3 people 24038395dd fix(api-tools): forbid processors from widening workspace operation grants ...

A processor granted pipeline.extensions.update / pipeline.update / agent.update
derives resource.manage, which let it add any resource.manage operation to its
own grants. Granting is a human authorization act, so processor principals may
only keep or remove grants, and the catalog marks nothing grantable for them.

LANG-226

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Co-authored-by: multica-agent <[email protected]>

2026-11-01 12:03:54 +08:00

..

http

feat(cloud): enforce plan policies and refine workspace interface

2026-10-15 05:31:04 +00:00

service

fix(api): preserve integer knowledge ingestion task IDs

2026-10-29 15:47:56 +08:00

__init__.py

test: format test suite (#2252)

2026-06-16 11:22:29 +08:00

test_adapter_session_scoping.py

test(api): verify orchestration writes and scoped state transitions

2026-10-17 15:43:38 +08:00

test_agents_controller.py

fix(agent-debug): stream execution traces with platform mocks and coverage

2026-09-05 15:34:29 +08:00

test_apikey_service.py

test(api): verify identity predicates and credential side effects

2026-10-17 15:43:50 +08:00

test_application_audit.py

feat(api): provide Workspace and execution API foundations

2026-10-29 12:45:02 +08:00

test_application_auxiliary.py

feat(api): provide Workspace and execution API foundations

2026-10-29 12:45:02 +08:00

test_application_context.py

feat(api): provide Workspace and execution API foundations

2026-10-29 12:45:02 +08:00

test_application_errors.py

feat(api): provide Workspace and execution API foundations

2026-10-29 12:45:02 +08:00

test_application_platform_setup.py

feat(api): provide Workspace and execution API foundations

2026-10-29 12:45:02 +08:00

test_application_plugins.py

fix(api): align plugin media errors with master

2026-10-29 12:50:15 +08:00

test_application_streaming.py

feat(api): provide Workspace and execution API foundations

2026-10-29 12:45:02 +08:00

test_application_workspace_streams.py

feat(api): provide Workspace and execution API foundations

2026-10-29 12:45:02 +08:00

test_assistant_disclosure.py

test(api-tools): add unit tests for assistant progressive disclosure

2026-10-31 23:57:21 +08:00

test_bot_controller_secrets.py

feat(tenancy): add Workspace multi-tenant foundation (#2353)

2026-07-30 21:43:35 +08:00

test_bots_controller_errors.py

test(core): update bot fixtures for platform policy checks

2026-10-15 05:31:04 +00:00

test_box_controller.py

fix(monitoring): hide disabled box status on cloud

2026-06-23 06:40:05 -04:00

test_credential_session_ttl.py

LANG-145: enforce credential-session TTL on a timer, not on traffic (#2756)

2026-10-22 21:51:01 +08:00

test_execution_application_api.py

feat(api): provide Workspace and execution API foundations

2026-10-29 12:45:02 +08:00

test_extensions_runtime_fence.py

feat(i18n): localize backend messages by workspace language

2026-10-15 05:31:04 +00:00

test_file_upload_scoping.py

test(api): verify maintenance outcomes and upload context

2026-10-17 15:44:19 +08:00

test_granted_operations.py

fix(api-application): enforce processor allowed operation intersection and remove privilege escalation (LANG-224)

2026-10-31 12:37:41 +00:00

test_knowledge_migration_runtime_fence.py

feat(tenancy): add Workspace multi-tenant foundation (#2353)

2026-07-30 21:43:35 +08:00

test_management_assistant.py

feat(assistant): add streaming background sessions and refresh workspace UI

2026-10-08 13:24:46 +08:00

test_mcp_controller.py

feat(tenancy): add Workspace multi-tenant foundation (#2353)

2026-07-30 21:43:35 +08:00

test_mcp_mount_tenant_scope.py

feat(tenancy): add Workspace multi-tenant foundation (#2353)

2026-07-30 21:43:35 +08:00

test_mcp_server.py

fix(monitoring): persist session summaries to avoid history scans

2026-10-20 06:12:00 +08:00

test_operation_docs.py

test(api-tools): assert all referenced operation IDs exist in catalog

2026-10-31 11:02:30 +00:00

test_passkey_edition_gate.py

LANG-145: bind WebAuthn to server config and make passkeys OSS-only (#2744)

2026-10-22 20:39:21 +08:00

test_pipeline_migration_routes.py

feat: add verified manual pipeline migration for plugin runners

2026-09-16 18:13:11 +00:00

test_pipeline_service_defaults.py

test: update adapter and monitoring regression fixtures

2026-10-11 01:10:40 +08:00

test_pipelines_controller.py

chore(merge): sync master into dev/4.11.x

2026-07-31 19:29:38 +08:00

test_plugin_runtime_route_fence.py

fix(cloud): preserve tenant scope for extension tasks (#2408)

2026-08-07 11:32:38 +08:00

test_processor_context.py

test(api-tools): verify processor dedupe isolation and builder validation

2026-10-31 19:00:00 +08:00

test_provider_controller_secrets.py

test(api): verify provider persistence and returned service payloads

2026-10-17 15:29:54 +08:00

test_resource_secret_permissions.py

feat(tenancy): add Workspace multi-tenant foundation (#2353)

2026-07-30 21:43:35 +08:00

test_slack_setup.py

feat(slack): add guided app setup and Socket Mode support

2026-10-10 23:37:30 +08:00

test_stats_controller.py

feat(tenancy): add Workspace multi-tenant foundation (#2353)

2026-07-30 21:43:35 +08:00

test_tool_grants.py

fix(api-tools): forbid processors from widening workspace operation grants

2026-11-01 12:03:54 +08:00

test_tools_controller.py

chore(merge): sync master into dev/4.11.x

2026-07-31 19:29:38 +08:00

test_user_reset_password.py

test(api): verify identity predicates and credential side effects

2026-10-17 15:43:50 +08:00

test_websocket_chat_uow.py

feat(tenancy): add Workspace multi-tenant foundation (#2353)

2026-07-30 21:43:35 +08:00