5 Commits

Include renames

Author	SHA1	Message	Date
DottaandPaperclip	35b6b467df	Enforce connection scopes and human ownership in account discovery ... Filter AgentMail metadata before credential discovery, keep aggregator settings and inventory under the responsible user, and retain actual-agent audit identity. Return the committed nonsecret generation alongside human-only setup secrets so clients can reconcile a lost replacement response. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-10-26 16:52:54 -05:00
DottaandPaperclip	f99e8aa6d5	Keep credential handoffs pending until their requested change commits ... Separate saved import, identity, and rotation actions; bind rotation completion atomically to new vault references and fresh verification. Keep signing-key import human-only. Exercise authorized self-targeted policy administration without granting self-approval. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-10-26 15:06:38 -05:00
DottaandPaperclip	096d2b0039	Keep GitHub webhook secret rotation in human setup ... Return a saved setup handoff for delegated agents and reject plaintext signing-secret generation at the service boundary. Verify key/JWT handoffs preserve credential refs and human sessions can still rotate. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-10-26 13:37:44 -05:00
DottaandPaperclip	dfc9d612eb	feat(connections): let agents configure connections within delegated authority ... Keep management bounded by responsible users, scoped grants, current trust, and existing execution policy. Preserve human authentication handoffs and delegated gateway token authority. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-10-26 08:55:24 -05:00
DottaandPaperclip	d837b65be8	refactor(server): move provider setup, inventory and delivery into channel folders (#16058) ... Consolidate the ten reviewed provider-folder extractions. Preserve the verified source tree and current master changes. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-10-13 00:26:33 -05:00