Aari 0f7d8709d3

feat(sandbox): add controlled egress with approvals (#5152) ...

* feat(sandbox): add controlled egress approvals

* Apply batched suggestions from code review

* fix(sandbox): harden restricted network policy

* fix(sandbox): harden denied egress handling

* fix(sandbox): isolate network proxy sidecar

* chore: retry sandbox image smoke

* fix(sandbox): close remaining network policy gaps

* fix(sandbox): harden relay token rejection

* fix(sandbox): fence incompatible policy replacement

* fix(sandbox): replace containers across network modes

* fix(sandbox): close remaining lifecycle gaps

---------

Co-authored-by: Willem Jiang <willem.jiang@gmail.com>

2026-09-04 23:46:57 +08:00

..

__init__.py

feat(trace): add agent observability with Monocle (#4024)

2026-07-14 08:58:06 +08:00

acp_config.py

fix(harness): add timeout to invoke_acp_agent to prevent indefinite hangs (#4238)

2026-07-22 14:47:08 +08:00

agent_storage_config.py

feat: add managed subagents and delegation scopes (#4887)

2026-08-24 11:04:23 +08:00

agents_api_config.py

fix: disable custom-agent management API by default (#2161)

2026-04-14 00:03:38 +08:00

agents_config.py

feat: add managed subagents and delegation scopes (#4887)

2026-08-24 11:04:23 +08:00

AGENTS.md

feature(gateway): issue request trace ids unconditionally (#5119)

2026-09-01 16:49:39 +08:00

app_config.py

feature(gateway): issue request trace ids unconditionally (#5119)

2026-09-01 16:49:39 +08:00

auth_config.py

feat(auth): make login rate-limit parameters configurable, fixes #5108 (#5110)

2026-09-02 19:16:56 +08:00

authorization_config.py

feat(authz): add pluggable AuthorizationProvider protocol and config scaffolding (Phase 0, #4063) (#4127)

2026-07-15 10:03:33 +08:00

channel_connections_config.py

feat(channels): add Buzz (Nostr) channel connector (#4649)

2026-08-05 08:29:22 +08:00

checkpointer_config.py

feat(persistence): support custom postgres schema (#3442)

2026-07-30 13:51:17 +08:00

database_config.py

feat(checkpoint): checkpoint history cache (#4638)

2026-08-02 22:25:02 +08:00

dedupe_storage_config.py

feat(channels): share inbound webhook dedupe across pods via Postgres (#4210)

2026-07-27 23:07:40 +08:00

extensions_config.py

feat(mcp): map request-scoped secrets to MCP HTTP/SSE headers (#5010)

2026-08-27 10:42:42 +08:00

file_signature.py

fix(config): close out #4124 review follow-ups (shared signature helper, resolve_config_path None contract) (#4275)

2026-07-19 22:12:30 +08:00

guardrails_config.py

feat(guardrails): add pre-tool-call authorization middleware with pluggable providers (#1240)

2026-03-23 18:07:33 +08:00

input_polish_config.py

feat: add composer input polishing (#3986)

2026-07-08 17:10:27 +08:00

loop_detection_config.py

feat(loop-detection): make loop detection configurable with per-tool frequency overrides (#2711)

2026-05-07 16:15:15 +08:00

mcp_tasks_config.py

feat(mcp): add ordinary durable task driver (#4690)

2026-08-15 14:26:38 +08:00

memory_config.py

fix(config): sync _memory_config with AppConfig auto-reload (#4208)

2026-07-21 10:14:29 +08:00

model_config.py

fix(summarization): stop fraction triggers from crashing the agent build (#4901)

2026-09-03 17:05:09 +08:00

paths.py

fix: enforce custom agent skill allowlists in sandboxes (#5077)

2026-08-31 14:35:08 +08:00

postgres_schema.py

feat(persistence): support custom postgres schema (#3442)

2026-07-30 13:51:17 +08:00

read_before_write_config.py

feat(middlewares): deterministic read-before-write version gate for file tools (#3911) (#3912)

2026-07-03 17:21:04 +08:00

reload_boundary.py

feature(gateway): issue request trace ids unconditionally (#5119)

2026-09-01 16:49:39 +08:00

run_events_config.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-26 11:05:47 +08:00

run_ownership_config.py

fix(runs): close multi-worker ownership gaps in run atomicity (#3948) (#4003)

2026-07-11 16:05:30 +08:00

runtime_paths.py

fix(harness): resolve runtime paths from project root (#2642)

2026-05-01 22:19:50 +08:00

safety_finish_reason_config.py

fix(runtime): suppress tool execution when provider safety-terminates with tool_calls (#3035)

2026-05-22 21:20:28 +08:00

sandbox_config.py

feat(sandbox): add controlled egress with approvals (#5152)

2026-09-04 23:46:57 +08:00

scheduler_config.py

fix(scheduler): enqueue busy scheduled task runs (#4918)

2026-08-24 15:38:32 +08:00

skill_evolution_config.py

fix(skills): add security_fail_closed option for moderation model outages (#4297)

2026-07-19 18:56:03 +08:00

skill_scan_config.py

feat(skills): Add native SkillScan phase 1 for skills (#3033)

2026-07-07 21:44:28 +08:00

skills_config.py

fix: enforce custom agent skill allowlists in sandboxes (#5077)

2026-08-31 14:35:08 +08:00

stream_bridge_config.py

feat(streaming): make heartbeat interval configurable (#5017)

2026-08-30 10:46:01 +08:00

subagent_batches_config.py

feat(subagents): add unified capacity and durable batch execution (#4998)

2026-08-25 07:49:38 +08:00

subagent_runtime_config.py

feat(subagents): add unified capacity and durable batch execution (#4998)

2026-08-25 07:49:38 +08:00

subagents_config.py

feat(subagents): add unified capacity and durable batch execution (#4998)

2026-08-25 07:49:38 +08:00

suggestions_config.py

feat(suggestions): configure follow-up suggestion count (#4533)

2026-07-28 19:35:21 +08:00

summarization_config.py

fix(summarization): stop fraction triggers from crashing the agent build (#4901)

2026-09-03 17:05:09 +08:00

title_config.py

fix(title): avoid default LLM call before stream end (#3885)

2026-06-30 18:58:02 +08:00

token_budget_config.py

feat(middleware): add TokenBudgetMiddleware for per-run token budget e… (#3412)

2026-06-21 22:25:15 +08:00

token_usage_config.py

enable token usage by default (#2841)

2026-05-10 22:00:57 +08:00

tool_config.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

tool_output_config.py

fix(mcp): bring-up has no timeout and externalized tool outputs are counted as undelivered artifacts (#4657)

2026-08-05 08:56:18 +08:00

tool_progress_config.py

feat(middleware): add structured tool result meta and tool-progress state machine (#3601)

2026-07-06 20:57:41 +08:00

tool_search_config.py

feat(mcp): auto-promote deferred MCP tools from routing hints (#4019)

2026-07-10 07:54:36 +08:00

tracing_config.py

feat(trace): add agent observability with Monocle (#4024)

2026-07-14 08:58:06 +08:00

verification_config.py

feat(harness): deterministic tool receipts with model-visible ledger (RFC #4651, layer 1) (#4659)

2026-08-23 15:43:37 +08:00