arc53-machine 5c8b97b609 Gate outside writes on the owner's stored credentials, not only connections ...

API-key, widget and public-link callers were held to the write allowlist
only on connected accounts, so they could still write through an API
tool or a signed-in MCP server that carries the owner's credentials. Any
write on credentials the caller doesn't hold is now refused unless the
owner allowlisted it, and a scheduled run for such a caller counts as not
holding any. The tool list names these writes per tool, so the allowlist
can offer them, and its copy now names every route it covers.

2026-09-29 15:41:34 +01:00

..

.husky

adds precommit hook

2023-02-09 10:03:56 +05:30

docker

fix: address review on the slim-image branch

2026-09-06 21:44:34 +01:00

eslint

rabbit fixes

2026-09-28 18:40:49 +04:00

public

logo upd

2026-09-21 19:45:09 +04:00

scripts

Agent menu in new style

2026-09-27 19:45:05 +04:00

src

Gate outside writes on the owner's stored credentials, not only connections

2026-09-29 15:41:34 +01:00

.dockerignore

fix: address review on the slim-image branch

2026-09-06 21:44:34 +01:00

.env.development

Point the dev banner at the Secure Open Source Fund post

2026-09-24 16:00:51 +01:00

.env.production

Update .env.production

2023-03-27 21:44:22 +01:00

.nvmrc

chore(frontend): target Node 22 and fix Vite native config loader warning

2026-08-12 16:43:34 +05:30

.prettierignore

adds eslint and prettier

2023-02-09 08:01:22 +05:30

components.json

feat: agent workflow builder (#2264)

2026-02-11 14:15:24 +00:00

DESIGN.md

Keep a connected tool's credentials with its owner in the UI

2026-09-29 14:12:31 +01:00

Dockerfile

fix: address review on the slim-image branch

2026-09-06 21:44:34 +01:00

eslint.config.js

Agent menu in new style

2026-09-27 19:45:05 +04:00

index.html

logo upd

2026-09-21 19:45:09 +04:00

package-lock.json

Merge pull request #2840 from arc53-machine/math-rendering-parser-level

2026-09-28 13:50:39 +01:00

package.json

Merge pull request #2840 from arc53-machine/math-rendering-parser-level

2026-09-28 13:50:39 +01:00

postcss.config.cjs

(chore:tailwindcss) via upgrade tool

2025-06-22 18:31:26 +05:30

prettier.config.cjs

Phase 2

2026-09-26 12:18:05 +04:00

tsconfig.json

Feat notification system (#2472)

2026-05-15 12:23:31 +01:00

tsconfig.node.json

fix(frontend): migrate tsconfig off TS 6.0 deprecated options

2026-04-29 08:57:32 +05:30

vite.config.ts

fix(frontend): dedupe Radix dismissable-layer so body pointer-events unlocks

2026-08-17 03:42:23 +05:30

vitest.setup.ts

Feat notification system (#2472)

2026-05-15 12:23:31 +01:00