Ruben FiszelandClaude Opus 5.5 4f712318c3 feat: run previews as the runnable's on_behalf_of identity (#11778) ...

* feat: run script and flow previews on behalf of another user

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: refuse operators and detect servers that drop preview on_behalf_of

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* feat: editor previews run as the configured on_behalf_of identity

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: probe before submitting, keep step and viewer data identity in previews

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: never let a job token request viewer data access on a preview

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* feat: open impersonated preview logs with who they run as and who asked

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-15 10:13:27 +00:00

..

fixtures

feat: put a data table's connection under Postgres roles (#11020)

2026-09-18 13:56:41 +02:00

agent_runs.rs

feat: agents as a standalone kind with home listing, detail and editor pages (#11332)

2026-09-30 18:40:05 +02:00

ai_routes.rs

feat: add test key button to AI resource drawers (#11466)

2026-10-01 18:25:49 +02:00

apps.rs

feat: make createApp and updateApp the full-code app tools over MCP (#10510)

2026-08-04 18:20:48 +02:00

assets.rs

fix: show runtime-detected assets in a run's Assets tab (#10738)

2026-08-18 10:26:20 +02:00

audit.rs

fix: make on_behalf_of control permissions for scripts and flows (#10438)

2026-08-01 20:37:21 +02:00

capture_unauthed.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

ci_tests.rs

feat: WM_TESTED_RUNNABLE env var + wildcards in test: annotation (#8926)

2026-04-24 12:52:25 +00:00

concurrency_groups.rs

authorize GET /concurrency_groups/{job_id}/key per job (#10665)

2026-08-12 21:05:02 +02:00

configs.rs

fix: move alert config from config table to global_settings (#8762)

2026-04-08 15:54:44 +00:00

datatable_acl.rs

feat: add an ACL editor for data table roles (#11063)

2026-09-19 23:23:50 +02:00

datatable_roles.rs

fix: fork data tables sharing one database into a single copy (#11755)

2026-10-14 10:53:00 +00:00

dbt_materialize_target.rs

feat: let // materialize declare a dbt:// warehouse-relation write (#10978)

2026-09-07 17:38:07 +02:00

drafts.rs

make RunForm schedule props optional and expect 403 for operator drafts (#11449)

2026-10-01 07:03:53 +02:00

favorites.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

flows.rs

feat: Db-backed user drafts (#9351)

2026-06-15 10:23:16 +02:00

folder_history.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

folders.rs

refactor: move integration tests to subcrates to reduce recompilation

2026-02-11 14:04:54 +00:00

fork_background.rs

fix: bound a resumed session fork's wait, keep its intent while in flight (#11413)

2026-09-29 16:49:25 +02:00

fork_clone_on_behalf_of.rs

feat: drafts follow their item through a move; behind means base ≠ head (#10577)

2026-09-18 20:54:23 +02:00

fork_member_grant.rs

feat(forks): let a fork's creator manage developers on it without being an admin (#10166)

2026-07-17 15:13:36 +02:00

fork_members.rs

feat: add a workspace toggle that adds its admins and developers to new forks (#11215)

2026-09-18 15:15:35 +02:00

fork_secret_replication_azure.rs

fix: replicate all secrets on fork when external backend is configured (#10060)

2026-07-12 10:19:20 +02:00

granular_acls.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

group_history.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

groups.rs

fix(groups): recompute member roles when an instance group role is cleared (#11708)

2026-10-12 20:57:36 +02:00

health.rs

test nits

2026-03-27 12:28:54 +00:00

inputs.rs

fix: show scheduled singlestepflow runs in flow history sidebar (#10312)

2026-07-24 18:12:09 +02:00

job_metrics.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

jobs_authed.rs

feat: let a job see that its worker is draining (#11612)

2026-10-08 12:56:33 +02:00

jobs_unauthed.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

login_link.rs

Revert "feat(auth): 2 h login links and a click-to-sign-in page for emailed ones (#11203)" (#11267)

2026-09-21 16:54:28 +00:00

max_token_expiration.rs

feat: cap user token expiration with an instance setting (#11159)

2026-09-18 14:37:39 +02:00

mcp_preprocessor_headers.rs

test: keep the mcp preprocessor header test off the dependency job (#10989)

