Aari 0f7d8709d3

feat(sandbox): add controlled egress with approvals (#5152) ...

* feat(sandbox): add controlled egress approvals

* Apply batched suggestions from code review

* fix(sandbox): harden restricted network policy

* fix(sandbox): harden denied egress handling

* fix(sandbox): isolate network proxy sidecar

* chore: retry sandbox image smoke

* fix(sandbox): close remaining network policy gaps

* fix(sandbox): harden relay token rejection

* fix(sandbox): fence incompatible policy replacement

* fix(sandbox): replace containers across network modes

* fix(sandbox): close remaining lifecycle gaps

---------

Co-authored-by: Willem Jiang <willem.jiang@gmail.com>

2026-09-04 23:46:57 +08:00

..

agents

fix(agents): make the injected current-date timezone configurable (#5154)

2026-09-04 23:39:31 +08:00

authz

fix(authz): recheck policy before sandbox reuse (#5006)

2026-08-30 15:29:51 +08:00

community

feat(sandbox): add controlled egress with approvals (#5152)

2026-09-04 23:46:57 +08:00

config

feat(sandbox): add controlled egress with approvals (#5152)

2026-09-04 23:46:57 +08:00

extensions

feat(harness): deterministic tool receipts with model-visible ledger (RFC #4651, layer 1) (#4659)

2026-08-23 15:43:37 +08:00

guardrails

feat(extensions): let an out-of-tree extension observe what the agent did (#4863)

2026-08-23 09:57:12 +08:00

integrations

fix(lark): preserve app secrets during credential switches (#4820)

2026-09-01 15:37:19 +08:00

mcp

fix(mcp): MCP cache re-initialization broken by cross-loop asyncio.Lock (#5062)

2026-09-04 11:30:36 +08:00

models

fix(summarization): stop fraction triggers from crashing the agent build (#4901)

2026-09-03 17:05:09 +08:00

persistence

fix(auth): correct OAuth conflict error message + validate multi-worker Postgres claim with real concurrency benchmark (#5026)

2026-09-03 08:17:26 +08:00

reflection

docs: govern agent guidance size (#4799)

2026-08-13 21:49:04 +08:00

runtime

feat(sandbox): add controlled egress with approvals (#5152)

2026-09-04 23:46:57 +08:00

sandbox

feat(sandbox): add controlled egress with approvals (#5152)

2026-09-04 23:46:57 +08:00

scheduler

fix(scheduler): normalize once-schedule next_run_at to UTC (#4607)

2026-07-31 17:27:51 +08:00

skills

fix(skills): reject a blank SKILL.md description at the write gate (#4867)

2026-09-02 00:33:21 +08:00

subagents

feat(subagents): enable historical upload discovery (#5170)

2026-09-04 16:11:34 +08:00

tools

fix(mcp): keep ToolRuntime injection for sync-wrapped MCP tools (#5164)

2026-09-04 19:34:15 +08:00

tracing

feature(gateway): issue request trace ids unconditionally (#5119)

2026-09-01 16:49:39 +08:00

tui

fix(tui): preserve transcript scroll position (#4975)

2026-08-25 20:15:08 +08:00

uploads

fix(uploads): keep deduplicated filenames within the 255-byte limit (#5059)

2026-08-28 09:16:51 +08:00

utils

fix(history): early user messages vanish or jump mid-run when pagination and context compaction overlap (#4696)

2026-09-01 22:04:17 +08:00

workspace_changes

fix(mcp): exclude internal temp files from workspace changes (#4898)

2026-08-20 08:57:10 +08:00

__init__.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

AGENTS.md

feat(sandbox): add controlled egress with approvals (#5152)

2026-09-04 23:46:57 +08:00

checkpoint_patches.py

fix(checkpoint): unwrap Overwrite first writes into empty channels (#4383)

2026-07-26 10:44:50 +08:00

client.py

fix(sandbox): isolate concurrent subagent shell sessions (#5134)

2026-09-02 21:05:23 +08:00

constants.py

fix(mcp): exclude internal temp files from workspace changes (#4898)

2026-08-20 08:57:10 +08:00

logging_config.py

feat(observability): add trace-id correlation and enhanced logging (#3902)

2026-07-03 08:01:46 +08:00

trace_context.py

feature(gateway): issue request trace ids unconditionally (#5119)

2026-09-01 16:49:39 +08:00