Repository navigation
fix(agent-platform): stop session_principal approval gate from auto-dispatching - #64845
Merged
Merged
Conversation
…ispatching Approval-gated tools whose policy scope is `session_principal` ran the real tool immediately whenever the most-recent user-turn sender matched the session's auth-time principal (the per-asker fast-path in `makePerAskerAuth`). That conflates "this identity may decide the approval" with "this specific action was decided." The session owner being the asker is not consent to the particular gated call the model emitted: content the agent reads (fetched docs, MCP/tool output, another agent's bundle) can carry a prompt injection that steers the model into a destructive gated call while the last user-turn sender is still the legitimate owner, so the call would auto-execute with no approval UI and no human decision. This is realized in the Agent Builder example, which gates the destructive `agent-applications-revisions-promote-create` / `-archive-create` tools with `approvers: ["session_principal"]` and reads untrusted fleet content. Remove `session_principal` from the per-asker fast-path so those calls always queue for an explicit, out-of-band human decision. The scope stays a valid, persisted approver scope (`approver_scope` on the queued row) so decision-side routing — letting the session owner, not only a team admin, clear the queued approval — can land as a follow-up. `team_admins` is left as-is. Tests: flip the per-asker-auth + driver session_principal cases to assert the gate holds (queues, real tool never runs) as an injection-guard regression. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017VgycqkSeieSSLj2VLjF8f
Contributor
|
Reviews (1): Last reviewed commit: "fix(agent-platform): stop session_princi..." | Re-trigger Greptile |
Contributor
|
Size Change: 0 B Total Size: 64.5 MB ℹ️ View Unchanged
|
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Size Change: 0 B
Total Size: 64.4 MB
ℹ️ View Unchanged
| Filename | Size |
|---|---|
frontend/dist-report/decompression-worker/src/scenes/session-recordings/player/snapshot-processing/decompressionWorker |
2.85 kB |
frontend/dist-report/exporter/_chunks/chunk |
2.62 MB |
frontend/dist-report/exporter/_parent/products/actions/frontend/pages/Action |
27.8 kB |
frontend/dist-report/exporter/_parent/products/actions/frontend/pages/Actions |
5.49 kB |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/AIObservabilityScene |
121 kB |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/AIObservabilitySessionScene |
21.5 kB |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/AIObservabilityTraceScene |
133 kB |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/AIObservabilityUsers |
3.44 kB |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/clusters/AIObservabilityClusterScene |
21.8 kB |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/clusters/AIObservabilityClustersScene |
54.5 kB |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/datasets/AIObservabilityDatasetScene |
20.7 kB |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/datasets/AIObservabilityDatasetsScene |
4.1 kB |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/evaluations/AIObservabilityEvaluation |
60.1 kB |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/evaluations/AIObservabilityEvaluationsScene |
32.4 kB |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/evaluations/EvaluationTemplates |
671 B |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/LLMASessionFeedbackDisplay |
4.81 kB |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/playground/AIObservabilityPlaygroundScene |
37.7 kB |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/prompts/LLMPromptScene |
32.7 kB |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/prompts/LLMPromptsScene |
5.25 kB |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/tags/AIObservabilityTag |
31.8 kB |
frontend/dist-report/exporter/_parent/products/ai_observability/frontend/tags/AIObservabilityTagsScene |
11.6 kB |
frontend/dist-report/exporter/_parent/products/business_knowledge/frontend/scenes/BusinessKnowledgeScene |
22.4 kB |
frontend/dist-report/exporter/_parent/products/conversations/frontend/components/Assignee/CyclotronJobInputAssignee |
1.38 kB |
frontend/dist-report/exporter/_parent/products/conversations/frontend/components/SlaBusinessHours/CyclotronJobInputBusinessHours |
2.69 kB |
frontend/dist-report/exporter/_parent/products/conversations/frontend/components/TicketTags/CyclotronJobInputTicketTags |
783 B |
frontend/dist-report/exporter/_parent/products/conversations/frontend/scenes/settings/SupportSettingsScene |
5.66 kB |
frontend/dist-report/exporter/_parent/products/conversations/frontend/scenes/ticket/SupportTicketScene |
39 kB |
frontend/dist-report/exporter/_parent/products/conversations/frontend/scenes/tickets/SupportTicketsScene |
1.68 kB |
frontend/dist-report/exporter/_parent/products/customer_analytics/frontend/CustomerAnalyticsScene |
93 kB |
frontend/dist-report/exporter/_parent/products/customer_analytics/frontend/scenes/CustomerAnalyticsConfigurationScene/CustomerAnalyticsConfigurationScene |
6.41 kB |
frontend/dist-report/exporter/_parent/products/customer_analytics/frontend/scenes/CustomerJourneyBuilderScene/CustomerJourneyBuilderScene |
6.16 kB |
frontend/dist-report/exporter/_parent/products/customer_analytics/frontend/scenes/CustomerJourneyTemplatesScene/CustomerJourneyTemplatesScene |
9.16 kB |
frontend/dist-report/exporter/_parent/products/data_warehouse/DataWarehouseScene |
29.1 kB |
frontend/dist-report/exporter/_parent/products/data_warehouse/frontend/scenes/NewSourceScene/NewSourceScene |
2.81 kB |
frontend/dist-report/exporter/_parent/products/data_warehouse/frontend/scenes/SchemaScene/SchemaScene |
28.7 kB |
frontend/dist-report/exporter/_parent/products/data_warehouse/frontend/scenes/SourceConnectScene/SourceConnectScene |
6.93 kB |
frontend/dist-report/exporter/_parent/products/data_warehouse/frontend/scenes/SourceScene/SourceScene |
2.62 kB |
frontend/dist-report/exporter/_parent/products/data_warehouse/frontend/scenes/SourcesScene/SourcesScene |
7.46 kB |
frontend/dist-report/exporter/_parent/products/early_access_features/frontend/EarlyAccessFeature |
5.37 kB |
frontend/dist-report/exporter/_parent/products/early_access_features/frontend/EarlyAccessFeatures |
3.76 kB |
frontend/dist-report/exporter/_parent/products/endpoints/frontend/EndpointScene |
47.3 kB |
frontend/dist-report/exporter/_parent/products/endpoints/frontend/EndpointsScene |
27.3 kB |
frontend/dist-report/exporter/_parent/products/engineering_analytics/frontend/scenes/EngineeringAnalyticsScene |
23.4 kB |
frontend/dist-report/exporter/_parent/products/engineering_analytics/frontend/scenes/PullRequestDetailScene |
11.5 kB |
frontend/dist-report/exporter/_parent/products/error_tracking/frontend/scenes/ErrorTrackingFingerprintsScene/ErrorTrackingIssueFingerprintsScene |
7.69 kB |
frontend/dist-report/exporter/_parent/products/error_tracking/frontend/scenes/ErrorTrackingIssueScene/ErrorTrackingIssueScene |
102 kB |
frontend/dist-report/exporter/_parent/products/error_tracking/frontend/scenes/ErrorTrackingScene/ErrorTrackingScene |
42.3 kB |
frontend/dist-report/exporter/_parent/products/feature_flags/frontend/FeatureFlagTemplatesScene |
6.91 kB |
frontend/dist-report/exporter/_parent/products/games/368Hedgehogs/368Hedgehogs |
5.24 kB |
frontend/dist-report/exporter/_parent/products/games/FlappyHog/FlappyHog |
5.7 kB |
frontend/dist-report/exporter/_parent/products/growth/frontend/IdentityMatchingScene |
6.15 kB |
frontend/dist-report/exporter/_parent/products/legal_documents/frontend/scenes/LegalDocumentNewScene |
60.5 kB |
frontend/dist-report/exporter/_parent/products/legal_documents/frontend/scenes/LegalDocumentsScene |
6.71 kB |
frontend/dist-report/exporter/_parent/products/links/frontend/LinkScene |
25.5 kB |
frontend/dist-report/exporter/_parent/products/links/frontend/LinksScene |
5.18 kB |
frontend/dist-report/exporter/_parent/products/live_debugger/frontend/LiveDebugger |
19.6 kB |
frontend/dist-report/exporter/_parent/products/logs/frontend/LogsScene |
22.7 kB |
frontend/dist-report/exporter/_parent/products/logs/frontend/scenes/LogsAlertDetailScene/LogsAlertDetailScene |
18.7 kB |
frontend/dist-report/exporter/_parent/products/logs/frontend/scenes/LogsAlertNotificationDetailScene/LogsAlertNotificationDetailScene |
9.06 kB |
frontend/dist-report/exporter/_parent/products/logs/frontend/scenes/LogsSamplingDetailScene/LogsSamplingDetailScene |
6.18 kB |
frontend/dist-report/exporter/_parent/products/logs/frontend/scenes/LogsSamplingNewScene/LogsSamplingNewScene |
3.19 kB |
frontend/dist-report/exporter/_parent/products/managed_migrations/frontend/ManagedMigration |
15.3 kB |
frontend/dist-report/exporter/_parent/products/mcp_analytics/frontend/MCPAnalyticsScene |
108 kB |
frontend/dist-report/exporter/_parent/products/mcp_analytics/frontend/MCPAnalyticsToolDetail |
20.4 kB |
frontend/dist-report/exporter/_parent/products/metrics/frontend/MetricsScene |
18 kB |
frontend/dist-report/exporter/_parent/products/product_analytics/frontend/insights/stickiness/StickinessBarChart/StickinessBarChart |
4.06 kB |
frontend/dist-report/exporter/_parent/products/product_analytics/frontend/insights/stickiness/StickinessLineChart/StickinessLineChart |
3.95 kB |
frontend/dist-report/exporter/_parent/products/product_analytics/frontend/insights/trends/TrendsBarChart/TrendsBarChart |
9.73 kB |
frontend/dist-report/exporter/_parent/products/product_analytics/frontend/insights/trends/TrendsLifecycleChart/TrendsLifecycleChart |
5.88 kB |
frontend/dist-report/exporter/_parent/products/product_analytics/frontend/insights/trends/TrendsLineChart/TrendsLineChart |
7.41 kB |
frontend/dist-report/exporter/_parent/products/product_analytics/frontend/insights/trends/TrendsPieChart/TrendsPieChart |
5.08 kB |
frontend/dist-report/exporter/_parent/products/product_analytics/frontend/insights/trends/TrendsSlopeChart/TrendsSlopeChart |
2.63 kB |
frontend/dist-report/exporter/_parent/products/replay_vision/frontend/observations/ReplayObservation |
17.8 kB |
frontend/dist-report/exporter/_parent/products/replay_vision/frontend/replay_scanners/ReplayScanner |
35.5 kB |
frontend/dist-report/exporter/_parent/products/replay_vision/frontend/replay_scanners/ReplayScannersScene |
21.9 kB |
frontend/dist-report/exporter/_parent/products/replay_vision/frontend/replay_scanners/ScannerEditorScene |
25.2 kB |
frontend/dist-report/exporter/_parent/products/revenue_analytics/frontend/revenueAnalyticsLogic |
1.52 kB |
frontend/dist-report/exporter/_parent/products/revenue_analytics/frontend/RevenueAnalyticsScene |
29.6 kB |
frontend/dist-report/exporter/_parent/products/session_summaries/frontend/SessionGroupSummariesTable |
5.44 kB |
frontend/dist-report/exporter/_parent/products/session_summaries/frontend/SessionGroupSummaryScene |
23.2 kB |
frontend/dist-report/exporter/_parent/products/skills/frontend/LLMSkillScene |
1.5 kB |
frontend/dist-report/exporter/_parent/products/skills/frontend/LLMSkillsScene |
1.51 kB |
frontend/dist-report/exporter/_parent/products/tasks/frontend/SlackTaskContextScene |
9.33 kB |
