Devin Robison 703e68a749 Fix HTTP OpenAI-compatible routes missing operator.write scope checks (#56618) ...

* Fix HTTP OpenAI-compatible routes missing operator.write scope checks

* Update src/gateway/http-endpoint-helpers.ts

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>

* Address Greptile feedback

---------

Co-authored-by: greptile-apps[bot] <165735046+greptile-apps[bot]@users.noreply.github.com>

2026-03-28 15:22:21 -06:00

..

acp

fix(acp): repair stale bindings after runtime exits (#56476)

2026-03-29 01:15:16 +08:00

agents

fix(auto-reply): suppress JSON-wrapped NO_REPLY payloads before channel delivery (#56612)

2026-03-28 22:07:24 +01:00

auto-reply

fix(auto-reply): suppress JSON-wrapped NO_REPLY payloads before channel delivery (#56612)

2026-03-28 22:07:24 +01:00

bindings

…

bootstrap

…

canvas-host

…

channels

refactor: derive channel metadata from plugin manifests

2026-03-28 17:17:10 +00:00

chat

…

cli

fix(cli): defer zsh compdef registration until compinit is available (#56555)

2026-03-28 19:35:32 +01:00

commands

refactor(commands): drop provider default facade shims

2026-03-28 06:11:13 +00:00

compat

…

config

refactor: derive channel metadata from plugin manifests

2026-03-28 17:17:10 +00:00

context-engine

…

cron

refactor(acp): generalize message-channel binds

2026-03-28 02:53:54 +00:00

daemon

…

docs

…

extensions

refactor: move public artifact metadata into plugins

2026-03-27 16:39:42 +00:00

flows

fix(regression): restore typed provider compat tests

2026-03-27 20:24:14 -05:00

gateway

Fix HTTP OpenAI-compatible routes missing operator.write scope checks (#56618)

2026-03-28 15:22:21 -06:00

generated

…

hooks

test: dedupe utility and config suites

2026-03-28 00:26:55 +00:00

i18n

…

image-generation

test(providers): align active registry expectations

2026-03-28 16:15:56 +05:30

infra

fix(auto-reply): suppress JSON-wrapped NO_REPLY payloads before channel delivery (#56612)

2026-03-28 22:07:24 +01:00

interactive

test: dedupe config and utility suites

2026-03-28 00:46:53 +00:00

link-understanding

…

logging

test: debrand plumbing labels and restore skill compat

2026-03-27 21:50:39 +00:00

markdown

test: dedupe utility and config suites

2026-03-28 00:26:55 +00:00

mcp

test: use suite gateway hooks for channel mcp

2026-03-28 13:52:59 +05:30

media

test: repair focused unit lane drift

2026-03-28 11:41:06 +00:00

media-understanding

test: make minimax image path batch-stable

2026-03-28 15:07:53 +05:30

node-host

test: dedupe config and utility suites

2026-03-28 00:46:53 +00:00

pairing

test: fix media and channel regression expectations

2026-03-28 08:10:47 +00:00

plugin-sdk

test(plugin-sdk): align matrix runtime api guardrail

2026-03-28 16:20:33 +05:30

plugins

fix(security): audit web search keys for all bundled providers (#56540)

2026-03-28 18:55:38 +01:00

process

fix(process): wait for windows close state settlement

2026-03-28 16:55:15 +05:30

routing

test: dedupe routing and text suites

2026-03-28 07:31:40 +00:00

scripts

Docs: unify link audit entrypoint (#55912)

2026-03-27 18:31:19 +01:00

secrets

Secrets: fix Matrix default-account password activity

2026-03-28 01:08:33 -04:00

security

fix(security): audit web search keys for all bundled providers (#56540)

2026-03-28 18:55:38 +01:00

sessions

test: dedupe helper-heavy test suites

2026-03-27 22:35:27 +00:00

shared

test: align code region fence slices

2026-03-28 11:48:13 +00:00

terminal

fix(ci): restore runtime-api guardrails

2026-03-27 15:56:54 +00:00

test-helpers

…

test-utils

refactor: derive channel metadata from plugin manifests

2026-03-28 17:17:10 +00:00

tts

test: fix tts status helper temp-home prefs path

2026-03-28 11:35:33 +00:00

tui

fix: resolve loader and test fallout after sdk split

2026-03-27 23:27:55 +00:00

types

…

utils

refactor: derive channel metadata from plugin manifests

2026-03-28 17:17:10 +00:00

web-search

refactor(xai): move bundled xai runtime into plugin

2026-03-28 05:02:41 +00:00

wizard

test: debrand final helper placeholders

2026-03-27 22:06:29 +00:00

channel-web.ts

…

docker-build-cache.test.ts

…

docker-image-digests.test.ts

…

docker-setup.e2e.test.ts

…

dockerfile.test.ts

…

entry.respawn.test.ts

…

entry.respawn.ts

…

entry.test.ts

…

entry.ts

…

entry.version-fast-path.test.ts

…

extensionAPI.ts

…

global-state.ts

…

globals.ts

…

index.test.ts

…

index.ts

…

install-sh-version.test.ts

…

library.test.ts

fix: repair latest-main ci gate

2026-03-27 17:57:23 +00:00

library.ts

fix: repair latest-main ci gate

2026-03-27 17:57:23 +00:00

logger.test.ts

test: dedupe utility and config suites

2026-03-28 00:26:55 +00:00

logger.ts

fix(runtime): stabilize provider and channel runtime tests

2026-03-27 18:15:40 +00:00

logging.ts

…

param-key.ts

…

poll-params.test.ts

…

poll-params.ts

…

polls.test.ts

…

polls.ts

…

runtime.ts

…

utils.test.ts

…

utils.ts

fix(ci): restore runtime-api guardrails

2026-03-27 15:56:54 +00:00

version.test.ts

…

version.ts

…