jamesread
0b2a5995ff
chore: coderabbit knows better than me
Build & Release pipeline / build (push) Canceled after 0s
Codestyle checks / codestyle (push) Canceled after 0s
Antora docs / antora (push) Canceled after 0s
Build & Release pipeline / Sign Windows artifacts (SignPath) (push) Canceled after 0s
Antora docs / trigger-docs-publish (push) Canceled after 0s
2026-07-29 01:25:44 +01:00
jamesread
7ecc7791d8
chore: golangci-lint fixes
2026-07-29 00:30:57 +01:00
jamesread
a1f03e7d33
chore: fieldalignment across code base to reduce memory usage
2026-07-28 22:26:51 +01:00
jamesread
e6a232f21b
chore: Turn up golang lint, and fix some minor error handling stuff
2026-07-28 22:13:56 +01:00
jamesread
a080f4ee2d
chore: Turn up golang lint, and fix some minor error handling stuff
2026-07-28 22:11:37 +01:00
jamesread
e5d29b68da
fix: close shellAfterCompleted output injection bypass, and docs consistency
...
Rewrite all output/exitCode template forms to env refs and omit them
from template args so command output cannot reach sh -c.
(GHSA-vc6p)
2026-07-28 16:57:52 +01:00
jamesread
839d244e51
fix: intermediate output and comfirmation
Build & Release pipeline / build (push) Canceled after 0s
Codestyle checks / codestyle (push) Canceled after 0s
Antora docs / antora (push) Canceled after 0s
Build & Release pipeline / Sign Windows artifacts (SignPath) (push) Canceled after 0s
Antora docs / trigger-docs-publish (push) Canceled after 0s
2026-07-27 23:17:42 +01:00
jamesread
18903853fb
fix: A single entities read failure wont clear all entities
2026-07-25 22:20:52 +01:00
jamesread and Cursor
c4531b344e
fix(executor): sanitize unsafe chars in log filenames
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-24 07:12:03 +01:00
jamesread
25b80e1460
fmt: Code style and linter
2026-07-18 22:46:05 +01:00
jamesread and Cursor
e2bf82ff9c
fix( #952 ): carry arguments when rerunning an action
...
Build & Release pipeline / build (push) Has been cancelled
Codestyle checks / codestyle (push) Has been cancelled
The Rerun button ignored the original arguments and always started
actions with an empty argument set, so actions that take arguments
threw instead of re-running.
Rerun now reuses the arguments stored on the log entry: complete
runs restart directly, and incomplete ones (missing values, or
password / very_dangerous_raw_string fields) open the argument form
pre-filled via history.state. Justification-required actions always
re-prompt so each execution is explicitly justified.
Storable arguments are copied onto the log entry only after argument
parsing succeeds, so failed executions no longer persist arguments
that could be replayed.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-17 17:06:04 +01:00
jamesread and Cursor
4ef86abee7
security: GHSA-vc6p-m6vx-6cwq (HIGH) harden shellAfterCompleted execution
...
Build & Release pipeline / build (push) Has been cancelled
Codestyle checks / codestyle (push) Has been cancelled
Route output and exitCode through OUTPUT/EXITCODE environment variables
instead of shell interpolation, and block shellAfterCompleted for webhook
actions.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-08 12:29:37 +01:00
jamesread
1396184777
fix(executor): always anchor custom regex patterns and harden shellAfterCompleted
...
Wrap regex: patterns in a non-capturing group before applying ^...$ so
alternation cannot bypass full-string matching. Return template parse
errors from buildShellAfterCommand, and guard nil binding/action before
building shellAfterCompleted commands.
2026-07-08 10:46:13 +01:00
James Read
5fca2d9482
Merge branch 'next' into feat/better-prometheus-metrics
2026-06-28 23:17:28 +01:00
jamesread
42003da384
fix: rerun args
2026-06-26 23:25:24 +01:00
jamesread
d1787a3823
feat: Better prometheus support
2026-06-25 23:05:47 +01:00
jamesread
03d188337e
fix: Parse templates in action ( #1035 )
2026-06-20 00:26:13 +01:00
jamesread
7bd6e77ae2
chore: fix race conditions and little bugs
2026-06-19 09:56:41 +01:00
jamesread
633d9ecd82
feat: action group sizing
2026-06-18 23:33:27 +01:00
jamesread
de63793b3a
feat: circle indicator for running actions, justification support
2026-06-17 23:29:30 +01:00
jamesread
f4b3c4289a
chore: Fix many little niggly bugs, test flakes, etc
2026-06-17 22:18:26 +01:00
jamesread
6aa672e6c0
feat: Logs filtering, and log queue with group concurrency
2026-06-16 14:16:43 +01:00
jamesread
ebffd9f040
security: GHSA-prj9-97mp-mwh2 (HIGH) Treat all ot_ system arguments as reserved, preventing RCE
...
