PR Custody

ComposioHQ/platform

privatemaster222 open

Open pull requests

#10516 feat(apollo): audit-log series, part 3 — Tier-2 pipeline + coverage middleware

@CryogenicPlanet

+800 −256hDiff

#10515 feat(apollo): audit-log series, part 2 — auditedTransaction (branded AuditedTx)

@CryogenicPlanet

+466 −1196hDiff

#10517 feat(apollo): audit-log series, part 4 — read API (internal-dashboard)

@CryogenicPlanet

+1299 −256hDiff

#10689 feat(apollo): example of cleaner Effect usage in internal-dashboard routes draft

@sudodaksh

+886 −4496hDiff

#10687 feat(stripe-projects): add dashboard deep links draft

@KJ-11

+275 −06hDiff

#10686 feat(stripe-projects): add resource provisioning endpoints draft

@KJ-11

+1287 −06hDiff

#10685 feat(stripe-projects): add provisioning account endpoints draft

@KJ-11

+1068 −06hDiff

#10684 feat(stripe-projects): add provider backend foundation draft

@KJ-11

+1851 −36hDiff

#10688 feat(ci): publish db/lib/internal-dashboard to @composio-dashboard npmsarahsimionescu · author

@sarahsimionescu

+161 −1156hDiff

#10674 feat(apollo): internal-dashboard routes for trigger manage + user api-key revoke

@sarahsimionescu

+803 −08hDiff

#10683 fix(apollo): surface provider OAuth error + searched client_id in support-heavy error messages draft

@sohambasu963

+27 −49hDiff

#10681 [cherry-pick] feat(auth): accept dashboard WorkOS access token on v3/v3.1 routes (#10607)

@shamsharoon

+326 −010hDiff

#10680 fix(apollo): trim edge whitespace on auth-config credential values draft

@sohambasu963

+64 −110hDiff

#10679 fix(apollo): accept project API keys via Authorization: Bearer on MCP routes draft

@sohambasu963

+141 −110hDiff

#10677 master to prod

@anshugarg15

+7470 −491010hDiff

#10663 prod to master

@anshugarg15

+185 −1618hDiff

#10598 feat(apollo): add revoke-job endpoints (dashboard + platform surfaces) (3/4)

@sarthak

+1403 −11dDiff

#10361 chore(deps): bump dayjs from 1.11.13 to 1.11.21

@dependabot[bot]

+790 −6651dDiff

#10644 feat(apollo): expose decrypted trigger log detail fields for the dashboard

@sarahsimionescu

+84 −21dDiff

#10673 feat(db): export ClickHouse schema via @composiohq/db/clickhouse subpath

@sarahsimionescu

+34 −31dDiff

#10603 Reland feat(apollo): audit-log series, part 1 — Tier-1 audited dbUtils

@CryogenicPlanet

+3054 −10741dDiff

#10672 feat(apollo): colocate project API key permissions on routes draft

@shamsharoon

+1582 −4441dDiff

#10639 feat(apollo): scoped API key for custom auth config token fetch draft

@shamsharoon

+234 −121dDiff

#10671 test: catalog coverage for PROJECT_API_KEY routes draft

@shamsharoon

+100 −01dDiff

#10641 test(e2e): playwright suite for scoped project API keys

@shamsharoon

+543 −11dDiff

#10670 fix(apollo): allow any scoped key on identity/context routes draft

@shamsharoon

+64 −01dDiff

#10669 fix(db,lib): resolve @composiohq/db + @composiohq/lib as CJS-only (incident #47 root cause)

@kaavee315

+8 −81dDiff

#10666 fix(apollo): backmerge /v3/mcp/:serverId config-level redirect to master

@palash-c

+8 −01dDiff

#10652 feat(apollo): restore self-hosted magic link login

@utkarsh-dixit

+2894 −161dDiff

#10660 [WIP] Add OIDC project API auth draft

@acsrujan

+1431 −111dDiff

#10588 Version auth schemes for tool router

@venkat82

+3098 −4612dDiff

#10608 feat(tool-router): DELETE /api/v3.1/tool_router/session/{session_id} with E2B sandbox teardown

