3 people 7a870321c8 fix(connections): index relay publicRef lookups to avoid full-table scans ...

findConnectionByPublicRef and connectionRelaySecretResolver loaded every
tool_connections row into memory and filtered the relay publicRef in JS. Both
run on the inbound webhook path before signature verification, so the scan was
a pre-auth DoS vector that worsens as connections grow. Replace with a
GIN-indexed `config @> {relay:{publicRef}}` containment lookup limited to one
row, and add the supporting index in migration 0183.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-07-22 16:01:08 +00:00

..

adapter-utils

fix(acpx): support Windows agent spawning (#9980)

2026-07-22 10:22:29 -05:00

adapters

fix(runtime): scope PAPERCLIP_ env-binding strip to reserved keys (#9974)

2026-07-22 07:01:57 -05:00

connect-protocol

fix(connections): address relay and broker review findings

2026-07-22 16:01:08 +00:00

db

fix(connections): index relay publicRef lookups to avoid full-table scans

2026-07-22 16:01:08 +00:00

google-sheets-mcp-server

build(deps-dev): bump vitest from 4.1.8 to 4.1.10 (#9886)

2026-07-21 12:04:11 -05:00

kv-demo-mcp-server

build(deps-dev): bump vitest from 4.1.8 to 4.1.10 (#9886)

2026-07-21 12:04:11 -05:00

mcp-server

build(deps-dev): bump vitest from 4.1.8 to 4.1.10 (#9886)

2026-07-21 12:04:11 -05:00

plugins

fix(connections): address relay and broker review findings

2026-07-22 16:01:08 +00:00

shared

feat(connections): finish instance relay dispatch

2026-07-22 16:01:08 +00:00

skills-catalog

feat: add built-in summarizer and summary slots (#9713)

2026-07-17 11:03:07 -05:00

teams-catalog

build(deps-dev): bump @types/node from 22.19.11 to 22.19.21 (#7748)

2026-06-18 15:46:06 -07:00