arc53-machine 080b75c81e Gate an API tool action only when it sends the owner's saved values ...

Every API tool counted as holding the owner's credentials, so outside
callers were refused any write on one even when it sends nothing the
owner stored. Now an action counts only when its headers or query
parameters carry a saved value (sealed or legacy plaintext) or the tool
stores credentials; the allowlist lists just those writes.

2026-09-29 15:54:30 +01:00

..

agents

MCP rollback for connectors

2026-09-29 14:48:18 +04:00

attachments

fix: disabled STT also covers live finish; clarify model cache location

2026-09-15 19:28:19 +01:00

sources

Merge main (roles and access revamp) into connectors

2026-09-29 14:02:26 +01:00

teams

Roles audit and revamp

2026-09-29 10:42:39 +04:00

workflows

Roles audit and revamp

2026-09-29 10:42:39 +04:00

__init__.py

chore: more tests

2026-03-30 16:13:08 +01:00

test_agents_sharing.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_analytics.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_artifacts_routes.py

fix(api): address review on the event-loop streams

2026-09-14 10:19:59 +01:00

test_attach_owner_refs.py

Fix rabbit

2026-09-29 15:33:58 +04:00

test_base.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_conversations.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_exception_sanitization.py

Pg 4 (#2390)

2026-04-18 13:13:57 +01:00

test_folders.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_idempotency_decorator.py

fix(tasks): a deferred duplicate records no result, rather than success

2026-09-17 16:51:06 +01:00

test_models.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_prompts_access.py

Roles audit and revamp

2026-09-29 10:42:39 +04:00

test_prompts.py

Roles audit and revamp

2026-09-29 10:42:39 +04:00

test_reconciliation.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_resource_access.py

Roles audit and revamp

2026-09-29 10:42:39 +04:00

test_resource_sponsors.py

Gate an API tool action only when it sends the owner's saved values

2026-09-29 15:54:30 +01:00

test_scheduler_dispatcher.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_scheduler_reconcile.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_scheduler_worker.py

Keep outside callers' write limits in scheduled and webhook runs

2026-09-29 15:44:24 +01:00

test_schedules_routes.py

Roles audit and revamp

2026-09-29 10:42:39 +04:00

test_sharing.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_tasks.py

Read private repositories only with the user's own GitHub token

2026-09-29 10:41:03 +01:00

test_tools_access.py

Keep fixed values, tool type and connected servers out of editors' tool saves

2026-09-29 14:11:36 +01:00

test_tools_artifact_generalized.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_tools_mcp_pg.py

Stop a removed MCP connection from saving its server as a custom tool

2026-09-29 13:13:27 +01:00

test_tools_mcp.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_tools_routes.py

Merge main (roles and access revamp) into connectors

2026-09-29 14:02:26 +01:00

test_traces_routes.py

Log failed chat turns as chat entries

2026-09-24 00:08:53 +01:00

test_user_custom_models_routes.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_utils_extended.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_utils.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

test_webhooks.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00