@abir-taheer

+1276 −342dDiff

#10645 feat(credential-grammar): add request value grammar package draft

@2nishantg

+2509 −02dDiff

#10646 feat(credential-rendering): add template compiler + Apollo credential renderer draft

@2nishantg

+3807 −1052dDiff

#10647 feat(credential-rendering): wire shadow parity mode behind LD flag draft

@2nishantg

+1606 −742dDiff

#10648 feat(client-ip): LaunchDarkly kill switch for trusted-proxy client IP (#10478 follow-up)

@kaavee315

+222 −62dDiff

#10339 chore: remove Better Auth (WorkOS migration cleanup)

@lingala-composio

+327 −33092dDiff

#10571 chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

@dependabot[bot]

+1083 −9262dDiff

#10363 chore(deps): bump @e2b/code-interpreter from 2.4.2 to 2.6.0

@dependabot[bot]

+835 −7032dDiff

#10364 chore(deps): bump uuid from 11.1.1 to 14.0.0

@dependabot[bot]

+793 −6622dDiff

#10362 chore(deps): bump resend from 3.2.0 to 6.12.4

@dependabot[bot]

+880 −6822dDiff

#10626 fix(dashboard): restrict JWT issuer allowlist

@kaavee315

+78 −412dDiff

#10621 fix: validate enhanced link permission writes

@kaavee315

+370 −652dDiff

#10629 fix(apollo): bind playground keys to session users

@kaavee315

+141 −22dDiff

#10624 fix(auth-configs): enforce RBAC write checks for auth-config mutations

@kaavee315

+131 −02dDiff

#10597 feat(apollo): add batch-revoke jobs shared lib (2/4)

@sarthak

+936 −10602dDiff

#10599 feat(apollo): add opt-in revoke-on-delete cascade to DELETE endpoints (4/4)

@sarthak

+419 −392dDiff

#10581 feat(thermos): batch-revoke enqueue/poll endpoints (3/3)

@sarthak

+943 −1192dDiff

#10580 feat(thermos): RevokeBatchWorkflow + activities (2/3)

@sarthak

+1140 −292dDiff

#10636 fix(thermos): rename revoke_job_item columns and guard Record* on missing rows

@sarthak

+375 −3512dDiff

#10611 chore(thermos): add toolkit registry SSM build runbook

@acsrujan

+431 −82dDiff

#10596 feat(apollo): add jobs ownership table for async revoke jobs (1/4)

@sarthak

+476 −02dDiff

#10622 Resolve templated get_current_user_endpoint during auth refresh

@utkarsh-dixit

+49 −13dDiff

#10630 fix(apollo): bind playground keys to member identity

@kaavee315

+131 −673dDiff

#10014 chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.97.3 to 1.103.3 in /apps/thermos

@dependabot[bot]

+33 −333dDiff

#10628 fix(dashboard): restrict JWT issuer allowlist

@kaavee315

+78 −413dDiff

#10623 fix: preserve legacy API key IP allowlists

@kaavee315

+19 −33dDiff

#10016 chore(deps): bump go.temporal.io/server from 1.30.4 to 1.31.1 in /apps/thermos

@dependabot[bot]

+64 −613dDiff

#10017 chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.81.1 in /apps/thermos

@dependabot[bot]

+14 −143dDiff

#10018 chore(deps): bump github.com/mattn/go-sqlite3 from 1.14.18 to 1.14.45 in /apps/thermos

@dependabot[bot]

+3 −33dDiff

#10617 fix(apollo): validate forwarded client IP headers

@kaavee315

+422 −153dDiff

#10612 fix: build toolkit registry dsn from env parts

@utkarsh-dixit

+0 −03dDiff

#10521 test: add 246 verified table-driven unit tests for pure-logic modules

@kaavee315

+60275 −93dDiff

#10535 fix: reject prototype keys in metering guards + correct MCP duplicate count

