feat(account): read-only mode for abuse-paused accounts - #1049

Merged

jiashuoz merged 19 commits into

mainfrom

feat/paused-account-read-only

Sep 27, 2026

Commits on Sep 27, 2026

feat(account): refuse every write for an abuse-paused account

jiashuoz
and
claude
committed
0010e67
feat(clients): account_read_only across SDKs, CLI and MCP

jiashuoz
and
claude
committed
52311f7
feat(web): read-only banner and disabled writes for abuse-paused accounts

jiashuoz
and
claude
committed
0ce140c
test(contract): read-only account conformance scenario

jiashuoz
and
claude
committed
f717581
docs(account): read-only accounts design, operator note and data handling

jiashuoz
and
claude
committed
e434e57
docs(cli): say -pause-class abuse also makes the account read-only

jiashuoz
and
claude
committed
e7acc4c
style(testutil): gofmt contract server fields

jiashuoz
and
claude
committed
ef5b7b5
fix(agent): legacy read-only guard authenticates like its handlers

jiashuoz
and
claude
committed
2cac8ac
fix(hitlworker): expiry sweep keeps a read-only account's holds pending

jiashuoz
and
claude
committed
b5aea5c
fix(identity): keep SES sender identities when trashing a read-only account

jiashuoz
and
claude
committed
b79eaac
fix(httpapi): refuse a write whose principal carries no account

jiashuoz
and
claude
committed
255cdfa
docs(account): read-only legacy auth rule, sweep, trash and freshness window

jiashuoz
and
claude
committed
3bf7f50
test(identity): trash of an abuse-paused account keeps sender identities

jiashuoz
and
claude
committed
bc9006a
feat(mcp): pin the mutating flag to /v1 methods and advertise it in _meta

jiashuoz
and
claude
committed
90ccfb8
test(httpapi): walk raw /v1-root routes for read-only classification

jiashuoz
and
claude
committed
456ad62
fix(agent): an idempotent principal re-attach succeeds for a read-only account

jiashuoz
and
claude
committed
3f43afd
fix(agent): consent refuses only allow while read-only, after its own checks

jiashuoz
and
claude
committed
c7a481f
refactor(agent): hand the guard's session user to the legacy write handler

jiashuoz
and
claude
committed
917da3b
docs(account): consent, attach replay, raw routes, MCP meta and rate-limit order

jiashuoz
and
claude
committed
11bb2dd

Navigation Menu

feat(account): read-only mode for abuse-paused accounts - #1049

feat(account): read-only mode for abuse-paused accounts#1049
jiashuoz merged 19 commits into
mainfrom
feat/paused-account-read-only

Commits on Sep 27, 2026

feat(account): refuse every write for an abuse-paused account

feat(clients): account_read_only across SDKs, CLI and MCP

feat(web): read-only banner and disabled writes for abuse-paused accounts

test(contract): read-only account conformance scenario

docs(account): read-only accounts design, operator note and data handling

docs(cli): say -pause-class abuse also makes the account read-only

style(testutil): gofmt contract server fields

fix(agent): legacy read-only guard authenticates like its handlers

fix(hitlworker): expiry sweep keeps a read-only account's holds pending

fix(identity): keep SES sender identities when trashing a read-only account

fix(httpapi): refuse a write whose principal carries no account

docs(account): read-only legacy auth rule, sweep, trash and freshness window

test(identity): trash of an abuse-paused account keeps sender identities

feat(mcp): pin the mutating flag to /v1 methods and advertise it in _meta

test(httpapi): walk raw /v1-root routes for read-only classification

fix(agent): an idempotent principal re-attach succeeds for a read-only account

fix(agent): consent refuses only allow while read-only, after its own checks

refactor(agent): hand the guard's session user to the legacy write handler

docs(account): consent, attach replay, raw routes, MCP meta and rate-limit order