1445043649 b26c5e4dd0 harden(gateway): API keys default-deny on control-plane routes (Stage 1 收口) ...

Service principals (Bearer dfk_...) may only reach the data plane
(threads / runs / assistants). All control-plane routes — mcp, models,
skills, channels, agents, memory, auth, management — now return 403
insufficient_scope. The check sits after the NULL/401 guard so an
invalid key on a control-plane path still returns 401, not 403. Human
cookie requests bypass the bearer branch entirely and are unaffected.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-28 21:42:41 +08:00

..

fixtures

chore(test): bump testcontainers Postgres to 17-alpine

2026-05-11 17:29:16 +08:00

_router_auth_helpers.py

test(boundary): PR6 T6.8 — cross-workspace isolation e2e (4 cases)

2026-05-13 17:40:56 +08:00

boundary_allowlist.toml

feat(tests): PR7 T7.1 — boundary scan allowlist toml

2026-05-14 13:50:12 +08:00

conftest.py

feat(persistence): PR6 T5.11 — ORM workspace_id nullable=False

2026-05-13 18:06:53 +08:00

test_acp_config.py

feat(acp): add env field to ACPAgentConfig for subprocess env injection (#1447)

2026-03-27 20:03:30 +08:00

test_aio_sandbox_local_backend.py

[security] fix(sandbox): bind local Docker ports to loopback (#2633)

2026-04-30 11:40:28 +08:00

test_aio_sandbox_provider.py

feat(persistence): per-user filesystem isolation, run-scoped APIs, and state/history simplification (#2153)

2026-04-26 11:13:01 +08:00

test_aio_sandbox.py

fix(sandbox): pass no_change_timeout to exec_command to prevent 120s premature termination (#2685)

2026-05-01 22:27:02 +08:00

test_alembic_business_tables.py

test(persistence): alembic 0003 — NOT NULL + UNIQUE coverage

2026-05-13 09:16:24 +08:00

test_alembic_default_workspace_id.py

feat(persistence): 4 business ORM models — nullable workspace_id

2026-05-13 09:06:08 +08:00

test_api_deprecation_header.py

test(gateway): strengthen dual-mount coverage to a v1-twin invariant (Stage 1 PR5)

2026-06-28 20:01:29 +08:00

test_api_key_backend.py

test(auth): cover expired-key rejection in APIKeyAuthBackend (Stage 1 PR2)

2026-06-28 11:44:41 +08:00

test_api_key_control_plane.py

harden(gateway): API keys default-deny on control-plane routes (Stage 1 收口)

2026-06-28 21:42:41 +08:00

test_api_key_repo.py

refactor(persistence): ApiKeyRepository hot path via indexed prefix + constant-time hash verify (Stage 1 PR1)

2026-06-28 11:24:06 +08:00

test_api_key_schema.py

feat(persistence): PR8 T8.4 — ApiKeyRow ORM + 3 tests

2026-05-14 14:10:32 +08:00

test_api_keys_router.py

harden(gateway): uniform 404 on API key revoke to hide cross-tenant existence (Stage 1 PR4)

2026-06-28 20:19:20 +08:00

test_api_v1_dual_mount.py

test(gateway): strengthen dual-mount coverage to a v1-twin invariant (Stage 1 PR5)

2026-06-28 20:01:29 +08:00

test_app_config_reload.py

fix(config): reset config-backed singletons on hot reload (#2588)

2026-05-06 10:17:55 +08:00

test_artifacts_router.py

feat(gateway): dual-mount legacy routers on /api and /api/v1 (Stage 1 PR5)

2026-06-28 19:49:05 +08:00

test_auth_config.py

feat(auth): release-validation pass for 2.0-rc — 12 blockers + simplify follow-ups (#2008)

