Xuehao Xu 169002a4c9

feat(workflows): add Phase 2 approvals, immutable artifacts and configuration evidence (#6920) ...

* feat(workflows): add versioned approvals and run configuration evidence

* docs: trim repeated setup guidance to respect inherited size limit

* docs: leave room in inherited agent guidance

* test(channels): align Buzz capability expectation with upstream registry

* fix(workflows): fence file consumers and preserve review access

* fix(runtime): reuse assembly evidence key at run admission

2026-10-17 09:41:15 +08:00

..

auth

fix(auth): preserve OIDC authorization endpoint query parameters (#6831)

2026-10-14 08:19:22 +08:00

github

fix(agent): align unattended prompt with tool policy (#4919)

2026-09-20 18:57:49 +08:00

routers

feat(workflows): add Phase 2 approvals, immutable artifacts and configuration evidence (#6920)

2026-10-17 09:41:15 +08:00

__init__.py

feat(observability): add trace-id correlation and enhanced logging (#3902)

2026-07-03 08:01:46 +08:00

AGENTS.md

fix(compaction): reject manual compaction of threads with pending execution (#6929)

2026-10-16 08:59:44 +08:00

app.py

feat(channels): generalize group notifications and add opt-in task/goal IM notices (#6903)

2026-10-15 10:30:55 +08:00

artifact_archive.py

feat(artifacts): download run files as zip (#5117)

2026-09-01 22:01:21 +08:00

auth_disabled.py

feat(auth): add personal access tokens for programmatic API access (#5041)

2026-08-29 23:50:45 +08:00

auth_middleware.py

feat(authz): account disable/enable across every authentication surface (#4063 gap 3) (#6566)

2026-10-10 16:43:04 +08:00

authz.py

fix(sandbox): attest lark broker mode per Pod and quarantine uncertain shell outcomes (#6436)

2026-10-10 07:56:09 +08:00

browser_capability.py

feat(browser): add agentic browser control (#4187)

2026-07-21 11:46:33 +08:00

capabilities.py

fix(mcp): isolate personal connections from deployment configuration (#5966)

2026-09-28 16:02:34 +08:00

checkpoint_lineage.py

fix(gateway): classify duration-only checkpoints without the Postgres-dropped marker (#5988)

2026-10-09 20:30:19 +08:00

checkpoint_retention.py

fix(gateway): classify duration-only checkpoints without the Postgres-dropped marker (#5988)

2026-10-09 20:30:19 +08:00

config.py

fix(gateway): treat a blank GATEWAY_HOST/GATEWAY_PORT as unset (#5801)

2026-09-24 15:56:38 +08:00

context_usage.py

fix(gateway): preserve owner isolation when thread metadata is missing (#5484)

2026-09-18 09:39:14 +08:00

conversation_access.py

feat(scheduler): create conversation schedules and support agent self-stop (#6229)

2026-10-04 06:46:13 +08:00

conversation_reader.py

feat(conversation): continue reading a cut message by offset (#5434)

2026-09-15 08:25:08 +08:00

csrf_middleware.py

fix(gateway): reject non-ASCII tokens instead of raising in constant-time compares (#6076)

2026-09-30 17:41:11 +08:00

deps.py

feat(channels): arbitrate IM transports with a per-provider leader lease (#6843)

2026-10-14 13:51:42 +08:00

extension_agent_runs.py

feat(workflows): add Phase 2 approvals, immutable artifacts and configuration evidence (#6920)

2026-10-17 09:41:15 +08:00

extension_artifacts.py

feat(workflows): add Phase 2 approvals, immutable artifacts and configuration evidence (#6920)

2026-10-17 09:41:15 +08:00

health.py

fix(runtime): strip the SQLAlchemy driver suffix from sync and store DSNs (#6917)

2026-10-15 23:45:09 +08:00

internal_auth.py

fix(gateway): reject non-ASCII tokens instead of raising in constant-time compares (#6076)

2026-09-30 17:41:11 +08:00

knowledge_scope_admission.py

feat(knowledge): decouple scope and read-only catalogs (phase 2) (#6904)

2026-10-15 15:10:39 +08:00

langgraph_auth.py

feat(knowledge): decouple scope and read-only catalogs (phase 2) (#6904)

2026-10-15 15:10:39 +08:00

langgraph_studio.py

fix: support Studio file-based app loading (#4838)

2026-08-16 23:54:06 +08:00

pagination.py

fix: load paginated run history messages (#3305)

2026-06-01 15:50:39 +08:00

path_utils.py

fix(gateway): confine artifact PUT to /mnt/user-data/outputs after path resolution (#5321)

2026-09-10 15:01:56 +08:00

persistent_writes.py

refactor(gateway): hoist the persistent-write drain into one shared helper (#6151)

2026-10-01 20:13:57 +08:00

personal_mcp_access.py

fix(mcp): isolate personal connections from deployment configuration (#5966)

2026-09-28 16:02:34 +08:00

request_path.py

feat(extensions): add gateway contribution points and packaged extension management (#4780)

2026-08-13 23:55:30 +08:00

run_models.py

feat(gateway): accept conversation references in run context and report the capability (#5463)

2026-09-16 15:37:57 +08:00

run_origin.py

feat(scheduled-tasks): signals, honest notices and fair queueing for server-started runs (RFC #6340, 2/2) (#6393)

2026-10-07 10:22:15 +08:00

scheduled_task_access.py

feat(scheduled-tasks): finish the user-facing side of conversation schedules (RFC #6340, 1/2) (#6378)

2026-10-07 07:47:32 +08:00

scheduled_task_errors.py

feat: add Feishu group notifications and fix mention caret placement (#6762)

2026-10-13 07:17:56 +08:00

scheduled_task_validation.py

fix(scheduler): preserve unchanged once schedules near execution (#6686)

2026-10-11 19:18:32 +08:00

services.py

fix(streaming): report gaps when Redis retention disappears (#6951)

2026-10-16 17:03:25 +08:00

skill_export.py

feat(skills): export custom skill packages with revision-bound preview (#5332)

2026-09-11 16:21:23 +08:00

sse_headers.py

feat(scheduled-tasks): signals, honest notices and fair queueing for server-started runs (RFC #6340, 2/2) (#6393)

2026-10-07 10:22:15 +08:00

trace_middleware.py

feature(gateway): issue request trace ids unconditionally (#5119)

2026-09-01 16:49:39 +08:00

upload_ingestion.py

fix: track converted upload ownership for outlines and listings (#6101)

2026-10-01 20:36:35 +08:00

utils.py

fix(gateway): reject non-ASCII tokens instead of raising in constant-time compares (#6076)

2026-09-30 17:41:11 +08:00