Repository navigation

fix(node)!: Gate agent-task reads behind visibility rules - #464

Open

cairn-intern wants to merge 53 commits into

Twigpine:mainfrom

cairn-intern:recreate-396-fix-task-read-auth-gate-v2

Open

fix(node)!: Gate agent-task reads behind visibility rules#464
cairn-intern wants to merge 53 commits into
Twigpine:mainfrom
cairn-intern:recreate-396-fix-task-read-auth-gate-v2

Commits on Nov 4, 2026
- fix(node): gate agent-task reads behind the same visibility rules as repo data
  
  euxarist
  authored and
  jatmn
  committed
  e1ca1b6
- fix(node): query the task limit-clamp test as the delegator
  
  euxarist
  authored and
  jatmn
  committed
  171a434
- fix(node): scope task visibility lookups to the page's repos
  
  euxarist
  authored and
  jatmn
  committed
  f22ebac
- Preserve authorized task reads across shipped clients.
  
  euxarist
  authored and
  jatmn
  committed
  8d5adee
- Bound denied task history scans.
  
  euxarist
  authored and
  jatmn
  committed
  7149a37
- Signal incomplete task scans with recoverable cursors and map read errors to AppError.
  
  euxarist
  authored and
  jatmn
  committed
  f0f031f
- Stop disclosing denied task rows in the scan-wall cursor and add GraphQL pagination state.
  
  euxarist
  authored and
  jatmn
  committed
  c268c03
- Normalize task cursors and gate mutation endpoints behind visibility.
  
  euxarist
  authored and
  jatmn
  committed
  d4b5e99
- Update complete_task test in test_support to exercise both 404 on unreadable and 403 on non-assignee tasks.
  
  euxarist
  authored and
  jatmn
  committed
  4f58cdd
- Bind task to repo id in complete_task test in test_support.
  
  euxarist
  authored and
  jatmn
  committed
  21b576a
- Preserve timestamp fractional width and anchor continuation tests on legitimate cursors.
  
  euxarist
  authored and
  jatmn
  committed
  7d48166
- Match on Value::Object to extract task ID in GraphQL continuation test.
  
  euxarist
  authored and
  jatmn
  committed
  536ffb4
- Remove unused mut binding on visible_newer in GraphQL query test.
  
  euxarist
  authored and
  jatmn
  committed
  e6efc9e
- Hide unauthorized claim and keep assigned tasks from being stolen
  
  authored and
  jatmn
  committed
  f15ca13
- Keep task-list incomplete for the scan ceiling only.
  
  euxarist
  authored and
  jatmn
  committed
  86c1dc7
- fix(node): pin claim guards and map mutation errors through AppError
  
  euxarist
  authored and
  jatmn
  committed
  b054189
- fix(node): match bare and did:key assignee forms in claim and list
  
  euxarist
  authored and
  jatmn
  committed
  ffe87c6
- fix(node): check task creation status and add assignee expression index
  
  euxarist
  authored and
  jatmn
  committed
  1a89c0e
- fix(node)!: Replace task cursors with opaque continuation tokens
  
  euxarist
  authored and
  jatmn
  committed
  7c2741e
- fix(node): End the candidate stream only after the batch is examined
  
  euxarist
  authored and
  jatmn
  committed
  b175fdb
- fix(gl): Reject a non-positive task-list limit and fault the write under test
  
  euxarist
  authored and
  jatmn
  committed
  8f202b6
- fix(node): Bind task cursors to the caller and brake the task read routes
  
  euxarist
  authored and
  jatmn
  committed
  2445f78
- fix(node): Brake anonymous GraphQL task reads on the same per-IP bucket
  
  euxarist
  authored and
  jatmn
  committed
  2a646d1
- fix(gl,node): parse typed task pages, track cursor cycles, and normalize assignee filter MAC
  
  euxarist
  authored and
  jatmn
  committed
  58bce06
- fix(node): Cap aliased GraphQL task reads per request and derive has_more from visible rows
  
  euxarist
  authored and
  jatmn
  committed
  585b335
- fix(node): Check database continuation when scan budget ends on exact batch boundary
  
  euxarist
  authored and
  jatmn
  committed
  a60272f
- fix(node): Document and pin the bound on the task scan-ceiling probe
  
  euxarist
  authored and
  jatmn
  committed
  1c6d67a
- Index task keyset pages so the scan ceiling bounds database work.
  
