Lucas WintherandClaude Opus 5.5 ddc66f5be5 feat(ai): encrypt MCP env and headers at rest and mask them in the admin API ...

env/headers are sealed into secretCipher with the BYOK AES-GCM/HKDF box.
The admin GET returns masked values; a mask posted back for the same
server and key keeps the stored value, any other mask is a 400. The chat
and the test button use the stored values. upgradeAiData seals plaintext
v1 rows.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-10-30 20:33:56 +01:00

..

migrations

feat(ai): per-course mentor preferences table (contract request 4)

2026-10-30 20:30:59 +01:00

scripts

feat(ai): citations column on ai_messages (contract request 5)

2026-10-30 20:28:23 +01:00

src

feat(ai): encrypt MCP env and headers at rest and mask them in the admin API

2026-10-30 20:33:56 +01:00

test

feat(ai): encrypt MCP env and headers at rest and mask them in the admin API

2026-10-30 20:33:56 +01:00

package.json

feat(ai): assistant panel, AI settings and studio generator UI

2026-10-30 03:30:22 +01:00