Chris CoutinhoandClaude Opus 4.7 f9ad7dc52e fix(vector): address PR review round 12 — bool guard + strict doc_id validation ...

- _group_int_doc_ids: use type(value) is not int instead of isinstance,
  since bool is an int subclass and would otherwise stringify to
  "True"/"False" and corrupt legacy payloads on backfill.
- Replace doc_id.isdigit() guards in 5 boundary sites
  (api/visualization, auth/viz_routes, search/context note/news_item/
  deck_card branches) with a shared is_valid_nextcloud_doc_id helper
  that rejects "0", leading zeros, and Unicode digit classes
  (superscripts, Arabic-Indic, Devanagari) which pass isdigit() but
  cannot be valid MySQL AUTO_INCREMENT IDs.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-09 20:28:47 +02:00

..

api

refactor: change OAuth scope separator from colon to dot for IDP compatibility

2026-04-07 10:07:02 +02:00

client

fix(webdav): decode percent-encoded names in PROPFIND/SEARCH responses

2026-05-09 12:57:58 +02:00

providers

refactor(providers): address PR #772 review round 3 — hermetic test, lazy logging, defensive-guard tests

2026-05-08 18:28:04 +02:00

search

Merge remote-tracking branch 'origin/master' into fix/qdrant-doc-id-keyword-index

2026-05-08 23:08:39 +02:00

utils

fix(vector): address PR review round 12 — bool guard + strict doc_id validation

2026-05-09 20:28:47 +02:00

vector

fix(vector): address PR review round 12 — bool guard + strict doc_id validation

2026-05-09 20:28:47 +02:00

__init__.py

feat: Split read/write scopes into app:read/write scopes

2025-10-24 04:38:49 +02:00

conftest.py

feat: implement dynaconf configuration management (ADR-024 phases 1-3)

2026-04-07 09:22:19 +02:00

test_app_password_storage.py

test: Add comprehensive tests for app password storage and provisioning

2026-01-13 21:44:23 +01:00

test_auth_tools.py

refactor: change OAuth scope separator from colon to dot for IDP compatibility

2026-04-07 10:07:02 +02:00

test_basic_auth_middleware.py

fix(config): address reviewer feedback

2025-12-20 21:16:17 +01:00

test_browser_oauth_routes.py

fix(auth): address PR #758 round-7 medium/minor review

2026-05-03 14:21:12 +02:00

test_browser_oauth_xss.py

fix(auth): address PR #758 round-3 review

2026-05-02 22:40:06 +02:00

test_browser_sessions.py

fix(auth): address PR #758 review — XSS, CSRF, open redirect, JWKS cache

2026-05-02 18:26:39 +02:00

test_chunk_bbox_helper.py

fix(vector): tighten get_chunk_bbox_and_page_from_qdrant doc_id to str

2026-05-09 14:32:33 +02:00

test_chunk_context_offset_gate.py

fix(vector): address PR review round 11 — broaden offset-skip gate, clarify ordering

2026-05-09 17:59:41 +02:00

test_client_registry.py

feat(auth): drop test-client defaults, add ALLOWED_MGMT_CLIENT allowlist

2026-04-30 01:20:21 +02:00

test_config_paths.py

test: address PR #707 reviewer feedback on config path helpers

2026-04-14 21:14:42 +02:00

test_config_validators.py

feat: implement dynaconf configuration management (ADR-024 phases 1-3)

2026-04-07 09:22:19 +02:00

test_config.py

feat: implement dynaconf configuration management (ADR-024 phases 1-3)

2026-04-07 09:22:19 +02:00

test_dcr_proxy.py

fix(auth): address PR #758 round-2 review

2026-05-02 21:56:08 +02:00

test_deck_server.py

fix(deck): address PR #759 round-3 review feedback

2026-05-03 01:09:54 +02:00

test_document_chunker.py

fix: Add async/await, PDF metadata, and type safety fixes

2025-11-20 02:37:07 +01:00

test_document_processor_config.py

feat: implement dynaconf configuration management (ADR-024 phases 1-3)

