Repository navigation

fix(node)!: Gate agent-task reads behind visibility rules - #396

Closed

euxarist wants to merge 43 commits into

Twigpine:mainfrom

euxarist:fix/task-read-auth-gate-v2

Closed

fix(node)!: Gate agent-task reads behind visibility rules#396
euxarist wants to merge 43 commits into
Twigpine:mainfrom
euxarist:fix/task-read-auth-gate-v2

Commits on Aug 31, 2026
- fix(node): gate agent-task reads behind the same visibility rules as repo data
  euxaristia
  committed
  8b91534
- fix(node): query the task limit-clamp test as the delegator
  euxaristia
  committed
  e1d5149
- fix(node): scope task visibility lookups to the page's repos
  euxaristia
  committed
  d3f0880
- Preserve authorized task reads across shipped clients.
  euxaristia
  committed
  c765498
- Bound denied task history scans.
  euxaristia
  committed
  b26db4b
- Signal incomplete task scans with recoverable cursors and map read errors to AppError.
  euxaristia
  committed
  e3b1372
- Stop disclosing denied task rows in the scan-wall cursor and add GraphQL pagination state.
  euxaristia
  committed
  d43829b
- Normalize task cursors and gate mutation endpoints behind visibility.
  euxaristia
  committed
  81a1776
- Update complete_task test in test_support to exercise both 404 on unreadable and 403 on non-assignee tasks.
  euxaristia
  committed
  b1ddf9d
- Bind task to repo id in complete_task test in test_support.
  euxaristia
  committed
  15d5748
- Preserve timestamp fractional width and anchor continuation tests on legitimate cursors.
  euxaristia
  committed
  70b2509
- Match on Value::Object to extract task ID in GraphQL continuation test.
  euxaristia
  committed
  1029cdb
- Remove unused mut binding on visible_newer in GraphQL query test.
  euxaristia
  committed
  1ed73ae
- Hide unauthorized claim and keep assigned tasks from being stolen
  
  euxaristia
  and
  cairn-code
  committed
  0ec4c71
- Keep task-list incomplete for the scan ceiling only.
  euxaristia
  committed
  1b9820b
- fix(node): pin claim guards and map mutation errors through AppError
  euxaristia
  committed
  ecf478e
- fix(node): match bare and did:key assignee forms in claim and list
  euxaristia
  committed
  ecfbfe8
- fix(node): check task creation status and add assignee expression index
  euxaristia
  committed
  5ac011f
- fix(node)!: Replace task cursors with opaque continuation tokens
  euxaristia
  committed
  cb41fc3
- fix(node): End the candidate stream only after the batch is examined
  euxaristia
  committed
  193a965
- fix(gl): Reject a non-positive task-list limit and fault the write under test
  euxaristia
  committed
  a65d7c7
- fix(node): Bind task cursors to the caller and brake the task read routes
  euxaristia
  committed
  62893e6
- fix(node): Brake anonymous GraphQL task reads on the same per-IP bucket
  euxaristia
  committed
  d0a34f1
- fix(gl,node): parse typed task pages, track cursor cycles, and normalize assignee filter MAC
  euxaristia
  committed
  94605f8
- fix(node): Cap aliased GraphQL task reads per request and derive has_more from visible rows
  euxaristia
  committed
  e6cf84e
- fix(node): Check database continuation when scan budget ends on exact batch boundary
  euxaristia
  committed
  e3f4031
- fix(node): Document and pin the bound on the task scan-ceiling probe
  euxaristia
  committed
  7d641a3
- Index task keyset pages so the scan ceiling bounds database work.
  euxaristia
  committed
  7da135c
- Reject oversized task pages so list never returns more than the requested limit.
  euxaristia
  committed
  664fad4
Commits on Sep 2, 2026
- Enforce task page limits on legacy responses and drop redundant single-column indexes.
  euxaristia
  committed
  eccaf90
- Address review feedback on task-read authorization gating and client safety.
  euxaristia
  committed
  b079c11
Commits on Sep 4, 2026
- Address review feedback on task-read authorization gating, WebSocket budgets, and test framing.
  euxaristia
  committed
  1d85e99
- Address review feedback on quarantined task claims, WebSocket auth, and MCP limit parsing.
  euxaristia
  committed
  a4f777b
- Reject forged signatures during WebSocket authentication upgrade.
  euxaristia
  committed
  dc4795d
- Accumulate forged WebSocket handshake response until headers terminate.
  euxaristia
  committed
  ea5469b
Commits on Sep 5, 2026
- Withhold quarantined-repo tasks on all read surfaces before party checks.
  euxaristia
  committed
  0c1d5e4
Commits on Sep 7, 2026
- docs: Align task-read documentation with enforced visibility and rate limits.
  euxaristia
  committed
  41fef3a
- docs: Distinguish task list and get behavior in rate-limit guidance.
  euxaristia
  committed
  d9aded2
Commits on Sep 9, 2026
- fix(node): Batch task quarantine checks to bound read costs.
  euxaristia
  committed
  ab054fb
- docs(node): clarify the shared task-read budget
  euxaristia
  committed
  80ba7a3
Commits on Sep 10, 2026
- fix(node,gl): bound scoped repo lookup and validate MCP cursor
  euxaristia
  committed
  a0ea4c7
Commits on Sep 12, 2026
- test(db): verify scoped lookup work in prepared plans
  euxaristia
  committed
  35652da
- docs(db): remove stray dedup comment escapes
  euxaristia
  committed
  b360f3f

Commits

Commits on Aug 31, 2026

Commits on Sep 2, 2026

Commits on Sep 4, 2026

Commits on Sep 5, 2026

Commits on Sep 7, 2026

Commits on Sep 9, 2026

Commits on Sep 10, 2026

Commits on Sep 12, 2026