frontend/dist-report/exporter/_parent/products/tasks/frontend/TaskDetailScene |
25.1 kB |
frontend/dist-report/exporter/_parent/products/tasks/frontend/TaskTracker |
14.9 kB |
frontend/dist-report/exporter/_parent/products/tracing/frontend/TracingScene |
86.4 kB |
frontend/dist-report/exporter/_parent/products/user_interviews/frontend/UserInterview |
10.9 kB |
frontend/dist-report/exporter/_parent/products/user_interviews/frontend/UserInterviewResponse |
8.08 kB |
frontend/dist-report/exporter/_parent/products/user_interviews/frontend/UserInterviews |
6.49 kB |
frontend/dist-report/exporter/_parent/products/visual_review/frontend/scenes/VisualReviewIndexScene |
3.03 kB |
frontend/dist-report/exporter/_parent/products/visual_review/frontend/scenes/VisualReviewRunScene |
46.8 kB |
frontend/dist-report/exporter/_parent/products/visual_review/frontend/scenes/VisualReviewRunsScene |
8.21 kB |
frontend/dist-report/exporter/_parent/products/visual_review/frontend/scenes/VisualReviewSettingsScene |
11.6 kB |
frontend/dist-report/exporter/_parent/products/visual_review/frontend/scenes/VisualReviewSnapshotHistoryScene |
14.3 kB |
frontend/dist-report/exporter/_parent/products/visual_review/frontend/scenes/VisualReviewSnapshotOverviewScene |
19.8 kB |
frontend/dist-report/exporter/_parent/products/workflows/frontend/TemplateLibrary/MessageTemplate |
17 kB |
frontend/dist-report/exporter/_parent/products/workflows/frontend/Workflows/WorkflowScene |
110 kB |
frontend/dist-report/exporter/_parent/products/workflows/frontend/WorkflowsScene |
61.4 kB |
frontend/dist-report/exporter/src/exporter/exporter |
44.6 kB |
frontend/dist-report/exporter/src/exporter/scenes/ExporterDashboardScene |
6.4 kB |
frontend/dist-report/exporter/src/exporter/scenes/ExporterHeatmapScene |
20.2 kB |
frontend/dist-report/exporter/src/exporter/scenes/ExporterInsightScene |
7.04 kB |
frontend/dist-report/exporter/src/exporter/scenes/ExporterInterviewScene |
310 kB |
frontend/dist-report/exporter/src/exporter/scenes/ExporterNotebookScene |
2.89 MB |
frontend/dist-report/exporter/src/exporter/scenes/ExporterRecordingScene |
5.49 kB |
frontend/dist-report/exporter/src/exporterSharedChunkAnchors |
1.3 kB |
frontend/dist-report/exporter/src/lib/components/ActivityLog/describers |
129 kB |
frontend/dist-report/exporter/src/lib/components/Cards/TextCard/TextCardMarkdownEditor |
10.6 kB |
frontend/dist-report/exporter/src/lib/components/MonacoDiffEditor |
533 B |
frontend/dist-report/exporter/src/lib/lemon-ui/LemonMarkdown/MermaidDiagram |
2 kB |
frontend/dist-report/exporter/src/lib/lemon-ui/LemonTextArea/LemonTextAreaMarkdown |
790 B |
frontend/dist-report/exporter/src/lib/lemon-ui/Link/Link |
415 B |
frontend/dist-report/exporter/src/lib/monaco/CodeEditor |
448 B |
frontend/dist-report/exporter/src/lib/monaco/CodeEditorImpl |
26 kB |
frontend/dist-report/exporter/src/lib/monaco/CodeEditorInline |
649 B |
frontend/dist-report/exporter/src/lib/monaco/vimMode |
211 kB |
frontend/dist-report/exporter/src/lib/ui/Button/ButtonPrimitives |
482 B |
frontend/dist-report/exporter/src/queries/nodes/WebVitals/WebVitals |
11.3 kB |
frontend/dist-report/exporter/src/queries/nodes/WebVitals/WebVitalsPathBreakdown |
4.79 kB |
frontend/dist-report/exporter/src/queries/Query/Query |
4.91 kB |
frontend/dist-report/exporter/src/queries/schema |
939 kB |
frontend/dist-report/exporter/src/scenes/approvals/changeRequestsLogic |
622 B |
frontend/dist-report/exporter/src/scenes/authentication/login/loginLogic |
569 B |
frontend/dist-report/exporter/src/scenes/authentication/shared/passkeyLogic |
602 B |
frontend/dist-report/exporter/src/scenes/data-pipelines/event-filtering/EventFilterScene |
22.8 kB |
frontend/dist-report/exporter/src/scenes/data-pipelines/TransformationsScene |
7.98 kB |
frontend/dist-report/exporter/src/scenes/experiments/notebook/NotebookCompactTable |
1.57 kB |
frontend/dist-report/exporter/src/scenes/hog-functions/misc/Diff |
1.35 kB |
frontend/dist-report/exporter/src/scenes/insights/views/BoxPlot/BoxPlot |
6.19 kB |
frontend/dist-report/exporter/src/scenes/insights/views/CalendarHeatMap/CalendarHeatMap |
8.92 kB |
frontend/dist-report/exporter/src/scenes/insights/views/RegionMap/RegionMap |
30.4 kB |
frontend/dist-report/exporter/src/scenes/insights/views/WorldMap/WorldMap |
1.04 MB |
frontend/dist-report/exporter/src/scenes/models/ModelsScene |
19.1 kB |
frontend/dist-report/exporter/src/scenes/models/NodeDetailScene |
18.9 kB |
frontend/dist-report/monaco-editor-worker/src/lib/monaco/workers/monacoEditorWorker |
288 kB |
frontend/dist-report/monaco-json-worker/src/lib/monaco/workers/monacoJsonWorker |
419 kB |
frontend/dist-report/monaco-typescript-worker/src/lib/monaco/workers/monacoTsWorker |
7.02 MB |
frontend/dist-report/posthog-app/_chunks/chunk |
2.62 MB |
frontend/dist-report/posthog-app/_parent/products/actions/frontend/pages/Action |
29.2 kB |
frontend/dist-report/posthog-app/_parent/products/actions/frontend/pages/Actions |
6.85 kB |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/AIObservabilityScene |
123 kB |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/AIObservabilitySessionScene |
21.6 kB |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/AIObservabilityTraceScene |
134 kB |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/AIObservabilityUsers |
4.29 kB |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/clusters/AIObservabilityClusterScene |
22.3 kB |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/clusters/AIObservabilityClustersScene |
55 kB |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/datasets/AIObservabilityDatasetScene |
