
Stabilize bulk dispatch fire-and-forget component test (#7520) 
* Stabilize bulk dispatch fire-and-forget test

* Improve bulk dispatch timeout diagnostics

* Stabilize bulk dispatch polling test

* Reduce bulk dispatch test polling pressure
 2026-05-21 00:31:34 +02:00
Sipke Schoorstra 6a7ff8d48a
Address identity secret hashing review feedback 2026-05-21 00:04:21 +02:00
Sipke Schoorstra 65caa73d6f
Restore best-effort application hash upgrade saves 2026-05-20 23:51:38 +02:00
Sipke Schoorstra 65ec6f4029
Narrow user hash upgrade save catch 2026-05-20 23:43:25 +02:00
Sipke Schoorstra 505334bc9d
Address identity hashing review feedback 2026-05-20 23:34:22 +02:00
Sipke Schoorstra 37c02c74ff
[codex] Authorize workflow imports before persistence (#7510) 
* Authorize workflow imports before persistence

* Address import authorization review feedback

* Fix import authorization test fixture data
 2026-05-20 23:29:35 +02:00
Sipke Schoorstra e7dc936c67
Merge remote-tracking branch 'origin/main' into codex/security-identity-secret-hashing 
# Conflicts:
#	doc/changelogs/3.6.0.md
#	src/modules/Elsa.Identity/README.md
 2026-05-20 23:04:02 +02:00
Sipke Schoorstra e9d59bc5b1
[codex] Fail fast on default JWT signing keys (#7496) 
* Fail fast on default JWT signing keys

* Address JWT signing key review feedback

* Refine JWT signing key validation feedback

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Co-authored-by: sfmskywalker <938393+sfmskywalker@users.noreply.github.com>

* Reject JWT signing keys with surrounding whitespace

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: sfmskywalker <938393+sfmskywalker@users.noreply.github.com>
 2026-05-20 22:30:49 +02:00
Sipke Schoorstra 5080bb7007
Suppress Discord release announcement embeds 2026-05-20 22:07:23 +02:00
Sipke Schoorstra 8d76db9e96
Merge branch 'codex/elsa-release-skill' 
# Conflicts:
#	Elsa.sln
 2026-05-20 22:05:06 +02:00
Sipke Schoorstra 3523804efd
docs: add security & quality assessments 
Add comprehensive security and software-quality artifacts (architecture patterns, ISO‑25010 profile, technology profile, software quality scan, and findings) and publish an updated roadmap. Also integrate Elsa.Diagnostics.ConsoleLogs into the solution and ModularServer app, and apply small config/whitespace fixes to support the addition.

These documents are intended for review and human validation; no runtime behavior changes are introduced beyond the project wiring and minor appsettings/formatting fixes.
 2026-05-20 22:00:30 +02:00
Sipke Schoorstra 746ba96a1f
[codex] Remove production-usable default admin credentials (#7500) 
* Remove default admin credentials

* Fix shell admin API key configuration
 2026-05-20 20:58:03 +02:00
Sipke Schoorstra a860846b50
[codex] Enforce HTTP workflow request body limits while reading (#7497) 
* Enforce HTTP request body size while reading

* Address HTTP body limit review feedback

* Avoid request size limit overflow
 2026-05-20 20:57:57 +02:00
Sipke Schoorstra d21da0afce
Add Elsa release skill 2026-05-20 20:23:30 +02:00
Sipke Schoorstra 0856d79093
Harden Python expression execution (#7507) 
* Secure Python workflow expressions

* Preflight Python authorization for bulk publish

* Preflight Python auth for import files

* Name Python expression descriptor type
 2026-05-20 14:19:47 +02:00
Sipke Schoorstra e2587f74b5
Address identity validator compatibility feedback 2026-05-20 14:11:19 +02:00
Sipke Schoorstra 1da8709e2c
Distinguish refresh tokens from API access tokens (#7509) 
* Separate access and refresh token use

* Address Greptile identity token feedback
 2026-05-20 14:04:28 +02:00
Sipke Schoorstra 435c25793b
Scope HTTP bookmark lookup to tenant (#7508) 
* Scope HTTP bookmarks to current tenant

* Improve HTTP bookmark tenant test
 2026-05-20 14:04:24 +02:00
Sipke Schoorstra c32a5a192c
[codex] Enforce role assignment authorization (#7501) 
* Enforce role assignment authorization

* Address role authorization review feedback

* Address role authorization review follow-up
 2026-05-20 14:04:20 +02:00
Sipke Schoorstra 9415d220c0
Document identity validator constructor dependencies 2026-05-20 14:00:02 +02:00
Sipke Schoorstra 94df64b2b9
Make identity rehash persistence best effort 2026-05-20 13:50:36 +02:00
Sipke Schoorstra 95640cbf7d
Address identity hasher review feedback 2026-05-20 13:47:25 +02:00
Sipke Schoorstra 28ee3d6fb3
Address identity secret hashing review feedback 2026-05-20 13:36:04 +02:00
Sipke Schoorstra 304e990319
Harden identity secret generation and hashing 2026-05-20 13:20:46 +02:00
Sipke Schoorstra e7b1f8055b
Fix tenant coordinator test options reference 
Fixes a compile failure in TenantTaskLifecycleCoordinatorTests by qualifying Options.Create after Elsa.Options introduced a namespace collision.
 2026-05-20 13:11:28 +02:00
Sipke Schoorstra e2e00ff235
Add secrets module (#7468) 
* Add secrets module

