viettranx 8b8da3a3dd fix(mcp): unified grant revocation with per-agent tool group isolation ...

- Add GrantChecker interface with cache + event-bus invalidation for revalidating MCP tool grants at execution time (not just dispatch)
- Move toolGroups from package-level global to per-Registry field; Clone() gives each agent Loop isolated tool groups, eliminating cross-agent race condition
- BridgeTool.Execute rechecks grant validity before executing MCP methods; uses serverID field for cache key
- Wire MCPGrantChecker through ResolverDeps to MCP Manager and LoopConfig
- Add integration test for grant revocation scenarios
- Update policy functions to accept *Registry parameter

2026-04-16 17:07:56 +07:00

..

announce_queue.go

feat: propagate RBAC role through dispatch + bypass file-writer grant for admins

2026-04-16 14:17:48 +07:00

boundary_test.go

feat(tools): tenant-scoped allowed_paths configuration

2026-04-12 21:23:21 +07:00

builtin_tool_settings_merge_test.go

feat(agent): tenant tool settings overlay via loop ctx injection

2026-04-12 08:55:20 +07:00

capability.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

context_file_interceptor_test.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

context_file_interceptor.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

context_keys_test.go

feat(vault): task + delegation auto-linking in enrich worker

2026-04-11 21:22:23 +07:00

context_keys.go

chore: apply go fix syntax upgrades (min/max, switch patterns)

2026-04-15 11:24:57 +07:00

create_audio.go

refactor(tools): create_audio delegates to audio.Manager

2026-04-15 11:24:57 +07:00

create_image_byteplus.go

feat(providers): add BytePlus ModelArk provider with Seedream/Seedance media gen

2026-04-04 23:07:42 +07:00

create_image_dashscope.go

fix(media): update native provider API defaults and UI schema

2026-04-02 09:53:01 +07:00

create_image_minimax_test.go

fix bug can not create image with minimax provider (#630)

2026-04-02 09:35:21 +07:00

create_image_minimax.go

fix bug can not create image with minimax provider (#630)

2026-04-02 09:35:21 +07:00

create_image.go

feat(trace): reliable stop/abort with ctx-aware streams and 2-phase router

2026-04-14 18:28:31 +07:00

create_video_byteplus.go

feat(providers): add BytePlus ModelArk provider with Seedream/Seedance media gen

2026-04-04 23:07:42 +07:00

create_video_chat.go

feat(media): add Veo 3.1 Lite video generation with image-to-video support (#638)

2026-04-02 10:33:35 +07:00

create_video_gemini.go

feat(media): add Veo 3.1 Lite video generation with image-to-video support (#638)

2026-04-02 10:33:35 +07:00

create_video_minimax.go

feat(media): add Veo 3.1 Lite video generation with image-to-video support (#638)

2026-04-02 10:33:35 +07:00

create_video.go

feat(trace): reliable stop/abort with ctx-aware streams and 2-phase router

2026-04-14 18:28:31 +07:00

credential_context.go

…

credential_presets.go

…

credentialed_exec_test.go

fix(secure-cli): prevent deny_verbose from blocking --version via substring match

2026-04-14 10:46:53 +07:00

credentialed_exec.go

chore: apply go fix syntax upgrades (min/max, switch patterns)

2026-04-15 11:24:57 +07:00

cron.go

feat: preserve acting sender + migrate ACTOR sites across tool chain

2026-04-16 14:17:48 +07:00

datetime.go

…

delegate_tool_hooks_test.go

feat(hooks/script): integrate script handler — FireResult + source-tier gate + migration

2026-04-16 14:17:47 +07:00

delegate_tool.go

feat: propagate RBAC role through dispatch + bypass file-writer grant for admins

2026-04-16 14:17:48 +07:00

edit.go

fix(tools): Windows multi-drive workspace isolation (#836)

