AochenShen99 cef4224381

fix(skills): enforce allowed-tools metadata (#2626) ...

* fix(skills): parse allowed-tools frontmatter

* fix(skills): validate allowed-tools metadata

* fix(skills): add shared allowed-tools policy

* fix(subagents): enforce skill allowed-tools

* fix(agent): enforce skill allowed-tools

* refactor(skills): dedupe TypeVar and reuse cached enabled skills

- Drop redundant module-level TypeVar in tool_policy; rely on PEP 695 syntax.
- Expose get_cached_enabled_skills() and have the lead agent reuse it
  instead of synchronously rescanning skills on every request.

* fix(agent): expose config-scoped skill cache

* fix(subagents): pass filtered tools explicitly

* fix(skills): clean allowed-tools policy feedback

2026-05-07 08:34:43 +08:00

..

builtins

fix(agent): file-io path guidance in agent prompts (#2019)

2026-04-09 16:12:34 +08:00

__init__.py

[Security] Address critical host-shell escape in LocalSandboxProvider (#1547)

2026-03-29 21:03:58 +08:00

config.py

fix(subagents): use model override for tools and middleware (#2641)

2026-05-01 22:21:10 +08:00

executor.py

fix(skills): enforce allowed-tools metadata (#2626)

2026-05-07 08:34:43 +08:00

registry.py

refactor: thread app_config through lead and subagent task path (#2666)

2026-05-02 06:37:49 +08:00