Libra CodeHub

CedarCopilot/cedar-mail

Branch: staging

[2026-08-27] merging staging to main

merged#2608CedarCopilot

CedarCopilot wants to merge 1 commit into main from staging

Not deployedTimeline and evidence
  1. Opened
    Aug 27, 2026, 3:28 PM
  2. Merged
    Aug 27, 2026, 3:40 PM
  3. No findings
    Aug 27, 2026, 3:51 PM
  4. Live on staging, live on prod, observed
    Pending
  5. Not deployed

    Not deployed

    Pending

Libra has no production signal for this change yet because it has not deployed. Libra checks hourly for 3 days after each deploy.

Greptile Summary

This change expands attendee-aware meeting routing, organization-domain calendar processing, user-settings updates, task ownership guards, analytics exports, and usage-report tooling.

Two failures were reproduced. In apps/server/src/services/posthog/posthog.ts, a failed usage query is represented as zero activity when replay coverage remains available, which makes missing analytics data appear to be a real inactive period. In apps/server/scripts/usage-tracker/upload_drive.py, an unescaped user identifier can alter the OAuth-token lookup and select another account's Drive token. These issues should be fixed before merging.

Confidence Score: 2/5

The change is not safe to merge until the analytics failure state and Drive token-query injection are corrected.

Focused runtime checks reproduced both reported behaviors: a PostHog HTTP failure produced trusted zero-valued usage metrics, and crafted user-ID input changed the generated token-selection query.

Files Needing Attention: apps/server/src/services/posthog/posthog.ts needs to preserve usage-query failure state, and apps/server/scripts/usage-tracker/upload_drive.py needs a parameterized credential lookup.

Security Review

The Drive report uploader builds its account-token SQL query by interpolating the operator-provided user ID. A crafted value can change the query predicate, return another stored Google OAuth token, and cause that token to be used as the Drive bearer credential. Bind the user ID and provider through a parameterized query.

T-Rex T-Rex Logs

What T-Rex did

  • T-Rex produced proofs for the P1 findings showing a focused usage-query failure is reproducible and contrasted with a baseline where the usage query succeeds.
  • T-Rex produced a proof for a posted P1 finding detailing a focused SQL injection repro with token-path outcomes and a credential-query failure when the user ID is quoted.
  • T-Rex performed general-contract-validation-proof for normal input and for crafted/broken inputs across token-paths, including a baseline token result and an error path.

View all artifacts

T-Rex Ran code and verified through T-Rex

Comments Outside Diff (2)

  1. General comment

    P1 Usage-query failures are reported as trusted zero usage

    • Bug
      • At apps/server/src/services/posthog/posthog.ts:293-296, a non-OK usage-by-day HogQL response is logged and returned as []. apps/server/src/services/analytics/product-usage.ts:195-205 then treats that empty result as no usage; because coverage is fetched independently and passes MIN_REPLAY_COVERAGE_PCT at lines 207-211, the returned report at lines 248-254 emits activeUsageTime: 0, totalActiveMinutes: 0, and activeAllThree: 0 rather than marking the usage signal unavailable. activeMinutesPerUser is null only because there are zero derived usage users.
    • Cause
Show production surfaces and changed-file mapping

Production surfaces

Libra has not measured any production surfaces for this change yet.

