bvandeusen d4666bea7f feat(mcp): add multi-user sharing ACL guard to _INSTRUCTIONS ...

The ACL constraint (scope every read/mutation by owner + shares via
services/access.py) is a security-correctness invariant that should
always be loaded, and it's FabledScribe-specific — so it belongs in
Scribe's own contained _INSTRUCTIONS, not the cross-project FabledSword
rulebook. The redundant rulebook rule will be retired once this ships
to prod.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-03 13:47:02 -04:00

..

mcp

feat(mcp): add multi-user sharing ACL guard to _INSTRUCTIONS

2026-06-03 13:47:02 -04:00

models

chore(profile): drop dead curator columns from UserProfile

2026-06-02 19:48:37 -04:00

routes

feat(dashboard): GET /api/dashboard endpoint

2026-06-02 23:22:08 -04:00

services

feat(dashboard): aggregation service build_dashboard

2026-06-02 23:21:23 -04:00

static

Initial commit: note-taking/task-tracking app with LLM integration scaffold

2026-02-09 23:35:44 -05:00

utils

Fix tag handling for multi-word tags

2026-02-26 06:05:58 -05:00

__init__.py

Initial commit: note-taking/task-tracking app with LLM integration scaffold

2026-02-09 23:35:44 -05:00

app.py

feat(dashboard): GET /api/dashboard endpoint

2026-06-02 23:22:08 -04:00

auth.py

feat: add bearer token auth to _check_auth, falls back to session

2026-03-23 20:57:26 -04:00

config.py

refactor: Phase 10 — Ollama service, image cache, config, frontend orphans

2026-05-27 19:10:25 -04:00

rate_limit.py

security: fix 10 vulnerabilities from security audit

2026-03-29 00:37:13 -04:00