Pavan Kumar Gondhi 2a21de6322 fix: gate owner-only HTTP tools (#90261) ...

* fix: gate owner-only HTTP tools

* fix: inherit HTTP owner tool denies

* fix: use mutable HTTP owner deny policy

* fix: preserve RPC owner tool access

* docs: clarify owner-only gateway tool allowlist

---------

Co-authored-by: joshavant <830519+joshavant@users.noreply.github.com>

2026-06-07 17:26:12 -05:00

..

audit-channel-account-metadata.test.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

audit-channel-dm-policy.test.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

audit-channel-readonly-resolution.test.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

audit-channel-readonly-setup-fallback.test.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

audit-channel-source-config-discord.test.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

audit-channel-source-config-slack.test.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

audit-channel-test-helpers.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

audit-channel.collect.runtime.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

audit-channel.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

audit-config-basics.test.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

audit-config-include-perms.test.ts

test(ci): stabilize ARM changed-test guards

2026-06-04 08:18:15 -07:00

audit-config-symlink.test.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

audit-deep-code-safety.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

audit-deep-probe-findings.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

audit-exec-safe-bins.test.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

audit-exec-sandbox-host.test.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

audit-exec-surface.test.ts

test: snapshot exec audit home env

2026-06-05 01:57:47 +01:00

audit-extra.async.test.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

audit-extra.async.ts

refactor(auth): store auth profiles in sqlite (#89102)

2026-06-03 16:14:15 -07:00

audit-extra.summary.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

audit-extra.sync.test.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

audit-extra.sync.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

audit-filesystem-windows.test.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

audit-fs.ts

docs: document auth profile failure policy contract (#89613)

2026-06-03 15:20:39 -07:00

audit-gateway-auth-selection.test.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

audit-gateway-config.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

audit-gateway-exposure.test.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

audit-gateway-http-auth.test.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

audit-gateway-tools-http.test.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

audit-gateway.test.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

audit-hooks-routing.test.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

audit-loopback-logging.test.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

audit-model-hygiene.test.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

audit-model-refs.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

audit-node-command-findings.test.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

audit-plugin-code-safety.test.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

audit-plugin-readonly-scope.test.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

audit-plugins-trust.test.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

audit-plugins-trust.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

audit-probe-failure.test.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

audit-sandbox-browser.test.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

audit-sandbox-docker-config.test.ts

test: scope sandbox audit home env

2026-06-05 00:38:28 +01:00

audit-small-model-risk.test.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

audit-summary.test.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

audit-synced-folder.test.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

audit-tool-policy.ts

docs: document auth profile failure policy contract (#89613)

2026-06-03 15:20:39 -07:00

audit-trust-model.test.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

audit.deep.runtime.ts

docs: document auth profile failure policy contract (#89613)

2026-06-03 15:20:39 -07:00

audit.nondeep.runtime.ts

docs: document auth profile failure policy contract (#89613)

2026-06-03 15:20:39 -07:00

audit.runtime.ts

docs: document tui runtime helpers

2026-06-04 04:10:14 -04:00

audit.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

audit.types.ts

docs: document auth profile failure policy contract (#89613)

2026-06-03 15:20:39 -07:00

channel-metadata.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

config-regex.ts

docs: document tui runtime helpers

2026-06-04 04:10:14 -04:00

context-visibility.test.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

context-visibility.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

core-dangerous-config-flags.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

dangerous-config-flags-core.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

dangerous-config-flags-current-snapshot.test.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

dangerous-config-flags-current.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

dangerous-config-flags.test.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

dangerous-config-flags.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

dangerous-tools.ts

fix: gate owner-only HTTP tools (#90261)

2026-06-07 17:26:12 -05:00

dm-policy-shared.ts

fix(ci): break plugin import cycles

2026-06-07 19:03:38 +09:00

exec-filesystem-policy.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

external-content-source.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

external-content.test.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

external-content.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

fix.test.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

fix.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

install-policy.test.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

install-policy.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

installed-plugin-dirs.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

safe-regex.test.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

safe-regex.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

scan-paths.test.ts

docs: document security policy helpers

2026-06-04 04:08:10 -04:00

scan-paths.ts

docs: document auth profile failure policy contract (#89613)

2026-06-03 15:20:39 -07:00

secret-equal.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

system-tags.ts

docs: document security audit helpers

2026-06-04 04:04:43 -04:00

test-temp-cases.ts

docs: document security finding helpers

2026-06-04 04:06:08 -04:00

windows-acl.test.ts

test: isolate windows acl system root

2026-06-05 02:14:03 +01:00

windows-acl.ts

docs: document auth profile failure policy contract (#89613)

2026-06-03 15:20:39 -07:00