Commit Graph

  • e66f455d51 fix(skills): don't treat a lazily evaluated PEP 695 type alias as a network sink (#4315) Aari 2026-07-21 00:02:16 +08:00
  • 24a45a4e68 feat(tui): add clear command (#4306) Ryker_Feng 2026-07-20 23:56:37 +08:00
  • 6544d96cc4 fix(skills): close AST literal-only shell=True bypass in SkillScan (#4057) Daoyuan Li 2026-07-20 08:50:47 -07:00
  • 09e25b8a32 fix(auth): let deployments close local self-registration (#4311) Aari 2026-07-20 23:33:09 +08:00
  • 1a1c5def0d fix(agents): classify web_fetch error pages as errors, not successful evidence (#4314) Aari 2026-07-20 23:05:47 +08:00
  • b02308bb1d fix(dingtalk): drop inbound messages that carry no conversation identity (#4316) Aari 2026-07-20 23:00:44 +08:00
  • 16377b1206 fix(frontend): encode uploaded filenames in delete requests (#4312) Ryker_Feng 2026-07-20 20:22:58 +08:00
  • cd34a1a504 fix(skills): don't attach model tracing to the in-graph skill security scan (#4252) Aari 2026-07-20 08:18:23 +08:00
  • 39cc26ddfc feat(frontend): restore per-thread composer drafts (#4282) Ryker_Feng 2026-07-20 08:06:32 +08:00
  • 474a0fd6b7 fix(gateway): correct GitHub auto-retry claim in webhook route docs (#4289) Daoyuan Li 2026-07-19 17:01:18 -07:00
  • a9a57fb711 fix(gateway): handle null config.configurable in _resolve_thread_id (#4301) Andrew Chen 2026-07-20 07:54:15 +08:00
  • de024646a7 feat(memory): memory template externalization (#4286) lllyfff 2026-07-20 07:24:34 +08:00
  • a8bf54cbbb feat(skillscan): detect exfil through instance/dataflow network clients (#4265) Aari 2026-07-20 07:04:59 +08:00
  • 0cd55067f3 fix(skills): reject colon in zip member names to close NTFS ADS smuggling gap (#4236) Daoyuan Li 2026-07-19 07:36:15 -07:00
  • 3ed2e1f1d9 fix(config): close out #4124 review follow-ups (shared signature helper, resolve_config_path None contract) (#4275) Daoyuan Li 2026-07-19 07:12:30 -07:00
  • 9a5d701355 fix(channels): document GitHub dedupe TTL, tighten redelivery tests (#4274) Daoyuan Li 2026-07-19 07:08:48 -07:00
  • 532111b2e6 fix(frontend): encode thread IDs in chat routes (#4302) Ryker_Feng 2026-07-19 22:03:25 +08:00
  • d075be0277 fix(browserless): surface target-page error status in web_fetch_tool (#4239) Daoyuan Li 2026-07-19 05:08:52 -07:00
  • 5b65d543b1 fix(channels): key inbound dedupe on chat-scoped workspaces (#4287) Aari 2026-07-19 20:01:52 +08:00
  • d2f8f61e3a fix(skills): add security_fail_closed option for moderation model outages (#4297) Hanchen Qiu 2026-07-19 18:56:03 +08:00
  • 271a921baf refactor(sandbox): reuse E2B kill helper during eviction (#4298) luo jiyin 2026-07-19 18:45:52 +08:00
  • 867235389d Add trace-based behavioral tests with Monocle Test Tools (#4025) Mohammed Ansari 2026-07-19 03:26:26 -07:00
  • 65792c20a5 fix(frontend): encode artifact URL path segments (#4278) VectorPeak 2026-07-19 17:37:58 +08:00
  • bc9c027a54 fix(uploads): claim the converted markdown filename before writing it (#4288) Aari 2026-07-19 17:24:31 +08:00
  • 4746a2579b fix(loop-detection): clear the per-tool frequency counter on evict/reset (#4295) Andrew Chen 2026-07-19 17:13:44 +08:00
