Skip to content

fix(acp): honor Selected people allowlist in agent DMs - #6139

Open
avi-zloof wants to merge 1 commit into
block:mainfrom
avi-zloof:gift/acp-dm-allowlist
Open

avi-zloof wants to merge 1 commit into
block:mainfrom
avi-zloof:gift/acp-dm-allowlist

Conversation

@avi-zloof

Copy link
Copy Markdown

Summary

Gift-back from Eitan Medical (generic Buzz — no branding/SSO).

Honors the agent "Selected people" allowlist in 1:1 DMs: allowlisted authors can wake the agent, while strangers still cannot (closing the transitive-access hole for anyone mode only).

Updated fail-closed discovery test to expect allowlisted authors pass when channel metadata is unknown.

Test plan

  • cargo test -p buzz-acp test_dm_
  • cargo test -p buzz-acp test_discovery_without_metadata
  • Manual: agent with allowlist + DM from listed user fires turn; stranger in same DM does not

Made with Cursor

Allowlisted authors can wake an agent in a 1:1 DM. Anyone still cannot, so
a stranger the agent messages cannot take over.

Signed-off-by: avi-zloof <avi.zloof@eitanmedical.com>
Co-authored-by: Cursor <cursoragent@cursor.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant