mirror of
https://github.com/mudler/LocalAI.git
synced 2026-11-06 04:23:15 -05:00
AuthorizeConnector had no case for the op history, so the default branch refused it. A mention in a Slack thread then logged "connectors: forbidden" and the first turn of the new chat got no thread block. History now follows the rules of a send: the binding is the whole authority, the token comes from owner storage and a disabled binding keeps it. Only the poll stops with the binding. The studio specs ran over a transport that skipped the scope check, so none of them saw the refusal. The rig now authorizes every call with the real manager, and a new spec table pins each op of the contract. Assisted-by: Claude:claude-sonnet-5-5