@kaavee315

+13 −93dDiff

#10605 chore(deps): bump the npm_and_yarn group across 3 directories with 4 updates

@dependabot[bot]

+349 −3043dDiff

#10576 chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

@dependabot[bot]

+5 −53dDiff

#10601 test: add scoped project API key e2e coverage draft

@shamsharoon

+488 −03dDiff

#10589 fix(apollo): stop persisting S2S OAuth2 secrets in connection data [PLEN-2552]

@anshugarg15

+421 −833dDiff

#10593 fix(apollo): bypass proxy org allowlist for user API keys in executeProxy

@CryogenicPlanet

+9 −33dDiff

#10563 test: cover alias-aware ToolRouter search filtering

@shreysingla11

+270 −04dDiff

#10585 Revert "fix(security): patch CVEs via dependency overrides and base-image apt upgrade"

@prachi005

+1766 −19724dDiff

#10479 feat: drop project API key allowed_ips column

@shamsharoon

+241 −24dDiff

#10019 chore(deps): bump github.com/launchdarkly/go-server-sdk/v7 from 7.10.1 to 7.15.2 in /apps/thermos

@dependabot[bot]

+22 −484dDiff

#10553 Remove MCP toolkit sync for on prema and add a go job to clean up exi…

@prachi005

+303 −54dDiff

#10569 Revive encryption key rotation runbooks and scripts

@rohanprabhu

+2193 −14dDiff

#10422 [codex] Add toolkit retrieval filters and search race safeguards

@dhawal1

+683 −1584dDiff

#10567 feat(mcp-sync): push-based MCP toolkit sync via Apollo (PLEN-2541)

@anshugarg15

+672 −174dDiff

#10551 [codex] support scope fields in OAuth URLs

@samvitjatia

+70 −44dDiff

#10555 Support AWS OIDC credentials with static fallback

@acsrujan

+1390 −12845dDiff

#10520 Surface ToolRouter slug warnings

@shreysingla11

+428 −1055dDiff

#10519 Use Thermos slug facts in ToolRouter

@shreysingla11

+1075 −2145dDiff

#10518 Add Thermos tool slug resolver

@shreysingla11

+553 −105dDiff

#10498 feat: structured error tags and latency logging for tool search

@abir-taheer

+247 −25dDiff

#10529 fix(apollo): parse invite-code metadata at read boundary + switch default draft

@kaavee315

+247 −25dDiff

#10542 fix(apollo): ApiKey deletes set deleted=true so soft-delete middleware filters them draft

@kaavee315

+395 −35dDiff

#10543 refactor(apollo): split findOrg.byNanoId to remove conditional-include double cast draft

@kaavee315

+163 −135dDiff

#10527 fix(apollo): replace z.record(z.any()) with z.unknown() at tool argument boundaries draft

@kaavee315

+131 −45dDiff

#10546 fix(apollo): ToolLogService getLogs/getSingleLog return Result instead of throwing draft

@kaavee315

+601 −2105dDiff

#10540 test(apollo): assert every v3.1 route module is registered in openapi.json.ts draft

@kaavee315

+230 −05dDiff

#10544 fix(apollo): validate decrypted connected-account payload with zod draft

@kaavee315

+82 −05dDiff

#10539 refactor(apollo): move wordId util to common/utils to break import cycle draft

@kaavee315

+87 −455dDiff

#10545 refactor(apollo): extract mapSessionRow() shared by create/get ToolRouterSession draft

@kaavee315

+393 −1605dDiff

#10538 feat(apollo): add tool.execute OTel span and enable metrics by default draft

@kaavee315

+237 −25dDiff

#10537 perf(apollo): memoize getComposioTools to cut N LaunchDarkly round-trips per batch draft

