arc53-machine 3572d968ec Read private repositories only with the user's own GitHub token ...

GITHUB_ACCESS_TOKEN belongs to the server, but any user could ingest any
repository it can see, private ones included. It is now used only for
public repositories; the loader checks the repository's visibility first
and asks for a GitHub connection otherwise.

The loader also takes a token from the connection a source syncs from.
Merging a connection's keys into a plain repository URL no longer fails
on json.loads, manual Sync now passes the source's connection, and a
token GitHub rejects pauses the connection's sources for reconnect.

2026-09-29 10:41:03 +01:00

..

agents

Refuse writes on the owner's accounts from API-key callers unless allowed

2026-09-28 21:33:41 +01:00

analytics

Log failed chat turns as chat entries

2026-09-24 00:08:53 +01:00

artifacts

refactor: read settings directly instead of getattr with a second default

2026-09-17 11:14:34 +01:00

attachments

fix: disabled STT also covers live finish; clarify model cache location

2026-09-15 19:28:19 +01:00

conversations

fix(admin): second review pass

2026-09-22 12:47:40 +01:00

me

feat(quotas): admin quota API and GET /api/user/quota

2026-09-21 12:11:12 +01:00

models

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

prompts

feat(pat): enforce scopes and resource restrictions, deny by default

2026-09-19 23:39:58 +01:00

schedules

Agent menu in new style

2026-09-27 19:45:05 +04:00

sharing

Default retrieval to 6 chunks instead of 2

2026-09-28 14:34:50 +01:00

sources

Read private repositories only with the user's own GitHub token

2026-09-29 10:41:03 +01:00

teams

feat(audit): split actor from subject on auth events

2026-09-22 10:18:16 +01:00

tools

Hand the MCP SDK an authorization result with the issuer

2026-09-28 23:32:21 +01:00

workflows

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

__init__.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

authz.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

base.py

refactor: read settings directly instead of getattr with a second default

2026-09-17 11:14:34 +01:00

idempotency.py

fix(tasks): a deferred duplicate records no result, rather than success

2026-09-17 16:51:06 +01:00

reconciliation.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

routes.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

scheduler_dispatcher.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

scheduler_worker.py

Default retrieval to 6 chunks instead of 2

2026-09-28 14:34:50 +01:00

tasks.py

Read private repositories only with the user's own GitHub token

2026-09-29 10:41:03 +01:00

team_authz.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

team_sharing.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00

utils.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00