 Duc Nguyenandntduc
|
bb7712a9ff
|
fix(collaboration): harden delegated task isolation (#1486)
* feat(collaboration): isolate delegated artifacts and child runs
Isolate delegated inputs and outputs behind secure artifact exchange lifecycles. Scope Agent Link tasks by tenant and root agent, and enforce delegation spawn-tree boundaries. Add process-wide child-run admission and preserve logical media paths across native, MCP, and sandbox execution.
* fix(collaboration): harden delegated task isolation
Enforce tenant and root-agent task scope across migrations and stores. Add exactly-once async completion delivery, delegated sandbox boundaries, and confined artifact and media recovery across runtime surfaces.
* fix(collaboration): recover interrupted async tasks
* fix(collaboration): normalize persisted child-run status
---------
Co-authored-by: ntduc <ntduc@cpp.ai.vn>
|
2026-07-30 14:17:40 +07:00 |
|
|
viettranx
|
3a85d625a6
|
feat(tools): add send_file for delivering existing workspace files
- new send_file(path, caption?) tool with DenyPaths guard and duplicate-delivery check
- patch message(MEDIA:) to Mark DeliveredMedia on send success (closes cross-tool dup gap)
- register in gateway wiring + builtin seed
- add to systemprompt coreToolSummaries; clarify write_file deliver=true description
- 16 tests green (PG + SQLite builds clean, invariants green)
|
2026-04-23 08:31:53 +07:00 |
|