Chris CoutinhoandClaude Opus 4.8 11522f88b0 refactor(auth): drop built-in well-known MCP client list ...

The client registry derived display names from a hardcoded map of
"well-known" MCP clients (claude-desktop, claude-ai, continue-dev,
zed-editor, vscode-mcp). This baked a recognized-client list into the
server even though admission already requires explicit opt-in via
ALLOWED_MCP_CLIENTS (fail-closed when unset).

Mirror the management-API surface (ALLOWED_MGMT_CLIENT), which has no
built-in client list: remove the map and derive the display name
generically from the client_id. Default remains none; clients must be
added explicitly and DCR stays off unless ENABLE_DCR=true.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-16 20:50:17 +02:00

..

api

refactor: change OAuth scope separator from colon to dot for IDP compatibility

2026-04-07 10:07:02 +02:00

client

Merge pull request #832 from Janhouse/fix/830-external-calendars

2026-06-15 06:34:16 +02:00

providers

test(providers): Mistral batch retry + retry-log detail + comment (#893 r4)

2026-06-11 06:45:56 +02:00

search

feat(usage): rename metrics → tokens_embedded/pages_embedded + export token cost to Prometheus

2026-06-08 13:17:53 +02:00

server

fix(vector-sync): address round-5 review — partial-failure signal, markers

2026-06-16 01:47:44 +02:00

utils

feat(search): ADR-027 Phase 1 — modified-date range filter

2026-06-03 00:35:20 +02:00

vector

fix(vector): propagate cancel in cleanup task; cover 403 + sweep-failure

2026-06-16 19:23:46 +02:00

__init__.py

feat: Split read/write scopes into app:read/write scopes

2025-10-24 04:38:49 +02:00

conftest.py

fix(observability): address PR review + SonarCloud findings

2026-06-02 18:15:50 +02:00

test_acl_hash.py

feat: add opt-in MCP decomposition hook points (design §10)

2026-05-29 13:13:25 +02:00

test_app_context_task_producer.py

fix: address PR #836 review — forward task_producer to MCP contexts + cleanups

2026-06-03 12:40:50 +02:00

test_app_password_loginname_auth.py

fix(auth): authenticate stored app passwords with loginName, not UID

2026-05-31 21:34:05 +02:00

test_app_password_storage.py

feat(storage): pluggable database backend via DATABASE_URL (ADR-026)

2026-05-16 18:06:42 +02:00

test_astrolabe_client.py

test: address round-2 claude-review on #883

2026-06-10 20:53:54 +02:00

test_auth_tools.py

test(vector-sync): cover the auth_tools.py provisioning wake path

2026-06-12 10:14:39 +02:00

test_basic_auth_middleware.py

fix(config): address reviewer feedback

2025-12-20 21:16:17 +01:00

test_batch_ocr_store.py

fix(ocr): round-4 review — defensive poll + drop dead tracking columns

2026-06-15 11:04:03 +02:00

test_browser_oauth_routes.py

fix(auth): address PR #758 round-7 medium/minor review

2026-05-03 14:21:12 +02:00

test_browser_oauth_xss.py

fix(auth): address PR #758 round-3 review

2026-05-02 22:40:06 +02:00

test_browser_sessions.py

fix(auth): address PR #758 review — XSS, CSRF, open redirect, JWKS cache

2026-05-02 18:26:39 +02:00

test_capabilities.py

fix(vector-sync): address round-5 review — partial-failure signal, markers

2026-06-16 01:47:44 +02:00

test_chunk_bbox_helper.py

fix: address PR #813 review round 4 (log leak, cross-user chunk ctx, algo, overlap)

2026-05-29 16:55:00 +02:00

test_chunk_context_offset_gate.py

fix(vector): address PR review round 15 — concurrency, pagination, stale coercion

2026-05-10 13:49:17 +02:00

test_client_registry.py

refactor(auth): drop built-in well-known MCP client list

2026-06-16 20:50:17 +02:00

test_config_paths.py

test: address PR #707 reviewer feedback on config path helpers

2026-04-14 21:14:42 +02:00

test_config_validators.py

fix(config): emit background-ops advisory logs once per process

2026-05-16 13:07:50 +02:00

test_config.py

fix(ocr): round-2 review — lazy store lock, mode enum normalization, type hints

2026-06-15 10:45:10 +02:00

test_dcr_proxy.py

fix(auth): address PR #758 round-2 review

2026-05-02 21:56:08 +02:00

test_deck_server.py

fix(deck): include archived cards in list tools for status=all/archived

2026-06-07 18:03:28 +02:00

test_decomposition_config.py

fix(review): _enum_fields validation, gate classify_from_text flags, OCR warnings

