fix(agent): serve only the columns of collections the caller may read - #1840

Open

PMerlet wants to merge 10 commits into

mainfrom

fix/prd-900-agent-read-permission-on-projected-collections

Commits on Aug 20, 2026

fix(agent): serve only the columns of collections the caller may read

PMerlet
and
claude
committed
9ea876f
fix(agent): check the collections a search string names through its own syntax

PMerlet
and
claude
committed
a88dbfe
test(agent): pin the guards the route factory stubs out

PMerlet
and
claude
committed
d90b26c
fix(agent): ask the stack what a search reaches instead of deriving it

PMerlet
and
claude
committed
78944c5
test(agent): name the suite after the method it pins

PMerlet
and
claude
committed
46659eb

Commits on Aug 21, 2026

fix(agent): redact the record an update serializes back

PMerlet
and
claude
committed
bc3925a
fix(agent): fail closed when a searched path does not resolve

PMerlet
and
claude
committed
2e3e7b5
refactor(agent): name the projection flag instead of commenting it

PMerlet
and
claude
committed
680ec65
test(agent): state what withPks re-adds, and when it is harmless

PMerlet
and
claude
committed
aeb3c3c
fix(agent): check only the query components a route applies

PMerlet
and
claude
committed
9385592