arc53-machine 0d42916d67 Hand the MCP SDK an authorization result with the issuer ...

mcp 2.x reads code, state and the RFC 9207 iss off the callback handler's
result; the handler still returned a (code, state) tuple, so every MCP
sign-in failed after the user approved it. The callback route now keeps the
issuer too, since servers that advertise it (Linear) refuse a sign-in
without it.

2026-09-28 23:32:21 +01:00

..

admin

Simplify Admin > Connectors

2026-09-28 21:52:18 +01:00

answer

Refuse writes on the owner's accounts from API-key callers unless allowed

2026-09-28 21:33:41 +01:00

connector

Address review: MCP token scope, API-key identity, reconnect lock, setup retries

2026-09-28 18:45:27 +01:00

devices

fix: Make ticket claim atomic.

2026-09-14 14:06:59 +01:00

events

fix: stability improvements on event loop

2026-09-14 12:52:15 +01:00

internal

feat: publish the backend to PyPI as docsgpt

2026-09-07 14:40:35 +01:00

oidc

feat(audit): split actor from subject on auth events

2026-09-22 10:18:16 +01:00

pat

Merge remote-tracking branch 'origin/main' into connectors

2026-09-28 18:07:12 +01:00

scim

feat(audit): split actor from subject on auth events

2026-09-22 10:18:16 +01:00

user

Hand the MCP SDK an authorization result with the issuer

2026-09-28 23:32:21 +01:00

v1

Discard the setup trace of a replayed /v1 request

2026-09-23 22:42:05 +01:00

__init__.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

asgi_auth.py

fix(pat): align replay scopes, keep 404/405, retire expired names, document the PAT_ENABLED switch

2026-09-20 12:12:42 +01:00

asgi_stream.py

fix: stability improvements on event loop

2026-09-14 12:52:15 +01:00

async_sse.py

fix(pat): align replay scopes, keep 404/405, retire expired names, document the PAT_ENABLED switch

2026-09-20 12:12:42 +01:00

audit.py

fix(admin): second review pass

2026-09-22 12:47:40 +01:00