feat(auth): separate environment administration permissions - #9786

Open

juliusmarminge wants to merge 37 commits into

t3code/auth-pairing-scopesfrom

t3code/auth-environment-scopes

Commits on Sep 5, 2026

feat(auth): separate environment administration scopes
juliusmarminge
committed
29b1e44
fix(web): explain maintenance permissions with tooltips
juliusmarminge
committed
42df8df
fix(auth): respect independent environment grants in settings
juliusmarminge
committed
bf501e5
fix(mobile): wait for grants before selecting shared settings
juliusmarminge
committed
b0e6e8c
fix(usage): require settings scope for model price edits
juliusmarminge
committed
deee0e2
fix(web): brand relay targets before checking scopes
juliusmarminge
committed
b180335
fix(settings): explain unavailable environment controls
juliusmarminge
committed
bc73cf3
fix(auth): preserve self-updates across scope migration
juliusmarminge
committed
cea9e6e
fix(web): preserve untouched script shortcuts on save
juliusmarminge
committed
d04053b
fix(web): initialize shortcuts when adding scripts
juliusmarminge
committed
4dc039b
fix(web): allow relay unlink after link-state failure
juliusmarminge
committed
845269a
fix(web): sync shared settings before remote grants load
juliusmarminge
committed
838282a
test(web): type failed shared settings grants
juliusmarminge
committed
8977617
fix(web): resolve script shortcuts in the active environment
juliusmarminge
committed
641a8b2
fix(server): choose enabled instances for text generation
juliusmarminge
committed
4db5f61
fix(web): preserve retained shortcuts when re-adding actions
juliusmarminge
committed
6ab13a3
fix(server): preserve provider fallback tuple types
juliusmarminge
committed
669cca0
fix(server): keep effective provider fallback entries typed
juliusmarminge
committed
1ed8819
fix(web): update settings controls when grants change
juliusmarminge
committed
0d1a552
fix(mobile): respect relay access when changing Live Activities
juliusmarminge
committed
a5e1408
fix(web): gate project settings by checkout permissions
juliusmarminge
committed
c8eacaf
fix(web): recheck thread mutation permissions at dispatch
juliusmarminge
committed
b899886
fix(web): guard project settings command dispatch
juliusmarminge
committed
185b76f
fix(mobile): gate new task submission by task permissions
juliusmarminge
committed
cd85f8b
fix(web): gate composer actions and uploads by thread permissions
juliusmarminge
committed
2134409
fix(mobile): gate thread list mutations by task permissions
juliusmarminge
committed
6a14bcf
fix(web): gate legacy sidebar project and thread actions
juliusmarminge
committed
6fa2053
fix(mobile): gate task controls and queued delivery
juliusmarminge
committed
a429fc2
fix(web): respect scopes in editor and markdown actions
juliusmarminge
committed
d517ec7
fix(mobile): preserve queued tasks after access changes
juliusmarminge
committed
1cf3fd7
docs: clarify grouped project permissions
juliusmarminge
committed
3fdd42a
test(web): keep task permission fixtures within their layer
juliusmarminge
committed
5aec786
test(clients): correct permission fixture types
juliusmarminge
committed
d6ba4b6
fix(web): report revoked settings access accurately
juliusmarminge
committed
8dbbd40
test(web): omit unset project patch fields
juliusmarminge
committed
703bd63
test(web): provide grants in legacy Markdown fixtures
juliusmarminge
committed
c93d49b
fix(web): preserve typed authorization failures
juliusmarminge
committed
6a7c997