Commit 65b2c2d
Add tests for iconTag parameter in entity-types create (#183)
* Release 1.6.1: Three bug fixes #patch (#180)
* perf: optimize test scheduling with --dist loadfile for 25% faster test runs
* feat: add support for Cortex Secrets API (#161)
* chore: update HISTORY.md for main
* perf: optimize test scheduling with --dist loadfile for 25% faster test runs (#157)
* refactor: separate trigger-evaluation test to avoid scorecard evaluation race conditions
- Create dedicated cli-test-evaluation-scorecard for trigger-evaluation testing
- Remove retry logic complexity from test_scorecards() and test_scorecards_drafts()
- Add new test_scorecard_trigger_evaluation() that creates/deletes its own scorecard
- Eliminates race condition where import triggers evaluation conflicting with tests
* refactor: remove unnecessary mock decorator from _get_rule helper function
The helper function doesn't need its own environment patching since it's called
from fixtures that already have their own @mock.patch.dict decorators.
* Revert "perf: optimize test scheduling with --dist loadfile for 25% faster test runs (#157)"
This reverts commit 8879fcf.
The --dist loadfile optimization caused race conditions between tests that
share resources (e.g., test_custom_events_uuid and test_custom_events_list
both operate on custom events and can interfere with each other when run in
parallel by file).
Reliability > speed. Better to have tests take 40s with no race conditions
than 30s with intermittent failures.
* perf: rename test_deploys.py to test_000_deploys.py for early scheduling
Pytest collects tests alphabetically by filename. With pytest-xdist --dist load,
tests collected earlier are more likely to be scheduled first. Since test_deploys
is the longest-running test (~19s), scheduling it early maximizes parallel
efficiency with 12 workers.
This is our general strategy: prefix slow tests with numbers (000, 001, etc.) to
control scheduling order without introducing race conditions like --dist loadfile.
* feat: add support for Cortex Secrets API
Add complete CLI support for managing secrets via the Cortex Secrets API:
- cortex secrets list: List secrets (with optional entity tag filter)
- cortex secrets get: Get secret by alias
- cortex secrets create: Create new secret
- cortex secrets update: Update existing secret
- cortex secrets delete: Delete secret
All commands support entity tags as required by the API.
Tests skip gracefully if API key lacks secrets permissions.
Also fixes HISTORY.md generation by using Angular convention in git-changelog,
which properly recognizes feat:, fix:, and perf: commit types instead of only
recognizing the basic convention (add:, fix:, change:, remove:).
Closes #158
* fix: update secret test to use valid tag format
Change test secret tag from 'cli-test-secret' to 'cli_test_secret' to comply
with API validation that only allows alphanumeric and underscore characters.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
---------
Co-authored-by: GitHub Actions <[email protected]>
Co-authored-by: Claude <[email protected]>
* feat: add entity relationships API support with optimized backup/restore (#160)
* chore: update HISTORY.md for main
* perf: optimize test scheduling with --dist loadfile for 25% faster test runs (#157)
* refactor: separate trigger-evaluation test to avoid scorecard evaluation race conditions
- Create dedicated cli-test-evaluation-scorecard for trigger-evaluation testing
- Remove retry logic complexity from test_scorecards() and test_scorecards_drafts()
- Add new test_scorecard_trigger_evaluation() that creates/deletes its own scorecard
- Eliminates race condition where import triggers evaluation conflicting with tests
* refactor: remove unnecessary mock decorator from _get_rule helper function
The helper function doesn't need its own environment patching since it's called
from fixtures that already have their own @mock.patch.dict decorators.
* Revert "perf: optimize test scheduling with --dist loadfile for 25% faster test runs (#157)"
This reverts commit 8879fcf.
The --dist loadfile optimization caused race conditions between tests that
share resources (e.g., test_custom_events_uuid and test_custom_events_list
both operate on custom events and can interfere with each other when run in
parallel by file).
Reliability > speed. Better to have tests take 40s with no race conditions
than 30s with intermittent failures.
* perf: rename test_deploys.py to test_000_deploys.py for early scheduling
Pytest collects tests alphabetically by filename. With pytest-xdist --dist load,
tests collected earlier are more likely to be scheduled first. Since test_deploys
is the longest-running test (~19s), scheduling it early maximizes parallel
efficiency with 12 workers.
This is our general strategy: prefix slow tests with numbers (000, 001, etc.) to
control scheduling order without introducing race conditions like --dist loadfile.
