Commits

Commits on Jul 14, 2026

Merge pull request #17 from iblai/fix/api-hardening
null-crafter
authored
ca861e6
fix: bound SyncStatus query, add ONTOLOGY_ADMIN_PLATFORMS allowlist, make service_type optional
null-crafter
committed
485a4e4

Commits on Jul 10, 2026

Merge pull request #16 from iblai/feat/drf-api-routes
null-crafter
authored
08b31e8
feat: add uvicorn
null-crafter
committed
be78cd2
feat: finish sidebar
null-crafter
committed
49e7d43
feat: add print_db_url command
null-crafter
committed
2efd902
feat: add seed_example_data command
null-crafter
committed
fdf1feb
feat: add logging & renovate fe
null-crafter
committed
69cecc8
feat: add manage command
null-crafter
committed
f6dfb00
feat: add serve command
null-crafter
committed
f0020cb
chore: rename pacakge
null-crafter
committed
554be78
chore: format code
null-crafter
committed
8903dfb

Commits on Jul 9, 2026

feat: implement real api
null-crafter
committed
da2c80a
Merge branch 'main' of https://github.com/iblai/ontology
null-crafter
committed
6348c39
feat: update ui
null-crafter
committed
9eb4de5
Merge pull request #15 from iblai/fix/2147-jwt-replay-jti
gipsbrian
authored
cc612c5
fix(identity): detect JWT replay via jti binding (#2147)

gipsbrian
and
claude
committed
ae1ac00
Merge pull request #14 from iblai/fix/2146-chromadb-unauthenticated
gipsbrian
authored
ae980be
fix(vector): require token auth on ChromaDB vector store (#2146)

gipsbrian
and
claude
committed
310dad6
Merge pull request #13 from iblai/fix/2145-jwt-cleartext-security-headers
gipsbrian
authored
0689c4a

Commits on Jul 8, 2026

fix(gateway): reject cleartext Bearer tokens + set security headers (#2145)

gipsbrian
and
claude
committed
8223075
Merge pull request #11 from iblai/fix/2144-rate-limiting
gipsbrian
authored
adadba0
feat(gateway): add rate limiting to the MCP gateway (#2144)

gipsbrian
and
claude
committed
7874eb9
Merge pull request #10 from iblai/fix/2143-readmemory-symlink-traversal
gipsbrian
authored
3a746b0
fix(mcp): block symlink path traversal in read-memory (#2143)

gipsbrian
and
claude
committed
f64e4b4
Merge pull request #9 from iblai/fix/2142-url-path-injection
gipsbrian
authored
41282c9
fix(canvas,navigate): stop URL-path injection in MCP servers (#2142)

gipsbrian
and
claude
committed
bcc6264
Merge pull request #8 from iblai/fix/2141-cache-table-acl
gipsbrian
authored
32e95dd
fix(authz): enforce cache_tables ACL on cache queries (#2141)

gipsbrian
and
claude
committed
86b4326
Merge pull request #7 from iblai/fix/2140-self-service-ownership
gipsbrian
authored
5a6c071
fix(authz): self-scope subject tools for self-service roles (#2140)

gipsbrian
and
claude
committed
1db8308
Merge pull request #6 from iblai/fix/2139-ldap-injection
gipsbrian
authored
b1ac296
fix(ldap): escape LDAP filter inputs to stop injection (#2139)

gipsbrian
and
claude
committed
925fd83
Merge pull request #5 from iblai/fix/2138-role-header-privesc
gipsbrian
authored
0f6a419
fix(identity): derive role from JWT, not X-Iblai-Role header (#2138)

gipsbrian
and
claude
committed
9f3e91f