kolaente 03c1f0fc7f fix(mcp): gate users_search on scopes a token can actually hold ...

The users and projects_users_search groups don't exist; the routes collect
as other:users and projects:users_search, so PermissionsAreValid rejected
any real token and the tool was unreachable. Also strip emails on the
project-scoped search path.

2026-08-29 00:36:12 +02:00

..

_test.go.tpl

…

admin_share_bypass_test.go

…

admin_test.go

…

api_token_method_matching_test.go

…

api_tokens_test.go

fix(mcp): gate users_search on scopes a token can actually hold

2026-08-29 00:36:12 +02:00

archived_test.go

fix(projects): sub-resource permission checks no longer get the un-archive exception

2026-08-20 11:58:06 +02:00

background_test.go

…

caldav_test.go

…

error_responses_test.go

…

healthcheck_test.go

…

huma_admin_actions_test.go

…

huma_admin_test.go

…

huma_api_token_patch_test.go

fix(api/v2): don't require read_one for autopatch's internal GET

2026-08-19 13:01:59 +02:00

huma_api_token_test.go

fix(mcp): appease lint and pin user1's fixture token set

2026-08-28 23:56:04 +02:00

huma_archived_test.go

fix(projects): reject un-archiving a child while its parent is archived

2026-08-20 11:58:06 +02:00

huma_auth_login_test.go

…

huma_auth_refresh_test.go

…

huma_auth_test.go

fix(auth): allow API tokens to call /api/v2/token/test (#3548)

2026-08-18 17:08:10 +00:00

huma_avatar_test.go

…

huma_avatar_upload_test.go

…

huma_background_download_test.go

…

huma_background_test.go

…

huma_background_upload_test.go

…

huma_bot_user_test.go

…

huma_bucket_test.go

…

huma_bulk_task_test.go

…

huma_caldav_token_test.go

…

huma_errors_test.go

…

huma_helpers_test.go

…

huma_info_test.go

…

huma_label_task_bulk_test.go

…

huma_label_task_test.go

…

huma_label_test.go

fix(labels): let bots use labels created by their owner (#3609)

2026-08-27 21:55:14 +02:00

huma_link_sharing_test.go

…

huma_migration_csv_test.go

…

huma_migration_file_test.go

…

huma_migration_oauth_test.go

…

huma_migration_planka_test.go

feat(migration): add planka migrator routes on v2

2026-08-20 08:45:42 +02:00

huma_non_crud_aliases_test.go

…

huma_notification_permissions_test.go

…

huma_notification_test.go

…

huma_project_duplicate_test.go

fix(projects): report null for a max_permission nobody computed

2026-08-28 23:49:27 +02:00

huma_project_team_test.go

…

huma_project_test.go

fix(projects): report null for a max_permission nobody computed

2026-08-28 23:49:27 +02:00

huma_project_user_test.go

…

huma_project_view_test.go

…

huma_rate_limit_test.go

…

huma_reaction_test.go

…

huma_richtext_test.go

…

huma_saved_filter_test.go

…

huma_session_test.go

…

huma_subscription_test.go

…

huma_task_assignee_bulk_test.go

…

huma_task_assignee_test.go

…

huma_task_attachment_test.go

…

huma_task_bucket_test.go

…

huma_task_bulk_create_test.go

…

huma_task_collection_test.go

…

huma_task_comment_test.go

…

huma_task_duplicate_test.go

…

huma_task_patch_subscription_test.go

…

huma_task_position_test.go

…

huma_task_relation_test.go

…

huma_task_test.go

…

huma_task_unread_status_test.go

…

huma_team_member_test.go

…

huma_team_test.go

…

huma_testing_test.go

…

huma_time_entry_test.go

…

huma_user_deletion_test.go

…

huma_user_export_test.go

…

huma_user_search_test.go

…

huma_user_settings_test.go

feat(api/v2): expose pending email, add cancel and resend endpoints

2026-08-18 22:03:38 +02:00

huma_user_totp_test.go

…

huma_user_webhook_test.go

…

huma_webhook_event_test.go

…

huma_webhook_test.go

…

integrations.go

fix(caldav): encode task uids in hrefs instead of interpolating them raw (#3560)

2026-08-19 20:13:06 +00:00

kanban_test.go

…

label_task_test.go

…

link_share_avatar_test.go

…

link_share_consistency_test.go

…

link_sharing_auth_test.go

…

link_sharing_test.go

…

login_test.go

…

main_test.go

…

mcp_catalog_test.go

fix(mcp): require the parent id on parent-scoped listings

2026-08-29 00:34:27 +02:00

mcp_labels_test.go

feat(mcp): expose remaining v1 resources via mcp tools

2026-08-28 23:53:52 +02:00

mcp_projects_test.go

fix(mcp): allow update wrappers to clear booleans and numerics

2026-08-28 23:53:52 +02:00

mcp_scopes_test.go

feat(mcp): enforce per-tool api token scopes

2026-08-28 23:53:52 +02:00

mcp_task_assignees_test.go

feat(mcp): expose remaining v1 resources via mcp tools

2026-08-28 23:53:52 +02:00

mcp_task_comments_test.go

feat(mcp): expose remaining v1 resources via mcp tools

2026-08-28 23:53:52 +02:00

mcp_tasks_test.go

feat(mcp): expose expand on tasks_read_all

2026-08-29 00:05:16 +02:00

mcp_teams_test.go

feat(mcp): expose remaining v1 resources via mcp tools

2026-08-28 23:53:52 +02:00

mcp_test.go

fix(mcp): build the server per request instead of per session

2026-08-29 00:33:56 +02:00

mcp_users_test.go

fix(mcp): gate users_search on scopes a token can actually hold

2026-08-29 00:36:12 +02:00

oauth2_test.go

…

project_pseudo_parent_test.go

…

project_test.go

fix(projects): report null for a max_permission nobody computed

2026-08-28 23:49:27 +02:00

register_test.go

fix(user): keep email confirmation status after registration

2026-08-18 11:30:03 +02:00

sessions_test.go

…

task_attachment_idor_test.go

…

task_attachment_upload_test.go

…

task_by_index_test.go

…

task_collection_test.go

…

task_comment_test.go

…

task_test.go

…

token_refresh_rate_limit_test.go

fix(ratelimit): give session renewal its own budget

2026-08-18 14:01:06 +02:00

token_test.go

…

user_change_password_test.go

…

user_confirm_email_test.go

…

user_export_download_test.go

…

user_export_status_test.go

…

user_password_request_token_test.go

…

user_password_reset_test.go

…

user_project_test.go

…

user_show_test.go

feat(api/v2): expose pending email, add cancel and resend endpoints

2026-08-18 22:03:38 +02:00

user_totp_test.go

…

webhook_test.go

…

ws_rate_limit_test.go

…