* feat: add entity relationships API support and fix backup export bug
- Fix double-encoding bug in backup export for entity-types and ip-allowlist
- entity-types and ip-allowlist were being converted to strings before json.dump
- This caused import failures with "TypeError: string indices must be integers"
- Add entity-relationship-types commands:
- list: List all relationship types
- get: Get relationship type by tag
- create: Create new relationship type
- update: Update existing relationship type
- delete: Delete relationship type
- Add entity-relationships commands:
- list: List all relationships for a type
- list-destinations: Get destinations for source entity
- list-sources: Get sources for destination entity
- add-destinations: Add destinations to source
- add-sources: Add sources to destination
- update-destinations: Replace all destinations for source
- update-sources: Replace all sources for destination
- add-bulk: Add multiple relationships
- update-bulk: Replace all relationships for type
- Integrate entity relationships into backup/restore:
- Export entity-relationship-types and entity-relationships
- Import with proper ordering (types before catalog, relationships after)
- Transform export format to bulk update format for import
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: clean up entity relationships import output and fix bugs
- Add _print parameter to entity_relationship_types.create() and entity_relationships.update_bulk()
- Use _print=False when importing to suppress JSON output
- Fix import to use correct keys: sourceEntity.tag and destinationEntity.tag instead of source.tag
- Replace typer.unstable.TempFile with standard tempfile.NamedTemporaryFile
- Improve output: show only tag names instead of full JSON when importing
- Add missing tempfile import
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: support re-importing existing entity relationship types
- Check if relationship type already exists before importing
- Use update instead of create for existing relationship types
- Add _print parameter to entity_relationship_types.update()
- Matches pattern used by entity_types import
This allows backup imports to be idempotent and run multiple times
without encountering "already exists" errors.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* feat: improve error handling in backup import
- Add detailed error reporting for catalog imports
- Show filename, error type, and error message for failures
- Add total failure count at end of catalog import
- Add error handling for entity relationship type imports
- Wrap create/update in try/except blocks
- Show which relationship type failed and why
- Add total failure count
- Add error handling for entity relationship imports
- Wrap import operations in try/except blocks
- Show which relationship type failed and why
- Add total failure count
This makes it much easier to diagnose import failures by showing
exactly which files are failing and what the error is.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: improve catalog import error handling and make sequential
- Change catalog import from parallel to sequential execution
- This allows errors to be correlated with specific files
- HTTP errors from cortex_client are now shown with filenames
- Catch typer.Exit exceptions in catalog import
- The HTTP client raises typer.Exit on errors
- Now catches and reports which file caused the error
- Remove unused imports added for parallel error capture
- Simplify catalog import logic
Note: The plugin import failures with "string indices must be integers"
are due to exports created before the double-encoding bug fix. Re-export
with the current code to fix these.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* perf: parallelize entity relationships and catalog imports
- Restore parallel execution for catalog import (30 workers)
- Previously made sequential for error debugging
- Now handles typer.Exit exceptions properly
- Maintains good error reporting with filenames
- Parallelize entity relationship type imports (30 workers)
- Check existing types once, then import in parallel
- Properly handles create vs update decision
- Parallelize entity relationship imports (30 workers)
- Each relationship type is independent
- Can safely import in parallel
All imports now use ThreadPoolExecutor with 30 workers for
maximum performance while maintaining error reporting.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* feat: add comprehensive import summary and retry commands
- All import functions now return statistics (type, imported count, failures)
- Import summary section shows:
- Per-type import counts and failures
- Total imported and failed counts
- Failed imports section lists:
- Full file paths for all failures
- Error type and message for each
- Retry commands section provides:
- Ready-to-run cortex commands for each failed file
- Can copy/paste directly from terminal
- Commands use proper quoting for file paths with spaces
- Updated all import functions to track file paths in parallel execution
- Added typer.Exit exception handling to plugins, scorecards, workflows
- Consistent error reporting across all import types
Example output:
IMPORT SUMMARY
catalog: 250 imported, 5 failed
TOTAL: 500 imported, 5 failed
FAILED IMPORTS
/path/to/file.yaml
Error: HTTP - Validation or HTTP error
RETRY COMMANDS
cortex catalog create -f "/path/to/file.yaml"
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: show catalog filename before import attempt
- Print "Importing: filename" before attempting catalog import
- HTTP errors now appear immediately after the filename
- Remove duplicate success messages at end
- Only show failure count summary
This makes it immediately clear which file is causing each HTTP 400 error:
Before:
Processing: .../catalog
HTTP Error 400: Unknown error
HTTP Error 400: Unknown error
After:
Processing: .../catalog
Importing: docs.yaml
HTTP Error 400: Unknown error
Importing: another.yaml
HTTP Error 400: Unknown error
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: improve test isolation for custom events list test
Delete all event types (not just VALIDATE_SERVICE) at test start to prevent
interference from parallel tests. The connection pooling performance improvements
made tests run much faster, increasing temporal overlap between parallel tests
and exposing this existing test isolation issue.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: initialize variables before conditional to prevent NameError
When entity-relationship-types or entity-relationships directories don't exist
(like in test data), the import functions would reference undefined `results` and
`failed_count` variables, causing a NameError and preventing subsequent imports
from running (including catalog import, breaking tests).
