viettranx 39bb90bd60 refactor(permissions): remove auto-add file writer, add config type constants ...

- Remove auto-add logic that granted file_writer permission to the first
  group/guild member who chatted with the bot
- Add ConfigTypeFileWriter and ConfigTypeHeartbeat constants, replace all
  hardcoded config_type strings across callers
- Add bootstrap exception: /addwriter and !addwriter allow first writer
  to be added when no writers exist yet
- Optimize writer commands: reuse cached ListFileWriters result for both
  permission check and last-writer guard, reducing DB queries per command
- Add freshness directive to file writer system prompt so bot prioritizes
  current list over stale references in conversation history

2026-04-01 13:59:56 +07:00

..

activity.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

agents_codex_pool_activity_test.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

agents_codex_pool_activity.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

agents_codex_pool_test.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

agents_codex_pool.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

agents_export_team.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

agents_export.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

agents_import_helpers.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

agents_import_team.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

agents_import.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

agents_instances.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

agents_sharing.go

refactor(http): standardize error responses with writeError helper

2026-03-27 20:15:26 +07:00

agents_workspace.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

agents.go

fix(agents): sync IDENTITY.md Name field on agent rename (#582)

2026-03-30 20:56:49 +07:00

api_key_cache_test.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

api_key_cache.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

api_keys.go

refactor(http): standardize error responses with writeError helper

2026-03-27 20:15:26 +07:00

audit.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

auth_test.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

auth.go

fix(security): elevate management HTTP routes from Operator to Admin role

2026-03-29 09:02:48 +07:00

builtin_tools.go

fix(security): elevate management HTTP routes from Operator to Admin role

2026-03-29 09:02:48 +07:00

channel_instances.go

refactor(permissions): remove auto-add file writer, add config type constants

2026-04-01 13:59:56 +07:00

chat_completions.go

fix(http): inject tenant context in ServeHTTP handlers for multi-tenant isolation

2026-03-24 22:15:16 +07:00

chatgpt_oauth_pool_validation_test.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

chatgpt_oauth_pool_validation.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

contact_merge_handlers.go

fix(ui): combobox viewport flip, multi-user picker, merge data migration

2026-03-29 23:51:53 +07:00

edition.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

file_token_test.go

fix(web): sign media_refs paths in session history delivery (#519) (#520)

2026-03-28 13:33:25 +07:00

file_token.go

fix(web): sign media_refs paths in session history delivery (#519) (#520)

2026-03-28 13:33:25 +07:00

files.go

fix(desktop): image rendering for Windows paths and MEDIA: prefix

2026-03-27 13:07:14 +07:00

knowledge_graph_handlers.go

feat(kg): add tsvector FTS, entity deduplication, and embedding fixes

2026-03-29 12:15:21 +07:00

knowledge_graph.go

feat(kg): add tsvector FTS, entity deduplication, and embedding fixes

2026-03-29 12:15:21 +07:00

mcp_export.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

mcp_grants.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

mcp_import.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

mcp_requests.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

mcp_tools.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

mcp_user_credentials.go

feat(mcp): allow admin to set user credentials on behalf of any user

2026-03-23 22:57:39 +07:00

mcp.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

media_serve.go

fix(security): SSRF validation, path hardening, and dependency CVE fixes (#525)

2026-03-29 12:54:12 +07:00

media_upload.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

memory_handlers.go

fix(store): session Save() UPSERT fallback, memory index-all user_id header (#379, #517)

2026-03-30 14:12:08 +07:00

memory.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

oauth_quota_test.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

oauth_quota.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

oauth_test.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

oauth.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

openapi_spec.json

feat: add capability-aware reasoning effort controls (#593)

2026-03-31 07:56:01 +07:00

openapi.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

packages_test.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

packages.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

pending_messages.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

provider_embedding_validation_test.go

fix(memory): guard provider embedding dimensions to 1536 schema (#563)

