yetuge d49e0f3d7c

fix(gateway): reject unusable skill_context entries at the input boundary (#8091) ...

* fix(gateway): reject unusable skill_context entries at the input boundary

merge_skill_context indexes entry["path"] and calls entry.get(), so a
caller-supplied non-object entry or one without a usable path raised during
the state merge and failed the run with a 500. Validate the list shape at the
run-input and thread-state boundaries, mirroring the todos and delegations
channels.

* Normalize entry by ensuring 'name' is a string

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Willem Jiang <willem.jiang@gmail.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

2026-11-10 15:36:01 +08:00

..

auth

fix(auth): allow demoting disabled administrators (#7769)

2026-11-02 09:26:00 +08:00

github

fix(github): match repository bindings case-insensitively (#7982)

2026-11-08 13:45:59 +08:00

routers

fix(feedback): return 409 instead of 500 when feedback is POSTed twice (#8064)

2026-11-10 07:47:01 +08:00

__init__.py

feat(observability): add trace-id correlation and enhanced logging (#3902)

2026-07-03 08:01:46 +08:00

AGENTS.md

fix(feedback): return 409 instead of 500 when feedback is POSTed twice (#8064)

2026-11-10 07:47:01 +08:00

app.py

feat(subagents): continue requested batch work and schedule explicit prerequisites (#7839)

2026-11-05 15:10:21 +08:00

artifact_archive.py

feat(artifacts): download run files as zip (#5117)

2026-09-01 22:01:21 +08:00

auth_disabled.py

feat(auth): add personal access tokens for programmatic API access (#5041)

2026-08-29 23:50:45 +08:00

auth_middleware.py

feat(weknora): allow opt-in shared retrieval for authenticated users (#7944)

2026-11-09 17:06:05 +08:00

authz.py

fix(gateway): read the route authorization config off the event loop (#7557)

2026-10-26 18:44:09 +08:00

browser_capability.py

feat(browser): add agentic browser control (#4187)

2026-07-21 11:46:33 +08:00

capabilities.py

fix(skills): keep disabled skills disabled when the extensions config cannot be read (#7705)

2026-11-05 15:07:07 +08:00

checkpoint_lineage.py

feat(hitl): add human-in-the-loop approval for high-risk tool calls (#7979)

2026-11-09 09:52:35 +08:00

checkpoint_retention.py

fix(checkpoints): run conservative retention after completion (#6051)

2026-10-20 22:23:47 +08:00

config.py

fix(gateway): treat a blank GATEWAY_HOST/GATEWAY_PORT as unset (#5801)

2026-09-24 15:56:38 +08:00

context_usage.py

fix(gateway): read the live config off the loop for thread token usage (#7727)

2026-10-31 08:28:01 +08:00

conversation_access.py

fix(conversation): tolerate malformed event metadata (#7721)

2026-10-31 18:25:31 +08:00

conversation_reader.py

fix(conversation): tolerate malformed event metadata (#7721)

2026-10-31 18:25:31 +08:00

csrf_middleware.py

fix(gateway): reject non-ASCII tokens instead of raising in constant-time compares (#6076)

2026-09-30 17:41:11 +08:00

deps.py

fix(gateway): keep batch cancellation running when the scheduler store fails (#7971)

2026-11-08 12:52:05 +08:00

extension_agent_runs.py

feat(subagents): continue requested batch work and schedule explicit prerequisites (#7839)

2026-11-05 15:10:21 +08:00

extension_artifacts.py

feat(extensions): add versioned team file handoffs (#7817)

2026-11-05 14:50:09 +08:00

health.py

fix(channels): keep Gateway calls off the environment proxy (#7877)

2026-11-08 22:10:10 +08:00

history_seed.py

fix(runtime): persistently fence stale run event producers (#7619)

2026-11-02 15:26:42 +08:00

hitl_approval.py

feat(hitl): add human-in-the-loop approval for high-risk tool calls (#7979)

2026-11-09 09:52:35 +08:00

internal_auth.py

fix(gateway): reject non-ASCII tokens instead of raising in constant-time compares (#6076)

2026-09-30 17:41:11 +08:00

knowledge_scope_admission.py

feat(knowledge): decouple scope and read-only catalogs (phase 2) (#6904)

2026-10-15 15:10:39 +08:00

langgraph_auth.py

feat(knowledge): decouple scope and read-only catalogs (phase 2) (#6904)

2026-10-15 15:10:39 +08:00

langgraph_studio.py

fix: support Studio file-based app loading (#4838)

2026-08-16 23:54:06 +08:00

mcp_oauth_tokens.py

fix(mcp): keep rotating OAuth refresh tokens across restarts and Gateway instances (#7207)

2026-10-21 18:17:29 +08:00

model_discovery.py

feat(models): discover provider catalogs and search chat models (#7871)

2026-11-05 06:43:01 +08:00

pagination.py

fix: load paginated run history messages (#3305)

2026-06-01 15:50:39 +08:00

path_utils.py

fix(gateway): confine artifact PUT to /mnt/user-data/outputs after path resolution (#5321)

2026-09-10 15:01:56 +08:00

persistent_writes.py

refactor(gateway): hoist the persistent-write drain into one shared helper (#6151)

2026-10-01 20:13:57 +08:00

personal_mcp_access.py

fix(mcp): isolate personal connections from deployment configuration (#5966)

2026-09-28 16:02:34 +08:00

request_path.py

feat(extensions): add gateway contribution points and packaged extension management (#4780)

2026-08-13 23:55:30 +08:00

run_inputs.py

fix(gateway): keep retryable thread inputs ahead of terminal receipts (#7972) (#8008)

2026-11-09 20:28:09 +08:00

run_models.py

fix(gateway): answer malformed run bodies with 4xx instead of 500 (#7362)

2026-10-24 10:12:05 +08:00

run_origin.py

feat(scheduled-tasks): signals, honest notices and fair queueing for server-started runs (RFC #6340, 2/2) (#6393)

2026-10-07 10:22:15 +08:00

scheduled_task_access.py

refactor(agent): ground runtime decisions in structured evidence (#7986)

2026-11-08 22:00:23 +08:00

scheduled_task_errors.py

feat: add Feishu group notifications and fix mention caret placement (#6762)

2026-10-13 07:17:56 +08:00

scheduled_task_validation.py

fix(scheduler): reject nonexistent local times at admission (#7281)

2026-10-23 09:13:37 +08:00

secret_masking.py

fix(memory): mask backend secrets in the memory config responses (#7665)

2026-10-30 14:53:33 +08:00

services.py

fix(gateway): reject unusable skill_context entries at the input boundary (#8091)

2026-11-10 15:36:01 +08:00

skill_export.py

feat(skills): export custom skill packages with revision-bound preview (#5332)

2026-09-11 16:21:23 +08:00

sse_headers.py

feat(scheduled-tasks): signals, honest notices and fair queueing for server-started runs (RFC #6340, 2/2) (#6393)

2026-10-07 10:22:15 +08:00

trace_middleware.py

feature(gateway): issue request trace ids unconditionally (#5119)

2026-09-01 16:49:39 +08:00

upload_ingestion.py

fix(uploads): retain filesystem ownership across request cancellation (#7170)

2026-10-20 23:17:00 +08:00

utils.py

fix(gateway): reject non-ASCII tokens instead of raising in constant-time compares (#6076)

2026-09-30 17:41:11 +08:00