This bug was causing test_catalog_delete_entity and test_custom_events_list to
fail because the import would crash before importing catalog entities.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
---------
Co-authored-by: GitHub Actions <[email protected]>
Co-authored-by: Claude <[email protected]>
* fix: add client-side rate limiting and make tests idempotent (#165) #minor
* chore: update HISTORY.md for main
* perf: optimize test scheduling with --dist loadfile for 25% faster test runs (#157)
* refactor: separate trigger-evaluation test to avoid scorecard evaluation race conditions
- Create dedicated cli-test-evaluation-scorecard for trigger-evaluation testing
- Remove retry logic complexity from test_scorecards() and test_scorecards_drafts()
- Add new test_scorecard_trigger_evaluation() that creates/deletes its own scorecard
- Eliminates race condition where import triggers evaluation conflicting with tests
* refactor: remove unnecessary mock decorator from _get_rule helper function
The helper function doesn't need its own environment patching since it's called
from fixtures that already have their own @mock.patch.dict decorators.
* Revert "perf: optimize test scheduling with --dist loadfile for 25% faster test runs (#157)"
This reverts commit 8879fcf.
The --dist loadfile optimization caused race conditions between tests that
share resources (e.g., test_custom_events_uuid and test_custom_events_list
both operate on custom events and can interfere with each other when run in
parallel by file).
Reliability > speed. Better to have tests take 40s with no race conditions
than 30s with intermittent failures.
* perf: rename test_deploys.py to test_000_deploys.py for early scheduling
Pytest collects tests alphabetically by filename. With pytest-xdist --dist load,
tests collected earlier are more likely to be scheduled first. Since test_deploys
is the longest-running test (~19s), scheduling it early maximizes parallel
efficiency with 12 workers.
This is our general strategy: prefix slow tests with numbers (000, 001, etc.) to
control scheduling order without introducing race conditions like --dist loadfile.
* feat: add entity relationships API support and fix backup export bug
- Fix double-encoding bug in backup export for entity-types and ip-allowlist
- entity-types and ip-allowlist were being converted to strings before json.dump
- This caused import failures with "TypeError: string indices must be integers"
- Add entity-relationship-types commands:
- list: List all relationship types
- get: Get relationship type by tag
- create: Create new relationship type
- update: Update existing relationship type
- delete: Delete relationship type
- Add entity-relationships commands:
- list: List all relationships for a type
- list-destinations: Get destinations for source entity
- list-sources: Get sources for destination entity
- add-destinations: Add destinations to source
- add-sources: Add sources to destination
- update-destinations: Replace all destinations for source
- update-sources: Replace all sources for destination
- add-bulk: Add multiple relationships
- update-bulk: Replace all relationships for type
- Integrate entity relationships into backup/restore:
- Export entity-relationship-types and entity-relationships
- Import with proper ordering (types before catalog, relationships after)
- Transform export format to bulk update format for import
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: clean up entity relationships import output and fix bugs
- Add _print parameter to entity_relationship_types.create() and entity_relationships.update_bulk()
- Use _print=False when importing to suppress JSON output
- Fix import to use correct keys: sourceEntity.tag and destinationEntity.tag instead of source.tag
- Replace typer.unstable.TempFile with standard tempfile.NamedTemporaryFile
- Improve output: show only tag names instead of full JSON when importing
- Add missing tempfile import
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: support re-importing existing entity relationship types
- Check if relationship type already exists before importing
- Use update instead of create for existing relationship types
- Add _print parameter to entity_relationship_types.update()
- Matches pattern used by entity_types import
This allows backup imports to be idempotent and run multiple times
without encountering "already exists" errors.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* feat: improve error handling in backup import
- Add detailed error reporting for catalog imports
- Show filename, error type, and error message for failures
- Add total failure count at end of catalog import
- Add error handling for entity relationship type imports
- Wrap create/update in try/except blocks
- Show which relationship type failed and why
- Add total failure count
- Add error handling for entity relationship imports
- Wrap import operations in try/except blocks
- Show which relationship type failed and why
- Add total failure count
This makes it much easier to diagnose import failures by showing
exactly which files are failing and what the error is.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: improve catalog import error handling and make sequential
- Change catalog import from parallel to sequential execution
- This allows errors to be correlated with specific files
- HTTP errors from cortex_client are now shown with filenames
- Catch typer.Exit exceptions in catalog import
- The HTTP client raises typer.Exit on errors
- Now catches and reports which file caused the error
- Remove unused imports added for parallel error capture
- Simplify catalog import logic
Note: The plugin import failures with "string indices must be integers"
are due to exports created before the double-encoding bug fix. Re-export
with the current code to fix these.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* perf: parallelize entity relationships and catalog imports
