Restrict workspace writes to admins - #1919

Merged

RhysSullivan merged 22 commits into

mainfrom

workspace-admin-writes

Sep 2, 2026

Commits on Sep 1, 2026

Restrict workspace writes to admins

RhysSullivan
and
maschwenk
committed
1a0e196

Commits on Sep 2, 2026

Fix self-host MCP request forwarding
RhysSullivan
committed
fca1d3b
Update file secrets durability invariant
RhysSullivan
committed
c2c2b74
Fix versioned cloud credentials
RhysSullivan
committed
0bd654a
Fix self-host live-role scenario
RhysSullivan
committed
ea31cbe
Update cloud principal contract tests
RhysSullivan
committed
f38570d
Remove stray audit history assertions
RhysSullivan
committed
390aa48
Fix no-auth credential classification
RhysSullivan
committed
08a2f32
fix(mcp): project legacy stdio as no-auth
RhysSullivan
committed
9011ead
fix(graphql): classify empty auth templates as no-auth
RhysSullivan
committed
e33c27b
fix(sdk): defer no-auth classification to engine
RhysSullivan
committed
d8ae8c3
fix(sdk): ignore placements on no-auth methods
RhysSullivan
committed
d4bf88b
test(mcp): make reconcile cleanup infallible
RhysSullivan
committed
68ff693
test(graphql): use empty no-auth timeout input
RhysSullivan
committed
17ce156
test(e2e): remove no-auth placeholder credentials
RhysSullivan
committed
2e075f1
test(e2e): use empty no-auth credential shapes
RhysSullivan
committed
2860568
Project legacy stdio credentials truthfully
RhysSullivan
committed
33ec574
Reject invalid no-auth placements
RhysSullivan
committed
70c5907
Reject MCP no-auth credential input
RhysSullivan
committed
e8441ae
Propagate MCP test cleanup failures
RhysSullivan
committed
5ddae31
Honor projected legacy stdio credentials
RhysSullivan
committed
6ab5835
Deduplicate invalid auth method warnings
RhysSullivan
committed
322dc6b