arc53-machine 35d6d80e87 Key cached MCP clients by a digest of the whole token ...

The cache key held the first ten characters of a bearer token or API key.
Every fine-grained GitHub token starts with github_pat_, so two users of
the same server shared one cached client, and with it the first user's
token, for up to five minutes.

2026-09-29 10:41:03 +01:00

..

agents

Key cached MCP clients by a digest of the whole token

2026-09-29 10:41:03 +01:00

api

Hand the MCP SDK an authorization result with the issuer

2026-09-28 23:32:21 +01:00

connectors

Check a preset's switch for a key-based connection to its server

2026-09-29 09:36:25 +01:00

core

rabbit fixes

2026-09-28 18:40:49 +04:00

deploy

fix: keep credentials and 5000-digit paths out of the Redis URL errors

2026-09-17 13:34:59 +01:00

devices

fix: mini test

2026-09-14 14:12:21 +01:00

e2e

Show a failed attachment's reason on hover, not as a red line

2026-09-28 10:27:12 +01:00

golden_prompts

feat: better sandbox handling

2026-08-21 13:04:57 +01:00

graphrag

Big source revamp

2026-09-28 17:35:16 +04:00

guardrails

Keep trace summaries from breaking Logs and fix their counts

2026-09-23 22:09:58 +01:00

integration

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

llm

fix(admin): keyset export paging, rollup-free spend, consistent totals

2026-09-22 10:41:46 +01:00

parser

Address review: MCP token scope, API-key identity, reconnect lock, setup retries

2026-09-28 18:45:27 +01:00

quotas

fix(quotas): keyless agent chat bucket, keep disabled policies disabled, cached rates

2026-09-21 15:26:29 +01:00

retriever

Keep tool output out of span errors and fix trace status and listing

2026-09-23 18:11:19 +01:00

sandbox

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

scripts

feat: air-gapped deployment guide, no implicit downloads

2026-09-15 17:54:24 +01:00

security

Encrypt connection credentials with an owner-bound AES-GCM envelope

2026-09-28 17:03:02 +01:00

seed

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

services

Trace scheduled, webhook, search, MCP and graph-extraction runs

2026-09-23 17:37:24 +01:00

storage

Address review: model metadata, serialized admin saves, member account choice

2026-09-28 20:59:36 +01:00

stt

feat: air-gapped deployment guide, no implicit downloads

2026-09-15 17:54:24 +01:00

tracing

Name the provider a model call actually reached

2026-09-24 00:08:53 +01:00

tts

feat: air-gapped deployment guide, no implicit downloads

2026-09-15 17:54:24 +01:00

vectorstore

rabbit fixes

2026-09-28 18:40:49 +04:00

worker

Connections own their credentials

2026-09-28 17:03:09 +01:00

__init__.py

Sharepoint (#2283)

2026-03-12 14:46:26 +00:00

asgi_stream.py

fix: stability improvements on event loop

2026-09-14 12:52:15 +01:00

conftest.py

Trace every chat turn from agent setup to the last event

2026-09-23 17:34:54 +01:00

fake_async_redis.py

fix: stability improvements on event loop

2026-09-14 12:52:15 +01:00

QA_TESTS.md

Pg 4 (#2390)

2026-04-18 13:13:57 +01:00

requirements.txt

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_agent_token_tracking.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_app_routes.py

feat: air-gapped deployment guide, no implicit downloads

2026-09-15 17:54:24 +01:00

test_app.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_asgi.py

feat(api): serve long-lived streams on the event loop

2026-09-14 08:33:46 +01:00

test_async_broadcast_channel.py

fix(api): address review on the event-loop streams

2026-09-14 10:19:59 +01:00

test_async_redis.py

fix: stability improvements on event loop

2026-09-14 12:52:15 +01:00

test_auth.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_authz.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_cache.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_celery.py

test(worker): send the real startup signals, and import celery_init one way

2026-09-19 14:53:18 +01:00

test_cli.py

feat: a development loop in one command

2026-09-17 11:32:50 +01:00

test_client_tools.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_code_executor_tool.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_compression_service.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_continuation.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_coverage_gaps.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_dispatcher.py

Default retrieval to 6 chunks instead of 2

2026-09-28 14:34:50 +01:00

test_error.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_event_replay.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_events_substrate.py

fix(api): address review on the event-loop streams

2026-09-14 10:19:59 +01:00

test_extra_coverage.py

Connections own their credentials

2026-09-28 17:03:09 +01:00

test_integration.py

End 2 end tests (#2266)

2026-01-22 13:11:24 +02:00

test_logging.py

Keep exception text out of stored and exported span errors

2026-09-23 22:42:05 +01:00

test_memory_tool.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_message_journal.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_model_validation.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_namespaces.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_notes_tool.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_oidc.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_openapi3.yaml

Added tests and updated openapi3_parser.py

2023-10-15 17:00:54 +05:30

test_openapi3parser.py

chore(deps): redis 8, tiktoken 0.14, openapi3-parser 2, daytona 0.211, reportlab 5

2026-09-12 17:28:58 +01:00

test_package_rename.py

fix(rename): address review on the package rename

2026-09-07 12:02:07 +01:00

test_pricing.py

feat(pricing): rates for the default DocsGPT model

2026-09-21 13:36:22 +01:00

test_prompt_composer.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_prompt_presets.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_pubsub_timeouts.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_remaining_coverage.py

refactor(settings): split Settings into per-domain modules

2026-09-17 11:04:01 +01:00

test_retriever.py

Default retrieval to 6 chunks instead of 2

2026-09-28 14:34:50 +01:00

test_scim.py

test: assert the SCIM audit attribution

2026-09-22 10:46:54 +01:00

test_sse_keepalive.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_sse_leases.py

fix: stability improvements on event loop

2026-09-14 12:52:15 +01:00

test_target_coverage.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_template_engine.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_todo_tool.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_token_management.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_tool_approval.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_ui.py

feat(package): ship the web UI in the wheel and serve it from the API

2026-09-09 11:09:09 +01:00

test_upload_limits.py

fix: handle non text uploads more carefully

2026-09-14 17:27:13 +01:00

test_usage_latency.py

fix(admin): second review pass

2026-09-22 12:47:40 +01:00

test_usage.py

feat(quotas): quota_policies table and a per-call cost on token_usage

2026-09-21 12:11:11 +01:00

test_utils.py

feat: air-gapped deployment guide, no implicit downloads

2026-09-15 17:54:24 +01:00

test_v1_translator.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_version_check.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_worker_utils.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_zip_extraction_security.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00