2026-06-05 02:35:26 +02:00

test_doc_classifier.py

refactor(classifier): rename IMAGE_COVERAGE_SCANNED → IMAGE_HEAVY_THRESHOLD

2026-06-13 01:52:23 +02:00

test_document_chunker.py

test(vector): pin empty-chunk-list parity for all-blank pages

2026-06-06 14:20:03 +02:00

test_document_parse_metrics.py

feat: dedup shared-file parsing/embedding across users in vector sync

2026-06-04 12:55:17 +02:00

test_document_processor_config.py

feat: implement dynaconf configuration management (ADR-024 phases 1-3)

2026-04-07 09:22:19 +02:00

test_elicitation.py

fix(auth): address PR #757 round-2 review feedback

2026-05-02 16:33:43 +02:00

test_embedding_metrics.py

feat(usage): rename metrics → tokens_embedded/pages_embedded + export token cost to Prometheus

2026-06-08 13:17:53 +02:00

test_embedding_service.py

fix(embedding): instantiate BM25 singleton off the event loop

2026-05-17 19:33:24 +02:00

test_gateway_batch_client.py

fix(ocr): round-5 review nits — empty-pages failure, comments, test cleanup

2026-06-15 11:12:42 +02:00

test_hybrid_auth_setup.py

fix(health): non-gating readiness probe; shared-task-group lifespan; settings migration

2026-06-10 21:28:19 +02:00

test_id_token_verification.py

fix(auth): address PR #758 round-4 review

2026-05-03 00:57:12 +02:00

test_ingest_queue_depth_metric.py

fix(ingest): zero queue-depth gauge on all-queues-drained (review round 4)

2026-06-13 14:10:01 +02:00

test_instrument_tool.py

fix(test): fix 17 pre-existing unit test failures and add astrolabe CI build

2026-02-27 21:53:06 +01:00

test_logging_filter.py

chore: Remove /health and /metrics endpoints from logging

2025-11-10 02:07:45 +01:00

test_login_flow.py

test: avoid SonarCloud security rules instead of NOSONAR

2026-05-29 00:19:30 +02:00

test_management_app_password_endpoints.py

refactor(vector-sync): address round-1 review nits

2026-06-12 09:56:27 +02:00

test_management_apps_endpoint.py

fix(webhooks): use HTTP 428 instead of 412 for unprovisioned users

2026-05-04 00:15:55 +02:00

test_management_chunk_context_endpoint.py

fix(chunk-context): address PR #767 review — doc_type filter parity + tests

2026-05-08 20:50:27 +02:00

test_management_pdf_preview_endpoint.py

fix(api): use stored app password for chunk-context and pdf-preview

2026-04-22 19:50:13 +02:00

test_management_status_endpoint.py

fix(security): require WEBHOOK_SECRET for the Nextcloud webhook receiver

2026-06-14 18:18:34 +02:00

test_nutrition_model.py

address review: exclude bool from coercion, parameterize tests over all fields

2026-04-14 23:02:56 +00:00

test_oauth_callback_session_cleanup.py

fix(auth): address PR #758 round-6 medium/low review

2026-05-03 13:03:49 +02:00

test_oauth_logout.py

fix(auth): address PR #758 round-7 medium/minor review

2026-05-03 14:21:12 +02:00

test_oauth_tools_app_password_provisioning.py

fix: convert astrolabe int provisioned_at to ISO before ProvisioningStatus

2026-06-10 21:36:27 +02:00

test_oauth_tools_signatures.py

fix(auth): harden OAuth/session for hosted multi-tenant deployment (#626)

2026-05-02 17:03:57 +02:00

test_ocr_processor.py

test(ocr): round-6 — batch submit-error propagation test + import cleanup

2026-06-15 11:20:38 +02:00

test_offline_access_detection.py

fix: conditionally include offline_access based on IdP discovery

2026-04-07 23:48:49 +02:00

test_oidc_discovery.py

fix(auth): address PR #758 round-2 review

2026-05-02 21:56:08 +02:00

test_origin_normalise.py

fix(auth): address PR #758 round-3 final review

2026-05-02 23:14:07 +02:00

test_payload_backfill.py

feat: add opt-in MCP decomposition hook points (design §10)

2026-05-29 13:13:25 +02:00

test_pdf_parse_isolation.py

refactor(documents): fully decouple document stack from server startup; Windows-safe tests

2026-06-08 15:11:18 +02:00

test_processor_drop_reason.py

fix(vector-sync): address round-5 review — partial-failure signal, markers

2026-06-16 01:47:44 +02:00

test_processor_metering.py

feat(ingest): per-tier escalation via procrastinate queue-hop

2026-06-13 13:22:18 +02:00

test_processor_routing.py

test(vector): unit-test page-aware routing; clarify fallback comment

2026-06-06 14:02:05 +02:00

test_progress_notification.py

feat: Add text processing background worker for telling client about progress

2025-10-25 19:52:45 +02:00

test_provision_routes.py

fix: require bearer token on provision endpoints (open redirect mitigation)