  • dd2f73c1a1 fix(config): normalize the postgres:// short scheme for the async ORM engine (#4293) Andrew Chen 2026-07-19 17:01:28 +08:00
  • 90d511f3d2 refactor(sandbox): consolidate E2B client lifecycle helpers (#4262) luo jiyin 2026-07-19 16:20:57 +08:00
  • 0f088033fe fix(gateway): prefer X-Trace-Id over metadata.deerflow_trace_id when header is set (#4283) yym36991 2026-07-19 09:13:51 +08:00
  • 283cea567e fix(scripts): broaden support bundle secret-key redaction denylist (#4242) Daoyuan Li 2026-07-18 16:39:52 -07:00
  • 75fa028e89 fix(artifacts): serve inline binary artifacts via FileResponse for Range support (#4281) Daoyuan Li 2026-07-18 16:31:29 -07:00
  • a028dfd5fb feat(auth): add keep me signed in login option (#4255) Ryker_Feng 2026-07-18 22:17:15 +08:00
  • e89edb39b1 fix(gateway): reject non-positive read limits (#4284) Ryker_Feng 2026-07-18 22:12:57 +08:00
  • f8bef42a04 fix(wechat): validate timing configuration (#4280) Ryker_Feng 2026-07-18 17:53:30 +08:00
  • 5994fdf38c fix: avoid forcing frontend nginx upgrades (#4250) Zhengcy05 2026-07-18 17:50:20 +08:00
  • 7757e38b7f fix(nginx): allow long chat prompts through /api/langgraph/ without a raw 500 (#4277) Daoyuan Li 2026-07-18 02:48:42 -07:00
  • a0e1d82ef4 fix(workspace-changes): offload blocking filesystem IO in text-cache lifecycle (#4268) Aari 2026-07-18 17:30:14 +08:00
  • 208df4931d doc(changelog): updated the changelog with latest changes (#4270) Willem Jiang 2026-07-18 17:25:45 +08:00
  • c9b6131f8f fix(skills): reload mounted skills without restarting Gateway (#4264) Huixin615 2026-07-17 23:22:16 +08:00
  • 1ae02913ea fix(skills): cap archive entry count in safe_extract_skill_archive (#4241) Daoyuan Li 2026-07-17 08:00:08 -07:00
  • 5a5c661e9f fix(middleware): recover malformed tool-call ids in dangling repair (#4246) Aari 2026-07-17 19:16:42 +08:00
  • 9a4c72db99 fix(channels): isolate per-message failures in WeChat poll loop (#4231) Daoyuan Li 2026-07-17 01:08:53 -07:00
  • 13afef6278 fix(tui): interrupt an active run before /quit exits (#4235) Daoyuan Li 2026-07-17 00:48:45 -07:00
  • 7156e745e0 fix(channels): don't treat a bare "connect" as a bind command (#4251) Andrew Chen 2026-07-17 15:11:15 +08:00
  • 10890e10a8 feat(authz): propagate trusted authorization principal context (#4203) hataa 2026-07-17 14:49:51 +08:00
  • f9340c1f08 test(mcp): cover passive skill tool visibility (#4247) Huixin615 2026-07-17 14:39:35 +08:00
  • ae223199fd fix(security): escape MindIE tool-response content against </tool_response> breakout (#4253) Yufeng He 2026-07-17 14:23:44 +08:00
  • bc6f1adc71 fix(channels): dispatch Feishu group commands prefixed with a bot @mention (#4229) Aari 2026-07-17 11:18:20 +08:00
  • 693507870c fix(frontend): preserve single tildes in markdown (#4245) #4029 Huixin615 2026-07-16 16:57:32 +08:00
  • 756eac0d1a feat(tool):Add structured synopsis for oversized tool output previews (#3377) HaotianChen616 2026-07-16 16:41:04 +08:00
  • 7df44f586c fix(agents): refuse empty SOUL.md updates in update_agent (#4219) Aari 2026-07-16 14:44:22 +08:00
  • d57f695769 fix(helm): default sandbox Services to ClusterIP (#3929) (#4190) Zheng Feng 2026-07-16 14:30:05 +08:00