2026-04-12 19:56:15 +07:00

exec_approval.go

…

exec_memory_hints.go

fix(tools): hint model when shell commands target DB-backed memory files

2026-04-02 19:28:04 +07:00

exec_output_cap.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

executor.go

refactor: decompose consumer, agent loop, team tools, and MCP manager

2026-03-28 17:25:59 +07:00

filesystem_list.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

filesystem_unix.go

fix(tools): resolve Windows build errors and harden filesystem security (#318)

2026-03-21 07:29:48 +07:00

filesystem_windows.go

fix(tools): resolve Windows build errors and harden filesystem security (#318)

2026-03-21 07:29:48 +07:00

filesystem_write.go

feat(trace): reliable stop/abort with ctx-aware streams and 2-phase router

2026-04-14 18:28:31 +07:00

filesystem.go

feat(tools): tenant-scoped allowed_paths configuration

2026-04-12 21:23:21 +07:00

gemini_file_api.go

…

group_members.go

feat(feishu): add list_group_members tool + native @mention support (#280)

2026-03-19 17:21:38 +07:00

heartbeat.go

refactor(permissions): remove auto-add file writer, add config type constants

2026-04-01 13:59:56 +07:00

knowledge_graph_test.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

knowledge_graph.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

media_filename.go

feat(tools): semantic media filenames with LLM-provided hints

2026-03-25 13:40:44 +07:00

media_provider_chain_tenant_test.go

test(tools): verify tenant tool settings flow through media provider chain

2026-04-12 09:00:58 +07:00

media_provider_chain.go

chore: remove Suno provider at all sites

2026-04-15 11:24:57 +07:00

memory_expand.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

memory_interceptor_test.go

feat: merge pipeline, per-user credentials, unified picker, group contacts

2026-03-29 22:33:17 +07:00

memory_interceptor.go

feat(team): share leader memory with team members (read-only)

2026-03-27 22:45:40 +07:00

memory.go

feat(ts-port): reasoning strip, dreaming config + weighted scoring

2026-04-10 13:32:02 +07:00

message_test.go

fix(providers): make provider_type immutable + add argString tests

2026-04-01 11:59:21 +07:00

message.go

fix(providers): skip URL validation for ACP provider api_base (#610)

2026-04-01 11:55:48 +07:00

openai_compat_call.go

…

policy_mcp_test.go

fix(mcp): unified grant revocation with per-agent tool group isolation

2026-04-16 17:07:56 +07:00

policy_prefix_test.go

fix(agent): review fixes for tool call prefix stripping (#259)

2026-03-20 09:14:28 +07:00

policy_race_test.go

fix(mcp): unified grant revocation with per-agent tool group isolation

2026-04-16 17:07:56 +07:00

policy.go

fix(mcp): unified grant revocation with per-agent tool group isolation

2026-04-16 17:07:56 +07:00

publish_skill.go

feat: preserve acting sender + migrate ACTOR sites across tool chain

2026-04-16 14:17:48 +07:00

rate_limiter_test.go

…

rate_limiter.go

…

read_audio_resolve.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

read_audio.go

…

read_document_gemini.go

…

read_document_resolve.go

fix(media): route claude-cli PDFs as document blocks, scope disable_tools

2026-04-11 21:39:47 +07:00

read_document.go

fix(media): route claude-cli PDFs as document blocks, scope disable_tools

2026-04-11 21:39:47 +07:00

read_image.go

fix(media): route claude-cli PDFs as document blocks, scope disable_tools

2026-04-11 21:39:47 +07:00

read_video_resolve.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

read_video.go

…

registry_bench_test.go

chore: apply go fix syntax upgrades (min/max, switch patterns)

2026-04-15 11:24:57 +07:00

registry_test.go

fix: add panic recovery to tool, cron, and summarization goroutines (#420)

2026-03-24 21:09:16 +07:00

registry.go

fix(mcp): unified grant revocation with per-agent tool group isolation

2026-04-16 17:07:56 +07:00

result.go

…

sandbox_hints_test.go

fix(sandbox): path isolation, DooD volume mounting, hints, and nginx DNS (#129, #136)

