Wenchao An 3d826c6d95

feat(approvals): add Ask, Auto and Full tool permission modes (#8033) ...

* feat(hitl): add human-in-the-loop approval for high-risk tool calls

* fix(hitl): address approval review findings

* docs(hitl): keep agent guidance under size limit

* fix(hitl): guard approval pause recovery

* docs(hitl): shrink inherited guidance

* fix(hitl): harden approval admission and recovery

* fix(approvals): address review safety and reconciliation gaps

* ci: retry approval checks after runner timeout

---------

Co-authored-by: wangzeren <1004695029@qq.com>

2026-11-11 20:59:05 +08:00

..

__init__.py

feat(subagents): add unified capacity and durable batch execution (#4998)

2026-08-25 07:49:38 +08:00

admin_users.py

feat(authz): account disable/enable across every authentication surface (#4063 gap 3) (#6566)

2026-10-10 16:43:04 +08:00

AGENTS.md

fix(memory): require facts in replacement imports (#8131)

2026-11-11 17:35:17 +08:00

agents.py

fix(agents): store an explicit null description as empty (#7638)

2026-11-01 23:34:59 +08:00

artifacts.py

fix(artifacts): bind ranged reads to validated generation (#7978)

2026-11-09 21:18:57 +08:00

assistants_compat.py

fix(backend): validate assistant search pagination (#5506)

2026-09-17 22:13:53 +08:00

auth.py

fix(auth): read the live config off the event loop on public auth routes (#7576)

2026-10-26 22:11:48 +08:00

browser.py

feat(authz): account disable/enable across every authentication surface (#4063 gap 3) (#6566)

2026-10-10 16:43:04 +08:00

capabilities.py

fix(mcp): isolate personal connections from deployment configuration (#5966)

2026-09-28 16:02:34 +08:00

channel_connections.py

feat(channels): share encrypted runtime channel config across Gateway instances (#6988)

2026-10-18 11:10:31 +08:00

channels.py

feat(channels): arbitrate IM transports with a per-provider leader lease (#6843)

2026-10-14 13:51:42 +08:00

console.py

fix(console): tolerate malformed usage counters and pricing (#7736)

2026-10-31 18:05:16 +08:00

features.py

feat(approvals): add Ask, Auto and Full tool permission modes (#8033)

2026-11-11 20:59:05 +08:00

feedback.py

fix(feedback): return 409 instead of 500 when feedback is POSTed twice (#8064)

2026-11-10 07:47:01 +08:00

github_webhooks.py

fix(gateway): reject non-ASCII tokens instead of raising in constant-time compares (#6076)

2026-09-30 17:41:11 +08:00

im_notification_preferences.py

feat(channels): generalize group notifications and add opt-in task/goal IM notices (#6903)

2026-10-15 10:30:55 +08:00

input_polish.py

feat: add composer input polishing (#3986)

2026-07-08 17:10:27 +08:00

integrations.py

fix(integrations): drain Lark install across cancellation (#6408)

2026-10-07 17:02:23 +08:00

knowledge.py

feat(weknora): allow opt-in shared retrieval for authenticated users (#7944)

2026-11-09 17:06:05 +08:00

managed_models.py

feat(models): discover provider catalogs and search chat models (#7871)

2026-11-05 06:43:01 +08:00

mcp_tasks.py

feat(mcp): filter background tasks by status (#6527)

2026-10-10 08:53:51 +08:00

mcp.py

fix(memory): mask backend secrets in the memory config responses (#7665)

2026-10-30 14:53:33 +08:00

memory.py

fix(memory): require facts in replacement imports (#8131)

2026-11-11 17:35:17 +08:00

models.py

feat(models): discover provider catalogs and search chat models (#7871)

2026-11-05 06:43:01 +08:00

personal_mcp.py

fix(mcp): let ordinary users save bundled personal connections (#7400)

2026-10-24 16:12:04 +08:00

plugins.py

feat(extensions): show package-owned usage in extension details (#8031)

2026-11-10 18:41:27 +08:00

project_documents.py

fix(projects): keep shelf staging cleanup best-effort across the routes (#7229)

2026-10-24 11:07:09 +08:00

project_thread_files.py

feat(projects): Projects MVP Phase 2 — instructions, document shelf, promotion, trash (#5443)

2026-09-16 18:46:18 +08:00

projects.py

feat(projects): Projects MVP Phase 2 — instructions, document shelf, promotion, trash (#5443)

2026-09-16 18:46:18 +08:00

runs.py

feat(scheduled-tasks): signals, honest notices and fair queueing for server-started runs (RFC #6340, 2/2) (#6393)

2026-10-07 10:22:15 +08:00

scheduled_tasks.py

fix(agents): keep host paths out of agent and user-profile error details (#7255)

2026-10-22 08:41:07 +08:00

skill_mutations.py

feat(skills): add guarded evolution host APIs (#5645)

2026-10-18 21:17:02 +08:00

skills.py

fix(skills): keep disabled skills disabled when the extensions config cannot be read (#7705)

2026-11-05 15:07:07 +08:00

subagent_batches.py

feat(subagents): continue requested batch work and schedule explicit prerequisites (#7839)

2026-11-05 15:10:21 +08:00

subagents.py

fix(subagents): reject Windows reserved device names in managed subagent creation (#7959)

2026-11-08 21:55:46 +08:00

suggestions.py

fix(parsing): keep literal think tags inside JSON string values (#7907)

2026-11-06 21:19:52 +08:00

thread_activity.py

feat(scheduled-tasks): signals, honest notices and fair queueing for server-started runs (RFC #6340, 2/2) (#6393)

2026-10-07 10:22:15 +08:00

thread_runs.py

feat(approvals): add Ask, Auto and Full tool permission modes (#8033)

2026-11-11 20:59:05 +08:00

threads.py

feat(approvals): add Ask, Auto and Full tool permission modes (#8033)

2026-11-11 20:59:05 +08:00

trash.py

fix(projects): defer trash cleanup when retention config is unavailable (#7683)

2026-10-31 18:08:11 +08:00

uploads.py

fix(uploads): report rejected filenames and make success mean "a file was stored" (#7165)

2026-10-24 10:07:10 +08:00

user_preferences.py

fix(channels): keep IM binding codes on screen and report goal state in replies (#7591)

2026-10-27 09:46:58 +08:00