Totoro b0bca9dcb4

feat(mcp): bind HTTP tool credentials to approved custom agents (#8242) ...

* feat(mcp): bind agent credentials to approved definitions

* fix(mcp): enforce live auth policy and pin task destinations

---------

Co-authored-by: Totoro-qaq <279883115+Totoro-qaq@users.noreply.github.com>

2026-11-14 22:10:33 +08:00

..

__init__.py

feat(tests): add Blockbuster runtime gate for event-loop blocking IO (#3229)

2026-05-26 23:03:49 +08:00

conftest.py

feat(tests): add Blockbuster runtime gate for event-loop blocking IO (#3229)

2026-05-26 23:03:49 +08:00

test_agent_factory_construction.py

fix(runtime): keep agent construction off event loop (#5217)

2026-09-12 21:09:05 +08:00

test_agent_factory_resolve_offloop.py

fix(gateway): resolve the agent factory off the event loop (#6206)

2026-10-06 07:52:47 +08:00

test_agents_router.py

fix(gateway): keep /api/user-profile filesystem work off the event loop (#5935)

2026-09-27 15:06:49 +08:00

test_aio_sandbox_get.py

fix(sandbox): derive the AIO sandbox ID off the event loop in async acquire (#7507)

2026-10-25 23:22:24 +08:00

test_aio_sandbox_readiness_ssl.py

fix(sandbox): build the readiness client off the event loop (#7934)

2026-11-07 15:49:55 +08:00

test_artifact_archive.py

feat(artifacts): download run files as zip (#5117)

2026-09-01 22:01:21 +08:00

test_artifact_middlewares.py

feat(agents): persist tool artifacts as resolvable handles (#4676) (#4929)

2026-09-27 11:09:41 +08:00

test_artifacts_router.py

fix(artifacts): authorize shared image reads and offload MIME lookup (#7604)

2026-10-27 16:59:19 +08:00

test_auth_middleware_route_permissions.py

fix(gateway): read the route authorization config off the event loop (#7557)

2026-10-26 18:44:09 +08:00

test_auth_router_config_reads.py

fix(auth): read the live config off the event loop on public auth routes (#7576)

2026-10-26 22:11:48 +08:00

test_batch_acceptance.py

feat(subagents): add acceptance checks to durable batch items (#5289)

2026-09-09 08:45:20 +08:00

test_browserless_client_ssl.py

fix(browserless): construct the fetch and screenshot clients off the event loop (#7913)

2026-11-05 16:04:45 +08:00

test_buzz_channel_seen_events.py

fix(channels): fence restart during service shutdown (#6503)

2026-10-08 22:29:49 +08:00

test_buzz_seen_event_store.py

fix(buzz): move seen-event persistence off event loop (#5103)

2026-08-31 23:18:34 +08:00

test_capabilities_router.py

feat(capabilities): unify catalog, plugin configuration and agent selection (#5497)

2026-09-19 12:14:24 +08:00

test_channel_artifact_delivery.py

fix(channels): resolve reply artifacts off the event loop (#7594)

2026-10-27 14:55:19 +08:00

test_channel_leader_lease.py

feat(channels): share encrypted runtime channel config across Gateway instances (#6988)

2026-10-18 11:10:31 +08:00

test_channel_outbound_files.py

fix(telegram): deliver rejected photos as documents (#8056)

2026-11-11 08:03:40 +08:00

test_channel_runtime_config_store.py

feat(channels): share encrypted runtime channel config across Gateway instances (#6988)

2026-10-18 11:10:31 +08:00

test_channel_stop_offloop.py

fix(channels): clean up interrupted Telegram initialization (#6810)

2026-10-14 06:20:33 +08:00

test_channel_thread_binding_store.py

fix(channels): run each IM message once across instances, restarts and late redeliveries (#7104)

2026-10-19 22:57:19 +08:00

test_channels_ingest.py

fix(channels): offload blocking filesystem IO in inbound file ingestion (#3529)

2026-06-13 06:38:54 +08:00

test_codex_async_http.py

fix(models): close Codex async HTTP requests on cancellation (#8053)

2026-11-12 21:55:08 +08:00

test_community_tool_config_reads.py

fix(community): resolve async tool config off the event loop (#7580)

2026-10-26 23:40:32 +08:00

test_compaction_model_offloop.py

fix(compaction): build the manual-compaction summarization models off the event loop (#7806)

2026-11-06 21:46:14 +08:00

test_context_usage_config_read.py

fix(gateway): read the live config off the loop for thread token usage (#7727)