21.3 kB |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/datasets/AIObservabilityDatasetsScene |
4.61 kB |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/evaluations/AIObservabilityEvaluation |
60.6 kB |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/evaluations/AIObservabilityEvaluationsScene |
33.7 kB |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/evaluations/EvaluationTemplates |
671 B |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/LLMASessionFeedbackDisplay |
4.81 kB |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/playground/AIObservabilityPlaygroundScene |
38.3 kB |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/prompts/LLMPromptScene |
34 kB |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/prompts/LLMPromptsScene |
5.76 kB |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/tags/AIObservabilityTag |
33.1 kB |
frontend/dist-report/posthog-app/_parent/products/ai_observability/frontend/tags/AIObservabilityTagsScene |
12.9 kB |
frontend/dist-report/posthog-app/_parent/products/business_knowledge/frontend/scenes/BusinessKnowledgeScene |
23 kB |
frontend/dist-report/posthog-app/_parent/products/conversations/frontend/components/Assignee/CyclotronJobInputAssignee |
1.38 kB |
frontend/dist-report/posthog-app/_parent/products/conversations/frontend/components/SlaBusinessHours/CyclotronJobInputBusinessHours |
2.7 kB |
frontend/dist-report/posthog-app/_parent/products/conversations/frontend/components/TicketTags/CyclotronJobInputTicketTags |
783 B |
frontend/dist-report/posthog-app/_parent/products/conversations/frontend/scenes/settings/SupportSettingsScene |
7.77 kB |
frontend/dist-report/posthog-app/_parent/products/conversations/frontend/scenes/ticket/SupportTicketScene |
33.6 kB |
frontend/dist-report/posthog-app/_parent/products/conversations/frontend/scenes/tickets/SupportTicketsScene |
2.19 kB |
frontend/dist-report/posthog-app/_parent/products/customer_analytics/frontend/CustomerAnalyticsScene |
93.3 kB |
frontend/dist-report/posthog-app/_parent/products/customer_analytics/frontend/scenes/CustomerAnalyticsConfigurationScene/CustomerAnalyticsConfigurationScene |
8.52 kB |
frontend/dist-report/posthog-app/_parent/products/customer_analytics/frontend/scenes/CustomerJourneyBuilderScene/CustomerJourneyBuilderScene |
7.48 kB |
frontend/dist-report/posthog-app/_parent/products/customer_analytics/frontend/scenes/CustomerJourneyTemplatesScene/CustomerJourneyTemplatesScene |
10 kB |
frontend/dist-report/posthog-app/_parent/products/data_warehouse/DataWarehouseScene |
2.07 kB |
frontend/dist-report/posthog-app/_parent/products/data_warehouse/frontend/scenes/NewSourceScene/NewSourceScene |
3.59 kB |
frontend/dist-report/posthog-app/_parent/products/data_warehouse/frontend/scenes/SchemaScene/SchemaScene |
29.3 kB |
frontend/dist-report/posthog-app/_parent/products/data_warehouse/frontend/scenes/SourceConnectScene/SourceConnectScene |
7.65 kB |
frontend/dist-report/posthog-app/_parent/products/data_warehouse/frontend/scenes/SourceScene/SourceScene |
3.3 kB |
frontend/dist-report/posthog-app/_parent/products/data_warehouse/frontend/scenes/SourcesScene/SourcesScene |
8.14 kB |
frontend/dist-report/posthog-app/_parent/products/early_access_features/frontend/EarlyAccessFeature |
6.87 kB |
frontend/dist-report/posthog-app/_parent/products/early_access_features/frontend/EarlyAccessFeatures |
4.28 kB |
frontend/dist-report/posthog-app/_parent/products/endpoints/frontend/EndpointScene |
48.7 kB |
frontend/dist-report/posthog-app/_parent/products/endpoints/frontend/EndpointsScene |
26.6 kB |
frontend/dist-report/posthog-app/_parent/products/engineering_analytics/frontend/scenes/EngineeringAnalyticsScene |
23.9 kB |
frontend/dist-report/posthog-app/_parent/products/engineering_analytics/frontend/scenes/PullRequestDetailScene |
12 kB |
frontend/dist-report/posthog-app/_parent/products/error_tracking/frontend/scenes/ErrorTrackingFingerprintsScene/ErrorTrackingIssueFingerprintsScene |
8.23 kB |
frontend/dist-report/posthog-app/_parent/products/error_tracking/frontend/scenes/ErrorTrackingIssueScene/ErrorTrackingIssueScene |
103 kB |
frontend/dist-report/posthog-app/_parent/products/error_tracking/frontend/scenes/ErrorTrackingScene/ErrorTrackingScene |
44.7 kB |
frontend/dist-report/posthog-app/_parent/products/feature_flags/frontend/FeatureFlagTemplatesScene |
6.92 kB |
frontend/dist-report/posthog-app/_parent/products/games/368Hedgehogs/368Hedgehogs |
5.24 kB |
frontend/dist-report/posthog-app/_parent/products/games/FlappyHog/FlappyHog |
5.7 kB |
frontend/dist-report/posthog-app/_parent/products/growth/frontend/IdentityMatchingScene |
6.15 kB |
frontend/dist-report/posthog-app/_parent/products/legal_documents/frontend/scenes/LegalDocumentNewScene |
61 kB |
frontend/dist-report/posthog-app/_parent/products/legal_documents/frontend/scenes/LegalDocumentsScene |
7.22 kB |
frontend/dist-report/posthog-app/_parent/products/links/frontend/LinkScene |
26 kB |
frontend/dist-report/posthog-app/_parent/products/links/frontend/LinksScene |
5.7 kB |
frontend/dist-report/posthog-app/_parent/products/live_debugger/frontend/LiveDebugger |
20.1 kB |
frontend/dist-report/posthog-app/_parent/products/logs/frontend/components/LogsViewer/LogsViewerModal/LogsViewerModal |
2.55 kB |
frontend/dist-report/posthog-app/_parent/products/logs/frontend/LogsScene |
24.1 kB |
frontend/dist-report/posthog-app/_parent/products/logs/frontend/scenes/LogsAlertDetailScene/LogsAlertDetailScene |
19.3 kB |
frontend/dist-report/posthog-app/_parent/products/logs/frontend/scenes/LogsAlertNotificationDetailScene/LogsAlertNotificationDetailScene |
9.6 kB |