2026-03-20 07:32:23 +07:00

sandbox_hints.go

fix(sandbox): path isolation, DooD volume mounting, hints, and nginx DNS (#129, #136)

2026-03-20 07:32:23 +07:00

sandbox_utils_test.go

fix(sandbox): path isolation, DooD volume mounting, hints, and nginx DNS (#129, #136)

2026-03-20 07:32:23 +07:00

sandbox_utils.go

fix(sandbox): path isolation, DooD volume mounting, hints, and nginx DNS (#129, #136)

2026-03-20 07:32:23 +07:00

scrub_server.go

…

scrub_test.go

test: improve test quality with concurrent tests and security validation

2026-04-12 21:05:10 +07:00

scrub.go

…

session_scope_test.go

fix(security): prevent cross-group session data leak in cron jobs

2026-04-13 11:04:19 +07:00

session_scope.go

fix(security): prevent cross-group session data leak in cron jobs

2026-04-13 11:04:19 +07:00

sessions_history.go

fix(security): prevent cross-group session data leak in cron jobs

2026-04-13 11:04:19 +07:00

sessions_send.go

feat: preserve acting sender + migrate ACTOR sites across tool chain

2026-04-16 14:17:48 +07:00

sessions_test.go

fix: use agent_key instead of UUID for session tool authorization (#573)

2026-03-30 22:28:00 +07:00

sessions.go

fix(security): prevent cross-group session data leak in cron jobs

2026-04-13 11:04:19 +07:00

shell_abort_test.go

chore: apply go fix syntax upgrades (min/max, switch patterns)

2026-04-15 11:24:57 +07:00

shell_deny_groups.go

fix(security): harden sandbox, auth, and shell deny patterns

2026-04-02 18:58:24 +07:00

shell_deny_test.go

fix(exec): allow uploaded files in active workspaces (#748)

2026-04-08 13:35:19 +07:00

shell_path_exemption.go

refactor(exec): extract path exemption logic to separate file

2026-04-08 13:38:30 +07:00

shell_pgid_unix.go

feat(trace): reliable stop/abort with ctx-aware streams and 2-phase router

2026-04-14 18:28:31 +07:00

shell_pgid_windows.go

feat(trace): reliable stop/abort with ctx-aware streams and 2-phase router

2026-04-14 18:28:31 +07:00

shell.go

feat(trace): reliable stop/abort with ctx-aware streams and 2-phase router

2026-04-14 18:28:31 +07:00

skill_manage.go

fix(skills): widen ListAccessible + ownership match to cover actor/user/sender identities

2026-04-16 14:17:48 +07:00

skill_search.go

refactor(security): remove cross-tenant bypass, enforce strict tenant isolation

2026-03-24 20:40:59 +07:00

subagent_config.go

feat(subagent): token tracking, edition limits, waitAll, auto-retry, producer-consumer announce (#600)

2026-03-31 11:45:16 +07:00

subagent_control.go

feat(subagent): token tracking, edition limits, waitAll, auto-retry, producer-consumer announce (#600)

2026-03-31 11:45:16 +07:00

subagent_exec.go

feat: propagate RBAC role through dispatch + bypass file-writer grant for admins

2026-04-16 14:17:48 +07:00

subagent_persist.go

feat(subagent): token tracking, edition limits, waitAll, auto-retry, producer-consumer announce (#600)

2026-03-31 11:45:16 +07:00

subagent_roster.go

fix(agent): smart delegation prompt + compaction pending state + block team tools in subagents

2026-03-31 11:44:54 +07:00

subagent_spawn_tool_actions.go

feat(subagent): token tracking, edition limits, waitAll, auto-retry, producer-consumer announce (#600)