Changed files → surfaces

  • .claude/skills/draft-analytics-report/SKILL.mdno production surface mapped
  • apps/server/scripts/usage-tracker/README.mdno production surface mapped
  • apps/server/scripts/usage-tracker/build_tracker.pyno production surface mapped
  • apps/server/scripts/usage-tracker/drive-file-id.txtno production surface mapped
  • apps/server/scripts/usage-tracker/upload_drive.pyno production surface mapped
  • apps/server/src/cli/analytics.tsno production surface mapped
  • apps/server/src/cron/process-meeting-background-sync.tsno production surface mapped
  • apps/server/src/cron/roll-forward-stale-calendar-events.tsno production surface mapped
  • apps/server/src/db/migrations/scripts/account-setup/__tests__/phase9-notifications.test.tsno production surface mapped
  • apps/server/src/db/migrations/scripts/account-setup/phase9-notifications.tsno production surface mapped
  • apps/server/src/http/app.tsno production surface mapped
  • apps/server/src/mastra/tools/event-execution/__tests__/unattributed-event.test.tsno production surface mapped
  • apps/server/src/mastra/tools/event-execution/assignEventToConversationTool.tsno production surface mapped
  • apps/server/src/mastra/tools/task/__tests__/user-authored-task-guard.test.tsno production surface mapped
  • apps/server/src/mastra/tools/task/cancelTaskTool.tsno production surface mapped
  • apps/server/src/mastra/tools/task/listTasksTool.tsno production surface mapped
  • apps/server/src/mastra/tools/task/updateTaskTool.tsno production surface mapped
  • apps/server/src/mastra/tools/task/user-authored-task-guard.tsno production surface mapped
  • apps/server/src/mastra/utils/approval.tsno production surface mapped
  • apps/server/src/mastra/utils/company-domain-assignment.tsno production surface mapped
  • apps/server/src/mastra/workflows/event-execution/pre-execution-setup.tsno production surface mapped
  • apps/server/src/services/agent-action-queue/__tests__/tool-calls.test.tsno production surface mapped
  • apps/server/src/services/agent-action-queue/tool-calls.tsno production surface mapped
  • apps/server/src/services/analytics/__tests__/monthly-growth-report.test.tsno production surface mapped
  • apps/server/src/services/analytics/__tests__/product-usage.test.tsno production surface mapped
  • apps/server/src/services/analytics/monthly-growth-report.tsno production surface mapped
  • apps/server/src/services/analytics/product-usage.tsno production surface mapped
  • apps/server/src/services/channels/adapters/__tests__/record-participants-count.test.tsno production surface mapped
  • apps/server/src/services/channels/adapters/slack-evidence.tsno production surface mapped
  • apps/server/src/services/crm/__tests__/calendar-events-sync.test.tsno production surface mapped
  • apps/server/src/services/crm/__tests__/internal-domains.test.tsno production surface mapped
  • apps/server/src/services/crm/calendar-events.tsno production surface mapped
  • apps/server/src/services/crm/internal-domains.tsno production surface mapped
  • apps/server/src/services/crm/utils.tsno production surface mapped
  • apps/server/src/services/integrations/meetings/__tests__/granola-attendees.test.tsno production surface mapped
  • apps/server/src/services/integrations/meetings/askelephant.tsno production surface mapped
  • apps/server/src/services/integrations/meetings/attendee-routing.tsno production surface mapped
  • apps/server/src/services/integrations/meetings/circleback.tsno production surface mapped
  • apps/server/src/services/integrations/meetings/fathom.tsno production surface mapped
  • apps/server/src/services/integrations/meetings/granola.tsno production surface mapped
  • apps/server/src/services/integrations/slack/slack-sync.tsno production surface mapped
  • apps/server/src/services/posthog/posthog.tsno production surface mapped
  • apps/server/src/services/users/__tests__/user-settings-merge.test.tsno production surface mapped
  • apps/server/src/services/users/__tests__/user-settings.test.tsno production surface mapped
  • apps/server/src/services/users/user-settings.tsno production surface mapped
  • apps/server/src/trpc/routes/__tests__/settings-router.test.tsno production surface mapped
  • apps/server/src/trpc/routes/cedar-admin.tsno production surface mapped
  • apps/server/src/trpc/routes/channels.tsno production surface mapped
  • apps/server/src/trpc/routes/settings.tsno production surface mapped
  • apps/server/src/workflows/__tests__/calendar-sync.test.tsno production surface mapped
  • apps/server/src/workflows/calendar-sync.tsno production surface mapped
  • docs/usage-reports/2026-08-26.mdno production surface mapped
  • docs/usage-reports/growth-report-monthly.csvno production surface mapped
  • docs/usage-reports/growth-report.csvno production surface mapped