multica

mirror of https://github.com/multica-ai/multica.git synced 2026-07-05 21:39:54 +02:00

Files

Lambda 723c5cb459 fix(github): redact installation_id from realtime broadcasts (MUL-2413)

GET /github/installations strips the numeric installation_id for non-admin
members, but the github_installation:created / uninstall / suspend WS
events were still publishing it, so the same handle was reachable from
any workspace client subscribed to the workspace scope. Broadcast both
payload variants without it — the frontend uses these events only to
invalidate the installations query, so admins re-query the list endpoint
to recover the management handle.

Also adds a router-level test that mounts the production middleware split
(member-visible list vs. owner/admin connect+delete) so a future routing
change can't silently widen the write surface.

Co-authored-by: multica-agent <github@multica.ai>

2026-05-20 01:42:12 +08:00

cmd

feat(github): expose read-only installation list to workspace members (MUL-2413)

2026-05-20 01:24:51 +08:00

internal

fix(github): redact installation_id from realtime broadcasts (MUL-2413)

2026-05-20 01:42:12 +08:00

migrations

refactor(onboarding): remove starter-content kit; unify install-runtime issue across mark-onboarded paths (MUL-2438) (#2884 )

2026-05-19 18:37:48 +02:00

pkg

fix(openclaw): parse whole buffer instead of line-by-line scanner (MUL-1908) (#2292 )