frontend/dist-report/posthog-app/_parent/products/logs/frontend/scenes/LogsSamplingDetailScene/LogsSamplingDetailScene |
6.69 kB |
frontend/dist-report/posthog-app/_parent/products/logs/frontend/scenes/LogsSamplingNewScene/LogsSamplingNewScene |
3.7 kB |
frontend/dist-report/posthog-app/_parent/products/managed_migrations/frontend/ManagedMigration |
15.8 kB |
frontend/dist-report/posthog-app/_parent/products/mcp_analytics/frontend/MCPAnalyticsScene |
108 kB |
frontend/dist-report/posthog-app/_parent/products/mcp_analytics/frontend/MCPAnalyticsToolDetail |
20.9 kB |
frontend/dist-report/posthog-app/_parent/products/metrics/frontend/MetricsScene |
18.8 kB |
frontend/dist-report/posthog-app/_parent/products/product_analytics/frontend/insights/stickiness/StickinessBarChart/StickinessBarChart |
4.54 kB |
frontend/dist-report/posthog-app/_parent/products/product_analytics/frontend/insights/stickiness/StickinessLineChart/StickinessLineChart |
4.42 kB |
frontend/dist-report/posthog-app/_parent/products/product_analytics/frontend/insights/trends/TrendsBarChart/TrendsBarChart |
10.2 kB |
frontend/dist-report/posthog-app/_parent/products/product_analytics/frontend/insights/trends/TrendsLifecycleChart/TrendsLifecycleChart |
6.35 kB |
frontend/dist-report/posthog-app/_parent/products/product_analytics/frontend/insights/trends/TrendsLineChart/TrendsLineChart |
7.89 kB |
frontend/dist-report/posthog-app/_parent/products/product_analytics/frontend/insights/trends/TrendsPieChart/TrendsPieChart |
5.55 kB |
frontend/dist-report/posthog-app/_parent/products/product_analytics/frontend/insights/trends/TrendsSlopeChart/TrendsSlopeChart |
3 kB |
frontend/dist-report/posthog-app/_parent/products/replay_vision/frontend/observations/ReplayObservation |
20 kB |
frontend/dist-report/posthog-app/_parent/products/replay_vision/frontend/replay_scanners/ReplayScanner |
36.9 kB |
frontend/dist-report/posthog-app/_parent/products/replay_vision/frontend/replay_scanners/ReplayScannersScene |
23.2 kB |
frontend/dist-report/posthog-app/_parent/products/replay_vision/frontend/replay_scanners/ScannerEditorScene |
25.7 kB |
frontend/dist-report/posthog-app/_parent/products/revenue_analytics/frontend/revenueAnalyticsLogic |
1.86 kB |
frontend/dist-report/posthog-app/_parent/products/revenue_analytics/frontend/RevenueAnalyticsScene |
31 kB |
frontend/dist-report/posthog-app/_parent/products/session_summaries/frontend/SessionGroupSummariesTable |
5.95 kB |
frontend/dist-report/posthog-app/_parent/products/session_summaries/frontend/SessionGroupSummaryScene |
25.3 kB |
frontend/dist-report/posthog-app/_parent/products/skills/frontend/LLMSkillScene |
2.01 kB |
frontend/dist-report/posthog-app/_parent/products/skills/frontend/LLMSkillsScene |
2.02 kB |
frontend/dist-report/posthog-app/_parent/products/tasks/frontend/SlackTaskContextScene |
9.84 kB |
frontend/dist-report/posthog-app/_parent/products/tasks/frontend/TaskDetailScene |
25.7 kB |
frontend/dist-report/posthog-app/_parent/products/tasks/frontend/TaskTracker |
15.4 kB |
frontend/dist-report/posthog-app/_parent/products/tracing/frontend/TracingScene |
87 kB |
frontend/dist-report/posthog-app/_parent/products/user_interviews/frontend/UserInterview |
10.9 kB |
frontend/dist-report/posthog-app/_parent/products/user_interviews/frontend/UserInterviewResponse |
8.59 kB |
frontend/dist-report/posthog-app/_parent/products/user_interviews/frontend/UserInterviews |
7.01 kB |
frontend/dist-report/posthog-app/_parent/products/visual_review/frontend/scenes/VisualReviewIndexScene |
3.54 kB |
frontend/dist-report/posthog-app/_parent/products/visual_review/frontend/scenes/VisualReviewRunScene |
47.3 kB |
frontend/dist-report/posthog-app/_parent/products/visual_review/frontend/scenes/VisualReviewRunsScene |
8.72 kB |
frontend/dist-report/posthog-app/_parent/products/visual_review/frontend/scenes/VisualReviewSettingsScene |
12.2 kB |
frontend/dist-report/posthog-app/_parent/products/visual_review/frontend/scenes/VisualReviewSnapshotHistoryScene |
14.8 kB |
frontend/dist-report/posthog-app/_parent/products/visual_review/frontend/scenes/VisualReviewSnapshotOverviewScene |
20.3 kB |
frontend/dist-report/posthog-app/_parent/products/workflows/frontend/TemplateLibrary/MessageTemplate |
17.6 kB |
frontend/dist-report/posthog-app/_parent/products/workflows/frontend/Workflows/WorkflowScene |
105 kB |
frontend/dist-report/posthog-app/_parent/products/workflows/frontend/WorkflowsScene |
62.5 kB |
frontend/dist-report/posthog-app/src/index |
62.5 kB |
frontend/dist-report/posthog-app/src/layout/panel-layout/ai-first/tabs/NavTabChat |
7.96 kB |
frontend/dist-report/posthog-app/src/lib/components/ActivityLog/describers |
130 kB |
frontend/dist-report/posthog-app/src/lib/components/AppShortcuts/utils/DebugCHQueriesImpl |
19.2 kB |
frontend/dist-report/posthog-app/src/lib/components/Cards/TextCard/TextCardMarkdownEditor |
10.6 kB |
frontend/dist-report/posthog-app/src/lib/components/MonacoDiffEditor |
533 B |
frontend/dist-report/posthog-app/src/lib/lemon-ui/LemonMarkdown/MermaidDiagram |
2 kB |
frontend/dist-report/posthog-app/src/lib/lemon-ui/LemonTextArea/LemonTextAreaMarkdown |
790 B |
frontend/dist-report/posthog-app/src/lib/lemon-ui/Link/Link |
415 B |
frontend/dist-report/posthog-app/src/lib/monaco/CodeEditor |
448 B |
frontend/dist-report/posthog-app/src/lib/monaco/CodeEditorImpl |
26 kB |
frontend/dist-report/posthog-app/src/lib/monaco/CodeEditorInline |
649 B |
frontend/dist-report/posthog-app/src/lib/monaco/vimMode |
211 kB |
frontend/dist-report/posthog-app/src/lib/ui/Button/ButtonPrimitives |
482 B |
frontend/dist-report/posthog-app/src/queries/nodes/WebVitals/WebVitals |