2026-10-31 08:28:01 +08:00

test_crawl4ai_client_ssl.py

fix(crawl4ai): construct the fetch client off the event loop (#7906)

2026-11-05 14:24:21 +08:00

test_credentials_key_offloop.py

fix(security): add DEER_FLOW_CREDENTIALS_KEY and wire the channel credentials cipher (#6611)

2026-10-10 20:51:09 +08:00

test_declared_tool_decision_offloop.py

feat(authz): middleware-declared tool path Layer 1 now covers tools declared by middlewares (#6105)

2026-10-01 18:26:58 +08:00

test_deermem_watermark_sidecar.py

fix(memory): persist the DeerMem extraction watermark across restarts and replicas (#7205)

2026-10-21 07:26:44 +08:00

test_dingtalk_card_token.py

fix(channels): deliver the DingTalk reply when an AI card request fails (#7781)

2026-11-02 10:34:03 +08:00

test_dingtalk_receive_file.py

fix(sandbox): attest lark broker mode per Pod and quarantine uncertain shell outcomes (#6436)

2026-10-10 07:56:09 +08:00

test_discord_channel_state.py

fix(channels): share chat-to-thread bindings through the database (#6558)

2026-10-10 14:00:00 +08:00

test_dynamic_context_middleware.py

test(mcp): cover failed-owner retry across event loops (#7458)

2026-10-25 11:32:39 +08:00

test_extension_artifacts.py

feat(extensions): add versioned team file handoffs (#7817)

2026-11-05 14:50:09 +08:00

test_extension_model_invocation.py

feat(extensions): grant bounded host model invocation (#5796)

2026-09-25 15:24:09 +08:00

test_feishu_receive_file.py

fix: balance temporary sandbox leases for uploads (#3261)

2026-09-26 16:22:20 +08:00

test_file_conversion_offloop.py

fix(uploads): resolve conversion settings in the parser worker (#7642)

2026-10-30 08:50:37 +08:00

test_gate_smoke.py

fix(community): resolve SSRF-guarded hostnames off the event loop (#6140)

2026-10-02 22:33:48 +08:00

test_github_app_token_mint.py

fix(github): build the App JWT off the loop and reuse the parsed key (#8203)

2026-11-13 14:31:29 +08:00

test_goal_from_chat.py

feat(goal): add /goal from-chat for IM channels (#8200)

2026-11-13 14:22:58 +08:00

test_groundroute_search_async.py

feat(community): migrate GroundRoute tools to httpx.AsyncClient (#7183)

2026-10-21 23:08:27 +08:00

test_honcho_memory_backend.py

fix(memory): avoid replaying Honcho checkpoint history (#7687)

2026-10-30 07:33:41 +08:00

test_image_search.py

feat(community): offload image search to a thread via asyncio.to_thread (#5788)

2026-09-26 15:21:47 +08:00

test_integrations_router.py

test(lark): make blocking I/O CLI fixture work on Windows (#5826)

2026-09-26 08:17:28 +08:00

test_invoke_acp_agent_tool.py

fix(acp): fail fast when an ACP agent exits and drain its stderr (#7354)

2026-10-23 22:30:26 +08:00

test_jsonify_client_ssl.py

fix(jsonify): keep HTTPX TLS setup off the event loop (#7932)

2026-11-07 14:10:18 +08:00

test_jsonl_run_event_store.py

feat(runtime): record terminal artifact delivery receipts (slice 1 of #4272) (#4365)

2026-07-26 21:45:47 +08:00

test_knowledge_management_extension.py

feat(knowledge): add optional ingestion and processing extension (#7293)

2026-10-24 08:19:02 +08:00

test_knowledge_platform_extension.py

feat(knowledge): add optional platform connections and hierarchical spaces (phase 3) (#7417)

2026-10-25 19:52:31 +08:00

test_knowledge_router.py

feat(knowledge): decouple scope and read-only catalogs (phase 2) (#6904)

2026-10-15 15:10:39 +08:00

test_login_local_throttle.py

fix(auth): key the compose login lockout by client, not by nginx (#6519)

2026-10-09 17:22:45 +08:00

test_managed_models.py

feat(models): discover provider catalogs and search chat models (#7871)

2026-11-05 06:43:01 +08:00

test_managed_subagent_file_probe.py

fix(subagents): prevent concurrent file-backed creates from overwriting definitions (#8132)

