viettranx 2338ca53d5 feat(tools): add vault_read tool for shared/personal/team vault docs (#948) ...

Agents could not read vault docs registered at the tenant workspace root
because read_file enforces a per-agent workspace boundary. vault_read
fetches content by doc_id (from vault_search) with scope-based access
checks (shared/personal/team), a 3-layer text-only gate (DocType +
extension blocklist + UTF-8 sniff), 500KB default cap / 1MB ceiling,
and symlink/hardlink guards shared with read_file. Updated system-prompt
summaries and boundary-error hints so the LLM chains vault_search →
vault_read instead of retrying read_file.

2026-04-18 12:27:28 +07:00

..

contracts

test(contracts): complete P1 contract tests with schemas and policy

2026-04-12 21:52:29 +07:00

integration

feat(tools): add vault_read tool for shared/personal/team vault docs (#948)

2026-04-18 12:27:28 +07:00

invariants

fix(vault): include shared docs in agent read paths (#917)

2026-04-16 14:17:48 +07:00

scenarios

test(scenarios): add P2 end-to-end scenario tests

2026-04-12 21:54:02 +07:00

zalo_e2e

fix(zalo): address PR #62 review findings — security, reliability, modularity

2026-03-06 23:21:16 +07:00