2026-04-26 11:08:11 +08:00

test_auth_errors.py

feat(auth): decode_token rejects legacy 4-field JWTs as WORKSPACE_MISSING

2026-05-12 22:22:10 +08:00

test_auth_jwt_workspace.py

feat(auth): JWT TokenPayload accepts wid + role

2026-05-12 22:17:55 +08:00

test_auth_me_returns_workspaces.py

feat(auth): /auth/me returns workspaces[] with id/name/slug/role

2026-05-12 22:37:29 +08:00

test_auth_middleware_api_key.py

test(auth): move bearer probe routes under /api/v1/threads (Stage 1 收口)

2026-06-28 21:27:11 +08:00

test_auth_middleware_workspace.py

feat(persistence): PR6 T5.11 — ORM workspace_id nullable=False

2026-05-13 18:06:53 +08:00

test_auth_middleware.py

feat: implement process-local internal authentication for Gateway and enhance CSRF handling

2026-04-26 22:20:57 +08:00

test_auth_type_system.py

feat(auth): release-validation pass for 2.0-rc — 12 blockers + simplify follow-ups (#2008)

2026-04-26 11:08:11 +08:00

test_auth.py

feat(auth): decode_token rejects legacy 4-field JWTs as WORKSPACE_MISSING

2026-05-12 22:22:10 +08:00

test_backfill_workspace_id.py

feat(persistence): PR6 T5.11 — ORM workspace_id nullable=False

2026-05-13 18:06:53 +08:00

test_change_password_keeps_wid.py

feat(auth): login + change_password re-issue JWTs with wid + role

2026-05-12 22:35:06 +08:00

test_channel_file_attachments.py

[security] fix(upload): reject symlinked upload destinations (#2623)

2026-05-02 15:19:28 +08:00

test_channels.py

fix(channels): authenticate gateway command requests (#2742)

2026-05-06 15:27:34 +08:00

test_check_script.py

fix(check): windows pnpm version detection in check script (#2189)

2026-04-14 10:29:44 +08:00

test_checkpointer_none_fix.py

feat(persistence):Unified persistence layer with event store, feedback, and rebase cleanup (#2134)

2026-04-26 11:09:55 +08:00

test_checkpointer.py

fix the unit tests error of agent provider

2026-04-26 22:10:54 +08:00

test_clarification_middleware.py

fix(backend): make clarification messages idempotent (#2350) (#2351)

2026-04-19 22:00:58 +08:00

test_claude_provider_oauth_billing.py

fix(oauth): Harden Claude OAuth cache-control handling (#1583)

2026-03-30 07:41:18 +08:00

test_claude_provider_prompt_caching.py

fix: cap prompt caching breakpoints at 4 to prevent API 400 errors (#2449)

2026-04-25 19:40:06 +08:00

test_cli_auth_providers.py

fix(provider): preserve streamed Codex output when response.completed.output is empty (#1928)

2026-04-07 18:21:22 +08:00

test_client_e2e.py

fix(harness): resolve runtime paths from project root (#2642)

2026-05-01 22:19:50 +08:00

test_client_live.py

[Security] Address critical host-shell escape in LocalSandboxProvider (#1547)

2026-03-29 21:03:58 +08:00

test_client_message_serialization.py

feat: refine token usage display modes (#2329)

2026-05-04 09:56:16 +08:00

test_client.py

feat: refine token usage display modes (#2329)

2026-05-04 09:56:16 +08:00

test_codex_provider.py

chroe(2585): keep polishing the code of codex token usage (#2689)

2026-05-02 15:04:11 +08:00

test_config_version.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_converters.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-26 11:05:47 +08:00

test_create_deerflow_agent_live.py

feat: add create_deerflow_agent SDK entry point (Phase 1) (#1203)

2026-03-29 15:31:18 +08:00

test_create_deerflow_agent.py

feat(loop-detection): make loop detection configurable with per-tool frequency overrides (#2711)

2026-05-07 16:15:15 +08:00

test_credential_loader.py

feat(loop-detection): make loop detection configurable with per-tool frequency overrides (#2711)