2026-11-12 14:39:25 +08:00

test_mcp_agent_auth.py

feat(mcp): bind HTTP tool credentials to approved custom agents (#8242)

2026-11-14 22:10:33 +08:00

test_mcp_oauth_token_store.py

fix(mcp): keep rotating OAuth refresh tokens across restarts and Gateway instances (#7207)

2026-10-21 18:17:29 +08:00

test_mcp_router.py

fix(mcp): reconcile committed Gateway config mutations (#6567)

2026-10-10 11:03:26 +08:00

test_model_status_agent_config_offloop.py

fix(channels): share chat-to-thread bindings through the database (#6558)

2026-10-10 14:00:00 +08:00

test_oneshot_llm_offloop.py

fix(utils): construct one-shot models off the event loop (#7484)

2026-10-26 15:41:24 +08:00

test_opensandbox_acquire.py

feat(sandbox): share sandbox identity derivation and acquire serialization (#4741) (#5089)

2026-08-30 10:30:34 +08:00

test_openviking_memory_backend.py

refactor(memory): use official OpenViking adapter (#4707)

2026-08-07 11:22:00 +08:00

test_persistence_bootstrap.py

fix(persistence): preserve rollback across the incarnation migration (#5219)

2026-09-07 15:27:00 +08:00

test_persistence_engine_sqlite.py

feat(persistence): wire alembic migrations, bootstrap schema on startup (#3706)

2026-06-24 13:57:12 +08:00

test_personal_mcp_ssl.py

fix(mcp): load personal transport TLS trust off the event loop (#7909)

2026-11-05 14:27:52 +08:00

test_plugin_authorization.py

feat(authz): add plugin resource targets, provenance, action and management enforcement (#5842)

2026-09-25 14:46:12 +08:00

test_project_documents_promotion.py

fix(projects): support Windows extended-length document paths (#6467)

2026-10-08 10:21:18 +08:00

test_project_documents.py

feat(projects): search shelf documents by keyword (#7286)

2026-10-24 18:07:00 +08:00

test_project_memory_routes.py

feat(projects): add visible project memory with extraction controls (#8117)

2026-11-12 09:09:44 +08:00

test_project_trash.py

fix(projects): support Windows extended-length document paths (#6467)

2026-10-08 10:21:18 +08:00

test_qq_channel.py

feat(channels): control IM notifications and add WeChat/QQ delivery (#6850)

2026-10-14 11:14:48 +08:00

test_read_file_chunks_cancellation.py

fix(projects): make read_file_chunks cancellation-safe for worker handoffs (#7496)

2026-10-25 23:02:38 +08:00

test_retrieval_client_ssl.py

fix(community): load retrieval TLS trust off the event loop (#7738)

2026-11-02 10:35:15 +08:00

test_route_scoped_authorization_config_reads.py

fix(gateway): read the run and authorization config off the event loop (#8137)

2026-11-14 17:33:41 +08:00

test_run_journal_callbacks.py

feat(runtime): record terminal artifact delivery receipts (slice 1 of #4272) (#4365)

2026-07-26 21:45:47 +08:00

test_run_start_config_reads.py

fix(gateway): read the run and authorization config off the event loop (#8137)

2026-11-14 17:33:41 +08:00

test_sandbox_authorization.py

fix(authz): recheck policy before sandbox reuse (#5006)

2026-08-30 15:29:51 +08:00

test_sandbox_release.py

fix(sandbox): fence ambiguous AIO session creation ownership (#5711)

2026-09-22 20:48:22 +08:00

test_script_workflow_io.py

feat(workflows): add Phase 2 approvals, immutable artifacts and configuration evidence (#6920)

2026-10-17 09:41:15 +08:00

test_search_client_ssl.py

fix(community): build remaining search clients off the event loop (#7933)

2026-11-09 10:08:59 +08:00

test_share_snapshots.py

feat(sharing): add revocable read-only conversation snapshots (#8211)

2026-11-14 12:22:22 +08:00

test_skill_export.py

test(skills): skip the skill-export capture suite where fd-based walking is unavailable (#5372)

2026-09-12 14:32:05 +08:00

test_skill_manage_tool.py

fix(multi-instance): publish skill_manage cache resets and tolerate a concurrent namespace create (#7099)

2026-10-19 22:28:19 +08:00

test_skill_mutation_host.py

feat(skills): add guarded evolution host APIs (#5645)

2026-10-18 21:17:02 +08:00

test_skills_custom_router.py

fix(skills): keep custom-skill edit and storage lookups off the event loop (#6332)

