Issue #58: Enforce session and tenant scoping on control chat tool endpoints #65

Merged

EduarD3V merged 5 commits from issue/58-tool-endpoint-scoping into agent-develop 2026-10-07 20:21:09 +02:00

Conversation 0 Commits 5 Files changed 10 +597 -193

gotoi-agent commented 2026-10-07 19:38:34 +02:00

Collaborator

Copy link

No description provided.

gotoi-agent added 4 commits 2026-10-07 19:38:34 +02:00

middleware: one dispatch-time scope interceptor for control tools (UC-MW-169) ... f41392ca9a

Every control-chat tool that takes a hostname now authorizes it at call
time through resolveControlScope: session membership AND tenant
visibility, fail-closed on an absent/throwing identity store. Denials are
a single text, identical for out-of-scope and never-existing hosts, so a
batch cannot enumerate hosts. run_on_machines reports the denial per host
instead of a 'skipped (not in session)' summary.

Refs #58

docs(uc): UC-MW-169 control tool session and tenant scoping ... f324d7b6bb

Refs #58

tests: cite UC-MW-169 in the permissions audit header ... 0717c64ccf

Refs #58

review(middleware): namespace memory rows to the writing agent's org in recall/forget ... a8021c0136

Refs #58

gotoi-agent referenced this pull request 2026-10-07 19:38:46 +02:00

Enforce session and tenant scoping on every tool endpoint for ai chat #58

EduarD3V added 1 commit 2026-10-07 20:19:28 +02:00

Merge branch 'agent-develop' into issue/58-tool-endpoint-scoping a931d13f26

EduarD3V merged commit b64f46a32c into agent-develop 2026-10-07 20:21:09 +02:00

EduarD3V referenced this pull request from a commit 2026-10-07 20:21:13 +02:00

Merge pull request 'Issue #58: Enforce session and tenant scoping on control chat tool endpoints' (#65) from issue/58-tool-endpoint-scoping into agent-develop

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

ai-assist

Eligible for the autonomous issue pipeline — the runner only works issues carrying this label

  

needs_attention

Waiting on an operator decision. The runner skips this issue while the label is present; the operator answers with a DECISION: comment and the runner then applies it and clears this label.

  

verified

Operator verified the fix in production — runner closes it and does not re-work it

No labels

ai-assist

needs_attention

verified

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

2 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

EduarD3V/gotoi!65

No description provided.