2026-03-31 11:45:16 +07:00

subagent_spawn_tool.go

feat(subagent): token tracking, edition limits, waitAll, auto-retry, producer-consumer announce (#600)

2026-03-31 11:45:16 +07:00

subagent_spawn.go

feat: propagate RBAC role through dispatch + bypass file-writer grant for admins

2026-04-16 14:17:48 +07:00

subagent_tracing.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

subagent.go

feat: propagate RBAC role through dispatch + bypass file-writer grant for admins

2026-04-16 14:17:48 +07:00

team_access_policy.go

…

team_action_policy.go

feat: SQLite desktop edition — full desktop app with team tasks (#505)

2026-03-27 09:28:42 +07:00

team_blocker_escalation_config.go

feat(teams): blocker escalation, audit events, review workflow + docs

2026-03-23 13:51:28 +07:00

team_event_helpers.go

fix(telegram): propagate local_key for forum topic routing in team notifications (#800)

2026-04-12 19:03:47 +07:00

team_member_request_config.go

feat(teams): attachments refactor, semantic search, improved prompting (#310)

2026-03-20 17:51:40 +07:00

team_metadata_keys.go

feat: propagate RBAC role through dispatch + bypass file-writer grant for admins

2026-04-16 14:17:48 +07:00

team_mock_backend_test.go

feat(vault): task + delegation auto-linking in enrich worker

2026-04-11 21:22:23 +07:00

team_notify_config.go

fix: default noisy team notifications to off

2026-03-29 19:41:35 +07:00

team_notify_queue.go

fix(telegram): propagate local_key for forum topic routing in team notifications (#800)

2026-04-12 19:03:47 +07:00

team_task_action_flags.go

feat(teams): smart post-turn task decision, stale detection, and notification guardrails

2026-03-24 08:56:10 +07:00

team_tasks_blocker_test.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tasks_blocker.go

feat: preserve acting sender + migrate ACTOR sites across tool chain

2026-04-16 14:17:48 +07:00

team_tasks_create_test.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tasks_create.go

feat: propagate RBAC role through dispatch + bypass file-writer grant for admins

2026-04-16 14:17:48 +07:00

team_tasks_followup_test.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tasks_followup.go

refactor: decompose consumer, agent loop, team tools, and MCP manager

2026-03-28 17:25:59 +07:00

team_tasks_lifecycle_test.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tasks_lifecycle.go

refactor: decompose consumer, agent loop, team tools, and MCP manager

2026-03-28 17:25:59 +07:00

team_tasks_mutations_test.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tasks_mutations.go

refactor: decompose consumer, agent loop, team tools, and MCP manager

2026-03-28 17:25:59 +07:00

team_tasks_read_test.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tasks_read.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tasks_tool.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

team_tool_backend.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tool_cache.go

feat: preserve acting sender + migrate ACTOR sites across tool chain

2026-04-16 14:17:48 +07:00

team_tool_dispatch.go

feat: propagate RBAC role through dispatch + bypass file-writer grant for admins

2026-04-16 14:17:48 +07:00

team_tool_helpers_test.go

fix(telegram): preserve Telegram topic routing for delayed notifications (#850)

2026-04-12 17:05:57 +07:00

team_tool_helpers.go

fix(telegram): preserve Telegram topic routing for delayed notifications (#850)

2026-04-12 17:05:57 +07:00

team_tool_manager.go

refactor(tools): extract TeamToolBackend interface for team task testability

2026-03-27 22:26:36 +07:00

team_tool_validation.go

fix(telegram): propagate local_key for forum topic routing in team notifications (#800)

2026-04-12 19:03:47 +07:00

team_workspace_auto_share_test.go

feat(workspace): leader dual workspace with auto-copy to team on delegate

2026-03-31 12:10:55 +07:00

team_workspace_auto_share.go

feat(workspace): leader dual workspace with auto-copy to team on delegate

2026-03-31 12:10:55 +07:00

telegram_forum.go

fix(agent): channel-aware tool filtering, group chat title in system prompt

2026-03-27 21:03:34 +07:00

tts_agent_ctx_test.go

feat(tools): TTS voice/model resolver with agent-level precedence

2026-04-15 11:24:57 +07:00

tts_override_test.go

feat(tts): consolidate TTS config UI with provider-aware pickers and synthesize endpoint

