chore: sync public mirror from internal - #1248
Conversation
|
Resolved 0 review-bot thread(s) on this generated public mirror PR. Review of mirrored code belongs on the mono source PR. |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 79609f21b8
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
|
|
||
| fn runtime_tenant_resource_path(path: &str) -> bool { | ||
| path.starts_with("/api/chat") | ||
| || path.starts_with("/api/hosted-threads/") |
There was a problem hiding this comment.
On a non-loopback gateway, GET /api/hosted-threads does not match this trailing-slash prefix, so it receives ordinary read authorization instead of tenant-read authorization. The new handler accepts that root path as the collection listing endpoint, and a valid JWT with no tenant claims passes authorization; session_matches_auth then imposes no constraints and lists threads using the gateway process's managed session. Include the exact root path in the tenant-resource predicate to prevent tenantless remote callers from reading those thread names and counts.
Useful? React with 👍 / 👎.
Summary
dx-corp/monodx-corp/codeas a generated public mirror of the private source of truthdc2633f387866330906a8eb01a53a05f29ddb6a41a45f8314db3701fad50948cc68c11393130024f9file(s) to copy/update and0stale file(s) to delete0sync-holdlabel to this PR; the sync workflow skips every push while it is setSource-of-truth status
Projection: deixic-code
Source: dx-corp/mono@dc2633f387866330906a8eb01a53a05f29ddb6a4
Prior destination base: 1a45f83
Content SHA-256: 696812e7a6f2c121810ace9a63cf0def9e81291515a6a367a08d4639e0b630de
Result: drift_detected; 9 changed, 0 deleted
Destination-owned content is preserved. Destination CI is a separate health signal.
copy/update .repository-projection.json
copy/update packages/local-host-rs/src/credential_mode.rs
copy/update packages/local-host-rs/src/hosted_thread.rs
copy/update packages/local-host-rs/src/lib.rs
copy/update packages/runtime-gateway-rs/src/auth.rs
copy/update packages/runtime-gateway-rs/src/hosted_threads.rs
copy/update packages/runtime-gateway-rs/src/lib.rs
copy/update packages/runtime-gateway-rs/src/tests.rs
copy/update packages/tui-rs/src/thread_cli.rs
Drift sample
Public-only commits since last generated sync
Validation
Test Plan
maestro-sync-public-release-mirrorworkflow inpublic-treemoderequire-internal-prconfirms internal source PR lineageStaged Rollout
dx-corp/mono@dc2633f387866330906a8eb01a53a05f29ddb6a4, including existing hidden/evaluation surfaces, and keeps public package parity behind the established public-source-provenance gate.