Alex 636f299e67 Default the code and artifact tools; scope read_document to workflows ...

Enable code_executor and artifact_generator by default in chats (added to
DEFAULT_CHAT_TOOLS) — they load via the synthetic-id path user- and
conversation-scoped like scheduler, and persist artifacts (no user_tools FK).
Make read_document an internal agent-builtin flagged workflow_only so it appears
only in the workflow builder, not the classic agent picker or the Add-Tool
catalog (reuses the builtin synthetic-id path; still run-scoped and authz-gated).

Per decision, default-on code_executor runs sandboxed code without an approval
prompt (the sandbox is the trust boundary); this is documented in settings and
the threat model, and multi-tenant deployments should add per-tenant isolation
(Daytona / gVisor / egress policy).

2026-06-25 18:37:04 +01:00

..

__init__.py

refactor: break up monolithic routes.py into modular domain structure

2025-10-03 12:30:04 +05:30

mcp.py

Feat notification system (#2472)

2026-05-15 12:23:31 +01:00

routes.py

Default the code and artifact tools; scope read_document to workflows

2026-06-25 18:37:04 +01:00