- Restore parallel execution for catalog import (30 workers)
- Previously made sequential for error debugging
- Now handles typer.Exit exceptions properly
- Maintains good error reporting with filenames
- Parallelize entity relationship type imports (30 workers)
- Check existing types once, then import in parallel
- Properly handles create vs update decision
- Parallelize entity relationship imports (30 workers)
- Each relationship type is independent
- Can safely import in parallel
All imports now use ThreadPoolExecutor with 30 workers for
maximum performance while maintaining error reporting.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* feat: add comprehensive import summary and retry commands
- All import functions now return statistics (type, imported count, failures)
- Import summary section shows:
- Per-type import counts and failures
- Total imported and failed counts
- Failed imports section lists:
- Full file paths for all failures
- Error type and message for each
- Retry commands section provides:
- Ready-to-run cortex commands for each failed file
- Can copy/paste directly from terminal
- Commands use proper quoting for file paths with spaces
- Updated all import functions to track file paths in parallel execution
- Added typer.Exit exception handling to plugins, scorecards, workflows
- Consistent error reporting across all import types
Example output:
IMPORT SUMMARY
catalog: 250 imported, 5 failed
TOTAL: 500 imported, 5 failed
FAILED IMPORTS
/path/to/file.yaml
Error: HTTP - Validation or HTTP error
RETRY COMMANDS
cortex catalog create -f "/path/to/file.yaml"
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: show catalog filename before import attempt
- Print "Importing: filename" before attempting catalog import
- HTTP errors now appear immediately after the filename
- Remove duplicate success messages at end
- Only show failure count summary
This makes it immediately clear which file is causing each HTTP 400 error:
Before:
Processing: .../catalog
HTTP Error 400: Unknown error
HTTP Error 400: Unknown error
After:
Processing: .../catalog
Importing: docs.yaml
HTTP Error 400: Unknown error
Importing: another.yaml
HTTP Error 400: Unknown error
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: improve test isolation for custom events list test
Delete all event types (not just VALIDATE_SERVICE) at test start to prevent
interference from parallel tests. The connection pooling performance improvements
made tests run much faster, increasing temporal overlap between parallel tests
and exposing this existing test isolation issue.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: initialize variables before conditional to prevent NameError
When entity-relationship-types or entity-relationships directories don't exist
(like in test data), the import functions would reference undefined `results` and
`failed_count` variables, causing a NameError and preventing subsequent imports
from running (including catalog import, breaking tests).
This bug was causing test_catalog_delete_entity and test_custom_events_list to
fail because the import would crash before importing catalog entities.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* chore: merge staging to main #minor (#162)
* perf: optimize test scheduling with --dist loadfile for 25% faster test runs
* feat: add support for Cortex Secrets API (#161)
* chore: update HISTORY.md for main
* perf: optimize test scheduling with --dist loadfile for 25% faster test runs (#157)
* refactor: separate trigger-evaluation test to avoid scorecard evaluation race conditions
- Create dedicated cli-test-evaluation-scorecard for trigger-evaluation testing
- Remove retry logic complexity from test_scorecards() and test_scorecards_drafts()
- Add new test_scorecard_trigger_evaluation() that creates/deletes its own scorecard
- Eliminates race condition where import triggers evaluation conflicting with tests
* refactor: remove unnecessary mock decorator from _get_rule helper function
The helper function doesn't need its own environment patching since it's called
from fixtures that already have their own @mock.patch.dict decorators.
* Revert "perf: optimize test scheduling with --dist loadfile for 25% faster test runs (#157)"
This reverts commit 8879fcf.
The --dist loadfile optimization caused race conditions between tests that
share resources (e.g., test_custom_events_uuid and test_custom_events_list
both operate on custom events and can interfere with each other when run in
parallel by file).
Reliability > speed. Better to have tests take 40s with no race conditions
than 30s with intermittent failures.
* perf: rename test_deploys.py to test_000_deploys.py for early scheduling
Pytest collects tests alphabetically by filename. With pytest-xdist --dist load,
tests collected earlier are more likely to be scheduled first. Since test_deploys
is the longest-running test (~19s), scheduling it early maximizes parallel
efficiency with 12 workers.
This is our general strategy: prefix slow tests with numbers (000, 001, etc.) to
control scheduling order without introducing race conditions like --dist loadfile.
* feat: add support for Cortex Secrets API
Add complete CLI support for managing secrets via the Cortex Secrets API:
- cortex secrets list: List secrets (with optional entity tag filter)
- cortex secrets get: Get secret by alias
- cortex secrets create: Create new secret
- cortex secrets update: Update existing secret
- cortex secrets delete: Delete secret
All commands support entity tags as required by the API.
Tests skip gracefully if API key lacks secrets permissions.
Also fixes HISTORY.md generation by using Angular convention in git-changelog,
which properly recognizes feat:, fix:, and perf: commit types instead of only
recognizing the basic convention (add:, fix:, change:, remove:).