2026-09-05 11:10:41 +02:00

mcp_protocol_versions.rs

feat(mcp): serve the 2026-07-28 spec alongside the legacy protocol (#10535)

2026-08-05 13:52:09 +02:00

mcp_token_query_param.rs

feat: add an instance setting to refuse a token in MCP URLs (#11162)

2026-09-18 15:24:00 +02:00

native_triggers.rs

fix: apply token path scopes to the native trigger list (#11281)

2026-09-22 08:14:41 +00:00

nested_dev_workspace.rs

feat: offer more dev workspace environment labels (#10570)

2026-08-06 18:32:19 +00:00

npm_proxy.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

offboarding.rs

refactor: make the app policy's principal the authority for its identity (#10440)

2026-09-12 09:10:15 +02:00

operator_builder_apps.rs

feat: let operators compose full-code apps when the workspace grants it (#11229)

2026-10-09 19:31:36 +02:00

operator_builder_flows.rs

feat: let operators compose flows when the workspace grants the right (#11228)

2026-09-30 18:09:14 +02:00

operator_manage_rights.rs

feat: let operators with manage rights save schedule and trigger drafts (#11646)

2026-10-14 15:50:31 +02:00

permissions.rs

feat: store hashed tokens instead of plaintext (#8217)

2026-03-17 01:15:38 +00:00

preview_on_behalf_of.rs

feat: run previews as the runnable's on_behalf_of identity (#11778)

2026-10-15 10:13:27 +00:00

protection_rules.rs

fix: let a draft-only schedule, trigger or resource be deleted (#11010)

2026-09-07 18:55:40 +02:00

raw_apps.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

remote_deploy.rs

feat: deploy from the UI to a workspace on another instance (#11245)

2026-09-22 01:40:53 +02:00

resources.rs

fix: keep the resource type search current between daily fills, and serve it without an index (#11712)

2026-10-13 13:37:15 +00:00

run_inline.rs

feat: mcp oauth gateway (#8443)

2026-03-20 16:12:59 +00:00

schedules.rs

fix: let a draft-only schedule, trigger or resource be deleted (#11010)

2026-09-07 18:55:40 +02:00

scripts.rs

fix: stop running deleted script versions from worker caches (#11456)

2026-10-01 13:37:00 +02:00

sensitive_log_masking.rs

feat: support assigning a worker tag to app inline scripts (#9002)

2026-05-01 17:21:17 +00:00

service_logs.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

settings.rs

fix: let instances withhold signing secrets from the settings API (#11483)

2026-10-02 19:25:04 +02:00

slack_approvals_unauthed.rs

fix: authenticate slack callback payload with per-workspace hmac (#9461)

2026-06-06 08:02:20 +00:00

token_expiry_warning.rs

feat: cap user token expiration with an instance setting (#11159)

2026-09-18 14:37:39 +02:00

token_hash.rs

fix: keep native triggers attached when a runnable is renamed (#10432)

2026-07-31 23:44:25 +02:00

token_label_idor.rs

fix: skip expiry notifications for app embed and SDK tokens (#11169)

2026-09-16 17:28:53 +02:00

trash.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

trigger_e2e.rs

fix: advance postgres replication slot lsn via periodic standby status updates (#9227)

2026-05-19 05:44:13 +00:00

triggers.rs

feat: support application default credentials for gcp pub/sub triggers (#10778)

2026-08-21 10:41:14 +02:00

users.rs

stop billing service accounts twice after a session refresh (#11408)

2026-09-29 19:23:15 +02:00

variables.rs

fix(security): scope variable and resource value caches by caller identity (#9427)

2026-06-03 10:31:45 +00:00

workspace_comparison.rs

fix: ignore schedule missed-run counters in workspace compare (#11570)

2026-10-06 18:06:09 +02:00

workspace_dependencies_git_sync.rs

fix(git-sync): run auto-pull as the admin who enabled it (#11121)

2026-09-15 10:34:57 +02:00

workspace_dependencies.rs

fix: scope workspace dependencies create to the path workspace (#11385)

2026-09-28 18:15:10 +02:00

workspace_deps.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

workspace_encryption_key_git_sync.rs

fix: re-encrypt git sync secrets on workspace key rotation (#11218)

2026-09-18 15:21:07 +02:00

workspaces.rs

feat: let a workspace withdraw operator schedule and trigger writes (#11226)

2026-09-25 17:34:58 +00:00