mirror of
https://github.com/supermemoryai/supermemory.git
synced 2026-10-27 06:15:15 +00:00
f9a09642bf
getProfile, documentList, memoryForget and documentDelete accept an optional containerTag from the model and used it as the request scope unchecked, so a model or prompt-injected input could read profiles, list documents, forget memories or delete documents under another tenant's tag. Both the AI SDK and OpenAI tool surfaces now resolve that tag through resolveConfiguredContainerTag, which only allows tags the developer configured and rejects anything else before any request is made. Backport of #1504 (profile, list, forget) and #1758 (documentDelete) onto the 2.3.0 release commit, with their regression tests. Co-authored-by: abhinav7x94 <raj.abhinav7x94@gmail.com> Co-authored-by: shamAnimates <145093437+shamAnimates@users.noreply.github.com> Co-authored-by: Atharvsinh-codez <at41rv@gmail.com> Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| agent-framework-python | ||
| ai-sdk | ||
| cartesia-sdk-python | ||
| docs-test | ||
| hooks | ||
| lib | ||
| memory-graph | ||
| openai-sdk-python | ||
| pipecat-sdk-python | ||
| tools | ||
| ui | ||
| validation | ||