Richard Tang
02edd44283
feat: First-Class Worker Agents with Event-Driven Dependency Execution
2026-04-02 13:00:52 -07:00
Richard Tang
60d094464a
feat: robust run id
2026-04-02 12:35:16 -07:00
Richard Tang
00c55d5fb2
refactor: remove unused edge code
2026-04-02 12:02:51 -07:00
Richard Tang
6a7778ebcd
refactor: remove orphaned client code
2026-04-02 12:00:59 -07:00
Richard Tang
b594165575
feat: fresh worker context per run
2026-04-02 11:43:14 -07:00
Richard Tang
318ecfd508
refactor: refactor shared memory to data buffer
2026-04-02 11:02:30 -07:00
Richard Tang
5b08edb384
Remove unused subagent escalation receiver
2026-04-02 10:32:33 -07:00
Richard Tang
332311b49b
refactor: graph executer cleanup
2026-04-02 10:20:46 -07:00
Richard Tang
0e5f571b09
refactor: removed unused ticket escalate and unused runner code
2026-04-01 20:10:41 -07:00
Richard Tang
bf06984625
refactor: remove deprecated cli command and orchastrator
2026-04-01 19:58:54 -07:00
Richard Tang
d4875892fc
chore: remove temp docs
2026-04-01 19:45:59 -07:00
Richard Tang
86f6aa2e8f
refactor: remove deprecated functions in runner and runtime
2026-04-01 19:43:29 -07:00
Richard Tang
537667758a
refactor: remove worker input and worker session
2026-04-01 19:16:38 -07:00
Richard Tang
6a77a9a7b2
refactor: rename worker functions for clarity
2026-04-01 19:04:44 -07:00
Richard Tang
1a37fb2f36
tests: add tests to memory functions
2026-04-01 17:41:25 -07:00
Richard Tang
2609ca7619
fix: memory call bugs
2026-04-01 17:38:53 -07:00
Richard Tang
b7a115259d
fix: outdated tests
2026-04-01 17:33:17 -07:00
Richard Tang
1765e1cb6c
feat: debugger and simplication
2026-04-01 17:28:54 -07:00
Richard Tang
b25de61363
feat(wip): new queen memory
2026-04-01 15:03:21 -07:00
Richard Tang
b3adbe745f
chore: ruff lint
2026-04-01 11:05:53 -07:00
Richard Tang
f3fefe0cbc
refactor: remove adapt md and its reference
2026-04-01 11:00:41 -07:00
Bryan @ Aden
c8a25a0287
Merge pull request #6658 from saurabhiiitm062/feat/cloudflare-dns-tool
...
feat: cloudflare DNS/Zone tool integrations
2026-04-01 10:11:44 -07:00
Hundao
5823513fde
fix: propagate contextvars to tool executor threads ( #6854 )
...
* fix: propagate contextvars to tool executor threads
run_in_executor does not propagate contextvars to worker threads,
causing execution context params like data_dir to be lost when MCP
tools are called. This made save_data, serve_file_to_user, and other
tools that depend on auto-injected data_dir fail with "Missing
required argument: data_dir".
Fix: use contextvars.copy_context().run() to carry the current context
into the thread pool worker.
* test: regression test for contextvars propagation in tool executor
Verifies that execution context (data_dir, etc.) set via
set_execution_context is visible inside tool executors that run
in thread pool workers via run_in_executor.
2026-04-01 19:38:41 +08:00
Hundao
97ce8dfc54
fix: skip executable permission check on Windows in skill validator ( #6894 )
...
Windows has no POSIX executable bits, so the stat-based check always
fails. Skip the check on Windows in the validator, and mark the two
related tests as POSIX-only. Unix CI still catches non-executable
scripts from Windows contributors.
Fixes #6893
2026-04-01 19:37:18 +08:00
Gaurav Rai
5e628c7606
test(core): increase tool_registry coverage from 47% to 69% ( #6818 )
...
