fix(node)!: Gate agent-task reads behind visibility rules - #327

Open

euxaristia wants to merge 27 commits into

Gitlawb:mainfrom

euxaristia:fix/task-read-auth-gate

Commits on Aug 27, 2026

fix(node): gate agent-task reads behind the same visibility rules as repo data
euxaristia
committed
d3e7278
fix(node): query the task limit-clamp test as the delegator
euxaristia
committed
1ae3b61
fix(node): scope task visibility lookups to the page's repos
euxaristia
committed
587d5f0
Preserve authorized task reads across shipped clients.
euxaristia
committed
5edcaab
Bound denied task history scans.
euxaristia
committed
0ee6037
Signal incomplete task scans with recoverable cursors and map read errors to AppError.
euxaristia
committed
5a5cd18
Stop disclosing denied task rows in the scan-wall cursor and add GraphQL pagination state.
euxaristia
committed
8dfd29b
Normalize task cursors and gate mutation endpoints behind visibility.
euxaristia
committed
568f208
Update complete_task test in test_support to exercise both 404 on unreadable and 403 on non-assignee tasks.
euxaristia
committed
8ff03fc
Bind task to repo id in complete_task test in test_support.
euxaristia
committed
f1d0d63
Preserve timestamp fractional width and anchor continuation tests on legitimate cursors.
euxaristia
committed
4d62bcf
Match on Value::Object to extract task ID in GraphQL continuation test.
euxaristia
committed
711e8e4
Remove unused mut binding on visible_newer in GraphQL query test.
euxaristia
committed
baa230a
Hide unauthorized claim and keep assigned tasks from being stolen

euxaristia
and
cairn-code
committed
d2f8294
Keep task-list incomplete for the scan ceiling only.
euxaristia
committed
c53bbc6
fix(node): pin claim guards and map mutation errors through AppError
euxaristia
committed
9cf6320
fix(node): match bare and did:key assignee forms in claim and list
euxaristia
committed
a77c390
fix(node): check task creation status and add assignee expression index
euxaristia
committed
3e7dbc4
fix(node)!: Replace task cursors with opaque continuation tokens
euxaristia
committed
90a7565
fix(node): End the candidate stream only after the batch is examined
euxaristia
committed
1f9aee1
fix(gl): Reject a non-positive task-list limit and fault the write under test
euxaristia
committed
dbc1755
fix(node): Bind task cursors to the caller and brake the task read routes
euxaristia
committed
bdaabec
fix(node): Brake anonymous GraphQL task reads on the same per-IP bucket
euxaristia
committed
a9be8da
fix(gl,node): parse typed task pages, track cursor cycles, and normalize assignee filter MAC
euxaristia
committed
8f9b142
fix(node): Cap aliased GraphQL task reads per request and derive has_more from visible rows
euxaristia
committed
760a538
fix(node): Check database continuation when scan budget ends on exact batch boundary
euxaristia
committed
31329e3
fix(node): Document and pin the bound on the task scan-ceiling probe
euxaristia
committed
858b907

Navigation Menu

Uh oh!

fix(node)!: Gate agent-task reads behind visibility rules - #327

fix(node)!: Gate agent-task reads behind visibility rules#327
euxaristia wants to merge 27 commits into
Gitlawb:mainfrom
euxaristia:fix/task-read-auth-gate

Commits on Aug 27, 2026

fix(node): gate agent-task reads behind the same visibility rules as repo data

fix(node): query the task limit-clamp test as the delegator

fix(node): scope task visibility lookups to the page's repos

Preserve authorized task reads across shipped clients.

Bound denied task history scans.

Signal incomplete task scans with recoverable cursors and map read errors to AppError.

Stop disclosing denied task rows in the scan-wall cursor and add GraphQL pagination state.

Normalize task cursors and gate mutation endpoints behind visibility.

Update complete_task test in test_support to exercise both 404 on unreadable and 403 on non-assignee tasks.

Bind task to repo id in complete_task test in test_support.

Preserve timestamp fractional width and anchor continuation tests on legitimate cursors.

Match on Value::Object to extract task ID in GraphQL continuation test.

Remove unused mut binding on visible_newer in GraphQL query test.

Hide unauthorized claim and keep assigned tasks from being stolen

Keep task-list incomplete for the scan ceiling only.

fix(node): pin claim guards and map mutation errors through AppError

fix(node): match bare and did:key assignee forms in claim and list

fix(node): check task creation status and add assignee expression index

fix(node)!: Replace task cursors with opaque continuation tokens

fix(node): End the candidate stream only after the batch is examined

fix(gl): Reject a non-positive task-list limit and fault the write under test

fix(node): Bind task cursors to the caller and brake the task read routes

fix(node): Brake anonymous GraphQL task reads on the same per-IP bucket

fix(gl,node): parse typed task pages, track cursor cycles, and normalize assignee filter MAC

fix(node): Cap aliased GraphQL task reads per request and derive has_more from visible rows

fix(node): Check database continuation when scan budget ends on exact batch boundary

fix(node): Document and pin the bound on the task scan-ceiling probe