hataa 1300c6d36b

feat(authz): add pluggable AuthorizationProvider protocol and config scaffolding (Phase 0, #4063) (#4127) ...

Phase 0 of the RFC in #4063: scaffolding only, zero behavior change.

New deerflow/authz/ package (sibling to deerflow/guardrails/):
- AuthorizationProvider Protocol: authorize() + aauthorize() + filter_resources()
- Principal/AuthzRequest/AuthzDecision/AuthzReason dataclasses
- GuardrailAuthorizationAdapter: bridges AuthorizationProvider → GuardrailProvider
  so existing GuardrailMiddleware can enforce authz decisions without a new middleware

New authorization config section (default enabled: false):
- AuthorizationConfig wired into AppConfig alongside guardrails
- Singleton load/reset mirrors GuardrailsConfig pattern
- config.example.yaml documents the RBAC provider schema

29 tests covering protocol conformance, dataclass construction, adapter
request/decision mapping, and config singleton behavior.

Per RFC #4063 Phase 0 (foundations). Layer 1/2 wiring and Principal builder
in services.py deferred to Phase 1.

2026-07-15 10:03:33 +08:00

..

__init__.py

feat(trace): add agent observability with Monocle (#4024)

2026-07-14 08:58:06 +08:00

acp_config.py

feat(acp): add env field to ACPAgentConfig for subprocess env injection (#1447)

2026-03-27 20:03:30 +08:00

agents_api_config.py

fix: disable custom-agent management API by default (#2161)

2026-04-14 00:03:38 +08:00

agents_config.py

fix(agents): load SOUL.md from agent dirs without config.yaml (#4136)

2026-07-13 21:13:33 +08:00

app_config.py

feat(authz): add pluggable AuthorizationProvider protocol and config scaffolding (Phase 0, #4063) (#4127)

2026-07-15 10:03:33 +08:00

auth_config.py

feat(auth): add OIDC SSO support (#3506)

2026-06-21 15:47:53 +08:00

authorization_config.py

feat(authz): add pluggable AuthorizationProvider protocol and config scaffolding (Phase 0, #4063) (#4127)

2026-07-15 10:03:33 +08:00

channel_connections_config.py

fix(channels): require bound identity for user-owned IM messages (#3578)

2026-06-16 23:04:39 +08:00

checkpointer_config.py

fix(runtime): protect sync singleton init and reset (#3413)

2026-06-08 08:38:36 +08:00

database_config.py

feat(persistence):Unified persistence layer with event store, feedback, and rebase cleanup (#2134)

2026-04-26 11:09:55 +08:00

extensions_config.py

feat(mcp): add MCP routing hints (#4004)

2026-07-09 16:26:31 +08:00

guardrails_config.py

feat(guardrails): add pre-tool-call authorization middleware with pluggable providers (#1240)

2026-03-23 18:07:33 +08:00

input_polish_config.py

feat: add composer input polishing (#3986)

2026-07-08 17:10:27 +08:00

loop_detection_config.py

feat(loop-detection): make loop detection configurable with per-tool frequency overrides (#2711)

2026-05-07 16:15:15 +08:00

memory_config.py

feat(memory): add memory tool sets (#4023)

2026-07-11 15:28:16 +08:00

model_config.py

fix(#3189): prevent write_file streaming timeout on long reports (#3195)

2026-06-07 17:47:11 +08:00

paths.py

feat(skills): per-user custom skill isolation with sandbox mounting (#3889)

2026-07-04 13:54:04 +08:00

read_before_write_config.py

feat(middlewares): deterministic read-before-write version gate for file tools (#3911) (#3912)

2026-07-03 17:21:04 +08:00

reload_boundary.py

fix(runs): close multi-worker ownership gaps in run atomicity (#3948) (#4003)

2026-07-11 16:05:30 +08:00

run_events_config.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-26 11:05:47 +08:00

run_ownership_config.py

fix(runs): close multi-worker ownership gaps in run atomicity (#3948) (#4003)

2026-07-11 16:05:30 +08:00

runtime_paths.py

fix(harness): resolve runtime paths from project root (#2642)

2026-05-01 22:19:50 +08:00

safety_finish_reason_config.py

fix(runtime): suppress tool execution when provider safety-terminates with tool_calls (#3035)

2026-05-22 21:20:28 +08:00

sandbox_config.py

fix(sandbox): the sandbox provisioner api exposes endpoints need to check API KEY (#4116)

2026-07-14 07:51:59 +08:00

scheduler_config.py

feat: add scheduled tasks MVP (#3898)

2026-07-04 21:51:57 +08:00

skill_evolution_config.py

Implement skill self-evolution and skill_manage flow (#1874)

2026-04-06 22:07:11 +08:00

skill_scan_config.py

feat(skills): Add native SkillScan phase 1 for skills (#3033)

2026-07-07 21:44:28 +08:00

skills_config.py

feat(skills): deferred skill discovery via describe_skill tool (#3775)

2026-07-04 23:09:29 +08:00

stream_bridge_config.py

fix(redis): stream retention recovery (#3933)

2026-07-04 16:07:42 +08:00

subagents_config.py

feat(agent): Add subagent total delegation cap (#4115)

2026-07-13 19:26:07 +08:00

suggestions_config.py

make ai follow-up suggestions optional (#3591)

2026-06-15 17:59:25 +08:00

summarization_config.py

feat: emit structured runtime metadata (follow-up#3887) (#3906)

2026-07-04 11:27:19 +08:00

title_config.py

fix(title): avoid default LLM call before stream end (#3885)

2026-06-30 18:58:02 +08:00

token_budget_config.py

feat(middleware): add TokenBudgetMiddleware for per-run token budget e… (#3412)

2026-06-21 22:25:15 +08:00

token_usage_config.py

enable token usage by default (#2841)

2026-05-10 22:00:57 +08:00

tool_config.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

tool_output_config.py

feat(agent): add ToolOutputBudgetMiddleware for oversized tool output protection (#3303)

2026-05-29 22:59:26 +08:00

tool_progress_config.py

feat(middleware): add structured tool result meta and tool-progress state machine (#3601)

2026-07-06 20:57:41 +08:00

tool_search_config.py

feat(mcp): auto-promote deferred MCP tools from routing hints (#4019)

2026-07-10 07:54:36 +08:00

tracing_config.py

feat(trace): add agent observability with Monocle (#4024)

2026-07-14 08:58:06 +08:00