mirror of
https://github.com/pewdiepie-archdaemon/odysseus.git
synced 2026-10-06 14:08:07 +00:00
7026cf40b5
Some checks failed
CI / Focused test guidance (report-only) (push) Has been cancelled
CI / Python syntax (compileall) (push) Has been cancelled
CI / JS syntax (node --check) (push) Has been cancelled
CI / Python tests (pytest) (push) Has been cancelled
CodeQL / Analyze (actions) (push) Has been cancelled
CodeQL / Analyze (javascript-typescript) (push) Has been cancelled
CodeQL / Analyze (python) (push) Has been cancelled
ci / docker publish / build (amd64) (push) Has been cancelled
ci / docker publish / build (arm64) (push) Has been cancelled
ci / docker publish / merge manifest + tag (push) Has been cancelled
* docs(specs): restore bootstrap after dev rewrite
* docs(specs): remove runtime inventory snapshot
* docs(specs): reconcile current dev truth
* docs(specs): document scheduled task actions as an owner-attribution source
Owner Attribution covered cookie, bearer-token and internal-loopback
requests. Scheduled task actions are a fourth source and behave
differently: _execute_action passes owner=task.owner off the stored
ScheduledTask row, so no request and no resolved principal are in
flight, and route-level require_user() never runs.
Webhook triggers are the sharp case. They are unauthenticated by
design with the token as the only credential and execute under the
stored task.owner.
Paths cite routes/task/task_routes.py, the canonical location after
the task subpackage move (#6081); routes/task_routes.py on current dev
is the backward-compat shim.
* docs(specs): add chained tasks to the trigger list, refresh dev stamp
Review feedback from RaresKeY on the previous commit.
"Every trigger path" was too broad: success-chained tasks are another
path into _execute_action. Added them with their own citation, and
noted that chaining additionally requires the target task to share
task.owner and rejects cycles, which is stricter than the trigger-side
checks. Softened the lead-in to "these trigger paths".
Line 56 still pointed at routes/task_routes.py for webhook credential
validation. That path is the backward-compat shim on current dev after
the task subpackage move (#6081); repointed to the canonical
routes/task/task_routes.py.
Stamp moved to dev@2a6b09b. Inspection backing that bump was scoped:
every file path cited in this spec was mechanically checked to resolve
on
|
||
|---|---|---|
| .. | ||
| _readme.md | ||
| anthropic.md | ||
| atlas-cloud.md | ||
| azure-openai.md | ||
| bedrock.md | ||
| cerebras.md | ||
| chatgpt-subscription.md | ||
| cloudflare-workers-ai.md | ||
| cohere.md | ||
| deepseek.md | ||
| fireworks.md | ||
| github-copilot.md | ||
| github-models.md | ||
| google.md | ||
| groq.md | ||
| hugging-face.md | ||
| llama-cpp.md | ||
| lm-studio.md | ||
| local-compatible-engines.md | ||
| minimax.md | ||
| mistral.md | ||
| moonshot-kimi.md | ||
| nvidia-nim.md | ||
| ollama.md | ||
| openai-compatible.md | ||
| openai.md | ||
| opencode.md | ||
| openrouter.md | ||
| perplexity.md | ||
| sglang.md | ||
| siliconflow.md | ||
| together.md | ||
| venice.md | ||
| vllm.md | ||
| xai.md | ||
| zai.md | ||