Closes #158
* fix: update secret test to use valid tag format
Change test secret tag from 'cli-test-secret' to 'cli_test_secret' to comply
with API validation that only allows alphanumeric and underscore characters.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
---------
Co-authored-by: GitHub Actions <[email protected]>
Co-authored-by: Claude <[email protected]>
* feat: add entity relationships API support with optimized backup/restore (#160)
* chore: update HISTORY.md for main
* perf: optimize test scheduling with --dist loadfile for 25% faster test runs (#157)
* refactor: separate trigger-evaluation test to avoid scorecard evaluation race conditions
- Create dedicated cli-test-evaluation-scorecard for trigger-evaluation testing
- Remove retry logic complexity from test_scorecards() and test_scorecards_drafts()
- Add new test_scorecard_trigger_evaluation() that creates/deletes its own scorecard
- Eliminates race condition where import triggers evaluation conflicting with tests
* refactor: remove unnecessary mock decorator from _get_rule helper function
The helper function doesn't need its own environment patching since it's called
from fixtures that already have their own @mock.patch.dict decorators.
* Revert "perf: optimize test scheduling with --dist loadfile for 25% faster test runs (#157)"
This reverts commit 8879fcf.
The --dist loadfile optimization caused race conditions between tests that
share resources (e.g., test_custom_events_uuid and test_custom_events_list
both operate on custom events and can interfere with each other when run in
parallel by file).
Reliability > speed. Better to have tests take 40s with no race conditions
than 30s with intermittent failures.
* perf: rename test_deploys.py to test_000_deploys.py for early scheduling
Pytest collects tests alphabetically by filename. With pytest-xdist --dist load,
tests collected earlier are more likely to be scheduled first. Since test_deploys
is the longest-running test (~19s), scheduling it early maximizes parallel
efficiency with 12 workers.
This is our general strategy: prefix slow tests with numbers (000, 001, etc.) to
control scheduling order without introducing race conditions like --dist loadfile.
* feat: add entity relationships API support and fix backup export bug
- Fix double-encoding bug in backup export for entity-types and ip-allowlist
- entity-types and ip-allowlist were being converted to strings before json.dump
- This caused import failures with "TypeError: string indices must be integers"
- Add entity-relationship-types commands:
- list: List all relationship types
- get: Get relationship type by tag
- create: Create new relationship type
- update: Update existing relationship type
- delete: Delete relationship type
- Add entity-relationships commands:
- list: List all relationships for a type
- list-destinations: Get destinations for source entity
- list-sources: Get sources for destination entity
- add-destinations: Add destinations to source
- add-sources: Add sources to destination
- update-destinations: Replace all destinations for source
- update-sources: Replace all sources for destination
- add-bulk: Add multiple relationships
- update-bulk: Replace all relationships for type
- Integrate entity relationships into backup/restore:
- Export entity-relationship-types and entity-relationships
- Import with proper ordering (types before catalog, relationships after)
- Transform export format to bulk update format for import
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: clean up entity relationships import output and fix bugs
- Add _print parameter to entity_relationship_types.create() and entity_relationships.update_bulk()
- Use _print=False when importing to suppress JSON output
- Fix import to use correct keys: sourceEntity.tag and destinationEntity.tag instead of source.tag
- Replace typer.unstable.TempFile with standard tempfile.NamedTemporaryFile
- Improve output: show only tag names instead of full JSON when importing
- Add missing tempfile import
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: support re-importing existing entity relationship types
- Check if relationship type already exists before importing
- Use update instead of create for existing relationship types
- Add _print parameter to entity_relationship_types.update()
- Matches pattern used by entity_types import
This allows backup imports to be idempotent and run multiple times
without encountering "already exists" errors.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* feat: improve error handling in backup import
- Add detailed error reporting for catalog imports
- Show filename, error type, and error message for failures
- Add total failure count at end of catalog import
- Add error handling for entity relationship type imports
- Wrap create/update in try/except blocks
- Show which relationship type failed and why
- Add total failure count
- Add error handling for entity relationship imports
- Wrap import operations in try/except blocks
- Show which relationship type failed and why
- Add total failure count
This makes it much easier to diagnose import failures by showing
exactly which files are failing and what the error is.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: improve catalog import error handling and make sequential
- Change catalog import from parallel to sequential execution
- This allows errors to be correlated with specific files
- HTTP errors from cortex_client are now shown with filenames
- Catch typer.Exit exceptions in catalog import
- The HTTP client raises typer.Exit on errors
- Now catches and reports which file caused the error
- Remove unused imports added for parallel error capture
- Simplify catalog import logic
Note: The plugin import failures with "string indices must be integers"
are due to exports created before the double-encoding bug fix. Re-export
with the current code to fix these.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* perf: parallelize entity relationships and catalog imports
- Restore parallel execution for catalog import (30 workers)
- Previously made sequential for error debugging
- Now handles typer.Exit exceptions properly
- Maintains good error reporting with filenames
- Parallelize entity relationship type imports (30 workers)
- Check existing types once, then import in parallel
- Properly handles create vs update decision
- Parallelize entity relationship imports (30 workers)
- Each relationship type is independent
