Duc Nguyenandntduc bb7712a9ff fix(collaboration): harden delegated task isolation (#1486) ...

* feat(collaboration): isolate delegated artifacts and child runs

Isolate delegated inputs and outputs behind secure artifact exchange lifecycles. Scope Agent Link tasks by tenant and root agent, and enforce delegation spawn-tree boundaries. Add process-wide child-run admission and preserve logical media paths across native, MCP, and sandbox execution.

* fix(collaboration): harden delegated task isolation

Enforce tenant and root-agent task scope across migrations and stores. Add exactly-once async completion delivery, delegated sandbox boundaries, and confined artifact and media recovery across runtime surfaces.

* fix(collaboration): recover interrupted async tasks

* fix(collaboration): normalize persisted child-run status

---------

Co-authored-by: ntduc <ntduc@cpp.ai.vn>

2026-07-30 14:17:40 +07:00

..

activity.go

feat(http): unblock CLI P6 backend APIs (#44)

2026-05-22 20:59:47 +07:00

agent_workstation_links.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00

agent-links_test.go

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

agent-links.go

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

agents_access.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

agents_batch.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

agents_context.go

fix: deterministic prompt ordering for LLM cache hit (#719)

2026-04-06 12:54:44 +07:00

agents_list_tenant_scope_test.go

(feat) MCP Server (#1365)

2026-07-15 09:56:43 +07:00

agents_update_null_coerce_test.go

fix(agents): handle null JSON config updates (#13)

2026-05-17 22:34:19 +07:00

agents.go

(feat) MCP Server (#1365)

2026-07-15 09:56:43 +07:00

api_keys.go

fix(http): master-scope guards on builtin_tools, packages, api-keys

2026-04-12 10:24:07 +07:00

basename_helper_test.go

feat(store): vault media linking schema migration + document support

2026-04-11 21:22:23 +07:00

basename_helper.go

feat(store): vault media linking schema migration + document support

2026-04-11 21:22:23 +07:00

bitrix_portals_test.go

fix(bitrix24): resolve PR 8-10 stack findings

2026-05-22 20:53:01 +07:00

bitrix_portals.go

fix(bitrix24): resolve PR 8-10 stack findings

2026-05-22 20:53:01 +07:00

browser-cookies_test.go

feat(browser): add scoped cookie sync

2026-05-24 11:27:02 +07:00

browser-cookies.go

feat(browser): add scoped cookie sync

2026-05-24 11:27:02 +07:00

builtin-tools.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

channel_contact_metadata.go

fix(discord): qualify group titles across surfaces (#1420)

2026-07-10 22:25:45 +07:00

channel_instances.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

channel_memory_extraction_test.go

fix(channelmemory): harden passive extraction reliability (#1386)

2026-07-08 01:25:08 +07:00

channel-context-capabilities.go

feat(channels): add context capability admin surface

2026-05-31 13:50:31 +07:00

channel-memory-extraction.go

fix(channelmemory): harden passive extraction reliability (#1386)

2026-07-08 01:25:08 +07:00

config_permissions.go

revert(http): remove admin backfill endpoint — lazy heal on /writers is enough

2026-04-18 21:43:19 +07:00

config-secrets.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

contacts.go

fix(discord): qualify group titles across surfaces (#1420)

2026-07-10 22:25:45 +07:00

cron_crud_test.go

fix(cron): guard nil job and tenant-consistent readback in cron create [B24:2794] (#1438)

2026-07-15 16:54:49 +07:00

cron_crud.go

fix(cron): guard nil job and tenant-consistent readback in cron create [B24:2794] (#1438)

2026-07-15 16:54:49 +07:00

cron_exec.go

fix(cron): prevent job flood after restart, interval drift, and SQLite RunJob bug (#796)

2026-04-09 23:40:46 +07:00

cron_scheduler.go

feat(cron): per-job LLM provider/model override (#1234)

2026-06-21 00:19:39 +07:00

cron.go

feat(cron): per-job LLM provider/model override (#1234)

2026-06-21 00:19:39 +07:00

episodic_search_test.go

feat(memory): add episodic time filters to search (#1411)

2026-07-10 00:55:13 +07:00

episodic_search.go

feat(memory): add episodic time filters to search (#1411)

2026-07-10 00:55:13 +07:00

episodic.go

fix(memory): surface passive channel episodic recall (#1410)

2026-07-09 23:55:11 +07:00

evolution_metrics.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

evolution_suggestions.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

factory.go

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

heartbeat_delivery_targets_test.go

fix(discord): qualify group titles across surfaces (#1420)

2026-07-10 22:25:45 +07:00

heartbeat_provider_fk_migration_test.go

fix(providers): heartbeat FK SET NULL + tenant-scoped tx-safe DeleteProvider (#1034)

