Duy Nguyen c029e4f6bf feat(cli-credentials): support per-agent env grants ...

- enforce binary/grant parent checks on nested grant routes
- validate grant binary/agent tenant scope on create
- fail closed on invalid per-user env and preserve per-user precedence
- remove duplicate CLI Credentials sidebar entry while keeping Packages tab route
- refs #12

2026-05-17 14:35:34 +07:00

..

activity.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

agents_codex_pool_activity_test.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

agents_codex_pool_activity.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

agents_codex_pool_test.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

agents_codex_pool.go

feat(codex-pool,create_image): collapse primary_first + route pools through create_image chain (#1006)

2026-04-24 00:16:14 +07:00

agents_export_archive.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

agents_export_handlers.go

fix: handle ignored errors, unsafe type assertions, missing panic recovery (#854)

2026-04-13 21:29:11 +07:00

agents_export_marshal.go

feat(codex-pool,create_image): collapse primary_first + route pools through create_image chain (#1006)

2026-04-24 00:16:14 +07:00

agents_export_team.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

agents_export.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

agents_import_agent.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

agents_import_handlers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

agents_import_helpers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

agents_import_knowledge.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

agents_import_sections.go

perf: eliminate N+1 query patterns across import, vault, and usage pipelines

2026-04-10 19:35:02 +07:00

agents_import_team.go

perf: eliminate N+1 query patterns across import, vault, and usage pipelines

2026-04-10 19:35:02 +07:00

agents_import.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

agents_instances.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

agents_prompt_preview.go

feat(vault): tenant-wide rescan with nullable agent_id + media preview

2026-04-10 16:32:54 +07:00

agents_sharing.go

feat(agents): 3-layer recovery for agents stuck in summoning state

2026-04-17 19:02:53 +07:00

agents_workspace.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

agents.go

feat(codex-pool,create_image): collapse primary_first + route pools through create_image chain (#1006)

2026-04-24 00:16:14 +07:00

api_key_cache_test.go

fix(http): master-scope guards on builtin_tools, packages, api-keys

2026-04-12 10:24:07 +07:00

api_key_cache.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

api_keys.go

fix(http): master-scope guards on builtin_tools, packages, api-keys

2026-04-12 10:24:07 +07:00

audit.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

auth_helpers_test.go

test(gateway,http): add unit tests for server/methods/handlers

2026-04-11 21:22:23 +07:00

auth_test.go

perf: eliminate N+1 query patterns across import, vault, and usage pipelines

2026-04-10 19:35:02 +07:00

auth.go

fix(security): harden sandbox, auth, and shell deny patterns

2026-04-02 18:58:24 +07:00

backup_handler.go

fix(backup): handle nested error response and add system owner fallback

2026-04-13 21:01:21 +07:00

backup_s3_handler.go

fix(backup): handle nested error response and add system owner fallback

2026-04-13 21:01:21 +07:00

builtin_tools_cache_invalidate_test.go

fix(cache): tenant-aware invalidation for builtin tools and skills

2026-04-11 23:22:17 +07:00

builtin_tools_tenant_settings_test.go

chore: apply go fix syntax upgrades (min/max, switch patterns)

2026-04-15 11:24:57 +07:00

builtin_tools.go

feat(tools): API key management in web search chain form

2026-04-12 12:02:40 +07:00

channel_instances.go

revert(http): remove admin backfill endpoint — lazy heal on /writers is enough

2026-04-18 21:43:19 +07:00

chat_completions.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

chatgpt_oauth_pool_validation_test.go

feat(codex-pool,create_image): collapse primary_first + route pools through create_image chain (#1006)

2026-04-24 00:16:14 +07:00

chatgpt_oauth_pool_validation.go

feat(codex-pool,create_image): collapse primary_first + route pools through create_image chain (#1006)

2026-04-24 00:16:14 +07:00

contact_merge_handlers.go

fix(ui): combobox viewport flip, multi-user picker, merge data migration

2026-03-29 23:51:53 +07:00

edition.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

episodic_handlers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

evolution_handlers.go

fix(evolution): fix 7 bugs in evolution flow — guardrails, cron, dedup, dead types

2026-04-10 10:13:58 +07:00

evolution_skill_apply.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

export_token_store.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

file_token_test.go

fix(web): sign media_refs paths in session history delivery (#519) (#520)

2026-03-28 13:33:25 +07:00

file_token.go

fix(security): harden sandbox, auth, and shell deny patterns

2026-04-02 18:58:24 +07:00

files_path_security_test.go

test(gateway,http): add unit tests for server/methods/handlers

2026-04-11 21:22:23 +07:00

files.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

knowledge_graph_handlers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

knowledge_graph.go

refactor(knowledge-graph): minor UI and handler adjustments

2026-04-02 14:58:03 +07:00

mcp_export.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

mcp_grants.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

mcp_import.go

feat(security): MCP validation + hooks context isolation

2026-04-16 17:19:50 +07:00

mcp_requests.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

mcp_tools.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

mcp_user_credentials.go

feat(mcp): allow admin to set user credentials on behalf of any user

2026-03-23 22:57:39 +07:00

mcp.go

feat(security): MCP validation + hooks context isolation

2026-04-16 17:19:50 +07:00

media_serve.go

fix(security): SSRF validation, path hardening, and dependency CVE fixes (#525)