2026-03-31 17:09:37 +02:00

test_pypdfium2_fast.py

feat: tiered PDF processor with pypdfium2 fast path (deprecate pymupdf4llm)

2026-06-05 01:32:14 +02:00

test_readiness_cache.py

fix(config): correct OIDC token-type/scopes env keys; address review round 1

2026-06-10 21:45:02 +02:00

test_registry_tiering.py

refactor(ingest): rename ignore_enabled→ignore_ocr_enabled + empty/structured test

2026-06-13 15:35:06 +02:00

test_response_models.py

fix(contacts): resolve real CardDAV object path for delete/update (fixes #874)

2026-06-08 01:19:40 +02:00

test_safe_next_url.py

fix(auth): address PR #758 review — XSS, CSRF, open redirect, JWKS cache

2026-05-02 18:26:39 +02:00

test_scope_authorization_stored.py

fix(auth): invalidate scope cache on web/REST provisioning paths

2026-05-02 16:59:53 +02:00

test_scope_decorator.py

docs(auth): clarify unconditional offline_access advertising + test

2026-06-11 15:35:28 +02:00

test_scope_prefix.py

fix: address second round of PR review for scope prefix

2026-04-07 16:58:29 +02:00

test_ssl_config.py

fix(storage): address PR #798 review feedback (credentials, asyncpg extra, TLS, pool)

2026-05-16 18:53:45 +02:00

test_stdio.py

chore: address review-round-4 nits — stale delenv, upgrade hint, in-sync notes

2026-05-12 22:35:50 +02:00

test_storage_engine.py

fix(storage): address review on PR #799 (stale comments, docs deprecation, unit test)

2026-05-17 18:45:14 +02:00

test_storage_logging.py

fix(storage): address PR #798 round-4 review (NOSONAR syntax + pg_advisory_lock + engine dispose + nits)

2026-05-17 09:25:42 +02:00

test_tag_exclusion.py

fix(webdav): address PR #764 review round 4

2026-05-06 20:24:11 +02:00

test_token_broker.py

fix(auth): harden OAuth/session for hosted multi-tenant deployment (#626)

2026-05-02 17:03:57 +02:00

test_token_utils_user_id.py

fix(auth): fail closed on missing sub claim, delete Flow 2 callback session

2026-05-02 19:46:36 +02:00

test_unified_verifier.py

refactor(auth): remove vestigial token-exchange code path

2026-06-14 12:13:16 +02:00

test_usage_store.py

feat(usage): rename metrics → tokens_embedded/pages_embedded + export token cost to Prometheus

2026-06-08 13:17:53 +02:00

test_vector_sync_purge_route.py

test(vector-sync): close round-8 coverage gaps (500 path, non-string list)

2026-06-16 02:10:54 +02:00

test_vector_sync_status_model.py

feat: harmonize MCP tool + userinfo page to documents/chunks model

2026-06-04 20:28:44 +02:00

test_viz_routes_chunk_context.py

fix(chunk-context): address PR #767 review — doc_type filter parity + tests

2026-05-08 20:50:27 +02:00

test_webdav_search_paging.py

fix(webdav): harden offset/key truthiness and escape SEARCH mime type

2026-06-04 14:19:30 +02:00

test_webdav_tools_exclusion.py

fix(webdav): address PR #764 review round 4

2026-05-06 20:24:11 +02:00

test_webhook_endpoint.py

fix(security): enforce WEBHOOK_SECRET min length + address round-2 review

2026-06-14 18:36:22 +02:00

test_webhook_parser.py

feat(vector): index files in real time on vector-index tag changes

2026-06-05 16:20:05 +02:00

test_webhook_presets.py

feat(vector): index files in real time on vector-index tag changes

2026-06-05 16:20:05 +02:00

test_webhook_routes_register.py

fix(security): require WEBHOOK_SECRET for the Nextcloud webhook receiver

2026-06-14 18:18:34 +02:00

test_webhook_routes_xss.py

test(webhook): cover enable_webhook_preset 503 branch + clarify wrong-scheme test

2026-06-14 18:25:30 +02:00

test_webhook_storage.py

fix(storage): address PR #798 review feedback (credentials, asyncpg extra, TLS, pool)

2026-05-16 18:53:45 +02:00

test_webhook_uri.py

fix(security): require WEBHOOK_SECRET for the Nextcloud webhook receiver

2026-06-14 18:18:34 +02:00

test_webhooks_api_auth.py

fix(security): enforce WEBHOOK_SECRET min length + address round-2 review

2026-06-14 18:36:22 +02:00