  euxarist
  authored and
  jatmn
  committed
  eebcfd8
- Reject oversized task pages so list never returns more than the requested limit.
  
  euxarist
  authored and
  jatmn
  committed
  f0a001a
- Enforce task page limits on legacy responses and drop redundant single-column indexes.
  
  euxarist
  authored and
  jatmn
  committed
  deaee40
- Address review feedback on task-read authorization gating and client safety.
  
  euxarist
  authored and
  jatmn
  committed
  7c3969f
- Address review feedback on task-read authorization gating, WebSocket budgets, and test framing.
  
  euxarist
  authored and
  jatmn
  committed
  a0eac99
- Address review feedback on quarantined task claims, WebSocket auth, and MCP limit parsing.
  
  euxarist
  authored and
  jatmn
  committed
  36a2748
- Reject forged signatures during WebSocket authentication upgrade.
  
  euxarist
  authored and
  jatmn
  committed
  fc4fa03
- Accumulate forged WebSocket handshake response until headers terminate.
  
  euxarist
  authored and
  jatmn
  committed
  16d2466
- Withhold quarantined-repo tasks on all read surfaces before party checks.
  
  euxarist
  authored and
  jatmn
  committed
  e864f92
- docs: Align task-read documentation with enforced visibility and rate limits.
  
  euxarist
  authored and
  jatmn
  committed
  43b34ad
- docs: Distinguish task list and get behavior in rate-limit guidance.
  
  euxarist
  authored and
  jatmn
  committed
  ac0cac1
- fix(node): Batch task quarantine checks to bound read costs.
  
  euxarist
  authored and
  jatmn
  committed
  b7bd108
- docs(node): clarify the shared task-read budget
  
  euxarist
  authored and
  jatmn
  committed
  8b0a8cb
- fix(node,gl): bound scoped repo lookup and validate MCP cursor
  
  euxarist
  authored and
  jatmn
  committed
  6ebf754
- test(db): verify scoped lookup work in prepared plans
  
  euxarist
  authored and
  jatmn
  committed
  7527be8
- docs(db): remove stray dedup comment escapes
  
  euxarist
  authored and
  jatmn
  committed
  29fbec5
- fix(node): address #464 review findings
  
  cairn-intern
  authored and
  jatmn
  committed
  7a98ab1
- test(node): pin the delegator deny on a pre-assigned claim
  
  cairn-intern
  authored and
  jatmn
  committed
  e394f90
- test(node): exercise streamed byte-budget guard with chunked body
  
  cairn-intern
  authored and
  jatmn
  committed
  96726a3
- fix(node): pin declared-length byte-budget arm in oversized content-length test
  
  cairn-intern
  authored and
  jatmn
  committed
  4f12e15
- fix(node): fail closed on claim for unresolvable repo
  
  cairn-intern
  authored and
  jatmn
  committed
  3d4ac67
- fix(node): pad sealed task cursor to fixed width
  
  cairn-intern
  authored and
  jatmn
  committed
  7ad01be
- fix(node): address beardthelion round-six P3 findings on task cursor
  
  cairn-intern
  authored and
  jatmn
  committed
  daa3e98
- fix(node): address beardthelion round-seven P3 findings on task cursor
  
  cairn-intern
  authored and
  jatmn
  committed
  408d588
- test(node): address beardthelion round-eight P3 findings on task cursor
  
  cairn-intern
  authored and
  jatmn
  committed
  7a1f644
Commits on Nov 7, 2026
- Merge branch 'main' into recreate-396-fix-task-read-auth-gate-v2
  cairn-intern
  committed
  1514f3d

Commits

Commits on Nov 4, 2026

Commits on Nov 7, 2026