Michael NguyenandPaperclip 3093c5e694 fix(plugin-worker): resolve a company scope for proactive worker→host calls (#10103) ...

Host authorizes the plugin's configured companies as the worker's proactive scopes, set by the loader right after the #10092 config-delivery step and refreshed on operator config-save. At the single worker→host chokepoint, a no-invocation call (notifier drain, decision reconcile, mirror drain, digest, aging, liveness beat) that references a configured company resolves to that company's scope, so the #9557 governed-access gate admits it. One change covers the full proactive surface (state.*, issues.*, approvals.*, config.get, secrets.resolve, etc.).

Safety: never widens beyond configured companies (any other company stays denied); in-invocation calls keep #9557's strict single-company match untouched.

Fixes the Slack gateway DM round-trip for LOOA-629. Security review PASS (LOOA-693); non-blocking LOW follow-up tracked in LOOA-694.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-07-23 11:06:02 -07:00

..

scripts

…

src

fix(plugin-worker): resolve a company scope for proactive worker→host calls (#10103)

2026-07-23 11:06:02 -07:00

CHANGELOG.md

…

package.json

build(deps-dev): bump vitest from 4.1.8 to 4.1.10 (#9886)

2026-07-21 12:04:11 -05:00

tsconfig.json

…

vitest.config.ts

fix(test): stop flaky server-suite afterAll hook timeouts (#10024)

2026-07-22 11:51:30 -07:00