Duc Nguyenandntduc bb7712a9ff fix(collaboration): harden delegated task isolation (#1486) ...

* feat(collaboration): isolate delegated artifacts and child runs

Isolate delegated inputs and outputs behind secure artifact exchange lifecycles. Scope Agent Link tasks by tenant and root agent, and enforce delegation spawn-tree boundaries. Add process-wide child-run admission and preserve logical media paths across native, MCP, and sandbox execution.

* fix(collaboration): harden delegated task isolation

Enforce tenant and root-agent task scope across migrations and stores. Add exactly-once async completion delivery, delegated sandbox boundaries, and confined artifact and media recovery across runtime surfaces.

* fix(collaboration): recover interrupted async tasks

* fix(collaboration): normalize persisted child-run status

---------

Co-authored-by: ntduc <ntduc@cpp.ai.vn>

2026-07-30 14:17:40 +07:00

..

agent

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

audio

fix(audio): resolve provider options and honor STT timeout

2026-07-22 20:48:12 +07:00

backup

fix(backup): repair tenant backup/restore (config_secrets order, hooks registry, restore conn check) (#1357)

2026-07-05 11:56:36 +07:00

bgalert

feat(bgalert): surface non-retryable background worker errors to admin UI

2026-04-13 19:19:51 +07:00

bootstrap

feat(telegram): trigger-words, channel posts, message edit & topic posting (#1383)

2026-07-09 12:28:18 +07:00

bus

fix: resolve Zalo group by name + notify origin on failed forward (#1395)

2026-07-08 23:23:08 +07:00

cache

chore: minor formatting and cleanup across config, audio, cache, http, and provider modules

2026-04-23 19:16:12 +07:00

channelmemory

fix(discord): qualify group titles across surfaces (#1420)

2026-07-10 22:25:45 +07:00

channels

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

childrun

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

config

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

consolidation

fix: persist mid-loop compaction to stop re-compaction loop and revive episodic

2026-07-25 00:39:02 +07:00

cron

Merge remote-tracking branch 'upstream/dev' into dev

2026-06-15 14:14:16 +07:00

cronexec

feat(cron): deterministic command payloads (run a shell command, no LLM) (#1279)

2026-06-25 10:23:55 +07:00

crypto

feat(packages): unify Packages & CLI Credentials + per-grant env overrides (#3)

2026-05-11 13:14:44 +07:00

edition

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

eventbus

Enhance passive memory extraction tuning (#1393)

2026-07-08 20:53:19 +07:00

gateway

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

heartbeat

fix(discord): qualify group titles across surfaces (#1420)

2026-07-10 22:25:45 +07:00

hooks

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

http

(feat) MCP Server (#1365)

2026-07-15 09:56:43 +07:00

i18n

feat(i18n): add Russian (ru) language — full parity across backend, web & desktop (#1391)

2026-07-11 12:25:38 +07:00

knowledgegraph

fix(usage): enforce caps on auxiliary llm calls

2026-05-24 11:13:03 +07:00

logs

feat(http): unblock CLI P6 backend APIs (#44)

2026-05-22 20:59:47 +07:00

mcp

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

media

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

memory

fix: recover missing embeddings safely

2026-07-22 19:01:16 +07:00

oauth

fix(providers): post-merge fixes for Codex OAuth pools (#450)

2026-03-27 10:19:16 +07:00

orchestration

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

permissions

refactor(protocol): centralize tenants.* RPC method names as constants (#1371)

2026-07-07 12:54:08 +07:00

pipeline

test(pipeline): lock mid-loop compaction pressure flag end-to-end (#1479)

2026-07-25 15:02:08 +07:00

providerresolve

feat(agents): add model fallback configuration

2026-05-17 15:51:56 +07:00

providers

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

safego

feat(providers): support Codex OAuth pools with inherited routing defaults

2026-03-27 09:35:57 +07:00

sandbox

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

scheduler

feat(v3): vault UX, team access, CI fixes (#794)

2026-04-09 22:14:04 +07:00

security

fix(security): block 198.18.0.0/15 and 240.0.0.0/4 in SSRF protection (#1269)

2026-06-24 14:12:38 +07:00

sessions

test(cache,sessions,knowledgegraph): slim wave 3 coverage push

2026-04-11 21:22:23 +07:00

skills

feat(mcp): expand CRUD server to near-complete CLI parity (#1440)

2026-07-16 01:56:03 +07:00

store

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

systemmessages

feat(i18n): add Russian (ru) language — full parity across backend, web & desktop (#1391)

2026-07-11 12:25:38 +07:00

tasks

fix(team): propagate origin_sender_id for deferred task dispatches

2026-04-18 15:53:40 +07:00

teamworkclassify

feat: add team work classification routing (#1379)

2026-07-07 01:21:12 +07:00

testutil

build(ci): add coverage ratchet gate with per-package floors

2026-04-11 21:22:23 +07:00

tokencount

fix: persist mid-loop compaction to stop re-compaction loop and revive episodic

2026-07-25 00:39:02 +07:00

tools

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

tracing

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

tts

refactor(tts): replace per-provider files with 24-symbol alias layer

2026-04-15 11:24:56 +07:00

updater

fix: use errors.Is() for sentinel comparisons + remove unused @xyflow/react (#727)

2026-04-07 12:16:45 +07:00

upgrade

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

usage

fix: persist mid-loop compaction to stop re-compaction loop and revive episodic

2026-07-25 00:39:02 +07:00

vault

chore: merge main into dev (#1370)

2026-07-06 10:49:54 +07:00

version

feat(build): embed web UI in backend binary + simplify Docker variants (#620)

2026-04-01 15:25:59 +07:00

webhooks

feat(webhooks): return per-call usage breakdown with provider/model/cost (#1421)

2026-07-10 22:56:05 +07:00

webui

(feat) MCP Server (#1365)

2026-07-15 09:56:43 +07:00

workspace

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

workstation

fix(security): harden upstream critical surfaces (#32)

2026-05-20 16:33:49 +07:00