2026-03-29 12:54:12 +07:00

media_upload.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

memory_handlers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

memory.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

oauth_quota_test.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

oauth_quota.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

oauth_test.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

oauth.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

openapi_spec.json

fix(http): provider verify ping mode on empty body (#1034)

2026-04-27 12:00:09 +07:00

openapi.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

orchestration_handlers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

packages_rate_limiter_test.go

chore: minor formatting and cleanup across config, audio, cache, http, and provider modules

2026-04-23 19:16:12 +07:00

packages_rate_limiter.go

feat(packages): GitHub Releases binary installer (#898)

2026-04-16 15:09:48 +07:00

packages_test.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00

packages_updates_test.go

feat(packages): Phase 2b — apk update flow + pkg-helper v2 protocol (#900) (#7)

2026-05-11 15:41:27 +07:00

packages_updates.go

feat(packages): Phase 2b — apk update flow + pkg-helper v2 protocol (#900) (#7)

2026-05-11 15:41:27 +07:00

packages.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00

pending_messages.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

provider_embedding_validation_test.go

fix(memory): guard provider embedding dimensions to 1536 schema (#563)

2026-03-30 21:36:09 +07:00

provider_embedding_validation.go

fix(memory): guard provider embedding dimensions to 1536 schema (#563)

2026-03-30 21:36:09 +07:00

provider_models_catalog.go

chore: remove Suno provider at all sites

2026-04-15 11:24:57 +07:00

provider_models_fetch.go

refactor(http): split provider_models.go into focused modules

2026-04-03 15:18:54 +07:00

provider_models_test.go

feat(providers): add rich Ollama model listing via /api/tags (#659)

2026-04-03 15:17:08 +07:00

provider_models.go

chore: remove Suno provider at all sites

2026-04-15 11:24:57 +07:00

provider_verify_embedding.go

feat(embedding): data-driven dimension config with multi-provider support

2026-03-25 14:50:43 +07:00

provider_verify.go

fix(http): provider verify ping mode on empty body (#1034)

2026-04-27 12:00:09 +07:00

providers_codex_pool_activity_test.go

feat(codex-pool,create_image): collapse primary_first + route pools through create_image chain (#1006)

2026-04-24 00:16:14 +07:00

providers_codex_pool_activity.go

feat(codex-pool,create_image): collapse primary_first + route pools through create_image chain (#1006)

2026-04-24 00:16:14 +07:00

providers_ollama_url_test.go

fix(providers): normalize Ollama api_base URL to include /v1 suffix

2026-04-03 15:44:39 +07:00

providers_test.go

fix(providers): close HTTP/startup parity for Anthropic + ClaudeCLI onboarding

2026-04-17 19:13:32 +07:00

providers.go

feat(providers): add Google Cloud Vertex AI provider (#5)

2026-05-11 12:54:05 +07:00

response_helpers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

responses.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

restore_handler.go

fix(backup): handle nested error response and add system owner fallback

2026-04-13 21:01:21 +07:00

secure_cli_agent_grants_test.go

feat(cli-credentials): support per-agent env grants

2026-05-17 14:35:34 +07:00

secure_cli_agent_grants.go

feat(cli-credentials): support per-agent env grants

2026-05-17 14:35:34 +07:00

secure_cli_user_credentials.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

secure_cli.go

feat(secure-cli): per-agent grants with setting overrides

2026-04-04 13:18:57 +07:00

skills_cache_invalidate_test.go

fix(cache): tenant-aware invalidation for builtin tools and skills

2026-04-11 23:22:17 +07:00

skills_export.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

skills_grants.go

fix(cache): tenant-aware invalidation for builtin tools and skills

2026-04-11 23:22:17 +07:00

skills_import.go

fix(mcp): unified grant revocation with per-agent tool group isolation

2026-04-16 17:07:56 +07:00

skills_upload_test.go

feat(security): MCP validation + hooks context isolation

2026-04-16 17:19:50 +07:00

skills_upload.go

fix(skills): avoid false invalid zip uploads (#893)

2026-04-18 14:23:20 +07:00

skills_versions.go

fix(skills): unblock agent read_file on skill paths and fix web UI file browser

2026-03-23 22:06:39 +07:00

skills.go

fix(cache): tenant-aware invalidation for builtin tools and skills

2026-04-11 23:22:17 +07:00

sse.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

storage_test.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

storage.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

summoner_ensure_capabilities_test.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

summoner_prompts.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

summoner_regenerate.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

summoner_utils_test.go

fix(summoning): prevent identity markdown from corrupting display names (#356)

