fix(node)!: Gate agent-task reads behind visibility rules - #396

Closed

euxaristia wants to merge 43 commits into

Gitlawb:mainfrom

euxaristia:fix/task-read-auth-gate-v2

Commits on Aug 31, 2026

fix(node): gate agent-task reads behind the same visibility rules as repo data
euxaristia
committed
8b91534
fix(node): query the task limit-clamp test as the delegator
euxaristia
committed
e1d5149
fix(node): scope task visibility lookups to the page's repos
euxaristia
committed
d3f0880
Preserve authorized task reads across shipped clients.
euxaristia
committed
c765498
Bound denied task history scans.
euxaristia
committed
b26db4b
Signal incomplete task scans with recoverable cursors and map read errors to AppError.
euxaristia
committed
e3b1372
Stop disclosing denied task rows in the scan-wall cursor and add GraphQL pagination state.
euxaristia
committed
d43829b
Normalize task cursors and gate mutation endpoints behind visibility.
euxaristia
committed
81a1776
Update complete_task test in test_support to exercise both 404 on unreadable and 403 on non-assignee tasks.
euxaristia
committed
b1ddf9d
Bind task to repo id in complete_task test in test_support.
euxaristia
committed
15d5748
Preserve timestamp fractional width and anchor continuation tests on legitimate cursors.
euxaristia
committed
70b2509
Match on Value::Object to extract task ID in GraphQL continuation test.
euxaristia
committed
1029cdb
Remove unused mut binding on visible_newer in GraphQL query test.
euxaristia
committed
1ed73ae
Hide unauthorized claim and keep assigned tasks from being stolen

euxaristia
and
cairn-code
committed
0ec4c71
Keep task-list incomplete for the scan ceiling only.
euxaristia
committed
1b9820b
fix(node): pin claim guards and map mutation errors through AppError
euxaristia
committed
ecf478e
fix(node): match bare and did:key assignee forms in claim and list
euxaristia
committed
ecfbfe8
fix(node): check task creation status and add assignee expression index
euxaristia
committed
5ac011f
fix(node)!: Replace task cursors with opaque continuation tokens
euxaristia
committed
cb41fc3
fix(node): End the candidate stream only after the batch is examined
euxaristia
committed
193a965
fix(gl): Reject a non-positive task-list limit and fault the write under test
euxaristia
committed
a65d7c7
fix(node): Bind task cursors to the caller and brake the task read routes
euxaristia
committed
62893e6
fix(node): Brake anonymous GraphQL task reads on the same per-IP bucket
euxaristia
committed
d0a34f1
fix(gl,node): parse typed task pages, track cursor cycles, and normalize assignee filter MAC
euxaristia
committed
94605f8
fix(node): Cap aliased GraphQL task reads per request and derive has_more from visible rows
euxaristia
committed
e6cf84e
fix(node): Check database continuation when scan budget ends on exact batch boundary
euxaristia
committed
e3f4031
fix(node): Document and pin the bound on the task scan-ceiling probe
euxaristia
committed
7d641a3
Index task keyset pages so the scan ceiling bounds database work.
euxaristia
committed
7da135c
Reject oversized task pages so list never returns more than the requested limit.
euxaristia
committed
664fad4

Commits on Sep 2, 2026

Commits on Sep 4, 2026

Commits on Sep 5, 2026

Withhold quarantined-repo tasks on all read surfaces before party checks.
euxaristia
committed
0c1d5e4

Commits on Sep 7, 2026

Commits on Sep 9, 2026

fix(node): Batch task quarantine checks to bound read costs.
euxaristia
committed
ab054fb
docs(node): clarify the shared task-read budget
euxaristia
committed
80ba7a3

Commits on Sep 10, 2026

fix(node,gl): bound scoped repo lookup and validate MCP cursor
euxaristia
committed
a0ea4c7

Commits on Sep 12, 2026

test(db): verify scoped lookup work in prepared plans
euxaristia
committed
35652da
docs(db): remove stray dedup comment escapes
euxaristia
committed
b360f3f