mirror of
https://github.com/multica-ai/multica.git
synced 2026-08-03 03:03:56 +02:00
4931ee6f7a
The Chat docs claimed agents in a chat are fully sandboxed and cannot see or change issues (`multica issue list` returns empty, issue API calls blocked by permission checks). That is not what the server enforces: a chat run is dispatched with the same owner-scoped, workspace-bound task token as an issue run, and /api/issues is guarded only by workspace membership — no chat-origin check. So a chat agent can run `multica issue create`/`list` and operate on the workspace when explicitly asked (creator recorded as the agent), matching the report in GH #5917. Reframe the section around the real boundary: chat isolation is about context and privacy, not permissions. The genuinely-true guarantees are preserved (private transcript, no issue context in the prompt, no auto-promotion of chat content into issues); the false 'cannot see/change issues / fully sandboxed' claims are corrected. Updated en/zh/ja/ko. Co-authored-by: Bohan-J <bohan@devv.ai> Co-authored-by: multica-agent <github@multica.ai>