  • 65afc9b1d2 fix(skills): apply allowed-tools only to active skills (#4098) Huixin615 2026-07-16 14:12:02 +08:00
  • e7d7da9e7c fix(frontend): strip <memory> tags in Streamdown to avoid React console error (#4209) qin-chenghan 2026-07-16 14:09:00 +08:00
  • b3a0dac8ad fix(channels): accept leading @mentions before /connect bind codes (#4222) Aari 2026-07-16 11:38:56 +08:00
  • 94a34f382d feat(context): record effective memory identity per run (#3556) AochenShen99 2026-07-16 09:39:09 +08:00
  • 8da7cbf028 feat(memory): LLM-assigned per-fact expected_valid_days and staleFactsToExtend (#4143) Tianye Song 2026-07-16 09:34:21 +08:00
  • 259f51ca4f fix(github): match allow_authors logins case-insensitively (#4218) Aari 2026-07-16 09:12:29 +08:00
  • 5c80c07dfe fix(memory): treat explicit null backend_config values as omitted in DeerMemConfig (#4217) ajayr 2026-07-16 01:29:30 +01:00
  • 1769b2de0d fix: read run stop_reason from runtime context (#4188) Vanzeren 2026-07-16 08:19:52 +08:00
  • de55982c5a fix(subagents): preserve parent checkpoint namespace (#4215) Nan Gao 2026-07-16 01:03:08 +02:00
  • 45865e9f3f fix(tracing): attach Langfuse trace metadata to the goal evaluator (#4202) Daoyuan Li 2026-07-15 07:30:34 -07:00
  • 6ef0aa2aea fix(tui): stop empty-id assistant deltas from merging across turns (#4201) Daoyuan Li 2026-07-15 07:27:00 -07:00
  • 3247f61750 fix(middleware): sanitize invalid tool call arguments (#4193) Huixin615 2026-07-15 22:06:29 +08:00
  • 289adcbb02 fix(mcp): offload blocking filesystem IO in MCP config update (#3552) ly-wang19 2026-07-15 20:41:56 +08:00
  • a0acdda103 fix(gateway): keep create_thread idempotent when the insert loses a race (#3800) Yufeng He 2026-07-15 20:33:43 +08:00
  • 959bf13406 fix(memory): flush memory queue on graceful shutdown to prevent loss (#4181) Tu Naichao 2026-07-15 20:25:41 +08:00
  • fa419b3e4c fix(goal): stop continuation_count double-bump in thread_changed_before_continuation stand-down (#4199) Daoyuan Li 2026-07-15 05:21:04 -07:00
  • f0e56dde80 build(deps): bump h3 from 1.15.6 to 1.15.9 in /frontend (#4211) dependabot[bot] 2026-07-15 20:10:03 +08:00
  • 16919f7c52 fix(skills): reuse the resolved app config in the no-arg skills prompt section (#4160) Xinmin Zeng 2026-07-15 19:56:09 +08:00
  • e7e9c51988 Classify four HTTP identity sources (browser session, OIDC, IM channel (#4179) yym36991 2026-07-15 19:42:35 +08:00
  • b68e1c686a docs: add the link of LLM Space (#4195) Henry Li 2026-07-15 14:44:08 +08:00
  • 2a7469cdbc fix(channels): dedupe GitHub webhook redeliveries (#4104) Daoyuan Li 2026-07-14 21:29:54 -07:00
  • ad45f59d66 feat(memory): pluggable memory abstraction with self-contained DeerMem backend (#4122) qin-chenghan 2026-07-15 11:21:04 +08:00
  • 1300c6d36b feat(authz): add pluggable AuthorizationProvider protocol and config scaffolding (Phase 0, #4063) (#4127) hataa 2026-07-15 10:03:33 +08:00
  • f3e4e5f8f0 ci(helm): publish chart to charts/ namespace prefix on GHCR (#4175) Zheng Feng 2026-07-15 08:54:36 +08:00
  • 0dd90ccfde fix(agents): require config.yaml in update_agent's legacy-agent guard (#4166) Daoyuan Li 2026-07-14 17:13:17 -07:00
