milan dd6a6e2fdf fix(agents): stop treating an empty agent permission set as unrestricted ... A key restricted to one agent inside a team restricted to another intersected to an empty list, and every caller read an empty list as 'no restrictions set', so adding the second restriction handed the key every agent on the proxy. The same empty list came out of the except blocks around the permission lookups, so a database outage widened access the same way. Resolution now returns a tagged union of unrestricted, restricted to a concrete set, or unresolvable, and the callers match on it: a restricted caller with no agents left reaches none, and a grant that cannot be read denies rather than allows. Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>		2026-08-03 22:12:12 +00:00
..
__init__.py	[Feat] Agent Access Control - Enforce Allowed agents by key, team + add agent access groups on backend (#17502)	2025-12-04 16:31:00 -08:00
test_agent_permission_handler.py	fix(agents): stop treating an empty agent permission set as unrestricted	2026-08-03 22:12:12 +00:00