Issue transfer, delegated editing of selected fields and a configurable form-to-webhook action builder.
IMPLEMENTED / PRE-PUBLISH
CAPABILITIES
01
Three native actions: transfer, advanced edit and custom action
02
Per-queue users/groups allowlist and editable field policy
03
Current assignee only, with a version recheck before service execution
04
User OAuth first, service fallback only after a real 403
05
Dynamic form fields, JSON body, signed metadata and write-only auth
06
HTTPS, DNS/IP SSRF defense, no redirects, 256 KiB limit
DATA FLOW
The platform stores user OAuth. A service token is entered once, encrypted by the backend and never returned; actor, assignee, policy and version are rechecked.
TRACKER→IFRAME→BACKEND→TRACKER / CHANNEL
FAILURES & BOUNDARIES
No fallback for 404/409/422/5xx: users get a precise reason and request id.