- Can safely import in parallel
All imports now use ThreadPoolExecutor with 30 workers for
maximum performance while maintaining error reporting.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* feat: add comprehensive import summary and retry commands
- All import functions now return statistics (type, imported count, failures)
- Import summary section shows:
- Per-type import counts and failures
- Total imported and failed counts
- Failed imports section lists:
- Full file paths for all failures
- Error type and message for each
- Retry commands section provides:
- Ready-to-run cortex commands for each failed file
- Can copy/paste directly from terminal
- Commands use proper quoting for file paths with spaces
- Updated all import functions to track file paths in parallel execution
- Added typer.Exit exception handling to plugins, scorecards, workflows
- Consistent error reporting across all import types
Example output:
IMPORT SUMMARY
catalog: 250 imported, 5 failed
TOTAL: 500 imported, 5 failed
FAILED IMPORTS
/path/to/file.yaml
Error: HTTP - Validation or HTTP error
RETRY COMMANDS
cortex catalog create -f "/path/to/file.yaml"
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: show catalog filename before import attempt
- Print "Importing: filename" before attempting catalog import
- HTTP errors now appear immediately after the filename
- Remove duplicate success messages at end
- Only show failure count summary
This makes it immediately clear which file is causing each HTTP 400 error:
Before:
Processing: .../catalog
HTTP Error 400: Unknown error
HTTP Error 400: Unknown error
After:
Processing: .../catalog
Importing: docs.yaml
HTTP Error 400: Unknown error
Importing: another.yaml
HTTP Error 400: Unknown error
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: improve test isolation for custom events list test
Delete all event types (not just VALIDATE_SERVICE) at test start to prevent
interference from parallel tests. The connection pooling performance improvements
made tests run much faster, increasing temporal overlap between parallel tests
and exposing this existing test isolation issue.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: initialize variables before conditional to prevent NameError
When entity-relationship-types or entity-relationships directories don't exist
(like in test data), the import functions would reference undefined `results` and
`failed_count` variables, causing a NameError and preventing subsequent imports
from running (including catalog import, breaking tests).
This bug was causing test_catalog_delete_entity and test_custom_events_list to
fail because the import would crash before importing catalog entities.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
---------
Co-authored-by: GitHub Actions <[email protected]>
Co-authored-by: Claude <[email protected]>
---------
Co-authored-by: GitHub Actions <[email protected]>
Co-authored-by: Claude <[email protected]>
* chore: update HISTORY.md for main
* add: pytest configuration with perf marker
Add pytest.ini to configure test markers:
- perf: for performance tests excluded from regular runs
- setup: for setup tests that run before other tests
The perf marker is excluded by default via addopts, ensuring
performance tests only run via 'just test-perf'.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: exclude perf tests from test-all command
Update Justfile to exclude both 'setup' and 'perf' markers from
test-all and _test-all-individual recipes. Previously only excluded
'setup', which caused performance tests to run and slow down the
regular test suite.
Also add test-perf recipe to explicitly run performance tests.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: allow 'just test' to run perf tests
Override pytest.ini's default marker exclusion in the 'test' recipe
by passing -m "" (empty marker filter). This allows users to run
individual test files including perf tests via 'just test <file>'.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* add: client-side rate limiting with TokenBucket algorithm
Implements proactive rate limiting to avoid 429 errors rather than
reactively retrying them.
Key changes:
- Add TokenBucket class for thread-safe rate limiting (1000 req/min)
- Configure 50-token burst capacity for initial request batches
- Remove 429 from retry status_forcelist (now prevented by rate limiter)
- Add performance test validating rate limiter with 250 parallel workers
- Test confirms 100% success rate at ~1049 req/min with no 429 errors
This approach is more efficient than retry-based rate limiting as it
prevents rate limit errors proactively, reducing overall request latency
and eliminating wasted retry attempts.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* add: configurable rate limit via CORTEX_RATE_LIMIT env var
Allows testing higher rate limits to determine if actual API limit
is higher than documented 1000 req/min.
Changes:
- Read rate limit from CORTEX_RATE_LIMIT environment variable
- Default to 1000 req/min if not set
- Allows runtime testing of different rate limits without code changes
Usage:
export CORTEX_RATE_LIMIT=1500
cortex backup catalog --export-dir ./test
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* add: --rate-limit CLI flag for configurable rate limiting
Adds global CLI flag to configure API rate limit alongside existing
CORTEX_RATE_LIMIT environment variable.
Changes:
- Add --rate-limit/-r flag to global options
- Pass rate_limit to CortexClient initialization
- Help text shows environment variable and default (1000 req/min)
Usage:
cortex --rate-limit 1500 backup catalog --export-dir ./test
Or via environment variable:
export CORTEX_RATE_LIMIT=1500
cortex backup catalog --export-dir ./test
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
* fix: make scorecard exemption tests idempotent
- Moved CORTEX_API_KEY_VIEWER patch from decorator to context manager
- Added cleanup logic to revoke existing exemptions before creating new ones
- Cleanup runs with admin key (has revoke permission) while request uses viewer key (creates PENDING exemptions)
- Tests now pass even when exemptions exist from previous runs
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
---------
Co-authored-by: GitHub Actions <[email protected]>
Co-authored-by: Claude <[email protected]>
* fix: remove rate limiter initialization log message (#168)
Removed INFO log message that appears on every CLI invocation which could
impact applications parsing CLI output.