2026-05-07 16:15:15 +08:00

test_csrf_bearer.py

feat(csrf): skip CSRF for bearer-header requests (Stage 1 PR3)

2026-06-28 12:06:23 +08:00

test_csrf_middleware.py

[security] fix(auth): reject cross-site auth POSTs (#2740)

2026-05-07 07:58:06 +08:00

test_custom_agent.py

feat(gateway): dual-mount legacy routers on /api and /api/v1 (Stage 1 PR5)

2026-06-28 19:49:05 +08:00

test_dangling_tool_call_middleware.py

fix(middleware): repair dangling tool-call history after loop interru… (#2035)

2026-04-12 19:11:22 +08:00

test_default_database_backend.py

test(config): pin default postgres backend + sqlite regression

2026-05-11 09:12:28 +08:00

test_dingtalk_channel.py

feat(channels): add DingTalk channel integration (#2628)

2026-04-30 11:25:33 +08:00

test_discord_channel.py

feat(channels): add Discord channel integration (#1806)

2026-04-11 17:48:04 +08:00

test_docker_sandbox_mode_detection.py

fix Windows Docker sandbox path mounting (#1634)

2026-03-31 22:19:27 +08:00

test_doctor.py

feat(dx): Setup Wizard + doctor command — closes #2030 (#2034)

2026-04-10 17:43:39 +08:00

test_ensure_admin_user_workspace_backfill.py

feat(auth): lifespan _ensure_admin_user backfills missing workspace

2026-05-12 22:39:09 +08:00

test_ensure_admin.py

refactor: Remove init_token handling from admin initialization logic and related tests

2026-04-26 11:09:56 +08:00

test_exa_tools.py

feat(community): add Exa search as community tool provider (#1357)

2026-04-08 17:13:39 +08:00

test_external_user_repo.py

test(persistence): cover ExternalUserRepository.get + document upsert semantics (Stage 1 PR1)

2026-06-28 11:29:44 +08:00

test_external_user_schema.py

feat(persistence): PR8 T8.5 — ExternalUserRow ORM + 2 tests

2026-05-14 14:12:43 +08:00

test_feedback.py

feat(persistence):Unified persistence layer with event store, feedback, and rebase cleanup (#2134)

2026-04-26 11:09:55 +08:00

test_feishu_parser.py

Feature/feishu receive file (#1608)

2026-04-06 22:14:12 +08:00

test_file_conversion.py

[security] fix(uploads): require explicit opt-in for host-side document conversion (#2332)

2026-04-18 22:47:42 +08:00

test_firecrawl_tools.py

feat(dx): Setup Wizard + doctor command — closes #2030 (#2034)

2026-04-10 17:43:39 +08:00

test_gateway_deps_config.py

refactor: root release config in gateway runtime (#2611)

2026-04-28 00:13:04 +08:00

test_gateway_docs_toggle.py

fix(security): allow disabling API docs in production via GATEWAY_ENABLE_DOCS (#2651)

2026-04-30 10:58:32 +08:00

test_gateway_lifespan_shutdown.py

fix(gateway): bound lifespan shutdown hooks to prevent worker hang under uvicorn reload (#2331)

2026-04-23 19:41:26 +08:00

test_gateway_runtime_cleanup.py

fix(docker):force ngix to resolve upstream names at request time (#2717)

2026-05-05 14:35:55 +08:00

test_gateway_services.py

fix(agents): propagate agent_name into ToolRuntime.context for setup_agent (#2679)

2026-05-01 16:00:11 +08:00

test_guardrail_middleware.py

feat(guardrails): add pre-tool-call authorization middleware with pluggable providers (#1240)

2026-03-23 18:07:33 +08:00

test_harness_boundary.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_headless_api_smoke.py

test(auth): move bearer probe routes under /api/v1/threads (Stage 1 收口)

2026-06-28 21:27:11 +08:00

test_infoquest_client.py

feat(harness): integration ACP agent tool (#1344)

