pub fn list(
conn: &Connection,
caller_agent_id: Option<&str>,
) -> Result<Vec<Subscription>>Expand description
List active subscriptions, optionally scoped to a single owner.
Cross-tenant authorization (#872, security-high, 2026-05-18):
When caller_agent_id is Some(aid), only rows where
created_by = aid are returned — preventing tenant A from
enumerating tenant B’s webhook fleet. When None, every row is
returned (internal use: dispatch fan-out, federation, operator
inventory). Callers exposed to untrusted input (MCP
memory_list_subscriptions, HTTP GET /api/v1/subscriptions) MUST
pass Some(<authenticated caller>).