2026-10-06 07:20:04 +08:00

test_skills_install.py

fix(skills): install for a user keeps its custom-dir setup off the event loop (#5650)

2026-09-22 18:39:19 +08:00

test_skills_listing_router.py

fix(gateway): load skills off the event loop in the listing and detail routes (#5945)

2026-09-28 09:18:29 +08:00

test_skills_load.py

feat(tests): add Blockbuster runtime gate for event-loop blocking IO (#3229)

2026-05-26 23:03:49 +08:00

test_skills_reload.py

fix(skills): share skill cache invalidation across Gateway replicas (#6495)

2026-10-08 19:43:04 +08:00

test_skills_router.py

fix(skills): offload blocking filesystem IO in get_custom_skill_history (#3563)

2026-07-24 22:33:16 +08:00

test_skills_update_router.py

fix(mcp): reconcile committed Gateway config mutations (#6567)

2026-10-10 11:03:26 +08:00

test_sqlite_lifespan.py

feat(tests): add Blockbuster runtime gate for event-loop blocking IO (#3229)

2026-05-26 23:03:49 +08:00

test_subagent_date_context_middleware.py

fix(agents): make the injected current-date timezone configurable (#5154)

2026-09-04 23:39:31 +08:00

test_subagent_model_offloop.py

fix(subagents): build the chat model off the event loop (#7967)

2026-11-07 19:46:03 +08:00

test_subagent_registry_offloop.py

fix(subagents): resolve the subagent registry off the event loop (#8189)

2026-11-13 14:16:23 +08:00

test_summarization_memory_flush.py

fix(memory): avoid replaying Honcho checkpoint history (#7687)

2026-10-30 07:33:41 +08:00

test_summarization_model_offloop.py

fix(summarization): build the summary model off the Gateway event loop (#7874)

2026-11-04 21:54:47 +08:00

test_system_model_offloop.py

fix(skills,goal): build the skill-moderation and goal-evaluator models off the event loop (#7767)

2026-11-02 09:24:31 +08:00

test_task_tool_acceptance_checklist.py

feat: add bounded JSON syntax acceptance criteria (#5947)

2026-09-28 15:13:34 +08:00

test_threads_delete.py

fix(threads): remove a deleted thread's files off the event loop (#6319)

2026-10-05 21:27:46 +08:00

test_title_model_offloop.py

fix(title): build the title model off the Gateway event loop (#7813)

2026-11-04 04:31:57 +08:00

test_tool_assembly_offloop.py

fix(subagents): resolve the subagent registry off the event loop (#8189)

2026-11-13 14:16:23 +08:00

test_trash_router_config_read.py

fix(projects): defer trash cleanup when retention config is unavailable (#7683)

2026-10-31 18:08:11 +08:00

test_typesafe_client_ssl.py

fix(typesafe): build the async HTTPX client off the event loop (#7931)

2026-11-09 21:53:26 +08:00

test_typesafe_guardrail_provider.py

feat(guardrails): add TypeSafe (Jev) pre-execution tool risk gate (#5712)

2026-09-24 18:20:31 +08:00

test_uploads_middleware.py

fix(uploads): keep malformed metadata from aborting chat turns (#6882)

2026-10-15 10:56:26 +08:00

test_uploads_router.py

fix(uploads): report rejected filenames and make success mean "a file was stored" (#7165)

2026-10-24 10:07:10 +08:00

test_web_tool_url_validation.py

test(community): make URL offload regressions DNS-independent (#6314)

2026-10-05 21:53:55 +08:00

test_webz_search_async.py

feat(search): add Webz news search provider and setup integration (#5880)

2026-10-10 18:49:59 +08:00

test_wechat_channel_state.py

fix(channels): keep staging cleanup from replacing the save error (#7106)

2026-10-20 16:52:47 +08:00

test_weknora_extension.py

feat(knowledge): add independent Wiki and entity relation retrieval tools (#7171)

2026-10-22 16:54:58 +08:00

test_workspace_changes_cancellation.py

fix(workspace-changes): avoid draining metadata scans on cancellation (#5234)

2026-09-07 15:18:58 +08:00

test_workspace_changes_recorder.py

fix(workspace-changes): drain snapshot scan before cancellation cleanup (#5232)

2026-09-06 16:39:52 +08:00

test_youcom_search_async.py

feat(community): migrate You.com tools to httpx.AsyncClient (#7186)

2026-10-23 17:59:14 +08:00