feat: org-level tool permissions with admin UI - #375

Merged

beng360 merged 23 commits into

mainfrom

feat/tool-permissions

May 9, 2026

Commits on May 9, 2026

feat: add centralized tool permissions for background action gate bypass
damianloch
committed
3524e7c
feat: add Tool Permissions UI card to SecuritySettings
damianloch
committed
ee48302
fix: add missing seed proxy route and empty state fallback
damianloch
committed
1f14e0c
edit ui
damianloch
committed
90d59f4
add missing gatings
damianloch
committed
d5211c4
fix: docker.sock mount, spinnaker bypass, wildcard permissions, UI polish
damianloch
committed
ef26b35
fix: resolve SonarQube code smells
damianloch
committed
df0c48f
feat: apply tool permissions to all background chats
damianloch
committed
ec39a03
fix: restore celery_beat common-env and FRONTEND_URL
damianloch
committed
b5a9c80
revert: remove docker.sock mounts from PR
damianloch
committed
7f2037f
fix: address CodeRabbit review findings
damianloch
committed
f8b0951
fix: address SonarQube issues
damianloch
committed
92ff8ba
fix: address remaining CodeRabbit findings on tool_permissions
damianloch
committed
91d51f6
bypass normal chats too
damianloch
committed
5b964ac
uodate UI
damianloch
committed
f717f5e
fix: apply tool permissions to all chats, not just background
damianloch
committed
1a053ed
fix: address PR review feedback from beng360
damianloch
committed
ad2a769
fix: replace empty except blocks with debug logging
damianloch
committed
653e155
fix: version-based cache invalidation, fail closed, update UI copy
damianloch
committed
f22a2be
feat: group tool permissions by risk level in UI
damianloch
committed
894a12f
feat: add tier-level toggles to bulk-enable/disable risk groups
damianloch
committed
5178438
edit grouping of permissions
damianloch
committed
b440ec4
refactor: explicit GitHub tiers, kill wildcard, address CR feedback
damianloch
committed
f19aeae

Navigation Menu

Uh oh!

feat: org-level tool permissions with admin UI - #375

feat: org-level tool permissions with admin UI#375
beng360 merged 23 commits into
mainfrom
feat/tool-permissions

Commits on May 9, 2026

feat: add centralized tool permissions for background action gate bypass

feat: add Tool Permissions UI card to SecuritySettings

fix: add missing seed proxy route and empty state fallback

edit ui

add missing gatings

fix: docker.sock mount, spinnaker bypass, wildcard permissions, UI polish

fix: resolve SonarQube code smells

feat: apply tool permissions to all background chats

fix: restore celery_beat common-env and FRONTEND_URL

revert: remove docker.sock mounts from PR

fix: address CodeRabbit review findings

fix: address SonarQube issues

fix: address remaining CodeRabbit findings on tool_permissions

bypass normal chats too

uodate UI

fix: apply tool permissions to all chats, not just background

fix: address PR review feedback from beng360

fix: replace empty except blocks with debug logging

fix: version-based cache invalidation, fail closed, update UI copy

feat: group tool permissions by risk level in UI

feat: add tier-level toggles to bulk-enable/disable risk groups

edit grouping of permissions

refactor: explicit GitHub tiers, kill wildcard, address CR feedback