2026-03-26 14:20:18 +08:00

test_initialize_admin.py

fix(security): harden auth system and fix run journal logic bug (#2593)

2026-04-28 11:34:07 +08:00

test_invoke_acp_agent_tool.py

refactor: thread app_config through lead and subagent task path (#2666)

2026-05-02 06:37:49 +08:00

test_jina_client.py

fix(jina): log transient failures at WARNING without traceback (#2484) (#2485)

2026-04-24 16:00:14 +08:00

test_langgraph_auth.py

feat(auth): decode_token rejects legacy 4-field JWTs as WORKSPACE_MISSING

2026-05-12 22:22:10 +08:00

test_lead_agent_model_resolution.py

feat(loop-detection): make loop detection configurable with per-tool frequency overrides (#2711)

2026-05-07 16:15:15 +08:00

test_lead_agent_prompt.py

fix(skills): enforce allowed-tools metadata (#2626)

2026-05-07 08:34:43 +08:00

test_lead_agent_skills.py

fix(skills): enforce allowed-tools metadata (#2626)

2026-05-07 08:34:43 +08:00

test_legacy_token_compat.py

feat(auth): decode_token rejects legacy 4-field JWTs as WORKSPACE_MISSING

2026-05-12 22:22:10 +08:00

test_llm_error_handling_middleware.py

refactor: thread app_config through middleware factories (#2652)

2026-04-30 12:41:09 +08:00

test_local_bash_tool_loading.py

fix(sandbox): improve sandbox security and preserve multimodal content (#2114)

2026-04-11 16:52:10 +08:00

test_local_sandbox_encoding.py

fix(sandbox): disable msys path conversion (#2766)

2026-05-08 10:13:11 +08:00

test_local_sandbox_provider_mounts.py

refactor(skills): Unified skill storage capability (#2613)

2026-05-01 13:23:26 +08:00

test_local_skill_storage_write.py

refactor(skills): Unified skill storage capability (#2613)

2026-05-01 13:23:26 +08:00

test_logging_level_from_config.py

fix(config): unify log_level from config.yaml across Gateway and debug entry points (#2601)

2026-04-30 22:27:14 +08:00

test_loop_detection_config.py

feat(loop-detection): make loop detection configurable with per-tool frequency overrides (#2711)

2026-05-07 16:15:15 +08:00

test_loop_detection_middleware.py

feat(loop-detection): make loop detection configurable with per-tool frequency overrides (#2711)

2026-05-07 16:15:15 +08:00

test_mcp_client_config.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_mcp_custom_interceptors.py

feat(mcp): support custom tool interceptors via extensions_config.json (#2451)

2026-04-25 09:18:13 +08:00

test_mcp_oauth.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_mcp_sync_wrapper.py

feat(harness): integration ACP agent tool (#1344)

2026-03-26 14:20:18 +08:00

test_memory_prompt_injection.py

fix: inject longTermBackground into memory prompt (#1734)

2026-04-03 11:21:58 +08:00

test_memory_queue_user_isolation.py

fix the lint error in backend

2026-04-26 15:09:25 +08:00

test_memory_queue.py

feat(persistence): per-user filesystem isolation, run-scoped APIs, and state/history simplification (#2153)

2026-04-26 11:13:01 +08:00

test_memory_router.py

feat(gateway): dual-mount legacy routers on /api and /api/v1 (Stage 1 PR5)

2026-06-28 19:49:05 +08:00

test_memory_storage_user_isolation.py

fix the lint error in backend

2026-04-26 15:09:25 +08:00

test_memory_storage.py

fix: Memory update system has cache corruption, data loss, and thread-safety bugs (#2251)

2026-04-17 12:00:31 +08:00

test_memory_thread_meta_isolation.py

feat(persistence):Unified persistence layer with event store, feedback, and rebase cleanup (#2134)

