multica

mirror of https://github.com/multica-ai/multica.git synced 2026-07-06 22:09:44 +02:00

Files

Lambda 27851ae161 feat(github): expose read-only installation list to workspace members (MUL-2413)

Relax `GET /api/workspaces/{id}/github/installations` from owner/admin-only
to any workspace member so the Settings → Integrations tab no longer renders
blank for non-admins (the original symptom of MUL-2413).

The handler now reads the caller's role from the workspace middleware:
- owner / admin keep the full row including the numeric `installation_id`
  (the connect / disconnect handle) and receive `can_manage: true`.
- every other role (member / guest) receives rows with `installation_id`
  omitted and `can_manage: false`, giving them visibility into "is GitHub
  wired up?" without the management handle.

`GET /github/connect` and `DELETE /github/installations/{id}` stay under
the admin/owner middleware group — this PR only relaxes the read path.

Tests: `TestListGitHubInstallations_RoleGating` exercises admin, owner,
member, and guest paths against the real DB-backed handler fixture and
asserts the field stripping + `can_manage` contract.

Refs: MUL-2413
Co-authored-by: multica-agent <github@multica.ai>

2026-05-20 01:24:51 +08:00

cmd

feat(github): expose read-only installation list to workspace members (MUL-2413)

2026-05-20 01:24:51 +08:00

internal

feat(github): expose read-only installation list to workspace members (MUL-2413)

2026-05-20 01:24:51 +08:00

migrations

refactor(onboarding): remove starter-content kit; unify install-runtime issue across mark-onboarded paths (MUL-2438) (#2884 )

2026-05-19 18:37:48 +02:00

pkg

fix(openclaw): parse whole buffer instead of line-by-line scanner (MUL-1908) (#2292 )