starred/onyx
1
0 Fork 0
mirror of https://github.com/onyx-dot-app/onyx.git synced 2026-10-22 03:14:06 -05:00
Code Issues Packages Projects Releases 10 Wiki Activity
10,937 Commits 2,071 Branches 2,537 Tags
whuang/python-agent-sdk
Commit Graph
50 Commits
Author SHA1 Message Date
devin-ai-integration[bot]andNik 40238683c9 feat(web): embedded run list, status page shell, and connector page sections per mock (#16171) 
Co-authored-by: Nik <nikolas.garza5@gmail.com>
Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-17 22:58:52 +00:00
Wenxi 0e60d3c681 feat(mcp): guide users through tool connection and reauthentication (#16092) 2026-10-15 20:54:50 +00:00
DanelegendandClaude Opus 5 d72838b969 fix(connectors): paginate the file connector's file lists (#16096) 
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
 2026-10-15 20:41:12 +00:00
Justin Tahara 35eb83d3d5 test(auth): add route gate contract tests and make two read routes read-only (#15991) 2026-10-14 17:29:09 +00:00
Evan LohnandClaude Opus 5.5 19e5041c2f feat(credentials): honour credential sharing with admins and groups (#15863) 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-13 02:10:33 +00:00
Evan LohnandClaude Opus 5.5 1b4f19c90a feat(credentials): require the bound fields of a pair to use another user's credential (#15862) 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-13 02:10:32 +00:00
Raunak Bhagat d82ef15039 feat(connectors): draft credentials and per-account check endpoints (#15757) 2026-10-09 20:58:06 +00:00
Evan LohnandClaude Opus 5.5 dbf01b5dc1 feat(connectors): named capability checks at creation, and a run when a credential is created (#15406) 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-03 02:05:38 +00:00
Evan LohnandClaude Opus 5.5 19ee1f7178 feat(connectors): restricted sync access type (#15295) 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-02 18:30:07 +00:00
Evan LohnandClaude Opus 5.5 6b77733c58 feat(connectors): manage-access APIs for cc-pair roles (#15294) 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-02 03:13:48 +00:00
Evan LohnandClaude Opus 5.5 ec81320f0d feat(connectors): Editor and Operator manage roles on cc-pairs (#15293) 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-02 03:13:47 +00:00
Evan LohnandClaude Opus 5.5 e531a95e92 feat: Atlassian credential family for Confluence and Jira (#15206) 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
 2026-09-30 22:27:07 +00:00
Evan LohnandClaude Opus 5.5 31402fcf17 feat: credential family framework (#15205) 
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
 2026-09-30 22:27:06 +00:00
Justin Tahara dd32019df7 fix(authz): check credential ownership and scoped-manager cc_pair access (#14678) 2026-09-24 16:55:20 +00:00
Justin Tahara 082bf74402 fix(security): verify project ownership in move_chat_session (ENG-4297) (#13327) 2026-09-23 19:47:21 +00:00
roshan 88fbeef6b4 fix(usage): hold service accounts to global budgets only (#15030) 2026-09-23 19:30:23 +00:00
roshan 64cf608851 fix(usage): enforce LLM budgets on the Slack bot, /search, and the gateway (#15024) 2026-09-23 17:56:17 +00:00
Justin Tahara 970eda9af4 fix(users): restrict test provisioning and scoped directory fields (#14819) 2026-09-16 21:24:05 +00:00
Justin Tahara 2f0181b038 fix(api): report only live groups on a pair, and keep a stated key (#14483) 2026-09-04 20:56:55 +00:00
Nikolas Garza e0f89b4a8b fix(auth): rewrite a same-provider link when the IdP re-issues its subjects (#14485) 2026-09-04 20:56:22 +00:00
Justin Tahara 755aaab183 fix(api): stop destroying the caller's connector, mask custom action headers (#14365) 2026-08-31 16:28:12 +00:00
Evan Lohn 4ad5e21b2b fix(mcp): store each MCP tool once when a connect fires two refreshes (#14348) 2026-08-28 00:44:59 +00:00
Nikolas Garza af2bc31caf feat(admin): JWT auth settings on the Security & Hardening page (#14155) 2026-08-24 17:03:45 +00:00
