Katia Bulatova 1759618b7f fix(webapp): keep the project-wide answer for an environment-agnostic user-actor token ...

Binding a delegated token to its environment claim on the project-wide
routes also refused any token that carries no claim at all, which the
public PAT exchange used by MCP and the CLI is allowed to issue. Line the
project-wide helper up with its neighbours: a claimless dashboard-agent
token is still refused, everything else stays project-wide.

2026-08-06 12:18:35 +00:00

..

api

v4: simplified release concurrency system and status changes (#2284)

2025-07-21 15:45:27 +01:00

assets

feat(webapp): Themes + contrast settings update (#4206)

2026-08-03 19:29:33 +02:00

components

chore(webapp): drop the comments the tests already say

2026-08-06 10:49:05 +00:00

hooks

chore: restore the comments an off-by-one over-trimmed

2026-08-05 21:38:13 +00:00

models

feat(webapp): enforce scopes for environment API keys (#4389)

2026-08-03 14:00:29 +01:00

presenters

fix(webapp): scope the watch submission ledger and its alerts to one tenant

2026-08-06 09:40:28 +00:00

routes

chore(webapp): drop the comments the code already says

2026-08-06 10:49:04 +00:00

runEngine

fix(webapp): clamp run priority so a large value can't fail run creation (#4512)

2026-08-05 16:28:22 +01:00

services

fix(webapp): keep the project-wide answer for an environment-agnostic user-actor token

2026-08-06 12:18:35 +00:00

utils

fix(webapp): drop the img-src wildcard host for a validated origin allowlist

2026-08-06 10:27:58 +00:00

v3

Merge branch 'main' into feat/dashboard-agent-flows

2026-08-06 10:27:43 +00:00

bootstrap.ts

…

clientBeforeFirstRender.ts

chore: format and lint webapp also (#4056)

2026-06-26 13:02:53 +01:00

consts.ts

…

database-types.ts

v4: simplified release concurrency system and status changes (#2284)

2025-07-21 15:45:27 +01:00

db.server.ts

feat(webapp): per-client database pool and connect timeout overrides (#4515)

2026-08-05 17:26:41 +01:00

entry.client.tsx

fix(webapp): plan-gate SSO settings before role gate and remove client session fetch guard (#4045)

2026-06-25 18:04:26 +01:00

entry.server.tsx

fix(webapp): drop the img-src wildcard host for a validated origin allowlist

2026-08-06 10:27:58 +00:00

env.server.ts

fix(webapp): drop the img-src wildcard host for a validated origin allowlist

2026-08-06 10:27:58 +00:00

eventLoopMonitor.server.ts

chore: activate no-unused-vars and import linters (#4096)

2026-07-02 11:37:05 +01:00

features.server.ts

feat(webapp,run-engine): queue metrics and health dashboard (#4131)

2026-07-29 16:45:24 +01:00

lib.es5.d.ts

…

metrics.server.ts

chore: activate no-unused-vars and import linters (#4096)

2026-07-02 11:37:05 +01:00

redis.server.ts

chore: activate no-unused-vars and import linters (#4096)

2026-07-02 11:37:05 +01:00

root.tsx

Merge branch 'main' into feat/dashboard-agent-flows

2026-08-06 10:27:43 +00:00

tailwind.css

chore(webapp): drop the prose from the chat markdown css rules

2026-08-05 21:35:24 +00:00

utils.ts

chore: format and lint webapp also (#4056)

2026-06-26 13:02:53 +01:00