2026-04-27 12:00:06 +07:00

heartbeat.go

fix(discord): qualify group titles across surfaces (#1420)

2026-07-10 22:25:45 +07:00

helpers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

hook_budget.go

feat(hooks/budget): per-tenant token spend tracking subsystem

2026-04-16 14:17:47 +07:00

hooks_test.go

fix(backup): harden tenant restore preview and lookup handling (#920)

2026-04-16 15:49:50 +07:00

hooks.go

refactor: consolidate hooks table migration and drop deprecated agent_id column

2026-04-16 14:17:48 +07:00

kg_dedup_test.go

fix(kg): count newly inserted dedup candidates (#1413)

2026-07-10 01:54:25 +07:00

kg_dedup.go

fix(kg): count newly inserted dedup candidates (#1413)

2026-07-10 01:54:25 +07:00

kg_entities.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

kg_graph.go

feat(vault): optimize graph visualization and fix sidebar state bugs

2026-04-13 10:59:27 +07:00

kg_relations.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

kg_scan.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

kg_traversal.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

mcp_oauth_tokens.go

feat(mcp): MCP OAuth 2.1 client for tool servers (#1196)

2026-06-21 22:27:44 +07:00

mcp_servers_access.go

feat(channels): add context capability admin surface

2026-05-31 13:50:31 +07:00

mcp_servers.go

feat(bitrix24): replace two MCP text inputs with a filtered dropdown (#1392)

2026-07-08 19:23:21 +07:00

mcp_user_credentials.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

memory_docs.go

fix(context): share agent scoped context data

2026-05-17 15:33:27 +07:00

memory_search.go

fix(context): share agent scoped context data

2026-05-17 15:33:27 +07:00

memory.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

pairing.go

fix(telegram): handle group-to-supergroup migration (#698)

2026-04-05 13:13:02 +07:00

pending_messages_test.go

Enhance passive memory extraction tuning (#1393)

2026-07-08 20:53:19 +07:00

pending_messages.go

fix(discord): qualify group titles across surfaces (#1420)

2026-07-10 22:25:45 +07:00

pool.go

fix(sqlite): bootstrap not running on first chat due to per-connection PRAGMA gap

2026-03-28 08:31:18 +07:00

providers.go

fix(providers): heartbeat FK SET NULL + tenant-scoped tx-safe DeleteProvider (#1034)

2026-04-27 12:00:06 +07:00

run_timeline_test.go

fix(agent): recover interrupted runs to failed on gateway startup (#1272)

2026-06-24 14:03:00 +07:00

run_timeline.go

fix(agent): recover interrupted runs to failed on gateway startup (#1272)

2026-06-24 14:03:00 +07:00

scan_time.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

schema_migration_test.go

fix(security): harden upstream critical surfaces (#32)

2026-05-20 16:33:49 +07:00

schema.go

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

schema.sql

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

scope.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

secure_cli_is_registered_test.go

fix(security): hard-deny ungranted exec for registered CLI binaries

2026-04-17 19:02:53 +07:00

secure_cli_schema_test.go

feat(cli-credentials): add agent-scoped git credentials

2026-05-31 16:49:23 +07:00

secure-cli-agent-credentials.go

feat(cli-credentials): add agent-scoped git credentials

2026-05-31 16:49:23 +07:00

secure-cli-agent-grants.go

feat(cli-credentials): support per-agent env grants

2026-05-17 14:35:34 +07:00

secure-cli-user-credentials.go

feat(secure-cli): CLI credential adapters framework + git adapter (#82) (#89)

2026-05-28 18:17:49 +07:00

secure-cli.go

feat(cli-credentials): add agent-scoped git credentials

2026-05-31 16:49:23 +07:00

sessions_branch_test.go

feat(http): unblock CLI P6 backend APIs (#44)

2026-05-22 20:59:47 +07:00

sessions_branch.go

feat(http): unblock CLI P6 backend APIs (#44)

2026-05-22 20:59:47 +07:00

sessions_display_tokens_integration_test.go

fix(store): persist last_prompt_tokens via sessions.metadata for accurate UI display

2026-04-23 08:31:53 +07:00

sessions_list_heuristic_test.go

fix(store): persist last_prompt_tokens via sessions.metadata for accurate UI display

2026-04-23 08:31:53 +07:00

sessions_list_metadata_tokens_test.go

fix(store): persist last_prompt_tokens via sessions.metadata for accurate UI display

2026-04-23 08:31:53 +07:00

sessions_list.go

fix(store): persist last_prompt_tokens via sessions.metadata for accurate UI display

