fix(node)!: Gate agent-task reads behind visibility rules - #327

Closed

euxaristia wants to merge 31 commits into

Gitlawb:mainfrom

euxaristia:fix/task-read-auth-gate

Commits on Aug 31, 2026

fix(node): gate agent-task reads behind the same visibility rules as repo data
euxaristia
committed
8b91534
fix(node): query the task limit-clamp test as the delegator
euxaristia
committed
e1d5149
fix(node): scope task visibility lookups to the page's repos
euxaristia
committed
d3f0880
Preserve authorized task reads across shipped clients.
euxaristia
committed
c765498
Bound denied task history scans.
euxaristia
committed
b26db4b
Signal incomplete task scans with recoverable cursors and map read errors to AppError.
euxaristia
committed
e3b1372
Stop disclosing denied task rows in the scan-wall cursor and add GraphQL pagination state.
euxaristia
committed
d43829b
Normalize task cursors and gate mutation endpoints behind visibility.
euxaristia
committed
81a1776
Update complete_task test in test_support to exercise both 404 on unreadable and 403 on non-assignee tasks.
euxaristia
committed
b1ddf9d
Bind task to repo id in complete_task test in test_support.
euxaristia
committed
15d5748
Preserve timestamp fractional width and anchor continuation tests on legitimate cursors.
euxaristia
committed
70b2509
Match on Value::Object to extract task ID in GraphQL continuation test.
euxaristia
committed
1029cdb
Remove unused mut binding on visible_newer in GraphQL query test.
euxaristia
committed
1ed73ae
Hide unauthorized claim and keep assigned tasks from being stolen

euxaristia
and
cairn-code
committed
0ec4c71
Keep task-list incomplete for the scan ceiling only.
euxaristia
committed
1b9820b
fix(node): pin claim guards and map mutation errors through AppError
euxaristia
committed
ecf478e
fix(node): match bare and did:key assignee forms in claim and list
euxaristia
committed
ecfbfe8
fix(node): check task creation status and add assignee expression index
euxaristia
committed
5ac011f
fix(node)!: Replace task cursors with opaque continuation tokens
euxaristia
committed
cb41fc3
fix(node): End the candidate stream only after the batch is examined
euxaristia
committed
193a965
fix(gl): Reject a non-positive task-list limit and fault the write under test
euxaristia
committed
a65d7c7
fix(node): Bind task cursors to the caller and brake the task read routes
euxaristia
committed
62893e6
fix(node): Brake anonymous GraphQL task reads on the same per-IP bucket
euxaristia
committed
d0a34f1
fix(gl,node): parse typed task pages, track cursor cycles, and normalize assignee filter MAC
euxaristia
committed
94605f8
fix(node): Cap aliased GraphQL task reads per request and derive has_more from visible rows
euxaristia
committed
e6cf84e
fix(node): Check database continuation when scan budget ends on exact batch boundary
euxaristia
committed
e3f4031
fix(node): Document and pin the bound on the task scan-ceiling probe
euxaristia
committed
7d641a3
Index task keyset pages so the scan ceiling bounds database work.
euxaristia
committed
7da135c
Reject oversized task pages so list never returns more than the requested limit.
euxaristia
committed
664fad4

Navigation Menu

Uh oh!

fix(node)!: Gate agent-task reads behind visibility rules - #327

fix(node)!: Gate agent-task reads behind visibility rules#327
euxaristia wants to merge 31 commits into
Gitlawb:mainfrom
euxaristia:fix/task-read-auth-gate

Commits on Aug 31, 2026

fix(node): gate agent-task reads behind the same visibility rules as repo data

fix(node): query the task limit-clamp test as the delegator

fix(node): scope task visibility lookups to the page's repos

Preserve authorized task reads across shipped clients.

Bound denied task history scans.

Signal incomplete task scans with recoverable cursors and map read errors to AppError.

Stop disclosing denied task rows in the scan-wall cursor and add GraphQL pagination state.

Normalize task cursors and gate mutation endpoints behind visibility.

Update complete_task test in test_support to exercise both 404 on unreadable and 403 on non-assignee tasks.

Bind task to repo id in complete_task test in test_support.

Preserve timestamp fractional width and anchor continuation tests on legitimate cursors.

Match on Value::Object to extract task ID in GraphQL continuation test.

Remove unused mut binding on visible_newer in GraphQL query test.

Hide unauthorized claim and keep assigned tasks from being stolen

Keep task-list incomplete for the scan ceiling only.

fix(node): pin claim guards and map mutation errors through AppError

fix(node): match bare and did:key assignee forms in claim and list

fix(node): check task creation status and add assignee expression index

fix(node)!: Replace task cursors with opaque continuation tokens

fix(node): End the candidate stream only after the batch is examined

fix(gl): Reject a non-positive task-list limit and fault the write under test

fix(node): Bind task cursors to the caller and brake the task read routes

fix(node): Brake anonymous GraphQL task reads on the same per-IP bucket

fix(gl,node): parse typed task pages, track cursor cycles, and normalize assignee filter MAC

fix(node): Cap aliased GraphQL task reads per request and derive has_more from visible rows

fix(node): Check database continuation when scan budget ends on exact batch boundary

fix(node): Document and pin the bound on the task scan-ceiling probe

Index task keyset pages so the scan ceiling bounds database work.

Reject oversized task pages so list never returns more than the requested limit.

Commits on Sep 2, 2026

Enforce task page limits on legacy responses and drop redundant single-column indexes.

Address review feedback on task-read authorization gating and client safety.