Commit Graph
700 Commits
Author SHA1 Message Date
Bo-Onyx 8d4409c0ae feat(hooks): drive endpoint SSRF validation from ssrf_protection_level (#13321) 2026-07-22 22:49:57 +00:00
618b5031bf feat: per-user usage + cost tracking — enforcement (3/4) [edit of #11888] (#13222)
Co-authored-by: Berat Erkan Elcelik <beraterkanelcelik@gmail.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-22 16:45:57 +00:00
Evan Lohn 1c4af29b1b feat: efficient token tracking (#13275) 2026-07-22 01:02:36 +00:00
Evan Lohn d3a4912a8b fix: canvas start date (#13254) 2026-07-21 20:01:54 +00:00
Justin Tahara e661962efd fix(gdrive): stream folders during group sync to bound memory (#13190) 2026-07-20 19:53:43 +00:00
Jamison Lahman 9881c03822 chore(fmt): remove order-by-type (#13183) 2026-07-20 18:13:25 +00:00
Jamison Lahman 46af76e98a chore(fmt): remove force-single-line (#12996) 2026-07-20 17:15:00 +00:00
Evan Lohn 4fe09b28d7 fix: sharepoint role names localization (#13167) 2026-07-20 05:45:56 +00:00
Wenxi d98bdb5a9a feat(connectors): Box connector (indexing + permission sync) (#12862) 2026-07-19 16:50:54 +00:00
Evan Lohn a4a5d7b5b5 fix: sharepoint group permissions (#13109) 2026-07-16 22:07:21 +00:00
Nikolas Garza 9a9ad1e101 feat(auth): remove AUTH_TYPE and the AuthType enum, serve multi_tenant (#13029) 2026-07-16 21:08:07 +00:00
Nikolas Garza 577342f5cc feat(auth): remove legacy single-provider SSO modes (#13027) 2026-07-16 20:08:34 +00:00
Nikolas Garza fa0287e2d2 refactor(auth): gate cloud-only behavior on MULTI_TENANT (#13017) 2026-07-16 19:20:35 +00:00
Evan LohnandBerat Erkan Elcelik b3b1497d68 feat(mcp): group/public access control for MCP servers [Mirror of #12227 for EE edits] (#12972)
Co-authored-by: Berat Erkan Elcelik <beraterkanelcelik@gmail.com>
2026-07-16 01:00:24 +00:00
Justin Tahara 4ae2921ad6 fix(enterprise-settings): stop custom-analytics-script 500 on tenant-less MT requests (#13003) 2026-07-14 21:57:25 +00:00
Justin Tahara 01dbc23b4a fix(scim): return 409 not 500 on concurrent duplicate user create (#12966) 2026-07-13 22:19:34 +00:00
Justin Tahara f6bf055321 fix(ttl): isolate + batch chat retention cleanup off the primary queue (#12928) 2026-07-13 20:06:43 +00:00
Nikolas Garza 0418773e19 feat(auth): gate multiple enabled SSO providers at Business tier (#12878) 2026-07-10 23:24:21 +00:00
Evan Lohn 05fa6ffd8f fix: public root nodes (#12880) 2026-07-10 22:50:34 +00:00
Bo-Onyx 62033a2cd1 feat(onyx-wiki): config-driven document push for non-EE deployments (#12860) 2026-07-10 21:17:30 +00:00
Wenxi 698d0305fd refactor(ee): share credential_json helper across perm-sync connectors (#12859) 2026-07-10 19:01:34 +00:00
Evan Lohn 0677c8c3ca feat: canvas perm sync cleanup (#12798) 2026-07-09 00:28:12 +00:00
Evan Lohn 51b5037657 feat: canvas perm sync (#12729) 2026-07-08 23:23:20 +00:00
Nikolas Garza d21ddb0519 fix: scope Drive domain shares to a domain group instead of instance-public (#12730) 2026-07-08 23:00:48 +00:00
Chris Weaver 1c0d6b858f fix(jira): skip deleted groups during group sync (#12669) 2026-07-03 01:24:12 +00:00
Nikolas Garza 8f0e4e74dc fix: tenant-scope and invalidate the token-rate-limit existence cache (#12623) 2026-07-01 21:35:12 +00:00
Nikolas Garza 2ad66cd791 fix: scope cross-tenant permission caches per tenant/instance (#12580) 2026-07-01 21:07:00 +00:00
656f00d3e0 feat: per-user usage + cost tracking — schema + models (1/4) [modifying #11766] (#12550)
