Danny Avila 7dddc4ef05 fix: judge file consumers where they run, not where they upload ... Three related corrections from review, all one theme: upload time cannot see what will read a file. Stop refusing an upload for having no consumer on the agent record. A skill contributes file search or code execution for a turn through its allowed tools, and those are resolved per turn rather than stored on the agent, so an empty tool list was never evidence that nothing would read the file. The list still files an upload under a tool it names; it just no longer refuses one by its silence. This restores the pre-branch behavior for those uploads rather than introducing a new outcome. Warn at boot when a delivery fallback is set to none. The fallback covers every type no override names, so leaving it unannounced hid a wider change than any single override could make. Align the native text matcher with the textual MIME set in the content-protection code, adding javascript and x-yaml, and normalize parameters and case before matching so a browser-sent "text/plain; charset=utf-8" is still recognized. Drops mimeType from resolveUploadDestination, which no longer reads it.		2026-08-31 23:14:05 -04:00
..
__tests__	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
Agents	🛎️ feat: Wake Agents on Background Tool Completion (#15350)	2026-08-30 08:56:41 -04:00
Artifacts
Config	🧳 feat: Register Principal-Owned Code Environments (#15365)	2026-08-30 19:33:19 -04:00
Endpoints	🐛 fix: Hydrate deferred attachments for later tool calls	2026-08-31 14:22:50 -04:00
Files	fix: judge file consumers where they run, not where they upload	2026-08-31 23:14:05 -04:00
Runs	🛂 feat: Filter Model-Bound Content by Source (#14425)	2026-08-21 22:43:32 -04:00
Schedules	🗂️ feat: Scope Scheduled Chats to Chat Projects (#15056)	2026-08-21 11:09:04 -04:00
Skills
start
Threads	🧾 fix: Honor Disabled Transactions on the Assistants Usage Path (#15100)	2026-08-25 08:30:12 -04:00
Tools	🔄 fix: Recover Missing MCP Marketplace Catalogs (#15323)	2026-08-30 06:55:30 -04:00
ActionService.js	🕰️ fix: Guard expires_in So a Token Response Cannot Outlive Its Credential (#15321)	2026-08-28 10:47:09 -04:00
ActionService.spec.js	🛂 test: Cover Tool Approval Workflows End to End (#14427)	2026-07-26 21:58:25 -04:00
AssistantService.js	🛂 feat: Filter Model-Bound Content by Source (#14425)	2026-08-21 22:43:32 -04:00
AuthService.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
AuthService.spec.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
cleanup.js
createRunBody.js	🛂 feat: Filter Model-Bound Content by Source (#14425)	2026-08-21 22:43:32 -04:00
createRunBody.spec.js	🛂 feat: Filter Model-Bound Content by Source (#14425)	2026-08-21 22:43:32 -04:00
GraphApiService.js	🕰️ fix: Guard expires_in So a Token Response Cannot Outlive Its Credential (#15321)	2026-08-28 10:47:09 -04:00
GraphApiService.spec.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
GraphTokenService.js
initializeMCPs.js	🔌 feat: Add Agent Plugins (Experimental) (#14704)	2026-08-09 08:10:22 -04:00
initializeMCPs.plugins.spec.js	🔌 feat: Add Agent Plugins (Experimental) (#14704)	2026-08-09 08:10:22 -04:00
initializeMCPs.spec.js	🔌 feat: Add Agent Plugins (Experimental) (#14704)	2026-08-09 08:10:22 -04:00
initializeOAuthReconnectManager.js
MCP.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
MCP.spec.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
MCPRequestContext.js
OboPolicyService.js
OboTokenService.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
OboTokenService.spec.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
OpenIDRefreshFlight.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
OpenIDRefreshFlight.spec.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
OpenIDRefreshRecovery.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
OpenIDSessionRefresh.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
OpenIDSessionRefresh.spec.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
PermissionService.js	⚡ perf: Avoid Parallel Full and Paged Prompt Loading on Startup (#15031)	2026-08-25 21:21:17 -04:00
PermissionService.spec.js	🧳 feat: Register Principal-Owned Code Environments (#15365)	2026-08-30 19:33:19 -04:00
PluginService.js	🕸️ feat: Complete Keenable Web Search Provider (#15288)	2026-08-27 14:29:20 -04:00
PluginService.spec.js	🕸️ feat: Complete Keenable Web Search Provider (#15288)	2026-08-27 14:29:20 -04:00
RefreshTokenBridge.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
RefreshTokenBridge.spec.js	🔒 fix: Refresh MCP OBO Tokens From the Live OpenID Session (#15334)	2026-08-29 23:55:58 -04:00
systemGrant.spec.js
ToolService.js	🗿 feat: Add Attached Stateful Code Environments (#15352)	2026-08-30 15:38:45 -04:00
twoFactorService.js	🥁 fix: Compare TOTP Codes in Constant Time (#15157)	2026-08-24 09:10:03 -04:00
twoFactorService.spec.js	🥁 fix: Compare TOTP Codes in Constant Time (#15157)	2026-08-24 09:10:03 -04:00