12.6 kB |
frontend/dist-report/posthog-app/src/queries/nodes/WebVitals/WebVitalsPathBreakdown |
5.2 kB |
frontend/dist-report/posthog-app/src/queries/Query/Query |
6.24 kB |
frontend/dist-report/posthog-app/src/queries/schema |
939 kB |
frontend/dist-report/posthog-app/src/scenes/activity/explore/EventsScene |
8.41 kB |
frontend/dist-report/posthog-app/src/scenes/activity/explore/SessionsScene |
9.75 kB |
frontend/dist-report/posthog-app/src/scenes/activity/live/LiveEventsTable |
6.67 kB |
frontend/dist-report/posthog-app/src/scenes/agentic/AgenticAuthorize |
5.51 kB |
frontend/dist-report/posthog-app/src/scenes/approvals/ApprovalDetail |
17.7 kB |
frontend/dist-report/posthog-app/src/scenes/approvals/changeRequestsLogic |
622 B |
frontend/dist-report/posthog-app/src/scenes/audit-logs/AdvancedActivityLogsScene |
43.1 kB |
frontend/dist-report/posthog-app/src/scenes/AuthenticatedShell |
209 kB |
frontend/dist-report/posthog-app/src/scenes/authentication/account/AccountConnected |
3.04 kB |
frontend/dist-report/posthog-app/src/scenes/authentication/account/AgenticAccountMismatch |
2.43 kB |
frontend/dist-report/posthog-app/src/scenes/authentication/account/credential-review/CredentialReview |
5.04 kB |
frontend/dist-report/posthog-app/src/scenes/authentication/cli/CLIAuthorize |
12.1 kB |
frontend/dist-report/posthog-app/src/scenes/authentication/cli/CLILive |
4.05 kB |
frontend/dist-report/posthog-app/src/scenes/authentication/email-mfa-verify/EmailMFAVerify |
3.04 kB |
frontend/dist-report/posthog-app/src/scenes/authentication/invite-signup/InviteSignup |
1.4 kB |
frontend/dist-report/posthog-app/src/scenes/authentication/login-2fa/Login2FA |
4.74 kB |
frontend/dist-report/posthog-app/src/scenes/authentication/login/Login |
1.41 kB |
frontend/dist-report/posthog-app/src/scenes/authentication/login/loginLogic |
569 B |
frontend/dist-report/posthog-app/src/scenes/authentication/password-reset/PasswordReset |
4.5 kB |
frontend/dist-report/posthog-app/src/scenes/authentication/password-reset/PasswordResetComplete |
3.06 kB |
frontend/dist-report/posthog-app/src/scenes/authentication/shared/passkeyLogic |
602 B |
frontend/dist-report/posthog-app/src/scenes/authentication/signup/SignupContainer |
1.39 kB |
frontend/dist-report/posthog-app/src/scenes/authentication/two-factor-reset/TwoFactorReset |
4.04 kB |
frontend/dist-report/posthog-app/src/scenes/authentication/vercel/VercelConnect |
5.03 kB |
frontend/dist-report/posthog-app/src/scenes/authentication/vercel/VercelLinkError |
2.3 kB |
frontend/dist-report/posthog-app/src/scenes/authentication/verify-email/VerifyEmail |
4.79 kB |
frontend/dist-report/posthog-app/src/scenes/billing/AuthorizationStatus |
768 B |
frontend/dist-report/posthog-app/src/scenes/billing/Billing |
717 B |
frontend/dist-report/posthog-app/src/scenes/billing/BillingSection |
21.6 kB |
frontend/dist-report/posthog-app/src/scenes/cohorts/Cohort |
33.8 kB |
frontend/dist-report/posthog-app/src/scenes/cohorts/CohortCalculationHistory |
7.37 kB |
frontend/dist-report/posthog-app/src/scenes/cohorts/Cohorts |
10.9 kB |
frontend/dist-report/posthog-app/src/scenes/coupons/Coupons |
895 B |
frontend/dist-report/posthog-app/src/scenes/dashboard/Dashboard |
7.66 kB |
frontend/dist-report/posthog-app/src/scenes/dashboard/dashboards/Dashboards |
22.6 kB |
frontend/dist-report/posthog-app/src/scenes/dashboard/dashboards/templates/DashboardTemplateCopyScene |
7.09 kB |
frontend/dist-report/posthog-app/src/scenes/data-management/DataManagementScene |
6.55 kB |
frontend/dist-report/posthog-app/src/scenes/data-management/definition/DefinitionEdit |
23.2 kB |
frontend/dist-report/posthog-app/src/scenes/data-management/definition/DefinitionView |
31.4 kB |
frontend/dist-report/posthog-app/src/scenes/data-management/MaterializedColumns/MaterializedColumns |
12.9 kB |
frontend/dist-report/posthog-app/src/scenes/data-management/variables/SqlVariableEditScene |
8.57 kB |
frontend/dist-report/posthog-app/src/scenes/data-pipelines/batch-exports/BatchExportScene |
67.7 kB |
frontend/dist-report/posthog-app/src/scenes/data-pipelines/DataPipelinesNewScene |
5.14 kB |
frontend/dist-report/posthog-app/src/scenes/data-pipelines/DestinationsScene |
5.68 kB |
frontend/dist-report/posthog-app/src/scenes/data-pipelines/event-filtering/EventFilterScene |
23.3 kB |
frontend/dist-report/posthog-app/src/scenes/data-pipelines/legacy-plugins/LegacyPluginScene |
22 kB |
frontend/dist-report/posthog-app/src/scenes/data-pipelines/TransformationsScene |
4.78 kB |
frontend/dist-report/posthog-app/src/scenes/data-pipelines/WebScriptsScene |
5.54 kB |
frontend/dist-report/posthog-app/src/scenes/data-warehouse/DataWarehouseScene |
2.06 kB |
frontend/dist-report/posthog-app/src/scenes/data-warehouse/editor/EditorScene |
4.78 kB |
frontend/dist-report/posthog-app/src/scenes/debug/DebugScene |
25.2 kB |
frontend/dist-report/posthog-app/src/scenes/debug/hog/HogRepl |
9.05 kB |
frontend/dist-report/posthog-app/src/scenes/experiments/Experiment |
224 kB |
frontend/dist-report/posthog-app/src/scenes/experiments/Experiments |
23.1 kB |
frontend/dist-report/posthog-app/src/scenes/experiments/notebook/NotebookCompactTable |
1.98 kB |
frontend/dist-report/posthog-app/src/scenes/experiments/SharedMetrics/SharedMetric |
12.2 kB |
frontend/dist-report/posthog-app/src/scenes/experiments/SharedMetrics/SharedMetrics |
1.81 kB |
frontend/dist-report/posthog-app/src/scenes/exports/ExportsScene |
5.38 kB |
frontend/dist-report/posthog-app/src/scenes/feature-flags/FeatureFlag |
117 kB |
frontend/dist-report/posthog-app/src/scenes/feature-flags/FeatureFlags |
3.9 kB |