2026-04-26 11:09:55 +08:00

test_memory_updater_user_isolation.py

fix the lint error in backend

2026-04-26 15:09:25 +08:00

test_memory_updater.py

fix(memory): replace short-lived asyncio.run() with persistent event loop (#2627)

2026-04-30 17:59:57 +08:00

test_memory_upload_filtering.py

feat: flush memory before summarization (#2176)

2026-04-14 15:01:06 +08:00

test_migrate_paths_to_workspace.py

feat(scripts): PR6 T6.12 + T6.13 — migrate_paths_to_workspace.py + tests

2026-05-13 17:48:49 +08:00

test_migration_user_isolation.py

feat(agent): add custom-agent self-updates with user isolation (#2713)

2026-05-05 23:17:42 +08:00

test_mindie_provider.py

chore(adpator):Adapt MindIE engine model and improve testing and fixes (#2523)

2026-04-28 15:09:31 +08:00

test_model_config.py

feat(codex): support explicit OpenAI Responses API config (#1235)

2026-03-22 20:39:26 +08:00

test_model_factory.py

feat(persistence): add unified persistence layer with event store, token tracking, and feedback (#1930)

2026-04-26 11:05:47 +08:00

test_owner_isolation.py

feat(persistence):Unified persistence layer with event store, feedback, and rebase cleanup (#2134)

2026-04-26 11:09:55 +08:00

test_patched_deepseek.py

fix: resolve missing serialized kwargs in PatchedChatDeepSeek (#2025)

2026-04-09 16:07:16 +08:00

test_patched_minimax.py

fix: improve MiniMax code plan integration (#1169)

2026-03-20 17:18:59 +08:00

test_patched_openai.py

fix(LLM): fixing Gemini thinking + tool calls via OpenAI gateway (#1180) (#1205)

2026-03-26 15:07:05 +08:00

test_path_migration_pending_warning.py

feat(gateway/make): PR6 T6.14 — migrate-paths target + lifespan warning

2026-05-13 17:50:47 +08:00

test_paths_user_isolation.py

feat(agent): add custom-agent self-updates with user isolation (#2713)

2026-05-05 23:17:42 +08:00

test_paths_workspace.py

feat(paths): PR6 T6.9 + T6.10 — workspace-scoped Paths

2026-05-13 17:43:51 +08:00

test_persistence_scaffold.py

feat(persistence):Unified persistence layer with event store, feedback, and rebase cleanup (#2134)

2026-04-26 11:09:55 +08:00

test_postgres_smoke.py

test(persistence): postgres smoke tests for init_engine + ThreadMetaRepo

2026-05-10 22:50:10 +08:00

test_pr8_metadata_registration.py

test(persistence): PR8 T8.6 — verify all 3 PR8 tables auto-created

2026-05-14 14:14:14 +08:00

test_present_file_tool_core_logic.py

feat(persistence): per-user filesystem isolation, run-scoped APIs, and state/history simplification (#2153)

2026-04-26 11:13:01 +08:00

test_provisioner_kubeconfig.py

feat(provisioner): add optional PVC support for sandbox volumes (#2020)

2026-04-10 20:40:30 +08:00

test_provisioner_pvc_volumes.py

feat(provisioner): add optional PVC support for sandbox volumes (#2020)

2026-04-10 20:40:30 +08:00

test_readability.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_reflection_resolvers.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_register_creates_workspace.py

feat(auth): /initialize auto-creates default workspace + owner membership

2026-05-12 22:31:53 +08:00

test_remote_sandbox_backend.py

fix: Supplement list_running in RemoteSandboxBackend (#2716)

2026-05-05 18:53:10 +08:00

test_require_permission_workspace.py

test(authz): PR6 T6.6 — @require_permission workspace_id propagation tests

2026-05-13 17:33:02 +08:00

test_require_workspace_admin.py

feat(authz): require_workspace_admin dependency (Stage 1 PR4)