Co-authored-by: Berat Erkan Elcelik <beraterkanelcelik@gmail.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-01 20:56:31 +00:00
Jamison LahmanandClaude Opus 4.8 afb03a4853 chore: replace remaining Danswer branding mentions with Onyx (#12546)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-30 20:53:02 +00:00
Justin Tahara 505c93ac3a fix(confluence): pass scoped_token to group sync client (#12559) 2026-06-30 19:48:28 +00:00
Jamison LahmanandClaude Opus 4.8 46e19cc275 fix(ee): scope curator group writes to curated groups (#12525)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-30 01:18:45 +00:00
Nikolas Garza 86215ddb6b fix(license): persist expiry-banner dismissal server-side via notifications (#12513) 2026-06-29 21:20:52 +00:00
Justin Tahara c8510194d1 fix(scim): accept Entra ID group member removal (path=members + value list) (#12437) 2026-06-25 19:04:39 +00:00
Evan LohnandClaude Sonnet 4.6 2e7e6f50f3 feat(hierarchy): add hierarchy node display_name search endpoint (#12411)
Co-authored-by: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
2026-06-25 18:32:05 +00:00
335740bb00 chore(deps): bump pyjwt from 2.12.0 to 2.13.0 (#12400)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jamison Lahman <jamison@lahman.dev>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-24 22:18:53 +00:00
Evan Lohn 3c403941b5 fix: hierarchy node cross batch stubs (#12365) 2026-06-24 18:55:53 +00:00
fb912b6c4c fix(ee): unset default SUPER_CLOUD_API_KEY, fail closed when unconfigured (#12363)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2026-06-24 00:02:36 +00:00
Jamison LahmanandClaude Opus 4.8 978c45e94d feat(audit): emit audit events for impersonation (#12359)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-23 23:50:14 +00:00
Justin Tahara 711377c5ab feat(audit): wire the 3 remaining audit actions (password_reset, user.create, user.group_change) (#12362) 2026-06-23 23:47:28 +00:00
Jamison LahmanandClaude Opus 4.8 2878d8502c feat(tenants): feature-flag the impersonation endpoint, disabled by default (#12354)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-23 22:53:41 +00:00
Danelegend fb4d0fcd30 feat(craft): Seed external apps for tenants in cloud (#12288) 2026-06-23 22:13:54 +00:00
Nikolas Garza 5bfa1b603c feat(billing): redis cache for trial + billing info lookups (#10521) 2026-06-23 20:45:31 +00:00
Jamison Lahman 2ffe82730a refactor(comments): replace mentions of mypy with app-agnostic comment (#12267) 2026-06-22 19:14:12 +00:00
Justin Tahara a63856327a Revert "feat(canvas): perm syncing(4)" (#12231) 2026-06-19 18:40:29 +00:00
Ben WuandClaude Opus 4.8 2e94a07049 feat(canvas): perm syncing(4) (#10443)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-19 00:48:26 +00:00
Nikolas Garza a6152aecf8 feat(agent-sharing): editor knowledge-attach guard - 4/7 (#12024) 2026-06-18 16:29:48 +00:00
SubashMohanandClaude Opus 4.8 a01015a922 feat(auth): add mobile SSO bridge with PKCE one-time code exchange (#12150)
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-18 11:46:20 +00:00
Nikolas Garza 4a378e3405 feat(agent-sharing): ownership and transfer - 3/7 (#12023) 2026-06-18 01:58:10 +00:00
Wenxi 6074037022 fix(slack): scope permission sync channel fetches (#12134) 2026-06-17 23:10:34 +00:00
Jamison LahmanandClaude Opus 4.8 738404e779 fix(tenant): skip tenant resolution for /health and /metrics probes (#12168)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-17 23:09:54 +00:00