frontend/dist-report/posthog-app/src/scenes/groups/Group |
23.2 kB |
frontend/dist-report/posthog-app/src/scenes/groups/Groups |
9.38 kB |
frontend/dist-report/posthog-app/src/scenes/groups/GroupsNew |
8.65 kB |
frontend/dist-report/posthog-app/src/scenes/health-alerts/HealthAlertsScene |
6.37 kB |
frontend/dist-report/posthog-app/src/scenes/health/categoryDetail/HealthCategoryDetailScene |
13.1 kB |
frontend/dist-report/posthog-app/src/scenes/health/HealthScene |
17 kB |
frontend/dist-report/posthog-app/src/scenes/health/pipelineStatus/PipelineStatusScene |
12.3 kB |
frontend/dist-report/posthog-app/src/scenes/heatmaps/scenes/heatmap/HeatmapNewScene |
6.41 kB |
frontend/dist-report/posthog-app/src/scenes/heatmaps/scenes/heatmap/HeatmapRecordingScene |
5.15 kB |
frontend/dist-report/posthog-app/src/scenes/heatmaps/scenes/heatmap/HeatmapScene |
8 kB |
frontend/dist-report/posthog-app/src/scenes/heatmaps/scenes/heatmaps/HeatmapsScene |
5.23 kB |
frontend/dist-report/posthog-app/src/scenes/hog-functions/HogFunctionScene |
60.5 kB |
frontend/dist-report/posthog-app/src/scenes/hog-functions/misc/Diff |
1.35 kB |
frontend/dist-report/posthog-app/src/scenes/inbox/InboxScene |
177 kB |
frontend/dist-report/posthog-app/src/scenes/insights/InsightQuickStart/InsightQuickStart |
8.16 kB |
frontend/dist-report/posthog-app/src/scenes/insights/InsightScene |
40.8 kB |
frontend/dist-report/posthog-app/src/scenes/insights/views/BoxPlot/BoxPlot |
6.67 kB |
frontend/dist-report/posthog-app/src/scenes/insights/views/CalendarHeatMap/CalendarHeatMap |
9.26 kB |
frontend/dist-report/posthog-app/src/scenes/insights/views/RegionMap/RegionMap |
30.8 kB |
frontend/dist-report/posthog-app/src/scenes/insights/views/WorldMap/WorldMap |
6.2 kB |
frontend/dist-report/posthog-app/src/scenes/instance/AsyncMigrations/AsyncMigrations |
14.3 kB |
frontend/dist-report/posthog-app/src/scenes/instance/DeadLetterQueue/DeadLetterQueue |
6.71 kB |
frontend/dist-report/posthog-app/src/scenes/instance/QueryPerformance/QueryPerformance |
9.95 kB |
frontend/dist-report/posthog-app/src/scenes/instance/SystemStatus/SystemStatus |
18.2 kB |
frontend/dist-report/posthog-app/src/scenes/integrations/IntegrationsLandingScene |
1.67 kB |
frontend/dist-report/posthog-app/src/scenes/IntegrationsRedirect/IntegrationsRedirect |
955 B |
frontend/dist-report/posthog-app/src/scenes/marketing-analytics/MarketingAnalyticsScene |
46.7 kB |
frontend/dist-report/posthog-app/src/scenes/max/Max |
20.1 kB |
frontend/dist-report/posthog-app/src/scenes/models/ModelsScene |
19.6 kB |
frontend/dist-report/posthog-app/src/scenes/models/NodeDetailScene |
19.7 kB |
frontend/dist-report/posthog-app/src/scenes/moveToPostHogCloud/MoveToPostHogCloud |
4.5 kB |
frontend/dist-report/posthog-app/src/scenes/new-tab/NewTabScene |
2.76 kB |
frontend/dist-report/posthog-app/src/scenes/notebooks/NotebookCanvasScene |
12 kB |
frontend/dist-report/posthog-app/src/scenes/notebooks/NotebookPanel/NotebookPanel |
14 kB |
frontend/dist-report/posthog-app/src/scenes/notebooks/NotebookScene |
17.3 kB |
frontend/dist-report/posthog-app/src/scenes/notebooks/NotebooksScene |
8.76 kB |
frontend/dist-report/posthog-app/src/scenes/oauth/OAuthAuthorize |
810 B |
frontend/dist-report/posthog-app/src/scenes/onboarding/coupon/OnboardingCouponRedemption |
1.34 kB |
frontend/dist-report/posthog-app/src/scenes/onboarding/Onboarding |
781 kB |
frontend/dist-report/posthog-app/src/scenes/onboarding/sdks/SdkHealthScene |
9.18 kB |
frontend/dist-report/posthog-app/src/scenes/organization/ConfirmOrganization/ConfirmOrganization |
4.5 kB |
frontend/dist-report/posthog-app/src/scenes/organization/Create/Create |
704 B |
frontend/dist-report/posthog-app/src/scenes/organization/Deactivated |
1.17 kB |
frontend/dist-report/posthog-app/src/scenes/organization/PendingDeletion |
2.24 kB |
frontend/dist-report/posthog-app/src/scenes/persons/PersonScene |
28 kB |
frontend/dist-report/posthog-app/src/scenes/persons/PersonsScene |
11.6 kB |
frontend/dist-report/posthog-app/src/scenes/PreflightCheck/PreflightCheck |
5.57 kB |
frontend/dist-report/posthog-app/src/scenes/product-tours/ProductTour |
273 kB |
frontend/dist-report/posthog-app/src/scenes/product-tours/ProductTours |
6.04 kB |
frontend/dist-report/posthog-app/src/scenes/project-homepage/ProjectHomepage |
26.8 kB |
frontend/dist-report/posthog-app/src/scenes/project/Create/Create |
982 B |
frontend/dist-report/posthog-app/src/scenes/project/PendingDeletion |
2.6 kB |
frontend/dist-report/posthog-app/src/scenes/resource-transfer/ResourceTransfer |
10.6 kB |
frontend/dist-report/posthog-app/src/scenes/saved-insights/SavedInsights |
3.47 kB |
frontend/dist-report/posthog-app/src/scenes/session-recordings/detail/SessionRecordingDetail |
8.55 kB |
frontend/dist-report/posthog-app/src/scenes/session-recordings/file-playback/SessionRecordingFilePlaybackScene |
11.2 kB |
frontend/dist-report/posthog-app/src/scenes/session-recordings/kiosk/SessionRecordingsKiosk |
16.6 kB |
frontend/dist-report/posthog-app/src/scenes/session-recordings/player/modal/SessionPlayerModal |
8.26 kB |
frontend/dist-report/posthog-app/src/scenes/session-recordings/player/snapshot-processing/DecompressionWorkerManager |
323 B |
frontend/dist-report/posthog-app/src/scenes/session-recordings/playlist/SessionRecordingsPlaylistScene |
11.7 kB |
frontend/dist-report/posthog-app/src/scenes/session-recordings/SessionRecordings |
7.68 kB |
frontend/dist-report/posthog-app/src/scenes/session-recordings/settings/SessionRecordingsSettingsScene |
8.91 kB |
frontend/dist-report/posthog-app/src/scenes/sessions/SessionProfileScene |
21.7 kB |
