Danny Avila fb0f9d1764 🔒 fix: Authorize permanent agent uploads without a posted tool resource ... Agent upload auth returned early whenever the request named no tool_resource, which was safe while such an upload was rejected later. Unified mode accepts it and promotes it to a context resource, and the resource write performs no ACL check, so an authenticated user could add persistent context, and the context tool, to any agent by id. Only message attachments, which belong to the conversation rather than the agent, now skip the check.		2026-08-31 10:58:28 -04:00
..
api	🔒 fix: Authorize permanent agent uploads without a posted tool resource	2026-08-31 10:58:28 -04:00
client	✅ feat: Delivery Receipt Checkmarks for Steered Messages (#15376)	2026-08-30 18:33:39 -04:00
data-provider	🐛 fix: Keep the system default when the upload provider is unresolved	2026-08-31 10:35:35 -04:00
data-schemas	🐛 fix: Persist provisionedAt + scope lazy file_search to agent resources	2026-08-30 20:33:55 -04:00