2026-04-16 14:17:48 +07:00

tts.go

feat(tools): TTS voice/model resolver with agent-level precedence

2026-04-15 11:24:57 +07:00

types.go

fix(message): strip embedded MEDIA: paths and add cross-tenant channel validation

2026-03-25 13:23:46 +07:00

use_skill.go

…

vault_interceptor.go

feat(vault): task + delegation auto-linking in enrich worker

2026-04-11 21:22:23 +07:00

vault_search.go

feat(v3): core architecture redesign — pipeline, memory, vault, evolution, providers, orchestration (#790)

2026-04-09 21:15:19 +07:00

web_fetch_convert_handlers.go

…

web_fetch_convert_test.go

…

web_fetch_convert_utils.go

…

web_fetch_convert.go

…

web_fetch_extractor_defuddle.go

feat(tools): add Defuddle extractor chain for web_fetch (#296)

2026-03-20 14:21:46 +07:00

web_fetch_extractor_inprocess.go

feat(tools): tenant-aware web_fetch domain policy resolution

2026-04-12 11:19:00 +07:00

web_fetch_extractor_test.go

feat(tools): add Defuddle extractor chain for web_fetch (#296)

2026-03-20 14:21:46 +07:00

web_fetch_extractor.go

fix(tools): add extractor chain retry/timeout, fix openai_compat media routing

2026-03-20 22:26:48 +07:00

web_fetch_hidden.go

…

web_fetch_policy_test.go

feat(tools): tenant-aware web_fetch domain policy resolution

2026-04-12 11:19:00 +07:00

web_fetch.go

feat(tools): tenant-aware web_fetch domain policy resolution

2026-04-12 11:19:00 +07:00

web_search_brave.go

feat(tools): add Exa + Tavily web search providers with ranked ordering

2026-04-12 11:09:32 +07:00

web_search_chain_test.go

feat(tools): tenant-aware web_search provider chain resolution

2026-04-12 09:01:01 +07:00

web_search_chain.go

feat(tools): tenant-aware web_search provider chain resolution

2026-04-12 09:01:01 +07:00

web_search_config_test.go

feat(tools): add Exa + Tavily web search providers with ranked ordering

2026-04-12 11:09:32 +07:00

web_search_config.go

chore: apply go fix syntax upgrades (min/max, switch patterns)

2026-04-15 11:24:57 +07:00

web_search_ddg.go

feat(tools): add Exa + Tavily web search providers with ranked ordering

2026-04-12 11:09:32 +07:00

web_search_exa.go

feat(tools): add Exa + Tavily web search providers with ranked ordering

2026-04-12 11:09:32 +07:00

web_search_tavily.go

feat(tools): add Exa + Tavily web search providers with ranked ordering

2026-04-12 11:09:32 +07:00

web_search.go

feat(tools): add Exa + Tavily web search providers with ranked ordering

2026-04-12 11:09:32 +07:00

web_shared.go

…

workspace_dir.go

feat(storage): bump upload limit to 50MB and expand protected dirs

2026-03-24 23:17:51 +07:00

workspace_interceptor.go

feat: multi-tenant isolation — complete implementation (#359)

2026-03-23 08:08:23 +07:00

workspace_media.go

fix(teams): use OR logic for task search instead of AND

2026-03-18 13:02:07 +07:00

workspace_resolver_test.go

refactor(workspace): extract layered resolver pipeline for workspace path computation

2026-03-25 16:03:31 +07:00

workspace_resolver.go

refactor(workspace): extract layered resolver pipeline for workspace path computation

2026-03-25 16:03:31 +07:00