arc53-machine 080b75c81e Gate an API tool action only when it sends the owner's saved values ...

Every API tool counted as holding the owner's credentials, so outside
callers were refused any write on one even when it sends nothing the
owner stored. Now an action counts only when its headers or query
parameters carry a saved value (sealed or legacy plaintext) or the tool
stores credentials; the allowlist lists just those writes.

2026-09-29 15:54:30 +01:00

..

answer

Set up no agent run for a request with no token or API key

2026-09-29 15:46:32 +01:00

user

Gate an API tool action only when it sends the owner's saved values

2026-09-29 15:54:30 +01:00

v1

Hold /v1 key holders to the API write allowlist

2026-09-29 15:36:36 +01:00

__init__.py

test: implement full API test suite with mongomock and centralized fixtures (#2068)

2025-10-17 12:01:14 +03:00

conftest.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_admin_activity.py

fix(admin): second review pass

2026-09-22 12:47:40 +01:00

test_admin_dashboard.py

fix(admin): second review pass

2026-09-22 12:47:40 +01:00

test_agent_portability.py

Cover the chunks fallbacks on agent update and YAML import

2026-09-28 14:55:43 +01:00

test_agent_team_sharing.py

Shared resource use

2026-09-29 11:43:43 +04:00

test_asgi_auth.py

fix(pat): align replay scopes, keep 404/405, retire expired names, document the PAT_ENABLED switch

2026-09-20 12:12:42 +01:00

test_asgi_stream.py

fix(api): address review on the event-loop streams

2026-09-14 10:19:59 +01:00

test_async_sse_routes.py

fix: stability improvements on event loop

2026-09-14 12:52:15 +01:00

test_audit_helper.py

fix(admin): keyset export paging, rollup-free spend, consistent totals

2026-09-22 10:41:46 +01:00

test_connector_oauth_security.py

Hide connectors that need admin setup; they start turned off

2026-09-28 20:16:40 +01:00

test_connector_routes_happy.py

Merge main (roles and access revamp) into connectors

2026-09-29 14:02:26 +01:00

test_connector_routes.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_data_plane_audit.py

Roles audit and revamp

2026-09-29 10:42:39 +04:00

test_events_routes.py

fix: stability improvements on event loop

2026-09-14 12:52:15 +01:00

test_internal_routes.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_pat_routes.py

feat(pat): regenerate a token's secret and reset its expiry

2026-09-21 10:32:17 +01:00

test_pat_rules.py

feat(pat): regenerate a token's secret and reset its expiry

2026-09-21 10:32:17 +01:00

test_pat_tokens.py

fix(pat): close restricted-token paths through workflows, chat, schedules and conversations

2026-09-20 19:46:43 +01:00

test_quota_endpoints.py

refactor(quotas): validate policy bodies without exception text in responses

2026-09-21 12:15:42 +01:00

test_rbac_endpoints.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_teams_endpoints.py

Roles audit and revamp

2026-09-29 10:42:39 +04:00

test_workflow_portability.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00