Code

History

Commits on codex/codemode-persistent-cells to apps/cloud245+
  1. tool policies: per-tool and per-namespace permission overrides (#437)Rhys Sullivan committed 6 months ago3fa2359
  2. fix mcp auth (#435)Rhys Sullivan committed 6 months ago7c870c9
  3. Expand MCP organization checks (#430)Rhys Sullivan committed 6 months agod407c16
  4. Require MCP JWT audience (#429)Rhys Sullivan committed 6 months ago9e62562
  5. Harden secret and connection token access (#428)Rhys Sullivan committed 6 months ago7853953
  6. Expand scope coverage (#427)Rhys Sullivan committed 6 months agoe30e213
  7. Reclassify expected MCP auth telemetry (#426)Rhys Sullivan committed 6 months ago1c5d852
  8. fix mcp jwt auth telemetry (#421)Rhys Sullivan committed 6 months ago0a6c5e4
  9. fix cloud mcp auth buildRhys Sullivan committed 6 months agod3023e3
  10. hotfix cloud auth cookie durationsRhys Sullivan committed 6 months ago371bdb8
  11. fix oauth state handler testsRhys Sullivan committed 6 months ago8cf6c57
  12. trace session idRhys Sullivan committed 6 months ago98a4ca4
  13. Add state management for OAuth flow and enhance cookie handlingRhys Sullivan committed 6 months agodf01d7e
  14. enforce resource in mcpRhys Sullivan committed 6 months ago0e64056
  15. safeguard against session id leakingRhys Sullivan committed 6 months ago5413975
  16. Harden MCP auth metadata and transport wrapper (#422)Rhys Sullivan committed 6 months agoc547522
  17. Fix MCP Hyperdrive connection pressure (#420)Rhys Sullivan committed 6 months agob9c6e0b
  18. fix mcp invalid bearer handling (#417)Rhys Sullivan committed 6 months agob965f7b
  19. wip speed up deleteRhys Sullivan committed 6 months ago25da74e
  20. Tighten Cloudflare database runtime wiringRhys Sullivan committed 6 months ago63ae91b
  21. extend instrumentationRhys Sullivan committed 6 months ago3f79157
  22. [codex] support per-user credential bindings for shared sources (#387)Rhys Sullivan committed 6 months ago9c9da44
  23. cloud: drop hardcoded VITE_PUBLIC_SENTRY_DSN from wrangler.jsonc (#382)Rhys Sullivan committed 6 months ago030f2f8
  24. mcp: allow null clientInformation on connection provider_stateRhys Sullivan committed 6 months agoe78249c
  25. migrate-mcp-connections: --dump-blocked flag prints raw auth blobRhys Sullivan committed 6 months ago3c74de2
  26. connections: migrate legacy MCP + google-discovery oauth rowsRhys Sullivan committed 6 months ago004c751
  27. connections: local /connections route + backfill missing secret routing rowsRhys Sullivan committed 6 months ago8b76873
  28. connections: backfill legacy OpenAPI OAuth rows into Connection rowsRhys Sullivan committed 6 months agobabebb4
  29. connections: extract sign-in state into a first-class SDK primitiveRhys Sullivan committed 6 months agobd7faba
  30. cloud: add db:migrate:prod scriptRhys Sullivan committed 6 months ago51397fa
  31. lint: drop dead imports + ignore .references/Rhys Sullivan committed 6 months ago897cee4
  32. Merge branch 'main' into rs/mcp-per-user-oauthRhys Sullivan committed 6 months agod34dec8
  33. openapi: refresh sources by re-fetching their origin URLRhys Sullivan committed 6 months ago16dc8b8
  34. mcp: store oauth session expires_at as bigintRhys Sullivan committed 6 months agob32b601
  35. scope-isolation: audit fixes + workos tenant-ownership guardsRhys Sullivan committed 6 months ago6e6ae55