frontend/dist-report/posthog-app/src/scenes/settings/SettingsMap |
6.62 kB |
frontend/dist-report/posthog-app/src/scenes/settings/SettingsScene |
9.86 kB |
frontend/dist-report/posthog-app/src/scenes/sites/Site |
1.57 kB |
frontend/dist-report/posthog-app/src/scenes/startups/StartupProgram |
21.1 kB |
frontend/dist-report/posthog-app/src/scenes/StripeConfirmInstall/StripeConfirmInstall |
3.7 kB |
frontend/dist-report/posthog-app/src/scenes/subscriptions/SubscriptionScene |
17.6 kB |
frontend/dist-report/posthog-app/src/scenes/subscriptions/SubscriptionsScene |
7.06 kB |
frontend/dist-report/posthog-app/src/scenes/surveys/forms/SurveyFormBuilder |
3.09 kB |
frontend/dist-report/posthog-app/src/scenes/surveys/Survey |
7.38 kB |
frontend/dist-report/posthog-app/src/scenes/surveys/Surveys |
27.8 kB |
frontend/dist-report/posthog-app/src/scenes/surveys/wizard/SurveyWizard |
69.8 kB |
frontend/dist-report/posthog-app/src/scenes/themes/CustomCssScene |
4.98 kB |
frontend/dist-report/posthog-app/src/scenes/toolbar-launch/ToolbarLaunch |
3.93 kB |
frontend/dist-report/posthog-app/src/scenes/Unsubscribe/Unsubscribe |
1.71 kB |
frontend/dist-report/posthog-app/src/scenes/web-analytics/SessionAttributionExplorer/SessionAttributionExplorerScene |
12.2 kB |
frontend/dist-report/posthog-app/src/scenes/web-analytics/WebAnalyticsScene |
20.3 kB |
frontend/dist-report/posthog-app/src/scenes/wizard/Wizard |
4.45 kB |
frontend/dist-report/posthog-app/src/sharedChunkAnchors |
1.33 kB |
frontend/dist-report/render-query/src/render-query/render-query |
25.4 MB |
frontend/dist-report/toolbar/src/toolbar/toolbar |
11.2 MB |
dmarticus
approved these changes
Jun 21, 2026
benjackwhite
enabled auto-merge (squash)
June 22, 2026 08:07
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
Approval-gated tools whose policy scope is
session_principalran the real tool immediately whenever the most-recent user-turn sender matched the session's auth-time principal — the per-asker fast-path inmakePerAskerAuth.That conflates "this identity may decide the approval" with "this specific action was decided." They aren't the same. The session owner being the asker is not consent to the particular gated call the model emitted. Content the agent reads (fetched docs, MCP/tool output, another agent's bundle) can carry a prompt injection that steers the model into a destructive gated call while the last user-turn sender is still the legitimate owner — so the call auto-executes with no approval UI and no human decision.
This is realized in the shipping Agent Builder example, which gates the destructive
agent-applications-revisions-promote-create/-archive-createtools withapprovers: ["session_principal"]and reads untrusted fleet content via its fleet-audit skill. The only other guard there is a soft prompt rule ("never promote without explicit consent") — exactly what injection overrides.This re-applies the fix from the earlier closed PR #64318. That PR was stacked on the
agent-platformbranch, which merged into master without the fix landing — so the original issue was still live on master when I re-checked. This branch is rebased cleanly on current master.Changes
session_principalfrom the per-asker fast-path inper-asker-auth.ts. Those calls now always queue for an explicit, out-of-band human decision (the existing approval path).team_adminsstays the only self-authorising fast-path scope.session_principalremains a valid, persisted approver scope (approver_scopeon the queued row) so decision-side routing — letting the session owner, not only a team admin, clear the queued approval — can land as a follow-up. No schema change; the Agent Builder spec is unchanged.per-asker-auth.tsandspec.tsto reflect the new semantics.session_principalcases inper-asker-auth.test.tsanddriver.test.tsto assert the gate holds (queues; the real tool never runs) as an injection-guard regression. Agent Builder example assertion comment updated.Calibration / scope
team_adminsleft as-is. It has the same theoretical injection exposure but is a narrower, opt-in scope and wasn't part of this finding. Whether to also drop its fast-path is a separate product call.How did you test this code?
I'm an agent (Claude Code). I did not run the full suite — the agent-platform tests require a real Postgres/Kafka/Redis/S3 stack and the Docker daemon isn't available in this web environment (the harness has no in-memory variants by design). What I ran:
typescript:check— clean foragent-runner,agent-shared, andagent-tests.oxlint— 0 errors on the changed packages; the remaining warnings are pre-existing in untouched files.oxfmt --check— all changed files correctly formatted.The test changes are a faithful re-application of the already-reviewed commit from #64318 (which reported the corresponding test runs passing against local agent infra). The flipped assertions are written to fail if the fast-path is reverted.
Automatic notifications
🤖 Agent context
Autonomy: Human-driven (agent-assisted)
Re-investigated the finding from the closed PR #64318 at @benjackwhite's request: confirmed the
session_principalapproval bypass was still present on current master (the original PR was stacked onagent-platform, which merged without the fix), then re-applied the fix on a fresh branch off master. Used Claude Code with the GitHub MCP tools. No repo skills were invoked — the change is a re-application of a previously reviewed diff, adapted to where the code now lives (the concierge example test was renamed toexample-agent-builder.test.ts).Agent-authored; requires human review — do not self-merge.
🤖 Generated with Claude Code
Generated by Claude Code