Sam Morrow 05d9ff132b feat(auth): add OAuth scope policies ...

Model authorization as alternative paths with conjunctive requirements and
per-requirement scope alternatives. Resolve call-specific policies from tool
arguments for precise PAT filtering and OAuth challenges.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 26e41558-43f9-42b2-8569-8489957c2b0a

2026-08-21 02:17:29 +02:00

..

__toolsnaps__

fix(issues): flatten issue comment input schema

2026-08-20 10:50:12 +02:00

ui_dist

Add initial PoC for MCP Apps for select tools under Insiders (#1957)

2026-02-12 13:03:00 +00:00

actions_minimal_test.go

Minimize Actions workflow list responses (#3047)

2026-08-10 15:13:30 +01:00

actions_test.go

fix(actions): avoid malformed response on log download failure

2026-08-14 10:53:39 +02:00

actions.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

code_quality_test.go

chore(deps): bump go-github v87 → v89 and resolve breaking changes (#2840)

2026-07-08 15:08:59 +01:00

code_quality.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

code_scanning_test.go

chore(deps): bump go-github v87 → v89 and resolve breaking changes (#2840)

2026-07-08 15:08:59 +01:00

code_scanning.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

context_tools_test.go

fix(tools): allow omitted tool arguments

2026-08-19 12:24:04 +02:00

context_tools.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

copilot_test.go

fix(copilot): keep rate limit denials out of the review permission hint

2026-08-19 16:59:02 +02:00

copilot.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

csv_output_test.go

Promote issue fields and deprecate legacy issue write tool (#2696)

2026-06-19 14:09:47 +02:00

csv_output.go

feat(issues): gate issue-fields features behind remote_mcp_issue_fields flag (#2520)

2026-05-21 23:01:19 +02:00

dependabot_test.go

chore(deps): bump go-github v87 → v89 and resolve breaking changes (#2840)

2026-07-08 15:08:59 +01:00

dependabot.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

dependencies_test.go

refactor(lockdown): trim comments to non-obvious invariants

2026-08-19 16:30:34 +02:00

dependencies.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

deprecated_tool_aliases.go

update tool aliases

2026-01-06 17:38:12 +00:00

discussions_test.go

Centralize sanitization of untrusted GitHub response fields

2026-08-19 15:20:33 +02:00

discussions.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

feature_flags_test.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

feature_flags.go

Add non-default find_duplicate tool gated by duplicate_detection flag (#3020)

2026-08-07 09:45:49 +01:00

fields_filtering_test.go

test(issues): cover stable assignee responses

2026-08-19 11:36:21 +02:00

fields_telemetry_test.go

Add fields param to search_code and get_file_contents (#2775)

2026-07-10 09:50:47 +01:00

fields_telemetry.go

Add fields param to six more list/search tools (#2810)

2026-07-10 13:09:34 +01:00

find_duplicate_test.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

find_duplicate.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

gists_test.go

chore(deps): bump go-github v87 → v89 and resolve breaking changes (#2840)

2026-07-08 15:08:59 +01:00

gists.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

git_test.go

chore(deps): bump go-github v87 → v89 and resolve breaking changes (#2840)

2026-07-08 15:08:59 +01:00

git.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

granular_tools_test.go

Support singular Project Issue Field updates (#2941)

2026-08-07 08:31:43 -04:00

header_params_test.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

helper_test.go

fix(repos): guard writes to symbolic links

2026-08-19 13:06:59 +02:00

ifc_labels.go

chore(deps): bump go-github v87 → v89 and resolve breaking changes (#2840)

2026-07-08 15:08:59 +01:00

inventory.go

Make search_issues semantic by default (#2964)

2026-08-06 16:51:13 +02:00

issue_dependencies_test.go

Reimplement issue dependencies on go-github v89 REST API (#2839)

2026-07-09 11:39:20 +01:00

issue_dependencies.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

issue_fields_test.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

issue_fields.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

issues_delete_test.go

Bump go-github to pick up SearchType support (#2972)

2026-07-29 12:01:20 +01:00

issues_granular.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

issues_test.go

fix(issues): flatten issue comment input schema

2026-08-20 10:50:12 +02:00

issues.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

labels_test.go

Order list_label results by issue count (descending) (#2974)

2026-08-10 10:35:52 +02:00

labels.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

lockdown_test.go

test lockdown lookup-failure returns tool-result error

2026-07-16 13:53:36 +02:00

lockdown.go

centralise lockdown checks and default fail closed on empty author

2026-07-16 13:53:36 +02:00

minimal_types.go

Sanitize remaining issue-ref and blame headline response paths

2026-08-19 15:20:33 +02:00

notifications_test.go

fix(notifications): mark subscription tools destructive

2026-08-19 11:31:01 +02:00

notifications.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

params_test.go

Support removing issue types (#2999)

2026-08-06 20:25:58 -04:00

params.go

Support removing issue types (#2999)

2026-08-06 20:25:58 -04:00

projects_batch_mutation_test.go

Extract aliased project mutation primitive (#2923)

2026-07-22 15:52:17 +01:00

projects_batch_mutation.go

Extract aliased project mutation primitive (#2923)