Fixes #167
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-authored-by: Claude <[email protected]>
* fix: change default logging level from INFO to WARNING
- Users no longer see INFO log messages by default
- Still shows WARNING (slow requests) and ERROR/CRITICAL if they occur
- CLI output is cleaner and more suitable for parsing by other tools
- Users can enable full diagnostics with -l DEBUG or -l INFO
Fixes #170
* fix: initialize results and failed_count before directory check in import functions
All _import_* functions now initialize results=[] and failed_count=0 before
checking if directory exists. This prevents UnboundLocalError when importing
partial exports that don't include all resource types.
Fixed functions:
- _import_catalog: Added results=[] and failed_count=0
- _import_plugins: Added results=[] and failed_count=0
- _import_scorecards: Added results=[] and failed_count=0
- _import_workflows: Added results=[] and failed_count=0
Fixes #171
* fix: only retry on 429 rate limit errors, not 5xx server errors
Changed status_forcelist from [500, 502, 503, 504] to [429] to avoid
wasting time retrying requests that are unlikely to succeed. Client errors
(4xx) and server errors (5xx) typically won't succeed on retry, while rate
limit errors (429) benefit from retry with backoff.
Fixes #172
* Revert: Undo direct merges to staging (#176)
* Revert "Merge branch '172-retry-only-429' into staging"
This reverts commit 052796e, reversing
changes made to 5be1748.
* Revert "Merge branch '171-import-partial-export' into staging"
This reverts commit 5be1748, reversing
changes made to b095f88.
* Revert "Merge branch '170-default-logging-none' into staging"
This reverts commit b095f88, reversing
changes made to 7b20357.
* fix: change default logging level from INFO to WARNING (#177)
- Users no longer see INFO log messages by default
- Still shows WARNING (slow requests) and ERROR/CRITICAL if they occur
- CLI output is cleaner and more suitable for parsing by other tools
- Users can enable full diagnostics with -l DEBUG or -l INFO
Fixes #170
* fix: initialize results and failed_count before directory check in import functions (#178)
All _import_* functions now initialize results=[] and failed_count=0 before
checking if directory exists. This prevents UnboundLocalError when importing
partial exports that don't include all resource types.
Fixed functions:
- _import_catalog: Added results=[] and failed_count=0
- _import_plugins: Added results=[] and failed_count=0
- _import_scorecards: Added results=[] and failed_count=0
- _import_workflows: Added results=[] and failed_count=0
Fixes #171
* fix: only retry on 429 rate limit errors, not 5xx server errors (#179)
Changed status_forcelist from [500, 502, 503, 504] to [429] to avoid
wasting time retrying requests that are unlikely to succeed. Client errors
(4xx) and server errors (5xx) typically won't succeed on retry, while rate
limit errors (429) benefit from retry with backoff.
Fixes #172
---------
Co-authored-by: GitHub Actions <[email protected]>
Co-authored-by: Claude <[email protected]>
* chore: update HISTORY.md for main
* add: tests for iconTag parameter in entity-types create
- Add iconTag to cli-test.json with valid value (Cortex-builtin::Basketball)
- Add test to verify iconTag is returned correctly after create
- Add test for invalid iconTag (API accepts and uses default icon)
- Add test data file for invalid icon scenario
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <[email protected]>
* add: document HISTORY.md merge conflict resolution in CLAUDE.md
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <[email protected]>
* fix: Update urllib3 to >= 2.6.0 for CVE-2025-66418 and CVE-2025-66471
Addresses security vulnerabilities in urllib3 versions < 2.6.0.
