xiaodu55 e493390aea

fix(gateway): scope edit/regenerate helper fallbacks by data identity (#5483) ...

The message edit/regenerate prepare chain resolves source runs through
_resolve_run_id_for_message, _require_successful_source_run and
_find_interrupted_target_run_id, which filtered by the authorization
identity (get_current_user) — the same conflation fixed for the runs and
messages read endpoints in #5448, left out of scope there. For trusted
internal callers the authorization identity never matches the raw
owner-stamped run rows, so regenerate/edit-regenerate prepare fails with
409 on threads the caller is authorized on (#5482).

The three helpers now resolve their filter id through _run_scope_user_id
as well; both prepare endpoints keep their owner_check=True
authorization and browser/API sessions keep the per-user filter.

Regression tests extend test_thread_runs_internal_scope.py to the helper
fallback paths: internal callers resolve raw-owner-stamped runs
(including the interrupted-run and status-409 paths), browser sessions
keep the per-user filter and 409 on cross-user runs.

2026-09-16 23:32:57 +08:00

..

channels

fix(channels): preserve thread-create lock generation (#5480)

2026-09-16 22:20:16 +08:00

gateway

fix(gateway): scope edit/regenerate helper fallbacks by data identity (#5483)

2026-09-16 23:32:57 +08:00

mcp_tasks

fix(mcp): compensate cancelled task submissions (#4933)

2026-08-23 15:30:21 +08:00

scheduler

fix(scheduler): reconcile stuck once tasks from committed run outcome (#5035)

2026-09-12 07:35:07 +08:00

subagent_batches

feat(subagents): add unified capacity and durable batch execution (#4998)

2026-08-25 07:49:38 +08:00

__init__.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00