2026-04-07 09:22:19 +02:00

test_elicitation.py

fix(auth): address PR #757 round-2 review feedback

2026-05-02 16:33:43 +02:00

test_hybrid_auth_setup.py

fix(mcp): Move all imports to the top of modules

2025-12-26 10:05:27 -06:00

test_id_token_verification.py

fix(auth): address PR #758 round-4 review

2026-05-03 00:57:12 +02:00

test_instrument_tool.py

fix(test): fix 17 pre-existing unit test failures and add astrolabe CI build

2026-02-27 21:53:06 +01:00

test_logging_filter.py

chore: Remove /health and /metrics endpoints from logging

2025-11-10 02:07:45 +01:00

test_login_flow.py

fix: address PR review — XSS escape, asyncio→anyio, URL rewrite dedup

2026-03-30 08:51:41 +02:00

test_management_app_password_endpoints.py

fix(test): fix 17 pre-existing unit test failures and add astrolabe CI build

2026-02-27 21:53:06 +01:00

test_management_apps_endpoint.py

fix(webhooks): use HTTP 428 instead of 412 for unprovisioned users

2026-05-04 00:15:55 +02:00

test_management_chunk_context_endpoint.py

fix(chunk-context): address PR #767 review — doc_type filter parity + tests

2026-05-08 20:50:27 +02:00

test_management_pdf_preview_endpoint.py

fix(api): use stored app password for chunk-context and pdf-preview

2026-04-22 19:50:13 +02:00

test_management_status_endpoint.py

refactor: remove RFC 8693 token exchange and Keycloak OAuth implementation

2026-04-03 00:22:20 +02:00

test_nutrition_model.py

address review: exclude bool from coercion, parameterize tests over all fields

2026-04-14 23:02:56 +00:00

test_oauth_callback_session_cleanup.py

fix(auth): address PR #758 round-6 medium/low review

2026-05-03 13:03:49 +02:00

test_oauth_logout.py

fix(auth): address PR #758 round-7 medium/minor review

2026-05-03 14:21:12 +02:00

test_oauth_tools_signatures.py

fix(auth): harden OAuth/session for hosted multi-tenant deployment (#626)

2026-05-02 17:03:57 +02:00

test_offline_access_detection.py

fix: conditionally include offline_access based on IdP discovery

2026-04-07 23:48:49 +02:00

test_oidc_discovery.py

fix(auth): address PR #758 round-2 review

2026-05-02 21:56:08 +02:00

test_origin_normalise.py

fix(auth): address PR #758 round-3 final review

2026-05-02 23:14:07 +02:00

test_progress_notification.py

feat: Add text processing background worker for telling client about progress

2025-10-25 19:52:45 +02:00

test_provision_routes.py

fix: require bearer token on provision endpoints (open redirect mitigation)

2026-03-31 17:09:37 +02:00

test_response_models.py

fix(models): coerce Contact.birthday + relax Table.owner_display_name

2026-04-26 17:14:08 +02:00

test_safe_next_url.py

fix(auth): address PR #758 review — XSS, CSRF, open redirect, JWKS cache

2026-05-02 18:26:39 +02:00

test_scope_authorization_stored.py

fix(auth): invalidate scope cache on web/REST provisioning paths

2026-05-02 16:59:53 +02:00

test_scope_decorator.py

refactor: change OAuth scope separator from colon to dot for IDP compatibility

2026-04-07 10:07:02 +02:00

test_scope_prefix.py

fix: address second round of PR review for scope prefix

2026-04-07 16:58:29 +02:00

test_ssl_config.py

feat: implement dynaconf configuration management (ADR-024 phases 1-3)

2026-04-07 09:22:19 +02:00

test_stdio.py

fix: address second round of review feedback

2026-04-07 23:26:46 +02:00

test_tag_exclusion.py

fix(webdav): address PR #764 review round 4

2026-05-06 20:24:11 +02:00

test_token_broker.py

fix(auth): harden OAuth/session for hosted multi-tenant deployment (#626)

2026-05-02 17:03:57 +02:00

test_token_utils_user_id.py

fix(auth): fail closed on missing sub claim, delete Flow 2 callback session

2026-05-02 19:46:36 +02:00

test_unified_verifier.py

feat(auth): drop test-client defaults, add ALLOWED_MGMT_CLIENT allowlist

2026-04-30 01:20:21 +02:00

test_viz_routes_chunk_context.py

fix(chunk-context): address PR #767 review — doc_type filter parity + tests

2026-05-08 20:50:27 +02:00

test_webdav_tools_exclusion.py

fix(webdav): address PR #764 review round 4

2026-05-06 20:24:11 +02:00

test_webhook_endpoint.py

fix(webhooks): escape HTML in error responses, compare bearer as bytes

2026-04-30 14:17:45 +02:00

test_webhook_parser.py

fix(webhooks): authenticate deliveries via WEBHOOK_SECRET; review nits

2026-04-30 03:50:28 +02:00

test_webhook_presets.py

feat: add webhook management UI and BeforeNodeDeletedEvent support

2025-11-11 20:35:08 +01:00

test_webhook_routes_register.py

refactor(webhooks): address PR review on auth-pass

2026-04-30 04:02:26 +02:00

test_webhook_routes_xss.py

fix(webhooks): escape HTML in error responses, compare bearer as bytes

2026-04-30 14:17:45 +02:00

test_webhook_storage.py

feat(ollama): Pull model on startup if not available in ollama

2025-11-12 00:37:26 +01:00

test_webhook_uri.py

refactor(webhooks): bound queue waits, route URLs through dynaconf

2026-04-30 04:17:00 +02:00

test_webhooks_api_auth.py

fix(webhooks): use HTTP 428 instead of 412 for unprovisioned users

2026-05-04 00:15:55 +02:00