Tags

Tags give the ability to mark specific points in history as being important

  • 1.6.0

    fe8685cb · fix: grant delete scope to admin users in GenerateTokenController · 
    Release 1.6.0 — 21 write tools + scope enforcement fix

New tools (all Free, no Pro split):
- CoreModule: createNode, updateNode, deleteNode, publishNode,
  createComment, updateComment, deleteComment
- TaxonomyModule: createTaxonomyTerm, updateTaxonomyTerm, deleteTaxonomyTerm
- UserModule: createUser, updateUser, blockUser, unblockUser
- FileModule: uploadFile (base64, 10 MB cap)
- MediaModule: createMedia, updateMedia, deleteMedia
- StructureModule: createMenuLink, updateMenuLink, deleteMenuLink

Security fixes:
- ToolsController: scope enforcement was completely missing from the
  executeQuery() route (the one actually advertised as tools_endpoint
  in the manifest). A read-only token could call any write/delete tool.
- GenerateTokenController: hardcoded ['read','write'] scopes meant admin
  users connecting via goldnat.ai never received delete scope.
- OAuthController/OAuthService: admin users now automatically receive
  delete scope on both initial grant and refresh-token flows.

Also fixed:
- ManifestService: version was hardcoded; now derived from
  ModuleExtensionList so info.yml and manifest always agree.

50 tools total (29 read + 16 write + 5 delete). Tested end-to-end
with real AI agent via goldnat.ai capability tests.

  • 1.2.0

    5bcb9f40 · feat: enforce 'use ai connect api' permission on tools and info page ·

  • 1.0.0

    4a427594 · build: fix composer.json for Drupal.org release (remove JWT dependency, update package name) · 
    Release 1.0.0: OAuth 2.0 + PKCE Authentication, 7 Core Tools