2026-03-23 10:17:47 +07:00

summoner_utils.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

summoner.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

system_configs.go

feat(bgalert): surface non-retryable background worker errors to admin UI

2026-04-13 19:19:51 +07:00

team_attachments.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

team_events.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

teams_export.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

teams_import.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

tenant_auth_helpers.go

fix(http): master-scope guards on builtin_tools, packages, api-keys

2026-04-12 10:24:07 +07:00

tenant_backup_auth_helpers_test.go

fix(backup): harden tenant restore preview and lookup handling (#920)

2026-04-16 15:49:50 +07:00

tenant_backup_auth_helpers.go

fix(backup): harden tenant restore preview and lookup handling (#920)

2026-04-16 15:49:50 +07:00

tenant_backup_handler.go

fix(backup): handle nested error response and add system owner fallback

2026-04-13 21:01:21 +07:00

tenant_cache.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

tenant_restore_handler.go

fix(backup): harden tenant restore preview and lookup handling (#920)

2026-04-16 15:49:50 +07:00

tenant_scope_hotfix_test.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00

tenants.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

tools_invoke.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

traces.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

tts_capabilities_test.go

feat(tts): provider capabilities schema + Gemini TTS + dynamic param forms

2026-04-20 00:05:19 +07:00

tts_capabilities.go

feat(tts): provider capabilities schema + Gemini TTS + dynamic param forms

2026-04-20 00:05:19 +07:00

tts_config_dual_read_test.go

feat(tts): provider capabilities schema + Gemini TTS + dynamic param forms

2026-04-20 00:05:19 +07:00

tts_config_test.go

feat(tts): expand per-provider params + validation + golden fixtures

2026-04-20 00:20:50 +07:00

tts_config.go

feat(tts): expand per-provider params + validation + golden fixtures

2026-04-20 00:20:50 +07:00

tts_test_connection_test.go

feat(tts): provider capabilities schema + Gemini TTS + dynamic param forms

2026-04-20 00:05:19 +07:00

tts_test_connection.go

feat(tts): wire tenant timeout + fix Gemini text-only 400

2026-04-23 08:31:53 +07:00

tts_test.go

feat(tts): wire tenant timeout + fix Gemini text-only 400

2026-04-23 08:31:53 +07:00

tts_timeout_test.go

feat(tts): wire tenant timeout + fix Gemini text-only 400

2026-04-23 08:31:53 +07:00

tts_update_manager_test.go

chore: minor formatting and cleanup across config, audio, cache, http, and provider modules

2026-04-23 19:16:12 +07:00

tts.go

feat(tts): wire tenant timeout + fix Gemini text-only 400

2026-04-23 08:31:53 +07:00

usage.go

refactor(security): remove cross-tenant bypass, enforce strict tenant isolation

2026-03-24 20:40:59 +07:00

user_search.go

fix(contacts): merge contact into existing tenant user

2026-04-17 19:07:01 +07:00

v3_flags_handlers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

validate_slug_test.go

fix(http/agents): validate agent_key slug on update path

2026-04-11 21:22:23 +07:00

validate_test.go

fix(config): MCP env: resolution, channel field filter, orphan provider event, workspace fallback (#348, #297, #295, #431)

2026-03-30 14:12:18 +07:00

validate.go

refactor(tts): collapse adapter triplication; honest concurrency comment

2026-04-20 07:14:56 +07:00

vault_graph_handler.go

feat(vault): optimize graph visualization and fix sidebar state bugs

2026-04-13 10:59:27 +07:00

vault_handler_documents.go

feat(vault): replace create dialog with multi-file upload modal

2026-04-10 20:19:52 +07:00

vault_handler_links.go

fix(vault): complete chat_id isolation coverage

2026-04-23 18:56:57 +07:00

vault_handler_tree.go

fix(vault): agent filter support + rescan agent_key path matching

2026-04-12 13:25:15 +07:00

vault_handler_upload_test.go

refactor(comments): remove plan/phase refs from agent identity hardening code

2026-04-11 21:22:23 +07:00

vault_handler_upload.go

fix(vault): enrichment pipeline reliability + cross-agent classify

2026-04-12 14:31:36 +07:00

vault_handlers.go

fix(vault): suppress stale error toast on stop + count unenriched docs in scan

2026-04-13 21:42:17 +07:00

voices_test.go

feat(tts): provider capabilities schema + Gemini TTS + dynamic param forms

2026-04-20 00:05:19 +07:00

voices.go

feat(tts): provider capabilities schema + Gemini TTS + dynamic param forms

2026-04-20 00:05:19 +07:00

wake.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

webhooks_admin_test.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00

webhooks_admin.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

webhooks_auth_test.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

webhooks_auth.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

webhooks_context.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

webhooks_idempotency_test.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

webhooks_idempotency.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

webhooks_llm_test.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

webhooks_llm.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

webhooks_media_fetch.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

webhooks_message_test.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

webhooks_message.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

webhooks_nonce.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

webhooks_payload.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

webhooks_ratelimit.go

feat(webhooks): HTTP webhooks to trigger agents with HMAC auth + durable callbacks (#2)

2026-05-11 13:29:24 +07:00

workspace_upload.go

fix(workspace): fix file move bugs, migrate DnD to @dnd-kit

2026-03-25 22:17:33 +07:00

workstations.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00