arc53-machine bfa67d3138 Keep pre-fetch off live-approval tools and outside callers' owner writes ...

Pre-fetch judged someone else's tool by its stored approval flags, which
a remote device or the code executor decides per call, and it took a
widget or API run for the owner because the run carries the owner's id.
Those tools no longer pre-fetch for anyone but their owner, an API-key or
public-link run treats every tool as someone else's, and writes with the
owner's credentials are never pre-fetched for them.

2026-09-29 15:41:37 +01:00

..

routes

Refuse public-link writes on the owner's account unless allowlisted

2026-09-29 15:12:46 +01:00

services

Keep pre-fetch off live-approval tools and outside callers' owner writes

2026-09-29 15:41:37 +01:00

__init__.py

refactor: rename the application package to docsgpt

2026-09-07 10:20:43 +01:00