3 Commits

Author	SHA1	Message	Date
Peter Steinberger	cd0a1235a3	feat: sync new-session preferences and recents by identity (#121816) ... * feat(gateway): add identity preferences and project recents * feat(ui): sync new-session identity state * docs: explain identity-scoped session state * test: track preference temp directories * fix(gateway): preserve identity preference boundaries * chore(protocol): refresh identity preference bindings * test: refresh historical schema hashes * style(gateway): format method order assertion * fix(protocol): emit project recent Swift models * test(gateway): track preference RPC release train * fix(gateway): harden identity preference state * fix(state): keep preference errors internal * chore: refresh split plugin SDK baseline * fix(gateway): use core session store loader * refactor(state): fold additive migration checks * chore: regenerate plugin SDK baseline * chore: regenerate plugin SDK baseline * chore: regenerate plugin SDK baseline * chore: regenerate plugin SDK baseline * chore: regenerate plugin SDK baseline * chore: regenerate plugin SDK baseline * chore: regenerate plugin SDK baseline * test(ui): relocate identity recents e2e * chore: regenerate plugin SDK baseline * chore: regenerate plugin SDK baseline * chore: regenerate plugin SDK baseline * chore: regenerate plugin SDK baseline * chore: regenerate plugin SDK baseline	2026-08-11 16:52:59 -07:00
Ayaan Zaidi	6a4a546593	feat(mcp): per-requester OAuth for MCP servers (#122166) ... Per-requester OAuth for HTTP MCP servers: in shared channels each trusted sender connects their own account. New config: mcp.servers.<name>.oauth.identity ("shared" default, byte-identical behavior) and gateway.publicOrigin (HTTPS except loopback) for the new GET /oauth/mcp/callback served on the Gateway HTTP server. Requester tokens are isolated per (channel, account, sender) in mcp_oauth_stores rows (no schema bump); callbacks correlate through a durable state-keyed one-time index with a 10-minute TTL; per-requester servers are fail-closed out of static/scheduled runtimes; unauthenticated senders get a sign-in link with a portable URL button; MCP config mutations clear requester credentials at the canonical owner. mcp status --json keeps the legacy authStatus fields additively. Proven by a two-user self-hosted-Executor E2E through the real gateway callback. Part of #122034. Co-authored-by: Ayaan Zaidi <hi@obviy.us>	2026-08-11 20:58:51 +00:00
Peter Steinberger	d1452fb5d1	refactor(plugin-sdk): split API baseline by entrypoint (#122082)	2026-08-11 08:54:42 -07:00