2026-03-30 21:36:09 +07:00

provider_embedding_validation.go

fix(memory): guard provider embedding dimensions to 1536 schema (#563)

2026-03-30 21:36:09 +07:00

provider_models_test.go

feat: add capability-aware reasoning effort controls (#593)

2026-03-31 07:56:01 +07:00

provider_models.go

feat: add capability-aware reasoning effort controls (#593)

2026-03-31 07:56:01 +07:00

provider_verify_embedding.go

feat(embedding): data-driven dimension config with multi-provider support

2026-03-25 14:50:43 +07:00

provider_verify.go

fix(providers): xAI generation models bypass chat verification

2026-03-31 14:35:57 +07:00

providers_codex_pool_activity.go

feat(providers): add provider-level Codex pool activity monitor (#539)

2026-03-29 12:46:23 +07:00

providers_test.go

fix(memory): guard provider embedding dimensions to 1536 schema (#563)

2026-03-30 21:36:09 +07:00

providers.go

fix(providers): make provider_type immutable + add argString tests

2026-04-01 11:59:21 +07:00

response_helpers.go

refactor(http): standardize error responses with writeError helper

2026-03-27 20:15:26 +07:00

responses.go

fix(http): inject tenant context in ServeHTTP handlers for multi-tenant isolation

2026-03-24 22:15:16 +07:00

secure_cli_user_credentials.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

secure_cli.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

skills_export.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

skills_grants.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

skills_import.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

skills_upload_test.go

fix: auto-install deps on skill upload before archiving (#559)

2026-03-30 21:58:29 +07:00

skills_upload.go

fix: auto-install deps on skill upload before archiving (#559)

2026-03-30 21:58:29 +07:00

skills_versions.go

fix(skills): unblock agent read_file on skill paths and fix web UI file browser

2026-03-23 22:06:39 +07:00

skills.go

fix: auto-install deps on skill upload before archiving (#559)

2026-03-30 21:58:29 +07:00

sse.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

storage.go

fix(workspace): fix file move bugs, migrate DnD to @dnd-kit

2026-03-25 22:17:33 +07:00

summoner_prompts.go

refactor: split large Go files into smaller modules for maintainability

2026-03-09 10:41:54 +07:00

summoner_regenerate.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

summoner_utils_test.go

fix(summoning): prevent identity markdown from corrupting display names (#356)

2026-03-23 10:17:47 +07:00

summoner_utils.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

summoner.go

fix(summoning): prevent identity markdown from corrupting display names (#356)

2026-03-23 10:17:47 +07:00

system_configs.go

feat(config): add system_configs DB table with per-tenant isolation and System Settings modal

2026-03-24 16:01:02 +07:00

team_attachments.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

team_events.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

teams_export.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

teams_import.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

tenant_auth_helpers.go

fix(security): add tenant membership check to tenant-config endpoints

2026-03-25 10:21:39 +07:00

tenant_cache.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

tenants.go

refactor(security): remove cross-tenant bypass, enforce strict tenant isolation

2026-03-24 20:40:59 +07:00

tools_invoke.go

fix(http): inject tenant context in ServeHTTP handlers for multi-tenant isolation

2026-03-24 22:15:16 +07:00

traces.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

usage.go

refactor(security): remove cross-tenant bypass, enforce strict tenant isolation

2026-03-24 20:40:59 +07:00

user_search.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

validate_test.go

fix(config): MCP env: resolution, channel field filter, orphan provider event, workspace fallback (#348, #297, #295, #431)

2026-03-30 14:12:18 +07:00

validate.go

fix(config): MCP env: resolution, channel field filter, orphan provider event, workspace fallback (#348, #297, #295, #431)

2026-03-30 14:12:18 +07:00

wake.go

fix(http): inject tenant context in ServeHTTP handlers for multi-tenant isolation

2026-03-24 22:15:16 +07:00

workspace_upload.go

fix(workspace): fix file move bugs, migrate DnD to @dnd-kit

2026-03-25 22:17:33 +07:00