YxinMiracle ce50a28dfd

fix(auth): enforce write permission for Live Browser WebSockets (#5621) ...

* fix(auth): enforce write permission for Live Browser WebSockets

Resolve route permissions before accepting browser streams and require threads:write, matching the existing HTTP navigation endpoint.

Preserve shared authorization failure semantics and reject unexpected setup errors before acquiring a browser session.

Add authorization, frame delivery, input dispatch, cancellation, and ownership regressions. Document the admission-only permission check.

* fix(auth): improve browser authorization diagnostics

---------

Co-authored-by: YxinMiracle <“939157765@qq.com”>

2026-09-22 10:43:49 +08:00

..

channels

fix(agent): align unattended prompt with tool policy (#4919)

2026-09-20 18:57:49 +08:00

gateway

fix(auth): enforce write permission for Live Browser WebSockets (#5621)

2026-09-22 10:43:49 +08:00

mcp_tasks

fix(mcp): make durable task claims cancellation-safe (#4966)

2026-09-20 19:11:42 +08:00

scheduler

fix(scheduler): reconcile stuck once tasks from committed run outcome (#5035)

2026-09-12 07:35:07 +08:00

subagent_batches

feat(subagents): add unified capacity and durable batch execution (#4998)

2026-08-25 07:49:38 +08:00

__init__.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00