Xiangzhe c46f048ca2 fix(security): bind MCP memory tools to the authenticated caller (IDOR) ...

resolveMemoryOwnerId() let a caller-supplied `apiKeyId` win over the resolved
caller principal, so any MCP caller could read/write/delete another principal's
memories by putting a different id in the tool arguments. The resolved caller
(HTTP auth headers on SSE/Streamable HTTP, OMNIROUTE_API_KEY on stdio) now wins;
the explicit argument is only honored as a fallback when no caller can be
resolved (a bare local stdio process, already trusted).

Reported by @rafaelfiguereod-stack via GHSA-cpv3-xr7r-xf8q.

2026-08-21 14:49:30 -03:00

..

config

feat(search): first-class X Search via SuperGrok x_search (#10988)

2026-08-21 14:16:42 -03:00

executors

feat(search): first-class X Search via SuperGrok x_search (#10988)

2026-08-21 14:16:42 -03:00

handlers

feat(search): first-class X Search via SuperGrok x_search (#10988)

2026-08-21 14:16:42 -03:00

lib

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

mcp-server

fix(security): bind MCP memory tools to the authenticated caller (IDOR)

2026-08-21 14:49:30 -03:00

services

feat(search): first-class X Search via SuperGrok x_search (#10988)

2026-08-21 14:16:42 -03:00

shared

Release v3.8.46

2026-07-07 13:14:06 -03:00

transformer

fix(sse): strip corrupted request_id from upstream SSE responses (#10223) (#10666)

2026-08-20 13:21:03 -03:00

translator

fix(sse): re-run strict system hoist after format translation (#10803)

2026-08-20 23:46:03 -03:00

utils

feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909)

2026-08-21 10:28:01 -03:00

vendor/codex-chatgpt-web

fix(quality): green release/v3.8.50 base-reds round 2 (#9985) (#10131)

2026-08-12 16:09:34 -03:00

index.ts

[Part 1/3]refactor(qwen): replace legacy Qwen Code and remove OAuth provider (#7866)

2026-07-20 17:53:04 -03:00

package.json

fix(build): remove misleading open-sse/package.json facade and add workspace typecheck gate (#8781)

2026-08-07 18:07:50 -03:00

tsconfig.json

chore(sse): drop deprecated baseUrl from open-sse tsconfig for TS 7.0 (#8473)

2026-07-25 02:53:01 -03:00

types.d.ts

feat(api): add per-key prompt compression bypass (#10001)

2026-08-11 09:20:41 -03:00