test: validate CODAGT-74 organization-scoped AI stack#27402
Draft
mafredri wants to merge 11 commits into
Draft
Conversation
Clone existing model configuration into each organization and enforce organization-local references for chats, messages, settings, and defaults.
Use organization ownership and direct read ACLs for model discovery and management without introducing a separate use permission.
Replace global model and model-bearing settings contracts with organization-qualified CRUD, ACL, discovery, and SDK surfaces.
Resolve runtime settings and model caches within each chat organization, propagate scoped invalidations, and update backend operational callers.
Clone MCP data into each organization and require organization context for configuration and token queries.
Authorize organization-owned MCP configuration and token operations through a dedicated RBAC resource.
Move MCP configuration collections under organizations and conceal unauthorized item and OAuth access.
Add share authorization and ACL-aware MCP configuration filtering after organization isolation is established.
Validate MCP selections against organization ownership, enabled state, and current ACLs while keeping existing chat runtime loading organization-scoped.
Require explicit organization context for model and MCP resources so queries, settings, and chat callers cannot fall back to deployment-wide state. Preserve action-specific permissions and URL selection across the existing frontend.
Model and MCP readers need an item-scoped sharing surface that does not depend on broad organization management permissions. Resolve each resource by ID, canonicalize its organization, and gate ACL mutations with the share permission.
Docs previewCheck off each page once it's been reviewed. If a page changes in a later push, its checkbox clears automatically so it gets a fresh look. Pages not yet wired into the docs navigation aren't listed here. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Validation contract
This draft PR validates the coordinated CODAGT-74 stack against
mainatd485786dfe399d7607f17d971d4366724e8cd3e9.Source and replay manifest
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 11 stable patch IDs match between each source head and aggregate replay.
Local validation
Passed:
git diff --check, with a clean worktreeAgentsPageView.stories.tsx: 24 passedStorybook test runs reproduce only baseline failures from the captured
main:AgentChatPage.stories.tsx:With Message HistoryTool.stories.tsx:MCP Tool CompletedAgentCreateForm.stories.tsx:Submits Reasoning EffortAgentChatPageView.stories.tsx:Scroll To Bottom Button Works With Inverse ScrollAgentChatPageView.stories.tsxalso reports the same xterm unhandled errors on aggregate and baselineThe aggregate-specific
AgentsPageViewprovider defect from the prior cycle is corrected.