@kaavee315

+156 −25dDiff

#10532 fix(apollo): derive FileInfo from RequestFileInfoSchema via z.infer draft

@kaavee315

+78 −155dDiff

#10531 fix(apollo): require ORG_API_KEY_ENCRYPTION_KEY, drop dummy-key default draft

@kaavee315

+7 −185dDiff

#10528 refactor(apollo): dedupe isRecord, import from common/utils/type-utils draft

@kaavee315

+38 −45dDiff

#10536 fix(apollo): guard tool_type with toExecutableType instead of blind cast draft

@kaavee315

+67 −115dDiff

#10534 fix(apollo): filter Thermos authConfigMode through AUTH_MODES_ENUM guard draft

@kaavee315

+62 −55dDiff

#10541 fix(apollo): meta-tool failures return Err (HTTP error) instead of 200 draft

@kaavee315

+234 −326dDiff

#10522 fix(apollo): validate McpServers JSON columns as string[] before use draft

@kaavee315

+231 −36dDiff

#10530 fix(apollo): validate ClickHouse trigger-log rows with a schema draft

@kaavee315

+236 −46dDiff

#10523 fix(apollo): assert DEFAULT_LIMITS satisfies Record<Plan, RateLimitConfig> draft

@kaavee315

+37 −16dDiff

#10533 fix(apollo): add string-record overload to visitObjectAndTemplate, drop forced casts draft

@kaavee315

+137 −146dDiff

#10525 fix(apollo): parse connection status enum before switch dispatch draft

@kaavee315

+115 −16dDiff

#10524 fix(apollo): validate parsed recipe error with zod instead of JSON.parse cast draft

@kaavee315

+169 −66dDiff

#10526 fix(apollo): use satisfies for TrackMeteredUsageInput to enforce dimensions draft

@kaavee315

+3 −36dDiff

#10487 Handle ToolRouter aliases and historical tool slugs

@shreysingla11

+689 −521wDiff

#10504 fix(SEC-446): disable Mercury recipes behind LD kill-switch

@anshugarg15

+56 −11wDiff

#10466 ci(proxy-deploy): move external/backend-proxy deploys to Doppler OIDC (production)

@anshugarg15

+101 −171wDiff

#10341 feat(connected-accounts): data split — bytea volatile column + reader chokepoint + planner

@2nishantg

+2504 −4251wDiff

#10459 Version auth schemes for tool router

@venkat82

+2827 −4551wDiff

#10437 [codex] Add enhanced link permission save endpoint draft

@shamsharoon

+828 −181wDiff

#10439 fix(seed): pin Linear proxy base URL

@kaavee315

+1 −11wDiff

#10401 fix(apollo): enforce shared-account ACL checks independent of 2FA entity mismatch flag

@kaavee315

+24 −41wDiff

#10404 fix(apollo): bound Metronome webhook body reads

@kaavee315

+176 −21wDiff

#10429 ci: inline Temporal startup in PR workflows

@kaavee315

+90 −451wDiff

#10413 fix(thermos): exclude private toolkit groups from onprem dump

@kaavee315

+30 −491wDiff

#10417 Fix webhook signature key template validation

@kaavee315

+215 −551wDiff

#10414 fix: remove live GitHub token fixture

@kaavee315

+2 −21wDiff

#10415 Gate latest promotion of self-hosted images to production ref

@kaavee315

+1 −11wDiff

#10409 fix: cap webhook bulk event batches

@kaavee315

+117 −51wDiff

#10410 fix(ci): restrict thermos service isolation secrets

@kaavee315

+2 −71wDiff

#10408 fix(auth_config): select minimum OAuth scopes for tools

@kaavee315

+19 −331wDiff

#10406 fix(apollo): honor org role for clanker claims

@kaavee315

+143 −11wDiff

#10403 fix(apollo): skip S2S_OAUTH2 refresh for REVOKED connections by default

@kaavee315

+18 −01wDiff

#10398 fix(apollo): prevent webhook setup downgrade to v1 when trigger_spec exists