* test(core): increase tool_registry coverage from 47% to 69%
Add 19 new tests covering previously untested paths in ToolRegistry:
- register_function: type hint inference (int/float/bool/dict/list),
required vs optional params, custom name/description, docstring fallback,
executor delegation
- discover_from_module: @tool decorator pickup, missing-file zero-count,
TOOLS dict without tool_executor uses mock executor
- has_tool / get_registered_names basic assertions
- Session context injection into MCP tool calls via set_session_context()
- Execution context override (contextvars) wins over session context
- _convert_mcp_tool_to_framework_tool: strips CONTEXT_PARAMS from both
properties and required lists
- load_mcp_config: list format, dict format, graceful invalid-JSON warning
- resync_mcp_servers_if_needed: returns False with no clients; returns
False when credentials and ADEN_API_KEY are unchanged
Coverage: 47 % → 69 % (+22 pp), all 31 tests pass, ruff clean.
Relates to #1972
* style: fix formatting in test_tool_registry.py
* fix: accept **kwargs in fake_load_registry to match updated signature
---------
Co-authored-by: hundao <alchemy_wimp@hotmail.com >
2026-04-01 19:10:04 +08:00
Harsh Gajjar
5b931982e3
feat(tools): add Freshdesk helpdesk integration ( #6099 )
...
* feat(freshdesk): add Freshdesk tool integration with credentials and API functionality
- Introduced Freshdesk tool for managing tickets, contacts, agents, and groups via Freshdesk API v2.
- Added Freshdesk credentials handling in `credentials/freshdesk.py`.
- Registered Freshdesk tools in `tools/freshdesk_tool/__init__.py` and `tools/freshdesk_tool/freshdesk_tool.py`.
- Updated `__init__.py` files to include Freshdesk in the exports.
- Created comprehensive README for Freshdesk tool usage and setup.
- Implemented unit tests for Freshdesk tool functionality.
All tests pass, and code adheres to ruff linting and formatting standards.
* refactor(freshdesk_tool): simplify _get_domain logic
- remove unnecessary try/except around credentials.get("freshdesk_domain")
- directly return stripped credential value if present
- fallback to FRESHDESK_DOMAIN env variable when missing
- eliminate unreachable code while preserving behavior
* refactor(freshdesk_tool): replace dynamic httpx dispatch in _request
- replace getattr(httpx, method) with explicit handling for get, post, and put
- raise ValueError for unsupported HTTP methods
- preserve existing status handling and response parsing logic
* docs(freshdesk): improve credential and error handling documentation
- add docstrings for error handling helpers in freshdesk_tool
- document purpose and usage of freshdesk credential specs
- improve clarity around error response structure and handling
2026-04-01 18:28:32 +08:00
Bhuvaneswari N
8174f330ae
docs: document 5 new natively supported LLM providers ( #6865 )
2026-04-01 18:18:15 +08:00
Rohit Singh
9774e53720
feat(runtime): add idempotency key support to trigger() ( #6710 )
2026-04-01 18:03:31 +08:00
Timothy @aden
cf3296984c
Merge pull request #6888 from aden-hive/fix/python-test
...
Release / Create Release (push) Waiting to run
fix(micro-fix): python test
v0.8.0
2026-03-31 19:02:23 -07:00
Timothy
eafbeb78b4
fix: python test
2026-03-31 18:55:24 -07:00
Timothy
5cb5083f8d
fix(micro-fix): queen skill allowlist
2026-03-31 18:52:45 -07:00
Bryan @ Aden
bf86daee92
Merge pull request #6319 from KartikPawade/fix/sap-tool-credential-store
...
fix: use CredentialStoreAdapter in sap_tool instead of raw os.getenv()
2026-03-31 18:30:21 -07:00
Timothy
43bbd0f31f
feat(micro-fix): skill cli parser
2026-03-31 18:13:01 -07:00
Timothy @aden
2cf962b538
Merge pull request #6782 from levxn/skills/cli-commands
...
feat(skills): implement hive skill CLI subcommands (CLI-1 through CLI-13)
2026-03-31 17:59:25 -07:00
Timothy
4298196700
Merge branch 'main' into feature/agent-skills
2026-03-31 17:53:57 -07:00
Timothy @aden
bc1f712e42
Merge pull request #6610 from levxn/skills/ds-ovrride-heuristics
...
feat(skills): DS-12 and DS-13 — config override application, batch auto-detection, and context preservation warning
2026-03-31 17:51:19 -07:00
Timothy @aden
cccbcc8ec3
Merge pull request #6529 from vakrahul/fix/mcp-structured-errors
...
feat: structured MCP error codes and failure diagnostics (closes #6352 )
2026-03-31 17:40:50 -07:00
Timothy @aden
0722f83f16
Merge pull request #6792 from fermano/feat/agent-selection-tool-resolution-n-framework-integration
...
