arc53-machine 667d4bbab0 Encrypt connection credentials with an owner-bound AES-GCM envelope ...

Adds a v2 credential envelope next to the v1 tool-secret helpers:
AES-256-GCM, a master key derived once per process from
ENCRYPTION_SECRET_KEY, and a per-record key from HKDF over the owner's
id, which is also the associated data, so a blob moved onto another
user's row does not decrypt. The envelope names its key, so
ENCRYPTION_SECRET_KEY_PREVIOUS keeps old rows readable during a
rotation.

Log redaction now also covers token_info, tokens and client_info, and
the API warns at startup when the public default key is in use.

2026-09-28 17:03:02 +01:00

..

agents

Default retrieval to 6 chunks instead of 2

2026-09-28 14:34:50 +01:00

alembic

Add the connector catalog and read-only connections API

2026-09-28 16:30:48 +01:00

api

Add the connector catalog and read-only connections API

2026-09-28 16:30:48 +01:00

connectors

Add the connector catalog and read-only connections API

2026-09-28 16:30:48 +01:00

core

Encrypt connection credentials with an owner-bound AES-GCM envelope

2026-09-28 17:03:02 +01:00

deploy

fix: keep credentials and 5000-digit paths out of the Redis URL errors

2026-09-17 13:34:59 +01:00

devices

refactor: read settings directly instead of getattr with a second default

2026-09-17 11:14:34 +01:00

events

fix(api): address review on the event-loop streams

2026-09-14 10:19:59 +01:00

graphrag

Trace scheduled, webhook, search, MCP and graph-extraction runs

2026-09-23 17:37:24 +01:00

guardrails

Trace unexecuted tool calls in one place; tidy span lifecycles

2026-09-23 22:42:05 +01:00

llm

Name the provider a model call actually reached

2026-09-24 00:08:53 +01:00

parser

refactor: read settings directly instead of getattr with a second default

2026-09-17 11:14:34 +01:00

prompts

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

quotas

fix(quotas): keyless agent chat bucket, keep disabled policies disabled, cached rates

2026-09-21 15:26:29 +01:00

retriever

Default retrieval to 6 chunks instead of 2

2026-09-28 14:34:50 +01:00

sandbox

refactor: read settings directly instead of getattr with a second default

2026-09-17 11:14:34 +01:00

scripts

refactor: read settings directly instead of getattr with a second default

2026-09-17 11:14:34 +01:00

security

Encrypt connection credentials with an owner-bound AES-GCM envelope

2026-09-28 17:03:02 +01:00

seed

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

services

Trace scheduled, webhook, search, MCP and graph-extraction runs

2026-09-23 17:37:24 +01:00

storage

Encrypt connection credentials with an owner-bound AES-GCM envelope

2026-09-28 17:03:02 +01:00

streaming

fix: stability improvements on event loop

2026-09-14 12:52:15 +01:00

stt

feat: air-gapped deployment guide, no implicit downloads

2026-09-15 17:54:24 +01:00

templates

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

tracing

Name the provider a model call actually reached

2026-09-24 00:08:53 +01:00

tts

feat: air-gapped deployment guide, no implicit downloads

2026-09-15 17:54:24 +01:00

updates

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

vectorstore

fix(worker): know you are in a worker from any thread, not only the task's

2026-09-19 14:07:42 +01:00

__init__.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

__main__.py

fix: run the module when the docsgpt command is not on PATH

2026-09-16 22:45:54 +01:00

alembic.ini

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

app.py

Encrypt connection credentials with an owner-bound AES-GCM envelope

2026-09-28 17:03:02 +01:00

asgi.py

feat(api): serve long-lived streams on the event loop

2026-09-14 08:33:46 +01:00

audit_events.py

feat(admin): merged activity feed with filters and export

2026-09-22 10:23:39 +01:00

auth.py

feat(pat): authenticate personal access tokens

2026-09-19 23:39:58 +01:00

cache.py

Record a chat span for every LLM call

2026-09-23 17:23:06 +01:00

celery_init.py

fix(worker): record worker state at startup, for every pool

2026-09-19 14:33:14 +01:00

celeryconfig.py

fix(rename): address review on the package rename

2026-09-07 12:02:07 +01:00

cli.py

feat: a development loop in one command

2026-09-17 11:32:50 +01:00

Dockerfile

feat: serve the UI from the backend image, one-port standalone stack

2026-09-15 22:41:53 +01:00

error.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

gunicorn_conf.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

gunicorn_worker.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

index.faiss

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

index.pkl

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

logging.py

Fall back to model_id for the logged model

2026-09-24 13:47:46 +01:00

mcp_server.py

Trace scheduled, webhook, search, MCP and graph-extraction runs

2026-09-23 17:37:24 +01:00

pricing.py

feat(pricing): per-million model rates and a cost module

2026-09-21 11:38:22 +01:00

requirements-docling.txt

Add execution-trace settings and declare opentelemetry-api

2026-09-23 17:14:51 +01:00

requirements-milvus.txt

Add execution-trace settings and declare opentelemetry-api

2026-09-23 17:14:51 +01:00

requirements.txt

Add execution-trace settings and declare opentelemetry-api

2026-09-23 17:14:51 +01:00

ui.py

feat(package): ship the web UI in the wheel and serve it from the API

2026-09-09 11:09:09 +01:00

upload_limits.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

usage.py

Skip trace work when disabled; share the agent span builder

2026-09-23 22:09:58 +01:00

utils.py

refactor: read settings directly instead of getattr with a second default

2026-09-17 11:14:34 +01:00

version.py

chore: 0.21.0

2026-09-16 14:23:26 +01:00

worker.py

Trace scheduled, webhook, search, MCP and graph-extraction runs

2026-09-23 17:37:24 +01:00

wsgi.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00