Bryan Frimin 98a8d90391 Relocate agent-run authorization to its package ...

The agent-run actions and policies lived in the core probo policy set,
which forced every authorization change for the agent-run domain to
touch unrelated core files. Move the actions and the OWNER/ADMIN and
VIEWER/AUDITOR policies into the agentrun package and have it expose a
PolicySet that probod registers into the authorizer at composition
time, so the rules live alongside the domain logic they govern.

Signed-off-by: Bryan Frimin <bryan@probo.com>

2026-06-08 15:27:56 +02:00

..

dataloader

Migrate audit reports to the files table

2026-06-05 16:16:50 +02:00

graphql

Replace supervisor with agentrun worker service

2026-06-08 15:27:50 +02:00

schema

Update copyright headers across all Go files

2026-03-25 17:38:32 +01:00

types

Replace supervisor with agentrun worker service

2026-06-08 15:27:50 +02:00

access_review_campaign_resolvers.go

Consolidate connector provider dispatch behind a typed *Registry

2026-05-27 00:34:39 +02:00

access_source_provider_config.go

Add Zendesk access-review connector

2026-06-04 20:55:48 +02:00

agent_run_resolvers.go

Replace supervisor with agentrun worker service

2026-06-08 15:27:50 +02:00

asset_resolvers.go

Remove obsolete minor publish error

2026-05-26 08:26:49 -07:00

audit_log_resolvers.go

Enforce IAM authorization on every console resolver

2026-05-23 13:31:38 -07:00

audit_resolvers.go

Migrate audit reports to the files table

2026-06-05 16:16:50 +02:00

base_resolvers.go

Relocate agent-run authorization to its package

2026-06-08 15:27:56 +02:00

common_third_party_resolvers.go

Use stable files API URLs for vendor logo fields

2026-06-03 10:30:29 +02:00

connector_initiate.go

Add per-site authorize URL and per-domain token URL OAuth2 plumbing

2026-06-03 17:14:44 +02:00

connector_oauth_client_metadata_test.go

Clarify trust center access rejection emails

2026-06-05 14:13:48 +02:00

connector_oauth_client_metadata.go

Serve the OAuth client metadata document

2026-06-03 17:00:07 +02:00

connector_provider_info.go

Consolidate connector provider dispatch behind a typed *Registry

2026-05-27 00:34:39 +02:00

connector_resolvers.go

Register Okta connector and wire API-key settings

2026-06-04 19:23:26 +02:00

connector_settings.go

Register Okta connector and wire API-key settings

2026-06-04 19:23:26 +02:00

control_resolvers.go

Remove obsolete minor publish error

2026-05-26 08:26:49 -07:00

cookie_banner_resolvers.go

Link cookie policy doc and revamp tracker rows

2026-06-02 16:21:01 +02:00

cookie_consent_record_resolvers.go

Create scope in Authorize

2026-05-23 13:31:34 -07:00

data_protection_impact_assessment_resolvers.go

Remove obsolete minor publish error

2026-05-26 08:26:49 -07:00

document_resolvers.go

Take resolver scope from authorize, not the GID

2026-05-29 10:07:29 +02:00

electronic_signature_resolvers.go

Enforce IAM authorization on every console resolver

2026-05-23 13:31:38 -07:00

evidence_resolvers.go

Style

2026-05-23 13:31:34 -07:00

file_resolvers.go

Style

2026-05-23 13:31:34 -07:00

framework_resolvers.go

Style

2026-05-23 13:31:35 -07:00

gqlgen.yaml

Rename resolver files from dot to underscore separation

2026-04-15 09:19:40 +04:00

graphql_handler.go

Replace supervisor with agentrun worker service

2026-06-08 15:27:50 +02:00

mailing_list_resolvers.go

Create scope in Authorize

2026-05-23 13:31:34 -07:00

measure_resolvers.go

Link measures to third parties

2026-05-26 15:49:17 +02:00

obligation_resolvers.go

Remove obsolete minor publish error

2026-05-26 08:26:49 -07:00

organization_resolvers.go

Relocate agent-run authorization to its package

2026-06-08 15:27:56 +02:00

processing_activity_resolvers.go

Remove obsolete minor publish error

2026-05-26 08:26:49 -07:00

provider_organizations.go

Add wsl linter and fix

2026-05-20 09:27:28 +04:00

resolver.go

Replace supervisor with agentrun worker service

2026-06-08 15:27:50 +02:00

rights_request_resolvers.go

Style

2026-05-23 13:31:34 -07:00

risk_assessment_resolvers.go

Create scope in Authorize

2026-05-23 13:31:34 -07:00

risk_resolvers.go

Take resolver scope from authorize, not the GID

2026-05-29 10:07:29 +02:00

task_resolvers.go

Style

2026-05-23 13:31:35 -07:00

third_party_resolvers.go

Add async third-party vetting

2026-06-02 11:39:51 +02:00

trust_center_resolvers.go

Migrate audit reports to the files table

2026-06-05 16:16:50 +02:00

viewer_resolvers.go

Style

2026-05-23 13:31:35 -07:00

webhook_resolvers.go

Style

2026-05-23 13:31:35 -07:00