Nikolas Garza cf085d9e2b feat(auth): move JWT auth settings to DB-backed security settings (#14153) 2026-08-24 16:34:35 +00:00
Wenxi 14673a2a54 refactor(oauth): share authorization attempts across OAuth flows (#14122) 2026-08-21 02:15:49 +00:00
Nikolas Garza 0a1d9319bd test(salesforce): use an http URL to exercise the HTTPS rejection (#14048) 2026-08-18 21:42:16 +00:00
Evan LohnandCursor 3874c57e9b test: cover Salesforce OAuth setup (#13995) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-17 23:28:48 +00:00
Jamison LahmanandClaude Opus 5 e746c441bc chore(lint): enable perflint ruff rules (#14025) 
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
 2026-08-17 20:16:43 +00:00
SubashMohanandClaude Opus 4.7 be8cfa6144 feat(permissions):new group based permission system (#10172) 
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-08-17 16:32:51 +00:00
Wenxi 3733e30661 refactor(mcp): rename auth wire fields for clarity (#13948) 2026-08-13 20:58:49 +00:00
Wenxi fa017e9908 refactor(mcp): centralize credential checks in credentials.py (#13947) 2026-08-13 20:58:49 +00:00
Nikolas Garza 62e03d0680 feat(admin): incognito availability and record modes (#13894) 2026-08-12 18:38:46 +00:00
Justin Tahara de309cd587 fix(connectors): batch admin connector files listing into one query (#13702) 2026-08-04 20:50:41 +00:00
Evan Lohn 39861977f7 feat(mcp): arbitrary connection headers for all servers (#13715) 2026-08-04 19:28:03 +00:00
Jamison LahmanandClaude Opus 5 7551a82348 refactor(backend): remove obsolete mypy-era type: ignore directives (#13674) 
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
 2026-07-31 21:50:54 +00:00
dependabot[bot]Jamison LahmanClaude Opus 5
 		1c051385b5 chore(deps-dev): bump ty from 0.0.31 to 0.0.63 (#13576) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jamison Lahman <jamison@lahman.dev>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
 2026-07-31 20:26:33 +00:00
Nikolas Garza 0a32b45715 fix(auth): password auth kill switch for SSO cutover (#12887) 2026-07-27 19:32:23 +00:00
DanelegendandClaude Opus 4.8 aaaa1efd21 fix(mcp): require stored tokens for per-user OAuth "connected" status (#13381) 
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-23 23:12:21 +00:00
Justin Tahara 92b39e3d6b fix(security): stop compiling user search query as a regex — ReDoS (ENG-4296) (#13326) 2026-07-23 20:53:30 +00:00
Evan LohnandJack Watroba ee3bdf0bfc feat: mcp shared api key header [edit of #13278] (#13335) 
Co-authored-by: Jack Watroba <jack.watroba@biograph.com>
 2026-07-23 19:56:59 +00:00
Justin Tahara 8eab0370a2 fix(security): stop logging verify token / unsanitized PAT name (ENG-4306, ENG-4307) (#13328) 2026-07-22 22:09:38 +00:00
DanelegendandClaude Fable 5 dcf863ad11 feat(security): LLM env injection toggle on security hardening page (#13170) 
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
 2026-07-20 22:29:06 +00:00
Jamison Lahman 9881c03822 chore(fmt): remove order-by-type (#13183) 2026-07-20 18:13:25 +00:00
Jamison Lahman 46af76e98a chore(fmt): remove force-single-line (#12996) 2026-07-20 17:15:00 +00:00
Evan LohnandBerat Erkan Elcelik b3b1497d68 feat(mcp): group/public access control for MCP servers [Mirror of #12227 for EE edits] (#12972) 
Co-authored-by: Berat Erkan Elcelik <beraterkanelcelik@gmail.com>
 2026-07-16 01:00:24 +00:00
Wenxi bdc8800c68 test(craft): factor shared test helpers (#12269) 2026-06-22 19:02:52 +00:00
Jamison LahmanandClaude Opus 4.8 68c27cbe83 fix(security): skip security_settings DB read on the shared schema (#12166) 
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-18 22:41:24 +00:00
Justin Tahara 4c65e331ff feat: rate limit chat message feedback endpoints (#11758) 2026-06-10 19:15:31 +00:00
Jamison LahmanandClaude Opus 4.7 38231ff35d feat(security): runtime-configurable security settings via KV store (#11453) 
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>
 2026-06-09 19:53:46 +00:00
Evan Lohn cb880c4e17 fix: mcp user email replacement (#11390) 2026-05-26 22:54:18 +00:00