Duc Nguyenandntduc bb7712a9ff fix(collaboration): harden delegated task isolation (#1486) ...

* feat(collaboration): isolate delegated artifacts and child runs

Isolate delegated inputs and outputs behind secure artifact exchange lifecycles. Scope Agent Link tasks by tenant and root agent, and enforce delegation spawn-tree boundaries. Add process-wide child-run admission and preserve logical media paths across native, MCP, and sandbox execution.

* fix(collaboration): harden delegated task isolation

Enforce tenant and root-agent task scope across migrations and stores. Add exactly-once async completion delivery, delegated sandbox boundaries, and confined artifact and media recovery across runtime surfaces.

* fix(collaboration): recover interrupted async tasks

* fix(collaboration): normalize persisted child-run status

---------

Co-authored-by: ntduc <ntduc@cpp.ai.vn>

2026-07-30 14:17:40 +07:00

..

docker_cache_key_test.go

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

docker_mounts_test.go

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

docker_mounts.go

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

docker_resolve.go

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

docker_test.go

fix(sandbox): sanitize @ in container names for WhatsApp LID chat IDs (#1031)

2026-06-27 02:25:36 +07:00

docker.go

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00

fsbridge_test.go

fix(security): consolidate & enhance batched security fixes (#1155, #967, #972, #974, #989, #973) (#1185)

2026-06-05 00:48:38 +07:00

fsbridge.go

fix(security): consolidate & enhance batched security fixes (#1155, #967, #972, #974, #989, #973) (#1185)

2026-06-05 00:48:38 +07:00

sandbox.go

fix(collaboration): harden delegated task isolation (#1486)

2026-07-30 14:17:40 +07:00