Feat/agent selection tool resolution n framework integration
2026-03-31 17:38:39 -07:00
saurabhiiitm062
ebb6605a86
fix: address Cloudflare review comments (DDoS, pagination, validation, tests)
2026-03-31 22:23:51 +05:30
Hundao
72091d2783
fix(security): add SSRF protection to web_scrape tool ( #6879 )
...
Validate URLs against internal network ranges before making requests.
Block private IPs, loopback, link-local, and cloud metadata endpoints
(169.254.169.254). Intercept Playwright navigation to catch redirect-based
SSRF bypasses.
Fixes #1157
Co-authored-by: Harshit <Harshitk-cp@users.noreply.github.com >
2026-03-31 14:04:47 +08:00
Kartik
3bb69a5784
fix: add env fallback and type hints for SAP tool credentials
...
Made-with: Cursor
2026-03-31 11:15:41 +05:30
Kartik
63fb089062
chore: format sap_tool.py
...
Made-with: Cursor
2026-03-31 10:21:56 +05:30
Hundao
d5ba985e29
docs: fix agent.json examples to match current schema ( #6878 )
...
Replace outdated node_id/edge_id with id, wrap nodes/edges under
graph key, add goal section with success_criteria. Matches what
load_agent_export() and NodeSpec actually expect.
Fixes #897
Co-authored-by: Jose37456 <Jose37456@users.noreply.github.com >
2026-03-31 12:41:59 +08:00
Bryan @ Aden
6ee510d2f6
Merge pull request #6855 from Ttian18/feat/tina/docs-mcp-unix-sse-transport
...
docs: add Unix socket and SSE transport to MCP Integration Guide (#6739 )
2026-03-30 18:46:01 -07:00
Bryan @ Aden
45b350e7c8
Merge pull request #6857 from Ttian18/feat/tina/job-hunter-pdf-resume
...
feat(job-hunter): support PDF resume input via file path (#6740 )
2026-03-30 18:45:36 -07:00
Bryan @ Aden
7e690de12f
Merge pull request #6844 from sundaram2021/fix/quickstart-credentials-in-windows
...
micro-fix: shell config handling and add antigravity option
2026-03-30 17:20:36 -07:00
Hundao
ae85d2bf59
fix(security): prevent path traversal in session_store ( #6876 )
...
Validate that resolved session path stays within the sessions directory
using Path.is_relative_to(). Prevents session_id values like
"../../something" from escaping the sandbox.
Also guard the caller in _write_run_event where get_session_path is
called outside the existing OSError try/except block.
Fixes #1000
Co-authored-by: Sidhartha kumar <Alearner12@users.noreply.github.com >
2026-03-30 23:53:23 +08:00
Juttiga Bheemeswar
e9fd0158b9
fix(csv_sql): prevent SQL injection via DuckDB parameter binding ( #1408 )
...
* fix(csv_sql): prevent SQL injection via DuckDB parameter binding
* test(csv_sql): add regression test for apostrophe path
* Refactor CSV query function for security and clarity
Removed detailed docstring arguments and return information for the CSV query function. Improved security checks for SQL queries.
* fix/1256-csv-sql-safe-path
Added security regression tests to reject non-SELECT queries and multi-statement queries.
* docs: restore csv_sql docstring (Args, Returns, Examples)
* fix: use word-boundary regex for SQL keyword detection
Substring matching caused false positives on column names like
created_at, updated_at, deleted_at. Switch to \b word-boundary regex.
Also add tests for comment rejection, CTE queries, and keyword-in-column-name.
---------
Co-authored-by: Juttiga Bheem <BBemail@gmail.com >
Co-authored-by: hundao <alchemy_wimp@hotmail.com >
2026-03-30 23:26:07 +08:00
Zhang
9a68a5d7ee
fix(job-hunter): align intake node client_facing and input_keys with agent.json
2026-03-29 11:33:57 -07:00
Zhang
33edf4a207
feat(job-hunter): support PDF resume input via file path ( #6740 )
2026-03-29 11:26:35 -07:00