rcourtman 69e3286e5e security: fix AI OAuth scope bypass, approval replay attacks, and approval endpoint scope gating ...

- OAuth endpoints now require settings:write scope (not just admin)
- Approval endpoints now require ai:execute scope
- Added CommandHash to approvals for replay protection
- Approvals are now single-use (consumed on first use)
- consumeApprovalWithValidation validates command matches approval

2026-02-03 19:15:15 +00:00

..

adapters_test.go

Refactor: Update AI tools and tests for multi-tenancy

2026-01-22 16:43:08 +00:00

adapters.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

control_docker_helpers_test.go

Refactor: AI provider and executor multi-tenancy support

2026-01-22 16:51:45 +00:00

control_helpers_test.go

refactor: clean up AI tools and remove deprecated code

2026-01-22 22:31:04 +00:00

control_run_command_test.go

Consolidate and extend AI tool suite

2026-01-28 16:50:25 +00:00

control_test.go

refactor(ai): consolidate tool implementations into domain-specific files

2026-01-28 21:21:28 +00:00

data_types.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

discovery_adapter_test.go

test(ai): add unit tests for discovery adapter

2026-02-02 15:04:45 +00:00

docker_updates_test.go

refactor: clean up AI tools and remove deprecated code

2026-01-22 22:31:04 +00:00

executor_setters_test.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

executor.go

feat(ai): add RegisterTool method for runtime tool registration

2026-02-02 11:14:55 +00:00

file_docker_test.go

Consolidate and extend AI tool suite

2026-01-28 16:50:25 +00:00

infrastructure_helpers_test.go

Refactor: Update AI tools and tests for multi-tenancy

2026-01-22 16:43:08 +00:00

infrastructure_low_coverage_test.go

refactor(ai): consolidate tool implementations into domain-specific files

2026-01-28 21:21:28 +00:00

infrastructure_test.go

refactor(ai): consolidate tool implementations into domain-specific files

2026-01-28 21:21:28 +00:00

kubernetes_control_test.go

Consolidate and extend AI tool suite

2026-01-28 16:50:25 +00:00

kubernetes_test.go

Refactor: Update AI tools and tests for multi-tenancy

2026-01-22 16:43:08 +00:00

pmg_test.go

Refactor: Update AI tools and tests for multi-tenancy

2026-01-22 16:43:08 +00:00

protocol.go

Consolidate and extend AI tool suite

2026-01-28 16:50:25 +00:00

registry.go

feat: add AI Intelligence system with investigation and forecasting

2026-01-24 22:41:43 +00:00

shared_test.go

Refactor: Update AI tools and tests for multi-tenancy

2026-01-22 16:43:08 +00:00

strict_resolution_test.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

tools_alerts.go

refactor(ai): consolidate tool implementations into domain-specific files

2026-01-28 21:21:28 +00:00

tools_control.go

security: fix AI OAuth scope bypass, approval replay attacks, and approval endpoint scope gating

2026-02-03 19:15:15 +00:00

tools_discovery_test.go

fix(ai): discovery transient error handling, agentic loop detection, and read-only classification

2026-01-29 18:29:54 +00:00

tools_discovery.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

tools_docker.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

tools_file_test.go

test(ai): add validation tests for file tools

2026-02-02 19:24:11 +00:00

tools_file.go

Consolidate and extend AI tool suite

2026-01-28 16:50:25 +00:00

tools_knowledge.go

refactor(ai): consolidate tool implementations into domain-specific files

2026-01-28 21:21:28 +00:00

tools_kubernetes.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

tools_metrics_alerts_test.go

chore: remove remaining gitignored files from tracking

2026-01-28 21:19:52 +00:00

tools_metrics_downsample_test.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

tools_metrics.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

tools_patrol_test.go

feat(patrol): implement patrol findings, evaluation, and investigation logic

2026-01-31 16:23:08 +00:00

tools_patrol.go

feat(patrol): implement patrol findings, evaluation, and investigation logic

2026-01-31 16:23:08 +00:00

tools_pmg.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

tools_query_test.go

Consolidate and extend AI tool suite

2026-01-28 16:50:25 +00:00

tools_query.go

feat(ai): parallelize tool execution and refine knowledge extraction

2026-02-01 00:12:36 +00:00

tools_read.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

tools_storage_test.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

tools_storage.go

feat(backend): implement AI Patrol, Investigation, and system-wide refactors

2026-01-30 19:02:14 +00:00

types.go

refactor(ai): Replace mcp package with tools package for direct tool execution

2026-01-19 19:17:24 +00:00