completion-kit 0.28.4 → 0.28.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ff8dc1fe1d84c274b21d8ff9d3dd6e21d547f9c780ba0a071c875abcac3d5459
-  data.tar.gz: de30042560e897432acbb192aebb6a3735301b644383b2ba49eb123f77e80607
+  metadata.gz: 7950505efda6021332c751aba8955d2d03422eac9e4524dec309f0596c17f99a
+  data.tar.gz: dd2f48362e9be4880d2616386ed952abe1e6217ec7aa2499a50676c4c2a31d50
 SHA512:
-  metadata.gz: abf4fea98a8014b6f8cd7155cc54edfdc40bd23a2d2d08a2a864dcc7764e841a1d2554950aca3b22b48b786151da0f5b8237c4ff82c6924799664d2a6c663cd0
-  data.tar.gz: 6fc8a7683d26cad922086fafd56cacdbd762f4bc766078a1bf5c0f2335a429ba4ec1c5ccac509bec7650a60e9d20747f29680d28344161f186fdff4dca2d9f62
+  metadata.gz: 22906fafff6c64c9add7a22a087180d1cc2cf51afd45a95e4235db07fe8872adf4d29fb354a4bcd52768b0ae6f3dc8682924a5c29ecd6957b54c7433e2865d63
+  data.tar.gz: f6548a9160c45b40553659a95ce16ad593b7c3a4d8adb531644bb80d5a6a1fb7d4c88b888cbd24f0852b2a6b4df31f6d22b4d5efec5f95de200d483fdb37913a

data/app/controllers/completion_kit/mcp_controller.rb

@@ -1,5 +1,12 @@
 module CompletionKit
   class McpController < Api::V1::BaseController
+    skip_before_action :authenticate_api!, only: :stream
+
+    def stream
+      response.set_header("Allow", "POST, DELETE")
+      head :method_not_allowed
+    end
+
     def handle
       request_body = JSON.parse(request.body.read)
 

data/app/controllers/completion_kit/runs_controller.rb

@@ -16,7 +16,7 @@ module CompletionKit
       @responses_total = @run.responses.count
       @responses_per_page = RESPONSES_PER_PAGE
       @responses_total_pages = [(@responses_total.to_f / RESPONSES_PER_PAGE).ceil, 1].max
-      @responses_page = params[:page].to_i.clamp(1, @responses_total_pages)
+      @responses_page = params[:page].to_s.to_i.clamp(1, @responses_total_pages)
       @responses_offset = (@responses_page - 1) * RESPONSES_PER_PAGE
       @responses = ordered_responses_relation(@run, params[:sort])
                      .includes(:reviews)

data/app/jobs/completion_kit/model_discovery_job.rb

@@ -18,7 +18,7 @@ module CompletionKit
     discard_on ActiveJob::DeserializationError
 
     rescue_from(StandardError) do |error|
-      if error.is_a?(CompletionKit::ModelDiscoveryService::DiscoveryError)
+      unless error.is_a?(CompletionKit::ModelDiscoveryService::DiscoveryError)
         Rails.error.report(error, handled: true, context: { job: self.class.name, provider_credential_id: arguments.first })
       end
       credential = ProviderCredential.find_by(id: arguments.first)

data/app/services/completion_kit/model_discovery_service.rb

@@ -63,9 +63,19 @@ module CompletionKit
       return nil if body.blank?
       data = JSON.parse(body)
       err = data["error"]
-      (err.is_a?(Hash) && err["message"]) || data["message"] || (err.is_a?(String) && err) || nil
+      message = (err.is_a?(Hash) && err["message"]) || data["message"] || (err.is_a?(String) && err) || nil
+      redact_secrets(message)
     rescue JSON::ParserError
-      body.to_s.truncate(200)
+      redact_secrets(body.to_s.truncate(200))
+    end
+
+    def redact_secrets(text)
+      return text if text.blank?
+      redacted = text.to_s
+      redacted = redacted.gsub(@api_key, "[REDACTED]") if @api_key.present?
+      redacted = redacted.gsub(/\bsk-[A-Za-z0-9_-]{6,}/, "[REDACTED]")
+      redacted = redacted.gsub(/\bBearer\s+\S+/i, "Bearer [REDACTED]")
+      redacted.gsub(/(API key provided:\s*)\S+/i, '\1[REDACTED]')
     end
 
     def fetch_openai_models
@@ -336,11 +346,11 @@ module CompletionKit
         end
       else
         model.supports_generation = false
-        model.generation_error = "#{response.status} - #{response.body.truncate(500)}"
+        model.generation_error = redact_secrets("#{response.status} - #{response.body.truncate(500)}")
       end
     rescue StandardError => e
       model.supports_generation = false
-      model.generation_error = e.message
+      model.generation_error = redact_secrets(e.message)
     end
 
     def probe_judging(model)
@@ -364,11 +374,11 @@ module CompletionKit
         end
       else
         model.supports_judging = false
-        model.judging_error = "#{response.status} - #{response.body.truncate(500)}"
+        model.judging_error = redact_secrets("#{response.status} - #{response.body.truncate(500)}")
       end
     rescue StandardError => e
       model.supports_judging = false
-      model.judging_error = e.message
+      model.judging_error = redact_secrets(e.message)
     end
 
     OPENAI_REASONING_PROBE_BUDGET = 65_536

data/config/routes.rb

@@ -102,6 +102,7 @@ CompletionKit::Engine.routes.draw do
     end
   end
 
+  get "mcp", to: "mcp#stream"
   post "mcp", to: "mcp#handle"
   delete "mcp", to: "mcp#destroy"
 end

data/lib/completion_kit/version.rb

@@ -1,3 +1,3 @@
 module CompletionKit
-  VERSION = "0.28.4"
+  VERSION = "0.28.6"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: completion-kit
 version: !ruby/object:Gem::Version
-  version: 0.28.4
+  version: 0.28.6
 platform: ruby
 authors:
 - Damien Bastin
@@ -189,14 +189,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.22'
+        version: '1.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.22'
+        version: '1.0'
 - !ruby/object:Gem::Dependency
   name: solid_queue
   requirement: !ruby/object:Gem::Requirement