Greptile Overview

Summary

This release (v0.4.20) includes critical bug fixes and infrastructure improvements across four key areas:

• Internal API Authentication: Added JWT-based authentication for server-side internal API calls to secure service-to-service communication (tools like Slack and Telegram send message)
• Knowledge Base URL Handling: Fixed relative URL resolution in KB document processing when called from trigger contexts without base URL
• Helm Chart Security: Added and documented three new environment variables (INTERNAL_API_SECRET, CRON_SECRET, API_ENCRYPTION_KEY) for production security hardening
• Documentation UI: Minor styling improvements to sidebar scrolling and search bar positioning

All changes align with the stated bug fixes and improvements. The internal authentication mechanism properly generates short-lived JWT tokens (5-minute expiration) for server-side requests, and the KB fix correctly handles the case where getBaseUrl() is needed for relative URLs.

Confidence Score: 4/5

• This PR is safe to merge with low risk - mostly bug fixes and documentation updates
• Score reflects well-tested bug fixes with proper error handling. Minor point deducted because the internal token implementation silently catches token generation errors (logs but doesn't fail), which could mask issues in production. Otherwise, changes are focused, well-documented, and address real bugs.
• No files require special attention - all changes are straightforward fixes

Important Files Changed

File Analysis

Sequence Diagram

sequenceDiagram
    participant Tool as Tool Executor
    participant Auth as Auth Module
    participant API as Internal API
    participant KB as KB Processor
    participant OCR as OCR Service

    Note over Tool,API: Internal Request Flow
    Tool->>Tool: Detect internal route
    Tool->>Auth: Request authentication
    Auth->>Auth: Create JWT (5min)
    Auth-->>Tool: Return JWT
    Tool->>API: HTTP with JWT header
    API->>API: Validate request
    API-->>Tool: Response

    Note over KB,OCR: URL Resolution
    KB->>KB: Start parsing
    KB->>KB: Check if relative path
    KB->>KB: Import getBaseUrl utility
    KB->>KB: Build absolute URL
    KB->>OCR: HTTP request
    OCR-->>KB: Parsed result

_{14 files reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}