fix(integrations): harden paths across 20 services, repair Elastic Cloud, align declared shapes - #7133

Open

waleedlatif1 wants to merge 58 commits into

fix/integration-defect-ledger

Commits on Aug 26, 2026

fix(tools): add safeUrlPath and close the Supabase storage traversal
waleedlatif1
committed
0f378c8
fix(serper,linkedin): map real response keys, correct a consent-screen scope
waleedlatif1
committed
bbe033a
fix(langsmith,firecrawl): correct declared shapes and a false spec comment
waleedlatif1
committed
6077acb
fix(clerk,stripe,cloudflare): reject dot segments in LLM-writable path params
waleedlatif1
committed
1e484d9
fix(discord,attio): guard path params, stop silently substituting bad JSON
waleedlatif1
committed
120ffdb
fix(google,jira): reject dot segments in OAuth-scoped path params
waleedlatif1
committed
2411499
fix(elasticsearch): repair Cloud ID decoding and five declared-vs-real defects
waleedlatif1
committed
101b754
fix(qdrant,algolia,box,x,spotify): reject dot segments in LLM-writable path params
waleedlatif1
committed
cc9ff41
fix(agentmail,rootly,incidentio,hubspot): reject dot segments in path params
waleedlatif1
committed
6e8d071
fix(okta,rippling,tailscale): reject dot segments in path params
waleedlatif1
committed
dd1fc00
fix(sixtyfour,enrow,vercel,daytona): deadlines, retries, and discarded fields
waleedlatif1
committed
fbc0586
fix(github,salesforce,google_contacts): guard path params, single and multi segment
waleedlatif1
committed
83eea82
fix(tools): stop eight tools shadowing the reserved transport timeout param
waleedlatif1
committed
602db24
chore(generated): regenerate tool metadata and integration docs
waleedlatif1
committed
4415206
fix(sixtyfour,enrow,vercel): correct defects found by validation
waleedlatif1
committed
b6c790d
fix(serper,linkedin): map the /places shape, restore real search extras
waleedlatif1
committed
f94b9c1
fix(langsmith,firecrawl): reverse two changes that made things worse
waleedlatif1
committed
c5aef36
fix(elasticsearch): per-service Cloud ID ports, date math, and three declared-shape defects
waleedlatif1
committed
7661b02
test(tools): add path-safety suites for the last four services
waleedlatif1
committed
ff26be9
fix(url-path,github): stop the guards rejecting and rewriting legal values
waleedlatif1
committed
55c2c2c
fix(elasticsearch): reject URL-special characters in decoded Cloud ID parts
waleedlatif1
committed
0cbd1c8
chore(generated): regenerate metadata and docs after the validation fixes
waleedlatif1
committed
1370c43
fix(firecrawl): correct map's declared shape, a crash path, and a timeout race
waleedlatif1
committed
057ca4e
fix(apify): give the sync runs headroom, route polling through the transport
waleedlatif1
committed
94d432a
fix(elasticsearch): require a scheme on the host, restore numeric index coercion
waleedlatif1
committed
52cfcce
fix(salesforce,google_contacts): sanitize SOQL field lists, warm contact search cache
waleedlatif1
committed
efd15fe
fix(github): guard the compare refs, close the path_safety discovery blind spot
waleedlatif1
committed
e00a5e3
fix(supabase): reject fragment injection in filters, allow legal storage keys
waleedlatif1
committed
1fd3fb6
fix(attio): build the assert_record query with URLSearchParams
waleedlatif1
committed
3d3c6dc
fix(elasticsearch): register an error extractor so auth headers stay out of errors
waleedlatif1
committed
67e3cab
fix(google_drive,google_vault): guard the internal routes, cap get_content reads
waleedlatif1
committed
16ce3ec
fix(langsmith): stop claiming session_id is required for feedback
waleedlatif1
committed
8545946
fix(jira): guard the add-attachment route, reject orderBy against its enum
waleedlatif1
committed
202416a
fix(firecrawl,daytona): export the search envelope consts, correct the toolbox TSDoc
waleedlatif1
committed
e33b055

Commits on Aug 27, 2026