2 Commits

Include renames

Author	SHA1	Message	Date
Duc Nguyenandntduc	bb7712a9ff	fix(collaboration): harden delegated task isolation (#1486) ... * feat(collaboration): isolate delegated artifacts and child runs Isolate delegated inputs and outputs behind secure artifact exchange lifecycles. Scope Agent Link tasks by tenant and root agent, and enforce delegation spawn-tree boundaries. Add process-wide child-run admission and preserve logical media paths across native, MCP, and sandbox execution. * fix(collaboration): harden delegated task isolation Enforce tenant and root-agent task scope across migrations and stores. Add exactly-once async completion delivery, delegated sandbox boundaries, and confined artifact and media recovery across runtime surfaces. * fix(collaboration): recover interrupted async tasks * fix(collaboration): normalize persisted child-run status --------- Co-authored-by: ntduc <ntduc@cpp.ai.vn>	2026-07-30 14:17:40 +07:00
Jaegeon Oh	36c88fdd6e	fix(gateway): inject agent key in MCP bridge so session tools resolve identity ... bridgeContextMiddleware injects the agent UUID (store.WithAgentID) but never the agent key, so session tools (sessions_list/history/send/status) that resolve the caller via tools.ToolAgentKeyFromCtx always get "" and fail with "agent context required" when invoked over /mcp/bridge (e.g. by a claude-cli provider agent). Session keys are namespaced by agent key (agent:<key>:...), not UUID, and the bridge has no RunContext fallback. Inject the key in the same block that already fetches the agent for shell-deny overrides — symmetric with store.WithShellDenyGroups, no extra DB call, no new imports. #1094 makes the same fix at this site but bundles it into a large, stale (CONFLICTING) ACP/i18n refactor; this is the minimal extraction of that slice. It omits #1094's companion store.WithAgentKey write, which nothing on dev reads (every session tool reads tools.ToolAgentKeyFromCtx). Add internal/gateway/bridge_context_test.go: a regression guard asserting a signed X-Agent-ID lands the agent key in tools.ToolAgentKeyFromCtx, plus a no-store negative control. Signed-off-by: Jaegeon Oh <zezaeoh@gmail.com>	2026-06-15 13:17:02 +09:00