All pull requests

Pull requests

• fix(controller): enforce organization authorization check for agent scheduling (#1557)

  #1589·FinalSunFlower opened Sep 22, 2026·

  ·
  1

• docs: fix grammar in README

  #1584·MarkHe1222 opened Aug 17, 2026·

  ·

• Fix extension-less filenames never getting a .txt default

  #1576·Osamaali313 opened Jul 16, 2026·

  ·
  1

• fix(email): sanitize attachment filename via os.path.basename to prev…

  #1569·QiuYucheng2003 opened Jun 27, 2026·8 tasks·

  ·

• Replace eval() of model output in task handlers with literal parser (close #1567)

  #1568·Jiangrong-W opened Jun 19, 2026·5 of 8 tasks·

  ·
  1

• fix: guard against empty choices before accessing response.choices[0]

  #1552·qizwiz opened May 18, 2026·

  ·

• Security: replace eval() with ast.literal_eval() and add path traversal checks

  #1542·johnpippett opened Apr 28, 2026·

  ·
  3

• Ai/feature enhancement

  #1531·charmi-reddy opened Apr 17, 2026·

  ·

• security: validate URLs in WebScraperTool to prevent SSRF (fixes #1516)

  #1528·AshrafHosam opened Apr 14, 2026·1 of 3 tasks·

  ·

• Ai/workspace layout

  #1527·charmi-reddy opened Apr 12, 2026·

  ·

• Fix/agent workspace layout

  #1526·charmi-reddy opened Apr 11, 2026·

  ·

• Feature/UI action console

  #1524·charmi-reddy opened Apr 10, 2026·

  ·

• Improve UI readability and scrollbar styling.

  #1523·charmi-reddy opened Apr 9, 2026·

  ·

• Fix SSRF vulnerability in /verify_end_point by validating endpoint URLs (#1476)

  #1502·ACHYUTH1203 opened Mar 17, 2026·6 tasks done·

  ·
  1

  1

• Add MiniMax as a first-class LLM provider (M3 default)

  #1501·octo-patch opened Mar 17, 2026·

  ·

• Fix: Prevent arbitrary file write via path traversal in ResourceHelper

  #1500·ACHYUTH1203 opened Mar 16, 2026·

  ·
  1

• feat: Add UserFeedback tool for dynamic user interaction (#532)

  #1499·sudabg opened Mar 16, 2026·

  ·
  1

• fix(security): Replace eval() with json.loads() in queue_step_handler.py for safer LLM output processing

  #1493·liangzhang-keepmoving opened Feb 24, 2026·

  ·
  2

• fix(security): Replace eval() with json.loads() in output_handler.py for safer LLM output processing

  #1492·liangzhang-keepmoving opened Feb 24, 2026·

  ·

• fix(security): Replace eval() with ast.literal_eval() in knowledges.py for safer evaluation

  #1491·liangzhang-keepmoving opened Feb 24, 2026·

  ·

• fix: correct typo 'occured' to 'occurred'

  #1488·thecaptain789 opened Feb 7, 2026·

  ·

• add bocha search tool

  #1485·weijintaocode opened Feb 2, 2026·1 task·

  ·

• Applied config hot reload uznll

  #1483·SaiAbhijyan opened Jan 24, 2026·5 of 8 tasks·

  ·

• fix(auth): remove Depends from Request and fix parameter order

  #1482·Rojankarki5656 opened Jan 22, 2026·5 tasks done·

  ·
  1

• Feat(Tools): Add Telegram Toolkit with Send/Receive capabilities #1196

  #1480·shanthanu47 opened Jan 5, 2026·5 of 8 tasks·

  ·
  1

  14