2026-06-28 19:07:55 +08:00

test_run_event_store_pagination.py

fix the lint error in backend

2026-04-26 15:09:25 +08:00

test_run_event_store.py

fix(events): serialize structured db event content (#2762)

2026-05-08 10:17:17 +08:00

test_run_feedback_workspace_filter.py

feat(persistence): PR6 T6.5 — Run/Feedback/RunEvent repos workspace_id

2026-05-13 17:29:03 +08:00

test_run_journal.py

Fix the issues when reviewing 2566 persistant part (#2604)

2026-04-28 11:44:40 +08:00

test_run_manager.py

feat: enhance chat history loading with new hooks and UI components (#2338)

2026-04-26 11:20:17 +08:00

test_run_repository.py

feat(persistence):Unified persistence layer with event store, feedback, and rebase cleanup (#2134)

2026-04-26 11:09:55 +08:00

test_run_worker_rollback.py

fix(runtime): make rollback restore checkpoint supersede newer checkpoints (#2582)

2026-05-02 11:25:45 +08:00

test_runs_api_endpoints.py

feat(gateway): dual-mount legacy routers on /api and /api/v1 (Stage 1 PR5)

2026-06-28 19:49:05 +08:00

test_runtime_paths.py

fix(harness): restore legacy skills path fallback (#2694) (#2696)

2026-05-03 23:40:59 +08:00

test_sandbox_audit_middleware.py

feat(sandbox): strengthen bash command auditing with compound splitting and expanded patterns (#1881)

2026-04-07 17:15:24 +08:00

test_sandbox_orphan_reconciliation_e2e.py

fix(sandbox): add startup reconciliation to prevent orphaned container leaks (#1976)

2026-04-09 17:21:23 +08:00

test_sandbox_orphan_reconciliation.py

fix(sandbox): add startup reconciliation to prevent orphaned container leaks (#1976)

2026-04-09 17:21:23 +08:00

test_sandbox_search_tools.py

fix(sandbox): add missing path masking in ls_tool output (#2317)

2026-04-18 08:46:59 +08:00

test_sandbox_tools_security.py

fix(sandbox): block host bash traversal escapes (#2560)

2026-04-28 12:18:41 +08:00

test_security_scanner.py

feat(trace):Add run_name to the trace info for system agents. (#2492)

2026-04-24 17:06:55 +08:00

test_serialization.py

feat(gateway): implement LangGraph Platform API in Gateway, replace langgraph-cli (#1403)

2026-03-30 16:02:23 +08:00

test_serialize_message_content.py

feat(harness): integration ACP agent tool (#1344)

2026-03-26 14:20:18 +08:00

test_serper_tools.py

feat(community): add Serper web search provider (#2630)

2026-05-02 16:22:35 +08:00

test_service_account_repo.py

fix(persistence): validate status in ServiceAccountRepository.create (Stage 1 PR1)

2026-06-28 11:13:14 +08:00

test_service_account_schema.py

test(persistence): PR8 T8.2 + T8.3 — ServiceAccount cascade / restrict

2026-05-14 14:07:16 +08:00

test_service_accounts_router.py

harden(gateway): constrain service-account role/identity_mode at API boundary (Stage 1 PR4)

2026-06-28 19:15:40 +08:00

test_setup_agent_tool.py

feat(agent): add custom-agent self-updates with user isolation (#2713)

2026-05-05 23:17:42 +08:00

test_setup_wizard.py

feat(dx): Setup Wizard + doctor command — closes #2030 (#2034)

2026-04-10 17:43:39 +08:00

test_skill_manage_tool.py

refactor(skills): Unified skill storage capability (#2613)

2026-05-01 13:23:26 +08:00

test_skills_archive_root.py

refactor: extract shared skill installer and upload manager to harness (#1202)

2026-03-25 16:28:33 +08:00

test_skills_bundled.py

fix(skills): validate bundled SKILL.md front-matter in CI (fixes #2443) (#2457)

