jpmschweitzer/odysseus
1
0
Fork 0
mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-10-22 06:42:20 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): isolate bearer authorization paths

Browse Source
This commit is contained in:
RaresKeY
2026-08-28 21:25:23 +00:00
parent 9150a453b4
commit 50c8675a21
24 changed files with 1173 additions and 160 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/tool_approval_scopes.py
+3 -2
View File
@@ -12,8 +12,9 @@ TASK_APPROVAL_DECISION = "approve_task"
CHAT_SESSION_APPROVAL_DECISION = "approve"
DENY_APPROVAL_DECISION = "deny"
# Session.get_context_messages() adds this server-owned marker only when the
# session history contains a matching, resolved chat-session approval.
# Session.get_context_messages() adds this server-owned marker only when a
# separate, immutable, owner/session-bound approval grant exists. Transcript
# metadata is display-only and never establishes the marker.
CHAT_SESSION_APPROVAL_CONTEXT_MARKER = "_tool_approval_chat_session_granted"