2026-07-22 15:52:17 +01:00

projects_batch_test.go

Add batched update_project_items writes via GraphQL (#2903)

2026-07-29 15:57:26 -04:00

projects_batch.go

Add batched update_project_items writes via GraphQL (#2903)

2026-07-29 15:57:26 -04:00

projects_resolver_test.go

Add visible fields to project views (#2988)

2026-08-12 09:40:51 -04:00

projects_resolver.go

Add visible fields to project views (#2988)

2026-08-12 09:40:51 -04:00

projects_test.go

Add basic project view management (#2961)

2026-08-12 08:41:33 -04:00

projects_v2_test.go

Add visible fields to project views (#2988)

2026-08-12 09:40:51 -04:00

projects.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

prompts.go

refactor: Introduce Inventory pattern with builder, filtering, and per-request optimization (#1589)

2025-12-17 09:56:24 +01:00

pullrequests_granular.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

pullrequests_test.go

refactor: condense lockdown comments in pull_request_read get_commits

2026-08-19 15:28:10 +02:00

pullrequests.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

repositories_helper.go

fix(repos): label deferred symlink content accurately

2026-08-19 13:06:59 +02:00

repositories_test.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

repositories.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

repository_path_test.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

repository_path.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

repository_resource_completions_test.go

chore(deps): bump go-github v87 → v89 and resolve breaking changes (#2840)

2026-07-08 15:08:59 +01:00

repository_resource_completions.go

chore(deps): bump go-github v87 → v89 and resolve breaking changes (#2840)

2026-07-08 15:08:59 +01:00

repository_resource_test.go

fix(repositories): return raw bytes for MCP blobs

2026-08-19 11:32:08 +02:00

repository_resource.go

fix(repositories): return raw bytes for MCP blobs

2026-08-19 11:32:08 +02:00

request_state.go

Add confirmed repository deletion tool (#3076)

2026-08-18 14:50:38 +02:00

resources.go

refactor: Introduce Inventory pattern with builder, filtering, and per-request optimization (#1589)

2025-12-17 09:56:24 +01:00

sanitize_coverage_test.go

Sanitize remaining issue-ref and blame headline response paths

2026-08-19 15:20:33 +02:00

scope_filter_test.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

scope_filter.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

search_semantic_test.go

Make search_issues semantic by default (#2964)

2026-08-06 16:51:13 +02:00

search_test.go

Make fields parameter available by default (#2952)

2026-07-29 14:06:03 +01:00

search_utils_test.go

Fix duplicate filter issues across all search tools (#828)

2025-08-13 10:15:22 +01:00

search_utils.go

Centralize sanitization of untrusted GitHub response fields

2026-08-19 15:20:33 +02:00

search.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

secret_scanning_test.go

chore(deps): bump go-github v87 → v89 and resolve breaking changes (#2840)

2026-07-08 15:08:59 +01:00

secret_scanning.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

security_advisories_test.go

chore(deps): bump go-github v87 → v89 and resolve breaking changes (#2840)

2026-07-08 15:08:59 +01:00

security_advisories.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

server_test.go

test: assert advertised capabilities omit list-changed

2026-07-30 15:22:06 +02:00

server.go

fix: don't advertise unsupported list-changed capabilities

2026-07-30 15:22:06 +02:00

tool_scopes_test.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

tool_scopes.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

tools_static_validation_test.go

refactor(toolvalidation): extract ReadOnlyHint scanner into reusable package

2026-05-29 11:16:27 +02:00

tools_test.go

feat: move copilot tools to default copilot toolset (#2039)

2026-02-23 11:38:26 +01:00

tools_validation_test.go

fix(issues): flatten issue comment input schema

2026-08-20 10:50:12 +02:00

tools.go

perf(repos): reduce symlink guard overhead

2026-08-19 13:06:59 +02:00

toolset_icons_test.go

Bug fix: invalid tool should error out (#1776)

2026-01-15 17:37:06 +01:00

toolset_instructions.go

perf(repos): reduce symlink guard overhead

2026-08-19 13:06:59 +02:00

ui_capability_test.go

Add MCP App form deferral opt-out

2026-07-22 19:02:50 +02:00

ui_capability.go

Add MCP App form deferral opt-out

2026-07-22 19:02:50 +02:00

ui_embed.go

feat: Add CSV output format for default list tools under insiders mode (#2450)

2026-05-21 16:50:55 +02:00

ui_resources_test.go

MCP Apps with extra functionality (#1974)

2026-06-16 16:45:16 +01:00

ui_resources.go

MCP Apps with extra functionality (#1974)

2026-06-16 16:45:16 +01:00

ui_tools_test.go

chore(deps): bump go-github v87 → v89 and resolve breaking changes (#2840)

2026-07-08 15:08:59 +01:00

ui_tools.go

feat(auth): add OAuth scope policies

2026-08-21 02:17:29 +02:00

workflow_prompts.go

refactor: Introduce Inventory pattern with builder, filtering, and per-request optimization (#1589)

2025-12-17 09:56:24 +01:00