Huy DoanandGitHub 173f1cea53 fix(cli-credentials): show existing env keys on edit and support merge/remove (#629) ...

fix(cli-credentials): show existing env keys on edit and support merge/remove

- Expose env_keys on secure CLI list/get and per-user credential list (values stay hidden)
- PUT merges env with stored secrets: empty value keeps existing, removed keys dropped
- Generic error messages to prevent env key enumeration
- Audit logging for user credential set/delete
- DRY: reuse envKeysFromDecryptedJSON helper
- Client-side env key name validation (en/vi/zh i18n)

2026-04-02 11:59:49 +07:00

..

activity.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

agents_codex_pool_activity_test.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

agents_codex_pool_activity.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

agents_codex_pool_test.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

agents_codex_pool.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

agents_export_team.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

agents_export.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

agents_import_helpers.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

agents_import_team.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

agents_import.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

agents_instances.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

agents_sharing.go

refactor(http): standardize error responses with writeError helper

2026-03-27 20:15:26 +07:00

agents_workspace.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

agents.go

fix(agents): sync IDENTITY.md Name field on agent rename (#582)

2026-03-30 20:56:49 +07:00

api_key_cache_test.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

api_key_cache.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

api_keys.go

refactor(http): standardize error responses with writeError helper

2026-03-27 20:15:26 +07:00

audit.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

auth_test.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

auth.go

fix(security): elevate management HTTP routes from Operator to Admin role

2026-03-29 09:02:48 +07:00

builtin_tools.go

fix(security): elevate management HTTP routes from Operator to Admin role

2026-03-29 09:02:48 +07:00

channel_instances.go

refactor(permissions): remove auto-add file writer, add config type constants

2026-04-01 13:59:56 +07:00

chat_completions.go

fix(http): inject tenant context in ServeHTTP handlers for multi-tenant isolation

2026-03-24 22:15:16 +07:00

chatgpt_oauth_pool_validation_test.go

fix: pool validation false positive + OAuth step advancement + pool routing sync (#583, #594)

2026-04-01 19:31:02 +07:00

chatgpt_oauth_pool_validation.go

fix: pool validation false positive + OAuth step advancement + pool routing sync (#583, #594)

2026-04-01 19:31:02 +07:00

contact_merge_handlers.go

fix(ui): combobox viewport flip, multi-user picker, merge data migration

2026-03-29 23:51:53 +07:00

edition.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

file_token_test.go

fix(web): sign media_refs paths in session history delivery (#519) (#520)

2026-03-28 13:33:25 +07:00

file_token.go

fix(web): sign media_refs paths in session history delivery (#519) (#520)

2026-03-28 13:33:25 +07:00

files.go

fix(desktop): image rendering for Windows paths and MEDIA: prefix

2026-03-27 13:07:14 +07:00

knowledge_graph_handlers.go

feat(kg): add tsvector FTS, entity deduplication, and embedding fixes

2026-03-29 12:15:21 +07:00

knowledge_graph.go

feat(kg): add tsvector FTS, entity deduplication, and embedding fixes

2026-03-29 12:15:21 +07:00

mcp_export.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

mcp_grants.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

mcp_import.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

mcp_requests.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

mcp_tools.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

mcp_user_credentials.go

feat(mcp): allow admin to set user credentials on behalf of any user

2026-03-23 22:57:39 +07:00

mcp.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

media_serve.go

fix(security): SSRF validation, path hardening, and dependency CVE fixes (#525)

2026-03-29 12:54:12 +07:00

media_upload.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

memory_handlers.go

fix(store): session Save() UPSERT fallback, memory index-all user_id header (#379, #517)

2026-03-30 14:12:08 +07:00

memory.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

oauth_quota_test.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

oauth_quota.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

oauth_test.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

oauth.go

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

openapi_spec.json

feat: add capability-aware reasoning effort controls (#593)

2026-03-31 07:56:01 +07:00

openapi.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

packages_test.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

packages.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

pending_messages.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

provider_embedding_validation_test.go

fix(memory): guard provider embedding dimensions to 1536 schema (#563)

2026-03-30 21:36:09 +07:00

provider_embedding_validation.go

fix(memory): guard provider embedding dimensions to 1536 schema (#563)

2026-03-30 21:36:09 +07:00

provider_models_test.go

feat: add capability-aware reasoning effort controls (#593)