2026-04-23 14:06:14 +08:00

test_skills_custom_router.py

feat(gateway): dual-mount legacy routers on /api and /api/v1 (Stage 1 PR5)

2026-06-28 19:49:05 +08:00

test_skills_installer.py

refactor(skills): Unified skill storage capability (#2613)

2026-05-01 13:23:26 +08:00

test_skills_loader.py

fix(harness): restore legacy skills path fallback (#2694) (#2696)

2026-05-03 23:40:59 +08:00

test_skills_parser.py

fix(skills): enforce allowed-tools metadata (#2626)

2026-05-07 08:34:43 +08:00

test_skills_validation.py

fix(skills): enforce allowed-tools metadata (#2626)

2026-05-07 08:34:43 +08:00

test_sse_format.py

feat(gateway): implement LangGraph Platform API in Gateway, replace langgraph-cli (#1403)

2026-03-30 16:02:23 +08:00

test_store_provider.py

feat(apps): 新增 DeerFlow 应用脚手架，并修复 store 的 database 回退

2026-06-27 22:02:44 +08:00

test_stream_bridge.py

Fix(#1702): stream resume run (#1858)

2026-04-06 14:51:10 +08:00

test_subagent_executor.py

fix(skills): enforce allowed-tools metadata (#2626)

2026-05-07 08:34:43 +08:00

test_subagent_limit_middleware.py

fix(middleware): sync raw tool call metadata (#2757)

2026-05-08 10:08:53 +08:00

test_subagent_prompt_security.py

feat(subagents): support per-subagent skill loading and custom subagent types (#2253)

2026-04-23 23:59:47 +08:00

test_subagent_skills_config.py

refactor: thread app_config through lead and subagent task path (#2666)

2026-05-02 06:37:49 +08:00

test_subagent_timeout_config.py

feat(subagents): allow model override per subagent in config.yaml (#2064)

2026-04-12 16:40:21 +08:00

test_suggestions_router.py

refactor: thread release config through lead path (#2612)

2026-04-28 14:53:18 +08:00

test_summarization_middleware.py

fix(middleware): sync raw tool call metadata (#2757)

2026-05-08 10:08:53 +08:00

test_task_tool_core_logic.py

fix(task): remove max_turns parameter from task tool interface (#2783)

2026-05-08 15:05:24 +08:00

test_thread_data_middleware_workspace.py

feat(agents): PR6 T6.11 — ThreadDataMiddleware switches to workspace layout

2026-05-13 17:45:06 +08:00

test_thread_data_middleware.py

Fix Windows backend test compatibility (#1384)

2026-03-26 17:39:16 +08:00

test_thread_meta_repo.py

feat(persistence/authz): PR6 T6.4 — check_access takes workspace_id

2026-05-13 17:23:38 +08:00

test_thread_meta_workspace_filter.py

feat(persistence): PR6 T5.11 — ORM workspace_id nullable=False

2026-05-13 18:06:53 +08:00

test_thread_run_messages_pagination.py

feat(gateway): dual-mount legacy routers on /api and /api/v1 (Stage 1 PR5)

2026-06-28 19:49:05 +08:00

test_threads_post_workspace.py

feat(gateway): dual-mount legacy routers on /api and /api/v1 (Stage 1 PR5)

2026-06-28 19:49:05 +08:00

test_threads_router.py

feat(gateway): dual-mount legacy routers on /api and /api/v1 (Stage 1 PR5)

2026-06-28 19:49:05 +08:00

test_title_generation.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

test_title_middleware_core_logic.py

refactor: thread app_config through lead and subagent task path (#2666)

2026-05-02 06:37:49 +08:00

test_todo_middleware.py

fix(todo-middleware): prevent premature agent exit with incomplete todos (#2135)

2026-04-14 11:11:26 +08:00

test_token_usage_middleware.py

feat: refine token usage display modes (#2329)

2026-05-04 09:56:16 +08:00

test_token_usage.py

feat(harness): integration ACP agent tool (#1344)

