3 people 7a870321c8 fix(connections): index relay publicRef lookups to avoid full-table scans ...

findConnectionByPublicRef and connectionRelaySecretResolver loaded every
tool_connections row into memory and filtered the relay publicRef in JS. Both
run on the inbound webhook path before signature verification, so the scan was
a pre-auth DoS vector that worsens as connections grow. Replace with a
GIN-indexed `config @> {relay:{publicRef}}` containment lookup limited to one
row, and add the supporting index in migration 0183.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-07-22 16:01:08 +00:00

..

scripts

adapter-claude-local: recover from poisoned previous_message_id 400 (detect + clearSession) (#5972)

2026-06-09 15:45:47 -07:00

src

fix(connections): index relay publicRef lookups to avoid full-table scans

2026-07-22 16:01:08 +00:00

CHANGELOG.md

chore: release v0.3.1

2026-03-12 13:09:22 -05:00

drizzle.config.ts

Expand data model with companies, approvals, costs, and heartbeats

2026-02-17 09:07:22 -06:00

package.json

build(deps-dev): bump vitest from 4.1.8 to 4.1.10 (#9886)

2026-07-21 12:04:11 -05:00

tsconfig.json

Fix root TypeScript solution config

2026-03-09 14:09:30 -05:00

vitest.config.ts

Add database package with Drizzle schema

2026-02-16 13:31:52 -06:00