3 people a38d972438 fix: agent update API missing is_default, budget, subagents fields (#270) ...

The HTTP allowlist (agentAllowedFields) was missing three fields that
the web UI sends when saving agent settings: is_default,
budget_monthly_cents, and subagents_config. These fields were silently
filtered out by filterAllowedKeys(), so saves appeared successful but
values never persisted to the database.

Also adds exclusive-default logic: when setting is_default=true on an
agent, any previously-default agent is automatically unset first.

Co-authored-by: Luvu182 <208665161+Luvu182@users.noreply.github.com>

2026-03-19 13:59:49 +07:00

..

activity.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

agents_instances.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

agents_sharing.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

agents.go

refactor: replace magic numbers and hardcoded strings with named constants (#269)

2026-03-19 13:59:32 +07:00

api_key_cache_test.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

api_key_cache.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

api_keys.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

audit.go

feat: expand audit logging via pub/sub event pattern

2026-03-12 18:34:56 +07:00

auth_test.go

feat: runtime packages UI, pkg-helper, configurable shell deny groups (#244)

2026-03-17 19:50:26 +07:00

auth.go

feat: runtime packages UI, pkg-helper, configurable shell deny groups (#244)

2026-03-17 19:50:26 +07:00

builtin_tools.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

channel_instances.go

refactor: merge file writers into config permissions + agent hard delete

2026-03-19 13:35:57 +07:00

chat_completions.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

custom_tools.go

fix(security): harden SQL injection, MCP prompt injection, sandbox fallback, and file serving (#246)

2026-03-18 07:42:38 +07:00

delegations.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

files.go

fix(security): harden SQL injection, MCP prompt injection, sandbox fallback, and file serving (#246)

2026-03-18 07:42:38 +07:00

knowledge_graph_handlers.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

knowledge_graph.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

mcp_grants.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

mcp_requests.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

mcp_tools.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

mcp.go

fix(security): harden SQL injection, MCP prompt injection, sandbox fallback, and file serving (#246)

2026-03-18 07:42:38 +07:00

media_serve.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

media_upload.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

memory_handlers.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

memory.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

oauth_test.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

oauth.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

openapi_spec.json

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

openapi.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

packages_test.go

feat: runtime packages UI, pkg-helper, configurable shell deny groups (#244)

2026-03-17 19:50:26 +07:00

packages.go

feat: runtime packages UI, pkg-helper, configurable shell deny groups (#244)

2026-03-17 19:50:26 +07:00

pending_messages.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

provider_models.go

fix: subagent provider routing + api_base fallback (#262)

2026-03-18 22:40:49 +07:00

provider_verify.go

fix(providers): auto-clamp max_tokens on model rejection (#267)

2026-03-19 08:41:20 +07:00

providers.go

fix: subagent provider routing + api_base fallback (#262)

2026-03-18 22:40:49 +07:00

responses.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

secure_cli.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

skills_grants.go

feat(skills): skill_manage tool + skill_evolve learning loop (#218)

2026-03-17 11:38:35 +07:00

skills_upload.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

skills_versions.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

skills.go

feat(skills): skill_manage tool + skill_evolve learning loop (#218)

2026-03-17 11:38:35 +07:00

storage.go

fix(teams): workspace file view/download, scope filter, storage depth

2026-03-16 07:16:46 +07:00

summoner_prompts.go

refactor: split large Go files into smaller modules for maintainability

2026-03-09 10:41:54 +07:00

summoner_regenerate.go

feat(storage): add lazy folder loading, SSE size endpoint, and enhanced file viewer

2026-03-14 18:13:52 +07:00

summoner_utils.go

refactor: split large Go files into smaller modules for maintainability

2026-03-09 10:41:54 +07:00

summoner.go

refactor: split large Go files into smaller modules for maintainability

2026-03-09 10:41:54 +07:00

team_events.go

refactor(teams): v2 system cleanup — remove legacy tools, fix followup, add events API (#210)

2026-03-15 14:53:19 +07:00

tools_invoke.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

traces.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

usage.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00

validate_test.go

fix(security): followup hardening — ILIKE ESCAPE, allowlist logging, shell deny, tests (#251)

2026-03-18 07:48:48 +07:00

validate.go

fix: agent update API missing is_default, budget, subagents fields (#270)

2026-03-19 13:59:49 +07:00

wake.go

feat(security): credentialed exec + HTTP RBAC + API key cache (#197)

2026-03-15 20:13:18 +07:00