Aurélien Sibiril 33119f9306 Scope PGCheckpointer queries by tenant GID ...

Each Save and Load now derives tenant_id from the run GID and pins it
in the WHERE clause. A caller that supplies an ID from another tenant
fails closed instead of silently reading or overwriting cross-tenant
checkpoint data. Also rejects oversize checkpoints on load as a
read-side guard against a tampered or migrated row exceeding
MaxCheckpointBytes.

Signed-off-by: Aurélien Sibiril <81782+aureliensibiril@users.noreply.github.com>

2026-04-26 22:58:21 +02:00

..

guardrail

Revert "Use inline trufflehog:ignore instead of exclude paths file"

2026-03-30 14:18:29 +02:00

tools

Fix errcheck and ineffassign lint errors

2026-04-24 14:24:48 +02:00

agent_test.go

Add vendor assessment agent

2026-04-24 08:43:14 +02:00

agent_tool_test.go

Add vendor assessment agent

2026-04-24 08:43:14 +02:00

agent_tool.go

Add vendor assessment agent

2026-04-24 08:43:14 +02:00

agent.go

Add vendor assessment agent

2026-04-24 08:43:14 +02:00

approval_test.go

Add agent library

2026-03-13 17:21:43 +01:00

approval.go

Remove json tags from internal structs

2026-04-26 22:58:21 +02:00

checkpoint.go

Scope PGCheckpointer queries by tenant GID

2026-04-26 22:58:21 +02:00

context_test.go

Add agent library

2026-03-13 17:21:43 +01:00

context.go

Add agent library

2026-03-13 17:21:43 +01:00

errors.go

Add checkpoint types and stop signal for agent suspension

2026-04-26 22:58:21 +02:00

guardrail.go

Add agent library

2026-03-13 17:21:43 +01:00

handoff_test.go

Add agent library

2026-03-13 17:21:43 +01:00

handoff.go

Return errors from schema generation instead of panicking

2026-03-13 18:56:56 +01:00

hooks.go

Add checkpoint persistence to agent core loop

2026-04-26 22:58:21 +02:00

mcp_test.go

Fall back to StructuredContent in MCP tool results

2026-03-13 19:43:19 +01:00

mcp.go

Fall back to StructuredContent in MCP tool results

2026-03-13 19:43:19 +01:00

model_settings.go

Add vendor assessment agent

2026-04-24 08:43:14 +02:00

output_type_test.go

Return errors from schema generation instead of panicking

2026-03-13 18:56:56 +01:00

output_type.go

Return errors from schema generation instead of panicking

2026-03-13 18:56:56 +01:00

progress.go

Add vendor assessment agent

2026-04-24 08:43:14 +02:00

restore_test.go

Snapshot MaxTurns in checkpoint and apply it on restore

2026-04-26 22:58:21 +02:00

restore.go

Snapshot MaxTurns in checkpoint and apply it on restore

2026-04-26 22:58:21 +02:00

result_test.go

Add agent library

2026-03-13 17:21:43 +01:00

result.go

Add agent library

2026-03-13 17:21:43 +01:00

run.go

Refine tool dispatch errors in resume path

2026-04-26 22:58:21 +02:00

schema_test.go

Return errors from schema generation instead of panicking

2026-03-13 18:56:56 +01:00

schema.go

Return errors from schema generation instead of panicking

2026-03-13 18:56:56 +01:00

session_memory_test.go

Add agent library

2026-03-13 17:21:43 +01:00

session_memory.go

Add agent library

2026-03-13 17:21:43 +01:00

session.go

Add agent library

2026-03-13 17:21:43 +01:00

stop_test.go

Add checkpoint types and stop signal for agent suspension

2026-04-26 22:58:21 +02:00

stop.go

Add checkpoint types and stop signal for agent suspension

2026-04-26 22:58:21 +02:00

stream.go

Add checkpoint persistence to agent core loop

2026-04-26 22:58:21 +02:00

system_prompt_test.go

Add agent library

2026-03-13 17:21:43 +01:00

system_prompt.go

Add agent library

2026-03-13 17:21:43 +01:00

tool_test.go

Add vendor assessment agent

2026-04-24 08:43:14 +02:00

tool_use_behavior_test.go

Add agent library

2026-03-13 17:21:43 +01:00

tool_use_behavior.go

Add agent library

2026-03-13 17:21:43 +01:00

tool.go

Remove json tags from internal structs

2026-04-26 22:58:21 +02:00

typed_test.go

Add vendor assessment agent

2026-04-24 08:43:14 +02:00

typed.go

Fix typeName panic for interface type parameters

2026-03-13 19:34:07 +01:00