2026-03-26 14:20:18 +08:00

test_tokens.py

test(auth): polish token utility tests + docstring (Stage 1 PR1)

2026-06-28 11:05:20 +08:00

test_tool_args_schema_no_pydantic_warning.py

fix(tools): introduce Runtime type alias to eliminate Pydantic serialization warning (#2774)

2026-05-08 14:50:33 +08:00

test_tool_deduplication.py

fix: resolve tool duplication and skill parser YAML inconsistencies (#1803) (#2107)

2026-04-20 20:25:03 +08:00

test_tool_error_handling_middleware.py

fix(subagents): use model override for tools and middleware (#2641)

2026-05-01 22:21:10 +08:00

test_tool_output_truncation.py

fix: add output truncation to ls_tool to prevent context window overflow (#1896)

2026-04-06 15:09:57 +08:00

test_tool_search.py

fix: gate deferred MCP tool execution (#2513)

2026-04-24 22:45:41 +08:00

test_tracing_config.py

feat(tracing): add optional Langfuse support (#1717)

2026-04-02 13:06:10 +08:00

test_tracing_factory.py

feat(tracing): add optional Langfuse support (#1717)

2026-04-02 13:06:10 +08:00

test_update_agent_tool.py

feat(agent): add custom-agent self-updates with user isolation (#2713)

2026-05-05 23:17:42 +08:00

test_uploads_manager.py

[security] fix(upload): reject symlinked upload destinations (#2623)

2026-05-02 15:19:28 +08:00

test_uploads_middleware_core_logic.py

feat(persistence): per-user filesystem isolation, run-scoped APIs, and state/history simplification (#2153)

2026-04-26 11:13:01 +08:00

test_uploads_router.py

feat(gateway): dual-mount legacy routers on /api and /api/v1 (Stage 1 PR5)

2026-06-28 19:49:05 +08:00

test_user_context.py

fix the lint error in backend

2026-04-26 15:09:25 +08:00

test_utils_time.py

fix(gateway): return ISO 8601 timestamps from threads endpoints (#2599)

2026-05-02 15:16:16 +08:00

test_view_image_middleware.py

test: add unit tests for ViewImageMiddleware (#2256)

2026-04-15 23:54:30 +08:00

test_view_image_tool.py

fix(harness): constrain view_image to thread data paths (#2557)

2026-04-28 11:13:17 +08:00

test_vllm_provider.py

feat(models): add vLLM provider support (#1860)

2026-04-06 15:18:34 +08:00

test_wechat_channel.py

feat: add WeChat channel integration (#1869)

2026-04-10 20:49:28 +08:00

test_workspace_boundary_self.py

test(boundary): PR7 T7.3 — self-tests for the scanner

2026-05-14 13:52:36 +08:00

test_workspace_boundary.py

feat(tests): PR7 T7.2 — AST boundary scanner for langgraph.checkpoint

2026-05-14 13:50:24 +08:00

test_workspace_context.py

feat(persistence): PR6 T5.11 — ORM workspace_id nullable=False

2026-05-13 18:06:53 +08:00

test_workspace_isolation_boundary.py

feat(gateway): dual-mount legacy routers on /api and /api/v1 (Stage 1 PR5)

2026-06-28 19:49:05 +08:00

test_workspace_membership_repo.py

feat(persistence): WorkspaceMembershipRepository + 8 unit tests

2026-05-12 21:13:52 +08:00

test_workspace_partial_unique_postgres.py

test(workspace): partial unique on owner — Postgres twin test

2026-05-12 21:15:25 +08:00

test_workspace_repo.py

feat(persistence): PR6 T5.11 — ORM workspace_id nullable=False

2026-05-13 18:06:53 +08:00

test_workspace_slug.py

feat(auth): workspace slug helpers — auto_slug_from_email + next_available_slug

2026-05-12 22:27:42 +08:00