Code

History

Commits on codex/codemode-runtime-helpers to apps/cloud245+
  1. fix mcp auth (#435)Rhys Sullivan committed 6 months ago7c870c9
  2. Expand MCP organization checks (#430)Rhys Sullivan committed 6 months agod407c16
  3. Require MCP JWT audience (#429)Rhys Sullivan committed 6 months ago9e62562
  4. Harden secret and connection token access (#428)Rhys Sullivan committed 6 months ago7853953
  5. Expand scope coverage (#427)Rhys Sullivan committed 6 months agoe30e213
  6. Reclassify expected MCP auth telemetry (#426)Rhys Sullivan committed 6 months ago1c5d852
  7. fix mcp jwt auth telemetry (#421)Rhys Sullivan committed 6 months ago0a6c5e4
  8. fix cloud mcp auth buildRhys Sullivan committed 6 months agod3023e3
  9. hotfix cloud auth cookie durationsRhys Sullivan committed 6 months ago371bdb8
  10. fix oauth state handler testsRhys Sullivan committed 6 months ago8cf6c57
  11. trace session idRhys Sullivan committed 6 months ago98a4ca4
  12. Add state management for OAuth flow and enhance cookie handlingRhys Sullivan committed 6 months agodf01d7e
  13. enforce resource in mcpRhys Sullivan committed 6 months ago0e64056
  14. safeguard against session id leakingRhys Sullivan committed 6 months ago5413975
  15. Harden MCP auth metadata and transport wrapper (#422)Rhys Sullivan committed 6 months agoc547522
  16. Fix MCP Hyperdrive connection pressure (#420)Rhys Sullivan committed 6 months agob9c6e0b
  17. fix mcp invalid bearer handling (#417)Rhys Sullivan committed 6 months agob965f7b
  18. wip speed up deleteRhys Sullivan committed 6 months ago25da74e
  19. Tighten Cloudflare database runtime wiringRhys Sullivan committed 6 months ago63ae91b
  20. extend instrumentationRhys Sullivan committed 6 months ago3f79157
  21. [codex] support per-user credential bindings for shared sources (#387)Rhys Sullivan committed 6 months ago9c9da44
  22. cloud: drop hardcoded VITE_PUBLIC_SENTRY_DSN from wrangler.jsonc (#382)Rhys Sullivan committed 6 months ago030f2f8
  23. mcp: allow null clientInformation on connection provider_stateRhys Sullivan committed 6 months agoe78249c
  24. migrate-mcp-connections: --dump-blocked flag prints raw auth blobRhys Sullivan committed 6 months ago3c74de2
  25. connections: migrate legacy MCP + google-discovery oauth rowsRhys Sullivan committed 6 months ago004c751
  26. connections: local /connections route + backfill missing secret routing rowsRhys Sullivan committed 6 months ago8b76873
  27. connections: backfill legacy OpenAPI OAuth rows into Connection rowsRhys Sullivan committed 6 months agobabebb4
  28. connections: extract sign-in state into a first-class SDK primitiveRhys Sullivan committed 6 months agobd7faba
  29. cloud: add db:migrate:prod scriptRhys Sullivan committed 6 months ago51397fa
  30. lint: drop dead imports + ignore .references/Rhys Sullivan committed 6 months ago897cee4
  31. Merge branch 'main' into rs/mcp-per-user-oauthRhys Sullivan committed 6 months agod34dec8
  32. openapi: refresh sources by re-fetching their origin URLRhys Sullivan committed 6 months ago16dc8b8
  33. mcp: store oauth session expires_at as bigintRhys Sullivan committed 6 months agob32b601
  34. scope-isolation: audit fixes + workos tenant-ownership guardsRhys Sullivan committed 6 months ago6e6ae55
  35. cloud/local/examples: thread per-user ScopeStack through HTTP + MCPRhys Sullivan committed 6 months agod4e311e