* Address Greptile feedback for secrets module

* Handle unavailable secrets in provider adapter

* Address path combine review comments

* Address additional Greptile secrets review

* Address final Greptile secrets feedback

* Handle secrets test payload failures

* address greptile feedback on secrets rotation

* fix secret recreation concurrency

* address greptile secrets followups

* address greptile secrets reliability feedback

* align secret store capabilities
 2026-05-20 11:48:01 +02:00
Sipke Schoorstra 37cf451ec0
Fix bulk dispatch component test hang 2026-05-19 22:31:44 +02:00
Sipke Schoorstra fcfc78f659
Add updated roadmap 2026-05-19 16:03:41 +02:00
github-actions[bot] cd1748bf35
Refresh codebase wiki (#7466) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-05-19 09:03:59 +02:00
github-actions[bot] e6b4719fb1
Refresh codebase wiki (#7464) 
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
 2026-05-19 00:49:27 +02:00
Sipke Schoorstra ee4e0ad5ed
Update package manifest generator preview (#7465) 2026-05-18 23:42:12 +02:00
Jan-Willem de Bruyn 02cd8085c6
fix: do not resume interrupted workflows that are already finished (#7435) 
* Fix: do not resume interrupted workflows that are already finished

* Avoid fixed timestamps in restart workflow test

---------

Co-authored-by: Sipke Schoorstra <sipkeschoorstra@outlook.com>
 2026-05-18 21:19:23 +02:00
Sipke Schoorstra 4eeb26feca
Fix update wiki workflow action 2026-05-18 20:17:09 +02:00
Sipke Schoorstra 550685ea3f
[codex] Add package manifest feature metadata (#7463) 
* Add package manifest feature metadata

* Address package manifest review feedback

* Address structured log manifest defaults

* Use infrastructure attributes in manifests
 2026-05-18 15:39:22 +02:00
Sipke Schoorstra 43108c2e48
Add diagnostics console logs (#7462) 
* feat: add diagnostics console logs

* test: avoid secret-like redaction fixtures

* fix: address console logs review feedback

* fix: harden console log capture lifecycle

* fix: report console log drop summaries

* fix: address diagnostics review cleanups
 2026-05-18 02:16:46 +02:00
Sipke Schoorstra 6485f05a87
Add state machine activity (#7457) 
* Add state machine activity

* address greptile state machine feedback

* address state machine trigger cancellation feedback
 2026-05-18 02:09:03 +02:00
Sipke Schoorstra 63dec9f5e4
Enhance logging configuration and add SQLite structured log persistence. Secure default admin credentials. 2026-05-18 01:06:44 +02:00
Sipke Schoorstra 0687b5f9f3
Fix SQLite structured log shell lifecycle (#7461) 
* Fix SQLite structured log shell lifecycle

* Address Greptile lifecycle feedback

* Tighten structured log lifecycle guards

* Address structured log background task review
 2026-05-18 01:04:04 +02:00
Sipke Schoorstra 60e742b0e3
Fix structured log write buffer shutdown flush (#7460) 
* Fix structured log write buffer shutdown flush

* Address structured log buffer review feedback
 2026-05-17 19:33:29 +02:00
Sipke Schoorstra 8416ea8af4
[codex] Add wiki update workflow (#7454) 
* Add wiki update workflow

* Update greploop skill automation

* Harden wiki update workflow

* Fix wiki workflow review findings

* Address reviewer workflow feedback

* Harden wiki change validation

* Scope wiki PR lookup to repository

* Address greptile wiki workflow feedback

* Skip wiki link check without changes

* Address greptile read tool feedback
 2026-05-17 19:32:37 +02:00
Sipke Schoorstra 50f858a8ce
Update safe dependency patch versions (#7459) 
* Update dependency patch versions

* Align NuGet packaging dependency pin
 2026-05-17 19:10:19 +02:00
Sipke Schoorstra d1b36c59ca
Remove video overview GIF from README 
Removed video overview GIF from README.
 2026-05-17 19:07:24 +02:00
Sipke Schoorstra 27ae1fae64
[codex] Resolve build warnings (#7458) 
* Resolve build warnings

* Address Greptile review feedback

* Remove dead metadata null guard

* Preserve tenant-agnostic workflow activities
 2026-05-17 14:58:10 +02:00
Heku ec43976e30
Add missing Obsolete attribute to IWorkflowBuilder (#7448) 2026-05-17 14:34:22 +02:00