marketing-shibata50/multica
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
multica/server/internal/handler
History
Jiayuan ad697e0029 feat(security): restrict agent management to owner for private agents 
Replace blanket owner/admin role check in UpdateAgent and DeleteAgent
with canManageAgent, which requires the requesting user to be the
agent's owner (or a workspace owner/admin) for private agents.
2026-03-30 22:27:19 +08:00
..
activity.go feat(api): strict workspace isolation + agent parity fixes 2026-03-30 16:49:13 +08:00
activity_test.go feat(activity): unified activity timeline with comment reply support 2026-03-28 21:53:08 +08:00
agent.go feat(security): restrict agent management to owner for private agents 2026-03-30 22:27:19 +08:00
auth.go fix(handler): set issue_prefix when auto-creating workspace on first login 2026-03-30 13:26:42 +08:00
comment.go feat(api): strict workspace isolation + agent parity fixes 2026-03-30 16:49:13 +08:00
daemon.go feat(api): strict workspace isolation + agent parity fixes 2026-03-30 16:49:13 +08:00
daemon_pairing.go feat(runtime): add local codex daemon pairing 2026-03-24 12:03:14 +08:00
handler.go feat(api): strict workspace isolation + agent parity fixes 2026-03-30 16:49:13 +08:00
handler_test.go feat(server): distinguish agent vs human CLI actions (#181) 2026-03-30 13:12:59 +08:00
inbox.go feat(inbox): scope all inbox queries by workspace_id 2026-03-29 17:42:45 +08:00
issue.go feat(security): add agent output redaction and private agent assignment enforcement 2026-03-30 22:22:04 +08:00
personal_access_token.go feat(auth): email verification login and personal access tokens 2026-03-26 14:32:30 +08:00
runtime.go refactor(server): consolidate workspace permission checks into middleware 2026-03-30 03:40:20 +08:00
runtime_ping.go feat(runtimes): add Runtimes tab with usage tracking and connection test 2026-03-26 18:28:36 +08:00
skill.go feat(api): strict workspace isolation + agent parity fixes 2026-03-30 16:49:13 +08:00
subscriber.go feat(api): strict workspace isolation + agent parity fixes 2026-03-30 16:49:13 +08:00
subscriber_test.go feat(notifications): replace hardcoded inbox notifications with subscriber-driven model 2026-03-28 19:33:20 +08:00
workspace.go refactor(server): consolidate workspace permission checks into middleware 2026-03-30 03:40:20 +08:00