  • 8e96a6a252 fix(security): html-escape the conversation block in MEMORY_UPDATE_PROMPT (#4162) Aari 2026-07-14 23:35:46 +08:00
  • 656f6b364c fix(skills): recognize fully deleted public skill packages in review CI (#4169) Daoyuan Li 2026-07-14 08:08:33 -07:00
  • 713ee544b7 fix(agents): stop persisting base64 image data in checkpoint state (#4140) qin-chenghan 2026-07-14 23:02:26 +08:00
  • 51bb19fa1b fix(channels): drop redundant GitHub review-comment webhook fan-out (#4131) Daoyuan Li 2026-07-14 07:56:50 -07:00
  • 60e50537f3 fix(subagents): prohibit task tool in general-purpose system prompt (#4161) qin-chenghan 2026-07-14 22:51:21 +08:00
  • 9c77046d10 fix(middleware): drop orphan ToolMessages so strict providers don't 400 (#4080) 黄云龙 2026-07-14 22:43:47 +08:00
  • cdefd4a8aa fix(mcp): invalidate tools cache on config content + path, not just newer mtime (#4124) Daoyuan Li 2026-07-14 07:40:51 -07:00
  • abd0c7a585 docs(api): document stateless /api/runs/stream endpoint (#4177) yym36991 2026-07-14 22:33:57 +08:00
  • c57cf221d3 fix(security): html-escape the summary input blocks in the summarization prompt (#4182) Aari 2026-07-14 21:51:47 +08:00
  • e492bb1c68 fix(middleware): window LoopDetection tool-frequency counter so long runs don't false-trip (#4072) 黄云龙 2026-07-14 21:45:37 +08:00
  • 88a1311fe8 fix(DB): legacy backfill creates missing Index objects on existing tables (#4090) 黄云龙 2026-07-14 21:41:35 +08:00
  • 13fd8e229a fix(checkpoint): persist run duration in checkpoints for history reads (#4118) Vanzeren 2026-07-14 21:37:47 +08:00
  • fabadae416 add Volcengine Coding Plan to quikly setup (#4141) pclin 2026-07-14 13:01:58 +08:00
  • 192ea5155e Revert "fix(firecrawl): align tools with installed firecrawl-py v2 SDK surfac…" (#4165) Willem Jiang 2026-07-14 11:57:48 +08:00
  • b7b4b49bfe fix(firecrawl): align tools with installed firecrawl-py v2 SDK surface (#4151) 黄云龙 2026-07-14 11:29:47 +08:00
  • 24648194ae fix(frontend): show branch action only for completed turns (#4147) #4148 Huixin615 2026-07-14 11:11:43 +08:00
  • 41b137c4c4 fix(security): block forged framework tags in the input guardrail (#4155) Aari 2026-07-14 11:04:11 +08:00
  • 446fa03801 fix(context): resolve context compress bug (#4065) AnoobFeng 2026-07-14 10:43:13 +08:00
  • 81b3ed0188 fix(skillscan): recognize remaining outbound network sinks (#4153) Aari 2026-07-14 09:55:38 +08:00
  • 79cdd99fca fix(mcp): validate MCP tool names at load so deferred prompts stay inert (#4154) Aari 2026-07-14 09:49:43 +08:00
  • e2816eaa97 fix(models): scope the OpenAI-compat rules to BaseChatOpenAI, not a class-path allowlist (#4146) Aari 2026-07-14 09:32:53 +08:00
  • 4af6178358 feat(trace): add agent observability with Monocle (#4024) Mohammed Ansari 2026-07-13 17:58:06 -07:00
  • e361122b9a fix(security): html-escape subagent descriptions before the <subagent_system> block (#4157) Yufeng He 2026-07-14 08:14:21 +08:00
  • 8cc4b3abeb fix(sandbox): the sandbox provisioner api exposes endpoints need to check API KEY (#4116) OrbisAI Security 2026-07-14 05:21:59 +05:30