Ensure OliveTin-owned arguments are injected only after filtering and validate system values before command execution.
2026-05-31 22:44:40 +01:00
jamesread
2f77000de4
security: GHSA-364q-w7vh-vhpc (HIGH) Unsafe parsing of UniqueTrackingId can be used to write files
2026-03-08 23:29:00 +00:00
jamesread
00cb5a2abf
fix: action triggers were broken #914
2026-03-04 23:12:20 +00:00
jamesread
0c47564652
chore: logs are written with 0600 instead of 0644
2026-03-04 23:12:20 +00:00
jamesread
4744169aa0
chore: code cleanup, remove todos, etc
2026-02-26 23:07:07 +00:00
jamesread
38d6b57077
chore: codefmt
2026-02-25 23:24:02 +00:00
jamesread
4bbd2eab15
security: GHSA-49gm-hh7w-wfvf
2026-02-22 10:19:08 +00:00
jamesread
b777d599aa
fix: Massive cleanup of template parsing
2026-02-07 00:09:46 +00:00
James Read
54080efdf3
Fix move tpl to global ( #848 )
2026-01-26 11:33:36 +00:00
jamesread
0e0bbd3fdb
fix: Nil binding on entity logs caused a NPE
Build & Release pipeline / build (push) Has been cancelled
Buf CI / buf (push) Has been cancelled
2026-01-26 00:34:39 +00:00
jamesread
b37f035ea6
fix: Move templating functionality to global, making it possible to replace templates across the config
2026-01-25 10:32:22 +00:00
jamesread
e3c785319a
fix: Kill entire process group on timeout ( #605 )
2026-01-21 23:52:35 +00:00
jamesread
a10088a040
chore: Fix duplicate code in executor when trying to reduce cyclo
Build & Release pipeline / build (push) Has been cancelled
Buf CI / buf (push) Has been cancelled
Codestyle checks / codestyle (push) Has been cancelled
2026-01-11 23:12:34 +00:00
James Read
b75d590343
Merge branch 'beta' into next
2026-01-11 23:09:49 +00:00
jamesread
f173a0b725
chore: reduce gocyclo
2026-01-11 22:34:23 +00:00
jamesread
242149f5a4
chore: reduce cyclo
2026-01-11 09:20:50 +00:00
jamesread
832db4e135
chore: Log datetime parse failures from cal
2026-01-11 08:51:31 +00:00
jamesread
a36e69b8f8
chore: calendar fixes
Buf CI / buf (push) Has been cancelled
Codestyle checks / codestyle (push) Has been cancelled
2026-01-11 01:50:27 +00:00
jamesread
a4ff326625
chore: calendar logging fixes
2026-01-11 01:48:17 +00:00
jamesread
84bd405ca9
chore: gocyclo fixes
2026-01-11 01:29:27 +00:00
jamesread
6493f7bee7
feat: block notifications, and cleanup of action/binding IDs
2026-01-11 01:10:20 +00:00
jamesread
be7c754043
feat: Rebuild authentication system to support 3k authentication
2025-11-26 22:33:19 +00:00
jamesread
d1ec688c9a
chore: cleanup executor.go
Build & Release pipeline / build (push) Has been cancelled
2025-11-16 00:47:03 +00:00
jamesread
5b57cf2480
fix: Logs were being displayed in the wrong order
2025-11-11 23:32:00 +00:00
jamesread
de7129e1d7
chore: reduce cyclomatic complexity
2025-11-10 23:15:18 +00:00
jamesread
e6a02ac614
chore: fix various cyclo checks
2025-10-30 15:25:57 +00:00
James Read
7abffedb14
Merge branch 'next' into fix-require-guests-login
2025-10-30 13:15:37 +00:00
jamesread
a4e50bfb54
fix: panic when executing action with no arguments
2025-10-30 13:04:12 +00:00
jamesread