All pull requests

Pull requests

• fix(governance): read paginated model configs through ScopedDB

  #8089·BearTS opened Oct 6, 2026Contributor·

  ·
  4

• fix(agent-logs): bound filter dropdowns by the DAC dimension ceiling

  #8088·BearTS opened Oct 6, 2026Contributor·

  ·
  4

• fix(dashboard): count ranking rows the caller cannot name under Other

  #8087·BearTS opened Oct 6, 2026Contributor·

  ·
  23

• docs(dac): customer-data grants only what sits under the caller's customers

  #8086·BearTS opened Oct 6, 2026Contributor·

  ·
  5

• feat: return settled batch accounting in batch results response

  #8084·sammaji opened Oct 6, 2026Member·5 of 18 tasks·

  ·
  2

• fix: vertex video retrieve uses region from the id

  #8083·TejasGhatte opened Oct 6, 2026Collaborator·6 of 18 tasks·

  ·
  4

• fix: copy keys before updating key status in memory

  #8081·cpsc opened Oct 6, 2026Contributor·

  ·
  2

• [fix]: Anthropic provider - keep client tool_use named web_search/web_fetch as function_call

  #8079·jacob-pattern opened Oct 6, 2026·6 of 18 tasks·

  ·
  1

  5

• fix(objectstore): support Cloudflare R2 object storage

  #8076·hanseo0507 opened Oct 6, 2026·10 of 18 tasks·

  ·
  25

• Security Fix: evict cached tokens on session revocation

  #8072·zeb-labs opened Oct 6, 2026·

  ·
  4

• Security Fix: sanitize MCP tool descriptions to limit prompt injection surface

  #8071·zeb-labs opened Oct 6, 2026·

  ·
  10

• Security Fix: validate host header to prevent injection via X-Forwarded-Host

  #8070·zeb-labs opened Oct 6, 2026·

  ·
  5

• Security Fix: always set Secure flag on session cookies

  #8069·zeb-labs opened Oct 6, 2026·

  ·
  7

• Security Fix: derive per-passphrase salt instead of hardcoded value

  #8068·zeb-labs opened Oct 6, 2026·

  ·
  8

• Security Fix: add per-IP rate limiting on login endpoint

  #8067·zeb-labs opened Oct 6, 2026·

  ·
  12

• Security Fix: bound io.ReadAll calls in bedrock provider to prevent OOM

  #8066·zeb-labs opened Oct 6, 2026·

  ·
  5

• Security Fix: add per-entity mutex to prevent rate-limit check-increment race

  #8065·zeb-labs opened Oct 6, 2026·

  ·
  9

• Security Fix: add SHA-256 integrity verification for npm binary downloads

  #8064·zeb-labs opened Oct 6, 2026·

  ·
  12

• Security Fix: add SHA-256 integrity verification before plugin.Open()

  #8063·zeb-labs opened Oct 6, 2026·

  ·
  7

• Security Fix: harden periodic sync HTTP clients against SSRF

  #8062·zeb-labs opened Oct 6, 2026·

  ·
  8

• docs(providers): document ignore_provider_cost option

  #8057·impoiler opened Oct 6, 2026Member·5 of 18 tasks·

  ·
  9

  

• feat(ui): add pricing tab with ignore provider cost toggle

  #8056·impoiler opened Oct 6, 2026Member·3 of 18 tasks·

  ·
  11

  

• fix(logstore): stop showing an opaque provider total as input cost

  #8055·impoiler opened Oct 6, 2026Member·4 of 18 tasks·

  ·
  8

  

• feat(logging): store bifrost cost breakdown for providers that ignore reported cost

  #8054·impoiler opened Oct 6, 2026Member·5 of 18 tasks·

  ·
  13

  

• feat(modelcatalog): price from catalog when ignore_provider_cost is on

  #8053·impoiler opened Oct 6, 2026Member·5 of 18 tasks·

  ·
  16