[Admin Governance] Restore editorless agent authors - #32975
Open
philipperolet wants to merge 6 commits into
Open
philipperolet wants to merge 6 commits into
philipperolet wants to merge 6 commits into
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub. 2 Skipped Deployments
|
philipperolet
force-pushed
the
pr/922-restore-editorless-agent-authors
branch
4 times, most recently
from
September 22, 2026 13:12
a61e358 to
8e179cf
Compare
philipperolet
force-pushed
the
pr/922-restore-editorless-agent-authors
branch
from
September 22, 2026 13:44
8e179cf to
b4d50ec
Compare
Contributor
Author
|
temp closing as we got no support comeback |
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Related to https://github.com/dust-tt/tasks/issues/9481
Follows #32904.
Removing author-based permissions exposed active agents with no active editor. For those agents, the current version's author can no longer maintain a configuration they previously owned.
This PR adds a dry-run-by-default backfill that grants the current author an editor grant when the agent is active, the author is still an active workspace member, and nobody currently has an editor grant. Each repair is rechecked under the same lock as live editor changes, making execution safe to rerun without overwriting a concurrent admin repair.
The script uses keyset batches with a resume cursor, logs each affected workspace, agent, and author, refreshes agent search after a repair, and performs a final scan before reporting successful completion. If an eligible agent remains, it fails and asks for another pass from the start.
Risks
Blast radius: Manually running the backfill adds one editor to active agents that currently have no active editor.
Risk: standard
Deploy Plan
20260922_restore_editorless_agent_authors.tswithout--executein each production region and inspect the planned grants--executein one region at a time and save the logsTest