2026-03-31 07:56:01 +07:00

provider_models.go

feat: add capability-aware reasoning effort controls (#593)

2026-03-31 07:56:01 +07:00

provider_verify_embedding.go

feat(embedding): data-driven dimension config with multi-provider support

2026-03-25 14:50:43 +07:00

provider_verify.go

fix(providers): xAI generation models bypass chat verification

2026-03-31 14:35:57 +07:00

providers_codex_pool_activity.go

feat(providers): add provider-level Codex pool activity monitor (#539)

2026-03-29 12:46:23 +07:00

providers_test.go

fix(memory): guard provider embedding dimensions to 1536 schema (#563)

2026-03-30 21:36:09 +07:00

providers.go

feat(providers): allow provider_type changes on update with SSRF re-validation

2026-04-02 08:49:54 +07:00

response_helpers.go

refactor(http): standardize error responses with writeError helper

2026-03-27 20:15:26 +07:00

responses.go

fix(http): inject tenant context in ServeHTTP handlers for multi-tenant isolation

2026-03-24 22:15:16 +07:00

secure_cli_user_credentials.go

fix(cli-credentials): show existing env keys on edit and support merge/remove (#629)

2026-04-02 11:59:49 +07:00

secure_cli.go

fix(cli-credentials): show existing env keys on edit and support merge/remove (#629)

2026-04-02 11:59:49 +07:00

skills_export.go

feat: standalone Import & Export page with Teams, Agents, Skills & MCP

2026-03-29 18:01:08 +07:00

skills_grants.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

skills_import.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

skills_upload_test.go

fix: auto-install deps on skill upload before archiving (#559)

2026-03-30 21:58:29 +07:00

skills_upload.go

fix: auto-install deps on skill upload before archiving (#559)

2026-03-30 21:58:29 +07:00

skills_versions.go

fix(skills): unblock agent read_file on skill paths and fix web UI file browser

2026-03-23 22:06:39 +07:00

skills.go

fix(skills): fix dep detection false positives and all-or-nothing install

2026-04-02 11:42:14 +07:00

sse.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

storage.go

fix(workspace): fix file move bugs, migrate DnD to @dnd-kit

2026-03-25 22:17:33 +07:00

summoner_prompts.go

refactor: split large Go files into smaller modules for maintainability

2026-03-09 10:41:54 +07:00

summoner_regenerate.go

fix(summon): preserve user's custom display_name during summon/regenerate

2026-04-02 11:04:56 +07:00

summoner_utils_test.go

fix(summoning): prevent identity markdown from corrupting display names (#356)

2026-03-23 10:17:47 +07:00

summoner_utils.go

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

summoner.go

fix(summon): preserve user's custom display_name during summon/regenerate

2026-04-02 11:04:56 +07:00

system_configs.go

feat(config): add system_configs DB table with per-tenant isolation and System Settings modal

2026-03-24 16:01:02 +07:00

team_attachments.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

team_events.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

teams_export.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

teams_import.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

tenant_auth_helpers.go

fix(security): add tenant membership check to tenant-config endpoints

2026-03-25 10:21:39 +07:00

tenant_cache.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

tenants.go

refactor(security): remove cross-tenant bypass, enforce strict tenant isolation

2026-03-24 20:40:59 +07:00

tools_invoke.go

fix(http): inject tenant context in ServeHTTP handlers for multi-tenant isolation

2026-03-24 22:15:16 +07:00

traces.go

refactor(http): move gateway token to package-level auth state

2026-03-23 22:57:26 +07:00

usage.go

refactor(security): remove cross-tenant bypass, enforce strict tenant isolation

2026-03-24 20:40:59 +07:00

user_search.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

validate_test.go

fix(config): MCP env: resolution, channel field filter, orphan provider event, workspace fallback (#348, #297, #295, #431)

2026-03-30 14:12:18 +07:00

validate.go

fix(config): MCP env: resolution, channel field filter, orphan provider event, workspace fallback (#348, #297, #295, #431)

2026-03-30 14:12:18 +07:00

wake.go

fix(http): inject tenant context in ServeHTTP handlers for multi-tenant isolation

2026-03-24 22:15:16 +07:00

workspace_upload.go

fix(workspace): fix file move bugs, migrate DnD to @dnd-kit

2026-03-25 22:17:33 +07:00