Changelog
- f728c42 Merge pull request #414 from Infisical/bernie/pam-509-add-native-protocol-support-for-clickhouse-pam
- a6554f7 Merge pull request #413 from Infisical/ak-new-commands
- af300fa chore: pick up the depth-based nesting bound
- 830482f refactor(clickhouse): name the memory budget and idle timer plainly
- a29cd07 chore: pick up the enum label fix in the nesting bound
- e468674 fix(clickhouse): refuse a column type too deeply nested to infer
- f072b27 fix(clickhouse): reserve only for a byte that is really there
- 7341cfe fix(clickhouse): reserve before a byte leaves the reader
- 32a7d9a fix(clickhouse): give a charge back before the raw relay starts
- 54b779d fix(clickhouse): charge a tap before it grows, not after
- 40df24b test(clickhouse): follow the renamed refusal outcome
- e01a506 fix(clickhouse): record a refusal the gateway made itself
- 61613df fix(clickhouse): charge the bytes a tap is holding
- d64e0a0 fix(clickhouse): bound the protocol sniff on a relayed session
- f67e1d3 fix(clickhouse): bound the server direction and stop holding bytes twice
- d30d8c3 fix(clickhouse): ignore a stall guard firing its packet already left
- 9c40100 fix(clickhouse): cut off a stalled packet without the transport
- 4f7090c fix(clickhouse): charge a packet's memory as it arrives
- 2ab3d0a fix(clickhouse): bound a session rather than reserving a gateway's share
- 458ac28 chore: pick up the ch-go string batch allocation fix
- 2baad19 fix(e2e): point the test module at the patched ch-go too
- f456c54 fix(clickhouse): bound the handshake and refuse a redirected probe
- 8718528 fix(clickhouse): bound what a native session may allocate
- 455038b remove projects
- 11e2b11 address veria
- 103040e add hint for profile binding after non interactive init
- 227af4f suggest editing workspaceId when init is already linked
- 5876551 fix endpoint for project creation
- b57242a remove force flag and reformat
- 65724ad remove json flag form org and projects
- 599886d chore(clickhouse): explain the bounded decoder and fix a truncated comment
- f33020f test(clickhouse): restore the session-level oversized block check
- fd88e90 fix(clickhouse): enforce data block limits inside the decoder
- 851b6e9 chore(clickhouse): trim comments to one line
- 4e3c369 fix(clickhouse): bound the data block and stop losing outcomes on a panic
- c3d89e1 fix(clickhouse): bound the whole packet and close the session on both races
- 650ec02 test(clickhouse): drop the e2e test until the backend is on main
- b0f0a5b fix(clickhouse): wait for the e2e database before seeding it
- b0e19a6 fix(clickhouse): bound every declared length in a native packet
- 5adc23b fix(clickhouse): check the executable SQL against the blocking policy
- 2162877 test(clickhouse): move live-server tests to the e2e suite
- 4c44bb3 fix(clickhouse): harden the native handshake and probe classification
- 5340855 remove unnecessary import command
- b43bb35 fix(clickhouse): refuse http clearly on a native-only account
- f978cb9 refactor(clickhouse): drop the HTTP-to-native bridge
- 7f838fa chore(clickhouse): trim comments
- 45f20f5 feat(pam): clickhouse native protocol
- 6d3155d once again
- f057207 address even more comments
- de5bab1 address greptile again
- 330095c address review comments
- e2c9c96 feat(cli): add bootstrap verbs for AI-agent quickstart
- f3ad484 fix(cli/login): make browser flow subprocess-safe