openwork/examples · ope/openwork

GGitHubfix(den-api): let an org API key push a member's gateway key (#7090)

Files	Last commit	Last update
declarative-org	docs(declarative-org): add mcpConnections example, conditional-write handling and per-resource omission semantics (#4976) * docs(declarative-org): include explicit HTTP and OAuth MCP examples Signed-off-by: Guillaume Loret <guillaume@openworklabs.com> * fix(declarative-org): guard and condition MCP replacements Signed-off-by: Guillaume Loret <guillaume@openworklabs.com> * docs(declarative-org): explain MCP and omission semantics Signed-off-by: Guillaume Loret <guillaume@openworklabs.com> * test(declarative-org): prove shipped MCP manifest convergence Signed-off-by: Guillaume Loret <guillaume@openworklabs.com> * fix(test): constrain declarative proxy to its Den origin Signed-off-by: Guillaume Loret <guillaume@openworklabs.com> * fix(test): construct proxy authority independently of requests Signed-off-by: Guillaume Loret <guillaume@openworklabs.com> * docs(declarative-org): align write shapes and usability gate with release proof Signed-off-by: Guillaume Loret <guillaume@openworklabs.com> * fix(declarative-org): reject misplaced MCP audience and clarify apply limits Signed-off-by: Guillaume Loret <guillaume@openworklabs.com> * docs(declarative-org): drop internal ticket reference from heading Signed-off-by: Guillaume Loret <guillaume@openworklabs.com> --------- Signed-off-by: Guillaume Loret <guillaume@openworklabs.com>	1 month ago
litellm-per-member-keys	fix(den-api): let an org API key push a member's gateway key (#7090) * fix(den-api): let an org API key push a member's gateway key A provisioning script that mints each member's key upstream (LiteLLM, TrueFoundry) and pushes it to PUT /v1/llm-providers/:id/member-credentials/:orgMembershipId was refused with secure_entry_required since #6045. That route exists for exactly this, so it now accepts an organization API key whose owner has Manage people's provider keys. The agent is still always refused, and every other way of sending a provider key with an API key stays refused. The LiteLLM example provisioner accepts OPENWORK_DEN_API_KEY. * test(examples): TrueFoundry per-member world provisioned by an org API key Boots Den and a signed-in desktop, creates a custom per-member provider on a TrueFoundry gateway, and pushes the member's key using only an org API key, the way a customer's provisioning script would.	1 day ago
microsandbox-openwork-rust	fix(deps): patch open Dependabot security alerts (#6631) Raise overrides for body-parser 2.4.0, fast-uri 3.1.9 and qs 6.16.1, bump happy-dom to 21.0.4, nodemailer to ^10.1.4 and rustls to 0.23.46, and regenerate both pnpm lockfiles. better-auth 1.7.7 is left for a separate migration: it replaces the SCIM plugin API and changes CIMD wiring. deepmerge has no fixed release. Signed-off-by: OmarMcAdam <gh@mcadam.io>	9 days ago
truefoundry-per-member-keys	fix(den-api): let an org API key push a member's gateway key (#7090) * fix(den-api): let an org API key push a member's gateway key A provisioning script that mints each member's key upstream (LiteLLM, TrueFoundry) and pushes it to PUT /v1/llm-providers/:id/member-credentials/:orgMembershipId was refused with secure_entry_required since #6045. That route exists for exactly this, so it now accepts an organization API key whose owner has Manage people's provider keys. The agent is still always refused, and every other way of sending a provider key with an API key stays refused. The LiteLLM example provisioner accepts OPENWORK_DEN_API_KEY. * test(examples): TrueFoundry per-member world provisioned by an org API key Boots Den and a signed-in desktop, creates a custom per-member provider on a TrueFoundry gateway, and pushes the member's key using only an org API key, the way a customer's provisioning script would.	1 day ago