Aari 317577e285

fix: enforce custom agent skill allowlists in sandboxes (#5077) ...

* fix: enforce agent skill allowlists in sandboxes

* fix: guard E2B skill projection resets

* fix: preserve agent skill isolation across delegation

* fix: close sandbox skill isolation bypasses

* fix(sandbox): close skill isolation review gaps

* fix(sandbox): harden skill isolation lifecycle

2026-08-31 14:35:08 +08:00

..

__init__.py

feat: add create_deerflow_agent SDK entry point (Phase 1) (#1203)

2026-03-29 15:31:18 +08:00

_bounded_dict.py

fix(subagents): unify guardrail caps on additive stop_reason + add token_budget (#3875 Phase 2) (#3980)

2026-07-08 22:26:06 +08:00

AGENTS.md

fix: enforce custom agent skill allowlists in sandboxes (#5077)

2026-08-31 14:35:08 +08:00

clarification_middleware.py

fix(clarification): drop sibling tool calls before interrupt (#4908)

2026-08-24 07:37:35 +08:00

configured_extensions.py

feat(agent): support config-declared lead middlewares (#3964)

2026-07-21 09:39:44 +08:00

dangling_tool_call_middleware.py

fix(middleware): skip raw tool-call fallback when invalid view carries the same call (#4693)

2026-08-08 21:07:55 +08:00

deferred_tool_filter_middleware.py

feat(extensions): let an out-of-tree extension observe what the agent did (#4863)

2026-08-23 09:57:12 +08:00

delegation_ledger.py

feat(harness): subagent receipt citation verification (#5076)

2026-08-29 16:56:56 +08:00

durable_context_middleware.py

feat(harness): deterministic tool receipts with model-visible ledger (RFC #4651, layer 1) (#4659)

2026-08-23 15:43:37 +08:00

dynamic_context_middleware.py

feat(extensions): let an out-of-tree extension observe what the agent did (#4863)

2026-08-23 09:57:12 +08:00

input_sanitization_middleware.py

feat(harness): subagent report contract and delegation acceptance criteria (#5090)

2026-08-30 11:39:25 +08:00

llm_error_handling_middleware.py

fix(streaming): expose custom events to astream_events (#4403)

2026-07-23 22:56:12 +08:00

loop_detection_middleware.py

feat(extensions): let an out-of-tree extension observe what the agent did (#4863)

2026-08-23 09:57:12 +08:00

mcp_routing_middleware.py

feat(mcp): auto-promote deferred MCP tools from routing hints (#4019)

2026-07-10 07:54:36 +08:00

memory_middleware.py

feat(memory): add mem0 HTTP memory backend (#4528)

2026-07-29 07:11:20 +08:00

message_utils.py

feat(harness): deterministic tool receipts with model-visible ledger (RFC #4651, layer 1) (#4659)

2026-08-23 15:43:37 +08:00

model_length_finish_reason_middleware.py

fix: surface length-capped model responses (#4309)

2026-07-26 14:43:08 +08:00

model_length_termination_detectors.py

fix: surface length-capped model responses (#4309)

2026-07-26 14:43:08 +08:00

read_before_write_middleware.py

fix(authz): recheck policy before sandbox reuse (#5006)

2026-08-30 15:29:51 +08:00

receipt_verification.py

feat(harness): subagent receipt citation verification (#5076)

2026-08-29 16:56:56 +08:00

safety_finish_reason_middleware.py

feat(extensions): let an out-of-tree extension observe what the agent did (#4863)

2026-08-23 09:57:12 +08:00

safety_termination_detectors.py

fix(runtime): suppress tool execution when provider safety-terminates with tool_calls (#3035)

2026-05-22 21:20:28 +08:00

sandbox_audit_middleware.py

fix(sandbox): judge command substitution by position in audit middleware (#4623)

2026-08-01 21:44:34 +08:00

skill_activation_middleware.py

feat(extensions): let an out-of-tree extension observe what the agent did (#4863)

2026-08-23 09:57:12 +08:00

skill_context.py

feat: emit structured runtime metadata (follow-up#3887) (#3906)

2026-07-04 11:27:19 +08:00

skill_tool_policy_middleware.py

fix(subagents): isolate callbacks and activate skills lazily (#4497)

2026-07-28 23:29:14 +08:00

subagent_limit_middleware.py

feat(subagents): add unified capacity and durable batch execution (#4998)

2026-08-25 07:49:38 +08:00

summarization_middleware.py

feat(extensions): let an out-of-tree extension observe what the agent did (#4863)

2026-08-23 09:57:12 +08:00

system_message_coalescing_middleware.py

feat(extensions): let an out-of-tree extension observe what the agent did (#4863)

2026-08-23 09:57:12 +08:00

terminal_response_middleware.py

feat(extensions): let an out-of-tree extension observe what the agent did (#4863)

2026-08-23 09:57:12 +08:00

thread_data_middleware.py

fix(runtime): honor LangGraph Server identity for user-scoped data (#4538)

2026-07-28 22:59:14 +08:00

title_middleware.py

feat(extensions): observe task lifecycle and system model calls (#4684)

2026-08-11 16:33:22 +08:00

todo_middleware.py

feat(extensions): let an out-of-tree extension observe what the agent did (#4863)

2026-08-23 09:57:12 +08:00

token_budget_middleware.py

feat(extensions): let an out-of-tree extension observe what the agent did (#4863)

2026-08-23 09:57:12 +08:00

token_usage_middleware.py

fix(subagents): isolate background tasks from reused tool call IDs (#4758)

2026-08-12 09:25:05 +08:00

tool_call_metadata.py

fix(middleware): sync raw tool call metadata (#2757)

2026-05-08 10:08:53 +08:00

tool_error_handling_middleware.py

fix: enforce custom agent skill allowlists in sandboxes (#5077)

2026-08-31 14:35:08 +08:00

tool_output_budget_middleware.py

feat(extensions): let an out-of-tree extension observe what the agent did (#4863)

2026-08-23 09:57:12 +08:00

tool_output_synopsis.py

feat(tool):Add structured synopsis for oversized tool output previews (#3377)

2026-07-16 16:41:04 +08:00

tool_progress_middleware.py

fix(agents): normalize Command-wrapped tool results (#4977)

2026-08-30 15:37:38 +08:00

tool_receipt_middleware.py

feat(harness): subagent receipt citation verification (#5076)

2026-08-29 16:56:56 +08:00

tool_receipt.py

feat(harness): subagent receipt citation verification (#5076)

2026-08-29 16:56:56 +08:00

tool_result_meta.py

fix(agents): normalize Command-wrapped tool results (#4977)

2026-08-30 15:37:38 +08:00

tool_result_sanitization_middleware.py

feat(extensions): let an out-of-tree extension observe what the agent did (#4863)

2026-08-23 09:57:12 +08:00

tool_transform_meta.py

feat(extensions): let an out-of-tree extension observe what the agent did (#4863)

2026-08-23 09:57:12 +08:00

uploads_middleware.py

fix(runtime): honor LangGraph Server identity for user-scoped data (#4538)

2026-07-28 22:59:14 +08:00

view_image_middleware.py

perf(middleware): stop checkpointing view_image base64 payloads (#5014)

2026-08-27 09:12:37 +08:00