Daoyuan Li 88b0484898

fix(channels): validate channel provider before resolving its config (#4100) ...

`_provider_config` resolved a request-supplied provider name with an
unallowlisted `getattr(config, provider, None)`. `ChannelConnectionsConfig`
carries non-provider attributes -- the `enabled` and `require_bound_identity`
bool fields plus the `provider_status` method -- so a name matching one of
them returned that attribute instead of falling through to the intended 404.
Callers (e.g. `POST /api/channels/{provider}/connect`, reachable by any
authenticated user) then dereferenced the bool/method as a provider config,
crashing with `AttributeError` -> HTTP 500.

Validate `provider` against the `_PROVIDER_META` allowlist before the lookup,
matching how `_credential_fields` / `_connect_instruction` / `_connect_url`
already gate provider names, so unknown providers get a clean 404.

Add a parametrized router regression test covering `enabled`,
`require_bound_identity`, `provider_status`, and an unknown name.

2026-07-12 08:54:03 +08:00

..

channels

fix(wecom): guard null quote fields in _on_ws_text to prevent AttributeError (#4069)

2026-07-12 07:52:45 +08:00

gateway

fix(channels): validate channel provider before resolving its config (#4100)

2026-07-12 08:54:03 +08:00

scheduler

feat: add scheduled tasks MVP (#3898)

2026-07-04 21:51:57 +08:00

__init__.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00