2026-04-23 08:31:53 +07:00

sessions_ops.go

fix(store): persist last_prompt_tokens via sessions.metadata for accurate UI display

2026-04-23 08:31:53 +07:00

sessions_tokens.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

sessions.go

fix(store): persist last_prompt_tokens via sessions.metadata for accurate UI display

2026-04-23 08:31:53 +07:00

skill_evolution.go

feat(skills): add skill self-evolution metrics

2026-06-12 14:47:51 +07:00

skills_content.go

fix(skills): preserve custom skills during bundled seeding (#1435)

2026-07-15 00:25:07 +07:00

skills_crud.go

fix(sqlitestore): add tenant_id filter to GetSkillHashBySlug and GetNextVersion

2026-04-12 17:32:34 +07:00

skills_grants.go

feat(skills): add lifecycle API and CLI

2026-06-12 10:38:53 +07:00

skills_test.go

fix(skills): preserve custom skills during bundled seeding (#1435)

2026-07-15 00:25:07 +07:00

skills.go

feat(skills): add lifecycle API and CLI

2026-06-12 10:38:53 +07:00

snapshots_provider_model_test.go

fix(usage): repair cost analytics and display precision (#1330)

2026-07-03 06:24:21 +07:00

snapshots.go

fix(usage): repair cost analytics and display precision (#1330)

2026-07-03 06:24:21 +07:00

sqlite_dialect.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

sqlx_helpers.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#792)

2026-04-09 21:29:48 +07:00

sqlx_scan_structs.go

feat(bitrix24): replace two MCP text inputs with a filtered dropdown (#1392)

2026-07-08 19:23:21 +07:00

subagent-tasks_test.go

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

subagent-tasks.go

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

system-configs.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

team_task_siblings.go

feat(vault): task + delegation auto-linking in enrich worker

2026-04-11 21:22:23 +07:00

teams_delete_vault_scope_test.go

fix(vault): preserve team-scoped docs on team delete (#1356)

2026-07-05 11:26:21 +07:00

teams_tasks_activity.go

fix(teams): recover task locks for all active teams, not only v2 (#1448)

2026-07-18 11:49:27 +07:00

teams_tasks_lifecycle.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

teams_tasks.go

fix(tasks): inject tenant ctx in task ticker to prevent nil panic

2026-04-14 10:05:57 +07:00

teams.go

fix(vault): preserve team-scoped docs on team delete (#1356)

2026-07-05 11:26:21 +07:00

tenant_configs_settings_test.go

feat(store): tenant tool settings with column-preservation upsert

2026-04-12 08:55:15 +07:00

tenant-configs.go

feat(store): tenant tool settings with column-preservation upsert

2026-04-12 08:55:15 +07:00

tenants.go

perf: eliminate N+1 query patterns across import, vault, and usage pipelines

2026-04-10 19:35:02 +07:00

tracing_follow_test.go

feat(traces): add search and advanced filters

2026-06-12 00:14:40 +07:00

tracing_scan.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

tracing_session_costs_test.go

fix(usage): repair cost analytics and display precision (#1330)

2026-07-03 06:24:21 +07:00

tracing_spans.go

fix(usage): repair cost analytics and display precision (#1330)

2026-07-03 06:24:21 +07:00

tracing.go

fix(usage): repair cost analytics and display precision (#1330)

2026-07-03 06:24:21 +07:00

usage_events_test.go

feat(usage): add event analytics dashboard

2026-06-12 17:51:12 +07:00

usage_events.go

feat(usage): preserve cache tokens in usage events (#1311)

2026-07-01 05:54:35 +07:00

vault_documents.go

feat(vault): chat_id isolation for isolated teams

2026-04-23 18:43:31 +07:00

vault_graph.go

feat(vault): optimize graph visualization and fix sidebar state bugs

2026-04-13 10:59:27 +07:00

vault_links.go

feat(store): vault media linking schema migration + document support

2026-04-11 21:22:23 +07:00

vault_source_cleanup.go

feat(store): vault media linking schema migration + document support

2026-04-11 21:22:23 +07:00

webhook_calls.go

feat(webhooks): lease heartbeat to prevent duplicate async processing (#1275)

2026-06-24 16:10:38 +07:00

webhooks_test.go

feat(webhooks): lease heartbeat to prevent duplicate async processing (#1275)

2026-06-24 16:10:38 +07:00

webhooks.go

feat(webhooks): paginate list + call-history endpoints (server + web UI) (#1268)

2026-06-24 10:39:24 +07:00

workstation_activity.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00

workstation_permissions.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00

workstations.go

feat(workstation): Remote Workstation Runtime — SSH exec + security + audit (#4)

2026-05-11 14:58:19 +07:00