@kaavee315

+5 −71wDiff

#10400 fix(apollo): avoid exposing shared credential defaults in link fields

@kaavee315

+12 −181wDiff

#10397 fix(auth): trust only vercel edge client ip header for allowlists

@kaavee315

+19 −1241wDiff

#10396 fix(apollo): block slackbot workspace-wide revoke in public flow

@kaavee315

+24 −241wDiff

#10394 fix: prevent CLI session code from leaking API keys

@kaavee315

+58 −341wDiff

#10384 feat(thermos): load boot secrets from AWS Secrets Manager

@acsrujan

+68 −71wDiff

#10358 fix(proxy): dedupe binary upload Content-Type header

@kaavee315

+130 −162wDiff

#10353 feat(auth): auto-disable API-key auth when JWT auth mode is enabled

@kaavee315

+81 −82wDiff

#10348 feat(apollo): support CIDR blocks in API key IP allowlist draft

@shamsharoon

+151 −102wDiff

#10347 feat: extract IP allowlist into join table for immutable project API keys

@shamsharoon

+398 −162wDiff

#10332 feat(internal-dashboard): resource-level tools + auth-configs + tool execute

@CryogenicPlanet

+948 −02wDiff

#10297 fix(apollo): redact proxy secrets and encrypt errorRequest in tool logs

@sudodaksh

+191 −132wDiff

#10311 ci: pin actions to commit SHAs in unit-test workflows

@anshugarg15

+28 −192wDiff

#10310 [codex] Rename session-only tool error to Composio MCP draft

@wjayesh

+1 −12wDiff

#10298 fix(apollo): bind user_id on consumer-project user-API-key routes

@sudodaksh

+108 −02wDiff

#10295 fix(apollo): validate clanker user_id at tool-router session create

@sudodaksh

+401 −12wDiff

#10290 security: enforce MCP API key on all requests, disable SSE transport (production hotfix, cherry-pick of #10288)

@kaavee315

+5 −222wDiff

#10286 feat(apollo): dashboard-authed payments endpoints (checkout + billing portal)

@anshugarg15

+360 −02wDiff

#10275 fix(cli): return entity_id in get-session for CLI ↔ Dashboard sync

@shamsharoon

+28 −32wDiff

#10084 feat(metering): emit tool_calls usage event from proxy execute [PLEN-2509]

@shamsharoon

+214 −42wDiff

#10066 feat(logs): add http_status_code filter to tool execution logs [PLEN-2502]

@shamsharoon

+249 −172wDiff

#9861 feat(metering): meter trigger deliveries + connected accounts (PLEN-1843)

@shamsharoon

+940 −432wDiff

#10111 chore(metering): move METRONOME_ENABLED_ENTITIES + METRONOME_BILLING_GO_LIVE_DATE to LaunchDarkly

@shamsharoon

+85 −862wDiff

#10188 chore: reorganize GitHub Actions into subdirectories with shared composite action draft

@acsrujan

+122 −3282wDiff

#10250 fix(apollo): disable http auto-instrumentation to prevent double-end span errors

