Alexandre Teixeira
2e1c2a343a
merge(dev): reconcile photo editor security and upstream changes
...
- Reconcile conflict resolution in routes/editor_agent_routes.py and src/editor_agent_model.py
- Enforce strict server-authorized endpoint resolution and reject client URL overrides
- Enforce bearer-token privilege separation: delegated API tokens are capped at non-admin scope per src/tool_security.py and cannot inspect private base URLs or probe metadata
- Preserve chat-scope authorization, missing-session 401 rejection, and owner-scoped browser bridge/SSE queues
- Preserve administrator-disabled-tool denylist enforcement introduced by PR #6357
- Fix mobile toolbar flyout hit-testing and stacking context trapping on viewports <= 700px via scoped elevation and mask suppression
- Stabilize project recovery test fixture by awaiting document draft quiescence prior to baseline capture
2026-10-28 19:30:08 +00:00
..
2026-10-28 19:30:08 +00:00
2026-10-15 11:57:35 +00:00
2026-10-28 17:37:10 +00:00
2026-10-28 17:37:10 +00:00
2026-10-28 17:37:10 +00:00
2026-10-26 16:49:01 +00:00
2026-10-15 11:57:35 +00:00
2026-09-11 06:04:19 +00:00
2026-10-01 01:34:26 +00:00
2026-10-28 17:37:10 +00:00
2026-10-01 01:34:26 +00:00
2026-09-11 06:04:19 +00:00
2026-10-15 11:57:35 +00:00
2026-10-01 01:34:26 +00:00
2026-10-26 16:21:28 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-26 16:31:23 +00:00
2026-10-26 16:21:28 +00:00
2026-10-28 17:37:10 +00:00
2026-10-28 17:37:10 +00:00
2026-09-11 06:04:19 +00:00
2026-10-15 11:57:35 +00:00
2026-05-31 23:58:26 +09:00
2026-10-28 17:37:10 +00:00
2026-10-15 11:57:35 +00:00
2026-09-11 06:04:19 +00:00
2026-10-15 11:57:35 +00:00
2026-09-11 06:04:19 +00:00
2026-10-15 11:57:35 +00:00
2026-10-26 16:21:28 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-09-11 06:04:19 +00:00
2026-06-29 19:16:26 +01:00
2026-10-26 16:21:28 +00:00
2026-10-15 11:57:35 +00:00
2026-10-26 16:21:28 +00:00
2026-10-15 11:57:35 +00:00
2026-09-11 06:04:19 +00:00
2026-10-15 11:57:35 +00:00
2026-10-26 16:21:28 +00:00
2026-10-15 11:57:35 +00:00
2026-10-28 17:37:10 +00:00
2026-09-11 06:04:19 +00:00
2026-10-01 01:34:26 +00:00
2026-10-01 01:34:26 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-09-11 06:04:19 +00:00
2026-10-26 16:21:28 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-09-11 06:04:19 +00:00
2026-10-26 16:21:28 +00:00
2026-10-15 11:57:35 +00:00
2026-10-26 16:31:23 +00:00
2026-09-11 06:04:19 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-26 16:21:28 +00:00
2026-09-17 10:07:40 +00:00
2026-09-11 06:04:19 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-26 16:21:28 +00:00
2026-10-26 16:21:28 +00:00
2026-09-11 06:04:19 +00:00
2026-10-28 17:37:10 +00:00
2026-10-28 17:37:10 +00:00
2026-10-26 16:21:28 +00:00
2026-10-28 17:37:10 +00:00
2026-10-26 16:21:28 +00:00
2026-10-26 16:21:28 +00:00
2026-09-11 06:04:19 +00:00
2026-10-26 16:21:28 +00:00
2026-10-26 16:21:28 +00:00
2026-10-26 16:21:28 +00:00
2026-10-15 11:57:35 +00:00
2026-09-11 06:04:19 +00:00
2026-10-15 11:57:35 +00:00
2026-10-26 16:21:28 +00:00
2026-10-15 11:57:35 +00:00
2026-10-15 11:57:35 +00:00
2026-10-28 17:37:10 +00:00
2026-10-15 11:57:35 +00:00
2026-10-26 16:21:28 +00:00