feat(dot): add guided invitations and persistent agent connections (#15581)

Add guided external-agent invitations with live Dot connection checks and ongoing access until revoked. Keep expired credentials invalid and enforce permissions for private avatar uploads. Preserve Runner recovery and remote launch boundaries.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
DottaandPaperclip authored and GitHub committed 2026-10-08 16:26:41 -05:00
1 parent 04de3132c2
commit 2b4a1d7073
61 files changed
+7529 -4422

No files matched your search

+2
View File
@@ -89,6 +89,8 @@ export function isSecretSensitiveHttpRequest(
if (isPrivateWebhookHttpRequest(method, url)) return true;
if (url && normalizePath(url).startsWith("/mcp/files/")) return true;
if (isPrivateAgentCommentaryHttpRequest(url)) return true;
// Avatar uploads and dedicated Dot MCP calls may contain private image bytes.
if (url && /^(?:\/mcp\/runner(?:\/|$)|\/api\/companies\/[^/]+\/agents\/[^/]+\/avatar(?:\/|$))/i.test(normalizePath(url).replace(/^https?:\/\/[^/]*/i, ""))) return true;
if (!method || !url) return false;
if (/^\/api\/chat-slack\/oauth(?:\/|$)/i.test(normalizePath(url).replace(/^https?:\/\/[^/]*/i, ""))) return true;
if (/^\/api\/chat-endpoints\/[^/]+\/slack(?:\/|$)/i.test(normalizePath(url).replace(/^https?:\/\/[^/]*/i, ""))) return true;