@acsrujan

+4 −02wDiff

#10244 feat(infra): per-service IAM-only RDS proxies

@acsrujan

+635 −02wDiff

#10223 feat(ci): fall back to RDS IAM auth when ADMIN_DATABASE_URL is unset

@acsrujan

+61 −112wDiff

#10242 feat: IAM-based auth for RDS Proxy and ElastiCache with env var fallback

@acsrujan

+364 −802wDiff

#10236 fix(dashboard): remove old DELETE api-key endpoint

@abir-taheer

+0 −1382wDiff

#10224 fix(security): strip Composio OTP codes from Gmail responses

@abir-taheer

+18 −02wDiff

#10211 fix(security): harden dashboard JWT issuer validation against SSRF

@abir-taheer

+45 −212wDiff

#10208 fix(oxlint): mark apollo oxlint-rules directory as ESM

@2nishantg

+1 −02wDiff

#10201 feat(auth): remove Better Auth, add WorkOS JWT authentication

@abir-taheer

+377 −24752wDiff

#10194 chore(backend-proxy): remove admin logs endpoint

@CryogenicPlanet

+0 −2212wDiff

#10196 [codex] Disable magic link authentication

@samvitjatia

+124 −14102wDiff

#10192 fix: critical auth security — CORS, redirect URI, account linking

@sohamganatra

+24 −182wDiff

#10182 fix(api-keys): hide internal composio service keys from customers

@acsrujan

+179 −22wDiff

#10157 feat(db): lock creation of new project_api_keys

@CryogenicPlanet

+160 −03wDiff

#10155 fix(api-keys): disable all API key creation with 400 response

@abir-taheer

+60 −43wDiff

#10104 feat(apollo): inject webhook_endpoint authz_fields into mercury setup() auth

@anshugarg15

+56 −33wDiff

#10136 fix(external-proxy): fail deploy when Doppler secret sync fails instead of uploading empty secrets

@anshugarg15

+19 −23wDiff

#10094 feat(triggers/ingress): array indexing in field_resolver path engine [PLEN-2452]

@anshugarg15

+281 −563wDiff

#10119 feat(db): progressive double encryption for connected account credentials

@abir-taheer

+1025 −273wDiff

#10052 feat(apollo): accept URLs for FileUploadable tool parameters

@abir-taheer

+1330 −233wDiff

#10113 Security Patching - HIGH - 24 CVEs across 8 dependencies

@zen-agent

+818 −7723wDiff

#10108 feat: add hosted auth white-label theme config

@venkat82

+382 −73wDiff

#10036 [codex] Default custom OAuth redirects to v3.1

@sjd9021

+327 −283wDiff

#10102 fix: pass whitelabel project logo to OAuth redirect page

@zen-agent

+24 −23wDiff

#10101 fix(security): apt-get upgrade in self-host runtime stages

@zen-agent

+7 −03wDiff

#10078 fix(apollo): guard plan reranker env provider

@acsrujan

+73 −33wDiff

#10098 TEST: Socket.dev blocking verification on hermes - DO NOT MERGE

@zen-agent

+4 −13wDiff

#10095 feat(apollo): expose auth_config_override on COMPOSIO_MANAGE_CONNECTIONS

@zen-agent

+359 −23wDiff

#10090 chore(db): disable TOAST compression on connected_accounts.dataTypedEncrypted

@zen-agent

+236 −03wDiff

#10085 docs(db): prod schema quick-ref + ClickHouse materialization caveat

@zen-agent

+66 −23wDiff

#10086 fix(apollo): classify proxy_execute caller/upstream errors correctly (400/502 instead of 500)

@zen-agent

+142 −153wDiff

#10083 fix(thermos): demote LaunchDarkly "flag not found" errors to Warn

@zen-agent

+98 −323wDiff

#10073 feat(thermos): add BatchPoller polling-trigger workflow

@sarthak

+4475 −03wDiff

#10074 fix(apollo): substitute {{subdomain}} in currentUser endpoint URL before refresh check

@zen-agent

+202 −13wDiff

#10059 feat(apollo): drop-empty auth params + seed schema-default fields in OAuth templating (PLEN-2153)

@anshugarg15

+403 −243wDiff

#10067 chore(apollo): align toolSearchRerankerPromptV2 code default with prod LD

@zen-agent

+5 −23wDiff

#10064 docs(thermos/ent): warn about entsql.DefaultExpr for JSON columns

@zen-agent

+8 −03wDiff

#10061 feat(toolkits): add aliases field for search/discovery

@zen-agent

+240 −193wDiff

#10060 perf(tool-router): skip user-info probes for endpoints with unresolved templates