Closes #186
Co-Authored-By: Claude Opus 4.5 <[email protected]>
* add: Document branch naming convention in CLAUDE.md
Co-Authored-By: Claude Opus 4.5 <[email protected]>
* fix: Sync homebrew formula with tap and update urllib3 to 2.6.3
- Updated homebrew/cortexapps-cli.rb to match current tap formula
- Updated urllib3 resource from 2.4.0 to 2.6.3 (addresses CVEs)
- Added documentation about homebrew dependency update limitations
Co-Authored-By: Claude Opus 4.5 <[email protected]>
---------
Co-authored-by: GitHub Actions <[email protected]>
Co-authored-by: Claude <[email protected]>1 parent a037024 commit 65b2c2d
File tree
8 files changed
+135
-25
lines changed- data
- import/entity-types
- run-time
- homebrew
- tests
8 files changed
+135
-25
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
133 | 133 | | |
134 | 134 | | |
135 | 135 | | |
| 136 | + | |
| 137 | + | |
| 138 | + | |
| 139 | + | |
| 140 | + | |
| 141 | + | |
136 | 142 | | |
137 | 143 | | |
138 | 144 | | |
| |||
146 | 152 | | |
147 | 153 | | |
148 | 154 | | |
| 155 | + | |
| 156 | + | |
| 157 | + | |
| 158 | + | |
| 159 | + | |
| 160 | + | |
| 161 | + | |
| 162 | + | |
| 163 | + | |
| 164 | + | |
149 | 165 | | |
150 | 166 | | |
151 | 167 | | |
| |||
155 | 171 | | |
156 | 172 | | |
157 | 173 | | |
| 174 | + | |
| 175 | + | |
| 176 | + | |
| 177 | + | |
| 178 | + | |
| 179 | + | |
| 180 | + | |
| 181 | + | |
| 182 | + | |
| 183 | + | |
| 184 | + | |
| 185 | + | |
158 | 186 | | |
159 | 187 | | |
160 | 188 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
6 | 6 | | |
7 | 7 | | |
8 | 8 | | |
| 9 | + | |
| 10 | + | |
| 11 | + | |
| 12 | + | |
| 13 | + | |
| 14 | + | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| 20 | + | |
9 | 21 | | |
10 | 22 | | |
11 | 23 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | 2 | | |
| 3 | + | |
3 | 4 | | |
4 | 5 | | |
5 | 6 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
| 5 | + | |
| 6 | + | |
| 7 | + | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
2 | 2 | | |
3 | 3 | | |
4 | 4 | | |
5 | | - | |
6 | | - | |
| 5 | + | |
| 6 | + | |
7 | 7 | | |
8 | 8 | | |
9 | 9 | | |
10 | 10 | | |
11 | 11 | | |
12 | | - | |
13 | | - | |
| 12 | + | |
| 13 | + | |
14 | 14 | | |
15 | 15 | | |
16 | 16 | | |
17 | | - | |
18 | | - | |
| 17 | + | |
| 18 | + | |
| 19 | + | |
| 20 | + | |
| 21 | + | |
| 22 | + | |
| 23 | + | |
19 | 24 | | |
20 | 25 | | |
21 | 26 | | |
22 | | - | |
23 | | - | |
| 27 | + | |
| 28 | + | |
| 29 | + | |
| 30 | + | |
| 31 | + | |
| 32 | + | |
| 33 | + | |
| 34 | + | |
| 35 | + | |
| 36 | + | |
| 37 | + | |
| 38 | + | |
| 39 | + | |
| 40 | + | |
| 41 | + | |
| 42 | + | |
| 43 | + | |
24 | 44 | | |
25 | 45 | | |
26 | 46 | | |
27 | | - | |
28 | | - | |
| 47 | + | |
| 48 | + | |
29 | 49 | | |
30 | 50 | | |
31 | 51 | | |
32 | | - | |
33 | | - | |
| 52 | + | |
| 53 | + | |
| 54 | + | |
| 55 | + | |
| 56 | + | |
| 57 | + | |
| 58 | + | |
| 59 | + | |
| 60 | + | |
| 61 | + | |
| 62 | + | |
| 63 | + | |
| 64 | + | |
| 65 | + | |
| 66 | + | |
| 67 | + | |
| 68 | + | |
| 69 | + | |
| 70 | + | |
| 71 | + | |
| 72 | + | |
| 73 | + | |
34 | 74 | | |
35 | 75 | | |
36 | 76 | | |
37 | | - | |
38 | | - | |
| 77 | + | |
| 78 | + | |
39 | 79 | | |
40 | 80 | | |
41 | 81 | | |
| |||
44 | 84 | | |
45 | 85 | | |
46 | 86 | | |
47 | | - | |
48 | | - | |
| 87 | + | |
| 88 | + | |
| 89 | + | |
| 90 | + | |
| 91 | + | |
| 92 | + | |
| 93 | + | |
| 94 | + | |
| 95 | + | |
| 96 | + | |
49 | 97 | | |
50 | 98 | | |
| 99 | + | |
| 100 | + | |
51 | 101 | | |
52 | 102 | | |
53 | 103 | | |
54 | 104 | | |
55 | | - | |
| 105 | + | |
56 | 106 | | |
57 | 107 | | |
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
19 | 19 | | |
20 | 20 | | |
21 | 21 | | |
22 | | - | |
| 22 | + | |
23 | 23 | | |
24 | 24 | | |
25 | 25 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
12 | 12 | | |
13 | 13 | | |
14 | 14 | | |
15 | | - | |
| 15 | + | |
| 16 | + | |
| 17 | + | |
16 | 18 | | |
17 | 19 | | |
| 20 | + | |
| 21 | + | |
| 22 | + | |
| 23 | + | |
| 24 | + | |
| 25 | + | |
| 26 | + | |
| 27 | + | |
| 28 | + | |
| 29 | + | |
0 commit comments