v0.4.21: more internal auth changes, supabase vector search tool

[icecrasher321]

Summary

fix(kb): added internal auth for Mistral OCR tool via KB (#1704)

fix(case-sensitive-header): fix case-sensitive header (#1705)

fix(external-route): handleInternalRequest should still check if request is internal

fix(base-url): use getBaseUrl helper in Copilot revert state endpoint (#1706)

feat(supabase): added vector search tool and updated docs (#1707)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
docs	Ready	Preview	Comment	Oct 22, 2025 1:50am

[greptile-apps]

Greptile Overview

Summary

This PR consolidates several internal authentication and URL handling fixes across the codebase.

Key Changes:

• Base URL standardization: Replaced direct usage of request.nextUrl.origin with the getBaseUrl() helper in the checkpoint revert endpoint for consistency with the rest of the codebase
• Internal auth for Mistral OCR: Added internal authentication token when calling the Mistral OCR endpoint from the document processor to ensure proper authorization
• External URL protection: Fixed handleInternalRequest to only add internal auth tokens to routes starting with /api/, preventing external URLs from incorrectly receiving internal authentication tokens
• Case-sensitive headers: Fixed Authorization header handling (headers are case-sensitive in HTTP)

All changes follow consistent patterns established in the codebase and include corresponding test updates. The fixes address authentication gaps that could have caused internal API calls to fail.

Confidence Score: 5/5

• This PR is safe to merge with minimal risk
• All changes are focused bug fixes that improve internal authentication handling and URL consistency. The changes follow established patterns in the codebase, include proper test coverage updates, and fix real issues (preventing external URLs from getting internal tokens, ensuring Mistral OCR calls are properly authenticated, and using consistent base URL helpers). No breaking changes or risky logic modifications.
• No files require special attention

Important Files Changed

File Analysis

Filename	Score	Overview
apps/sim/app/api/copilot/checkpoints/revert/route.ts	5/5	Replaced request.nextUrl.origin with getBaseUrl() helper for consistency; updated test mocks accordingly
apps/sim/app/api/copilot/checkpoints/revert/route.test.ts	5/5	Added mock for getBaseUrl helper function to support route changes
apps/sim/lib/knowledge/documents/document-processor.ts	4/5	Added internal auth token for Mistral OCR API calls; headers variable changed from const to let for reassignment
apps/sim/tools/index.ts	5/5	Added check to only add internal auth for routes starting with /api/ to prevent external URLs from receiving internal tokens

Sequence Diagram

sequenceDiagram
participant Client
participant CopilotAPI as Copilot Checkpoint API
participant WorkflowAPI as Workflow State API
participant ToolsHandler as Tools Handler
participant MistralAPI as Mistral OCR API
participant DocProcessor as Document Processor
Note over CopilotAPI,WorkflowAPI: Checkpoint Revert Flow (Fix #1706)
Client->>CopilotAPI: POST /api/copilot/checkpoints/revert
CopilotAPI->>CopilotAPI: getBaseUrl() instead of request.nextUrl.origin
CopilotAPI->>WorkflowAPI: PUT {baseUrl}/api/workflows/{id}/state
Note over CopilotAPI,WorkflowAPI: Uses session cookie for auth
WorkflowAPI-->>CopilotAPI: Checkpoint applied
CopilotAPI-->>Client: Success response
Note over ToolsHandler,MistralAPI: Internal Request Auth Fix (#1704, #1705)
ToolsHandler->>ToolsHandler: Check if endpointUrl.startsWith('/api/')
alt Internal Route
ToolsHandler->>ToolsHandler: generateInternalToken()
ToolsHandler->>MistralAPI: Request with Authorization header
else External Route
ToolsHandler->>ToolsHandler: Skip internal auth
Note over ToolsHandler: Prevents external URLs from getting internal tokens
end
Note over DocProcessor,MistralAPI: Mistral OCR Auth (Fix #1704, #1705)
DocProcessor->>DocProcessor: Check if URL contains '/api/tools/mistral/parse'
DocProcessor->>DocProcessor: generateInternalToken()
DocProcessor->>DocProcessor: Set Authorization header (case-sensitive)
DocProcessor->>MistralAPI: POST /api/tools/mistral/parse
MistralAPI->>MistralAPI: checkHybridAuth validates token
MistralAPI-->>DocProcessor: OCR result

Loading

_{4 files reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}