@zen-agent

+279 −03wDiff

#10053 chore: downgrade invalid connection data payload warn to debug

@zen-agent

+1 −13wDiff

#9982 feat(thermos): bootstrap env from AWS Secrets Manager at startup

@zen-agent

+396 −223wDiff

#9927 docs: update CLAUDE.md for hermes

@zen-agent

+141 −3633wDiff

#10045 docs(thermos): refresh CLAUDE.md set for pipeline metrics, Temporal Tally, polling auto-disable, version=latest

@zen-agent

+81 −103wDiff

#9987 feat(apollo): centralized AI provider factory and slot registry

@abir-taheer

+265 −93wDiff

#9988 feat(apollo): migrate plan search reranker to AI slot registry

@abir-taheer

+192 −5303wDiff

#9961 refactor(mcp): replace mcp-handler with stateless SDK handler + Redis bridge

@abir-taheer

+783 −3133wDiff

#10044 chore(apollo): explicit txn isolation on 4 Apollo transactions

@zen-agent

+332 −1273wDiff

#10029 perf(search): share Thermos tool-details between checkEnabled and fetchToolSchemas

@zen-agent

+522 −144wDiff

#10012 fix(triggers): downgrade 4xx trigger errors from error to warn log level

@zen-agent

+5 −34wDiff

#9596 feat(apollo): tracking overhaul — Redis attribution, multi-platform CAPI dispatcher

@qdonohue

+1852 −804wDiff

#10010 fix(sandbox): accept timeout kwarg in proxy_execute helpers

@zen-agent

+12 −14wDiff

#9999 fix(apollo): honor customer callback_url in Pipedrive OAuth callback (INT-1991)

@surajmarkup

+38 −34wDiff

#10000 fix(sandbox): accept timeout kwarg in proxy_execute helpers

@zen-agent

+12 −34wDiff

#9993 thermos: log LD unknown-flag errors at Warn, not Error

@zen-agent

+102 −321moDiff

#9990 feat(logger): capture x-cli-session-id on tool execution logs

@CryogenicPlanet

+33 −11moDiff

#9986 feat(db): lint Liquibase migrations for missing PRIMARY KEY

@zen-agent

+788 −11moDiff

#9985 fix(apollo): remove redundant logger.error in trigger-instance manage routes

@zen-agent

+76 −231moDiff

#9983 feat(apollo): track lastUsedAt on project API keys (T-10454)

@zen-agent

+323 −71moDiff

#9886 chore(security): add SECURITY.md + auto-PR security reviewer

@zen-agent

+596 −01moDiff

#9976 chore(thermos): align mcpToolkitSyncScheduleRefreshInterval default with prod LD

@zen-agent

+6 −21moDiff

#9974 docs: document entity_id/userId tangle in connected_accounts + Liquibase camelCase rule

@zen-agent

+72 −01moDiff

#9965 feat(observability): forward project_id to Mercury so Datadog @project_id surfaces Mercury logs

@zen-agent

+110 −11moDiff

#9966 perf(tool-router): skip 2 DB lookups + parallelize when resolving user-info endpoint

@zen-agent

+214 −291moDiff

#9956 feat(toolrouter): usage-based auto-preload (preload.auto_preload_count)

@zen-agent

+3010 −381moDiff

#9958 chore(tool_router): mark /execute_meta as deprecated

@zen-agent

+14 −51moDiff

#9957 feat(apollo): stamp parent_tool_slug + parent_log_id on child tool logs

@zen-agent

+358 −281moDiff

#9963 fix(apollo): drop redundant error logs in trigger manage handlers

@zen-agent

+0 −231moDiff

#9953 chore: propagate up error from redis parsing

@CryogenicPlanet

+102 −191moDiff

#9946 feat(auth-config): conditional authorization_params for OAuth URL hints (PLEN-2155) draft

@jkomyno

+452 −61moDiff

#9943 fix(thermos): raise polling cleaner per-call DB timeout to 120s

@zen-agent

+5 −11moDiff

#9115 feat: add regex-based validation for connection field values

@zen-agent

+329 −02moDiff

#9020 fix(apollo): suppress metering delivery for self-hosted

@haxzie

+4732 −432moDiff