Skip to content

fix: honor community agent access policy - #4560

Open
kerpopule wants to merge 1 commit into
block:mainfrom
kerpopule:fix/community-agent-access
Open

fix: honor community agent access policy#4560
kerpopule wants to merge 1 commit into
block:mainfrom
kerpopule:fix/community-agent-access

Conversation

@kerpopule

Copy link
Copy Markdown

Summary

  • make respond_to=anyone and explicit allowlists apply consistently in DMs
  • keep owner-only and nobody behavior unchanged
  • show shared channel-member agents in remote users' @ autocomplete

Why

A remote community member could see agents in the channel member list but mention autocomplete discarded every agent not managed on that member's own machine. Separately, the inbound author gate ignored anyone and allowlist policies in DMs.

Verification

  • cargo fmt --all -- --check
  • focused DM access-policy tests: 3 passed
  • owner-only regression: passed
  • mention eligibility unit tests: 18 passed
  • desktop test suite: 4,022 passed
  • desktop TypeScript typecheck: passed
  • Biome lint on changed desktop files: passed
  • independent pre-commit review: passed, no security or logic findings

Caveat

The full Rust lib suite reached 666 passing tests, with unrelated timing-sensitive ACP idle/keepalive tests failing intermittently on this host. The changed author-gate tests pass directly.

@kerpopule
kerpopule requested a review from a team as a code owner August 3, 2026 16:57
Signed-off-by: Steve Darlow <kerpopule@users.noreply.github.com>
@kerpopule
kerpopule force-pushed the fix/community-agent-access branch from b9bafbc to 31c14d3 Compare August 3, 2026 16:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant