Adam Moussa
040ce853c1
Merge branch 'dev' into bot/upstream-ledger-sync
2026-08-14 11:33:04 -04:00
dependabot[bot]
da8bdada7f
chore(deps): bump cryptography from 49.0.0 to 50.0.0 ( #253 )
...
Bumps [cryptography](https://github.com/pyca/cryptography ) from 49.0.0 to 50.0.0.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/49.0.0...50.0.0 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 50.0.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-14 11:32:47 -04:00
amoussa1229
a518f8c2b2
chore: sync upstream triage ledger
2026-08-10 12:33:11 +00:00
dependabot[bot]
4ee8c91f40
chore(deps): bump aiohttp from 3.14.1 to 3.14.3 ( #252 )
...
CI / Lint (push) Has been cancelled
CI / Format check (push) Has been cancelled
CI / Typecheck (push) Has been cancelled
CI / Unit tests (push) Has been cancelled
CI / Playwright E2E (push) Has been cancelled
CI / Docker build smoke (push) Has been cancelled
CI / Triage ledger up to date (push) Has been cancelled
CI / ui bun.lock in sync (push) Has been cancelled
---
updated-dependencies:
- dependency-name: aiohttp
dependency-version: 3.14.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 18:31:46 -04:00
Adam Moussa
9db86a93ab
Merge pull request #248 from Sea-Haven-Industries/feature/issue-239-full-review-verdicts
...
CI / Lint (push) Has been cancelled
CI / Format check (push) Has been cancelled
CI / Typecheck (push) Has been cancelled
CI / Unit tests (push) Has been cancelled
CI / Playwright E2E (push) Has been cancelled
CI / Docker build smoke (push) Has been cancelled
CI / Triage ledger up to date (push) Has been cancelled
CI / ui bun.lock in sync (push) Has been cancelled
feat: full review verdicts, checks, and @openswe review
2026-08-01 20:49:38 -04:00
fe03b05ad4
test(e2e): isolate reviewer verdict coverage
2026-08-01 20:21:16 -04:00
99b376bbe2
chore(reviewer): add epic verification coverage
2026-08-01 20:21:16 -04:00
5f6d756e0d
test(github): harden review command routing
2026-08-01 20:21:16 -04:00
882f776809
feat(github): add direct review comment command
2026-08-01 20:21:16 -04:00
259329a971
fix(reviewer): preserve explicit verdict authority
2026-08-01 20:21:16 -04:00
98cde35812
refactor(reviewer): align verdict prompts with authorization
2026-08-01 20:21:16 -04:00
4fea5f21c5
fix(reviewer): enforce blocking review checks
2026-08-01 20:21:16 -04:00
39c768aa3f
feat(reviewer): add verdict-aware review checks
2026-08-01 20:21:16 -04:00
9a2535a9ec
fix(reviewer): clarify recorded verdict outcomes
2026-08-01 20:21:16 -04:00
404b854544
fix(reviewer): handle verdict publication edge cases
2026-08-01 20:21:16 -04:00
b2b5957233
fix(reviewer): harden verdict enforcement
2026-08-01 20:21:16 -04:00
eb91104db8
test(reviewer): cover team-enabled fork authorization
2026-08-01 20:21:16 -04:00
1b8f8d480d
feat(reviewer): add dispatch verdict authorization
2026-08-01 20:21:16 -04:00
Adam Moussa
54497290dc
Merge pull request #249 from Sea-Haven-Industries/dependabot/uv/setuptools-83.0.0
...
CI / Lint (push) Waiting to run
CI / Format check (push) Waiting to run
CI / Typecheck (push) Waiting to run
CI / Unit tests (push) Waiting to run
CI / Playwright E2E (push) Waiting to run
CI / Docker build smoke (push) Waiting to run
CI / Triage ledger up to date (push) Waiting to run
CI / ui bun.lock in sync (push) Waiting to run
chore(deps): bump setuptools from 82.0.1 to 83.0.0
2026-08-01 20:19:45 -04:00
Adam Moussa
ef81ec18e7
Merge branch 'dev' into dependabot/uv/setuptools-83.0.0
2026-08-01 20:16:11 -04:00
Adam Moussa
5e2591a901
Merge pull request #250 from Sea-Haven-Industries/dependabot/uv/pyasn1-0.6.4
...
chore(deps): bump pyasn1 from 0.6.3 to 0.6.4
2026-08-01 20:15:58 -04:00
dependabot[bot]
7cfc987cd6
chore(deps): bump pyasn1 from 0.6.3 to 0.6.4
...
Bumps [pyasn1](https://github.com/pyasn1/pyasn1 ) from 0.6.3 to 0.6.4.
- [Release notes](https://github.com/pyasn1/pyasn1/releases )
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst )
- [Commits](https://github.com/pyasn1/pyasn1/compare/v0.6.3...v0.6.4 )
---
updated-dependencies:
- dependency-name: pyasn1
dependency-version: 0.6.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-08-01 13:48:57 +00:00
dependabot[bot]
d29dcc3607
chore(deps): bump setuptools from 82.0.1 to 83.0.0
...
Bumps [setuptools](https://github.com/pypa/setuptools ) from 82.0.1 to 83.0.0.
- [Release notes](https://github.com/pypa/setuptools/releases )
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst )
- [Commits](https://github.com/pypa/setuptools/compare/v82.0.1...v83.0.0 )
---
updated-dependencies:
- dependency-name: setuptools
dependency-version: 83.0.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-08-01 13:48:48 +00:00
Adam Moussa
7a1da5d0af
Merge pull request #247 from Sea-Haven-Industries/fix/issue-240-dashboard-verdict
...
CI / Lint (push) Waiting to run
CI / Format check (push) Waiting to run
CI / Typecheck (push) Waiting to run
CI / Unit tests (push) Waiting to run
CI / Playwright E2E (push) Waiting to run
CI / Docker build smoke (push) Waiting to run
CI / Triage ledger up to date (push) Waiting to run
CI / ui bun.lock in sync (push) Waiting to run
fix(dashboard): authorize review verdicts from UI trigger
2026-07-31 19:45:37 -04:00
056688e822
fix(dashboard): authorize review verdicts
2026-07-31 12:34:56 -04:00
Adam Moussa
674f9ccc4e
Merge pull request #238 from Sea-Haven-Industries/dependabot/uv/minor-and-patch-a12baf45a1
...
CI / Lint (push) Waiting to run
CI / Format check (push) Waiting to run
CI / Typecheck (push) Waiting to run
CI / Unit tests (push) Waiting to run
CI / Playwright E2E (push) Waiting to run
CI / Docker build smoke (push) Waiting to run
CI / Triage ledger up to date (push) Waiting to run
CI / ui bun.lock in sync (push) Waiting to run
chore(deps): bump the minor-and-patch group across 1 directory with 10 updates
2026-07-31 10:21:25 -04:00
ba3f33d91f
chore: exclude markdown files from ruff format
2026-07-31 10:18:09 -04:00
Adam Moussa
02d2740bfd
Merge branch 'dev' into dependabot/uv/minor-and-patch-a12baf45a1
2026-07-31 10:09:30 -04:00
Adam Moussa
6d68634574
Merge pull request #236 from Sea-Haven-Industries/dependabot/npm_and_yarn/ui/jsdom-30.0.1
...
chore(deps-dev): bump jsdom from 29.1.1 to 30.0.0 in /ui
2026-07-31 09:44:09 -04:00
3eb2ae09c5
chore: regenerate bun.lock with updated dependencies
2026-07-31 09:33:43 -04:00
dependabot[bot]
9f201b6695
chore(deps-dev): bump jsdom from 29.1.1 to 30.0.0 in /ui
...
Bumps [jsdom](https://github.com/jsdom/jsdom ) from 29.1.1 to 30.0.0.
- [Release notes](https://github.com/jsdom/jsdom/releases )
- [Commits](https://github.com/jsdom/jsdom/compare/v29.1.1...v30.0.0 )
---
updated-dependencies:
- dependency-name: jsdom
dependency-version: 30.0.1
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-31 09:33:43 -04:00
aeb95a447a
chore: regenerate bun.lock with updated dependencies
2026-07-31 09:31:26 -04:00
dependabot[bot]
e80f3b1f81
chore(deps): bump the minor-and-patch group across 1 directory with 10 updates
...
Bumps the minor-and-patch group with 10 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [fastapi](https://github.com/fastapi/fastapi ) | `0.139.2` | `0.140.7` |
| [langchain-anthropic](https://github.com/langchain-ai/langchain ) | `1.5.0` | `1.5.2` |
| [langchain-openai](https://github.com/langchain-ai/langchain ) | `1.4.0` | `1.4.1` |
| [langchain-fireworks](https://github.com/langchain-ai/langchain ) | `1.5.0` | `1.5.2` |
| [fireworks-ai](https://github.com/fw-ai-external/python-sdk ) | `1.2.3` | `1.2.4` |
| [langchain-e2b](https://github.com/e2b-dev/langchain-e2b ) | `0.0.5` | `0.0.6` |
| exa-py | `2.16.0` | `2.16.2` |
| [langchain-google-genai](https://github.com/langchain-ai/langchain-google ) | `4.3.1` | `4.3.2` |
| [langchain-mcp-adapters](https://github.com/langchain-ai/langchain-mcp-adapters ) | `0.3.0` | `0.3.1` |
| [ruff](https://github.com/astral-sh/ruff ) | `0.15.22` | `0.16.0` |
Updates `fastapi` from 0.139.2 to 0.140.7
- [Release notes](https://github.com/fastapi/fastapi/releases )
- [Commits](https://github.com/fastapi/fastapi/compare/0.139.2...0.140.7 )
Updates `langchain-anthropic` from 1.5.0 to 1.5.2
- [Release notes](https://github.com/langchain-ai/langchain/releases )
- [Commits](https://github.com/langchain-ai/langchain/compare/langchain-anthropic==1.5.0...langchain-anthropic==1.5.2 )
Updates `langchain-openai` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/langchain-ai/langchain/releases )
- [Commits](https://github.com/langchain-ai/langchain/compare/langchain-openai==1.4.0...langchain-openai==1.4.1 )
Updates `langchain-fireworks` from 1.5.0 to 1.5.2
- [Release notes](https://github.com/langchain-ai/langchain/releases )
- [Commits](https://github.com/langchain-ai/langchain/compare/langchain-fireworks==1.5.0...langchain-fireworks==1.5.2 )
Updates `fireworks-ai` from 1.2.3 to 1.2.4
- [Release notes](https://github.com/fw-ai-external/python-sdk/releases )
- [Changelog](https://github.com/fw-ai-external/python-sdk/blob/main/CHANGELOG.md )
- [Commits](https://github.com/fw-ai-external/python-sdk/compare/v1.2.3...v1.2.4 )
Updates `langchain-e2b` from 0.0.5 to 0.0.6
- [Release notes](https://github.com/e2b-dev/langchain-e2b/releases )
- [Changelog](https://github.com/e2b-dev/langchain-e2b/blob/main/CHANGELOG.md )
- [Commits](https://github.com/e2b-dev/langchain-e2b/compare/v0.0.5...v0.0.6 )
Updates `exa-py` from 2.16.0 to 2.16.2
Updates `langchain-google-genai` from 4.3.1 to 4.3.2
- [Release notes](https://github.com/langchain-ai/langchain-google/releases )
- [Commits](https://github.com/langchain-ai/langchain-google/compare/libs/genai/v4.3.1...libs/genai/v4.3.2 )
Updates `langchain-mcp-adapters` from 0.3.0 to 0.3.1
- [Release notes](https://github.com/langchain-ai/langchain-mcp-adapters/releases )
- [Commits](https://github.com/langchain-ai/langchain-mcp-adapters/compare/langchain-mcp-adapters==0.3.0...langchain-mcp-adapters==0.3.1 )
Updates `ruff` from 0.15.22 to 0.16.0
- [Release notes](https://github.com/astral-sh/ruff/releases )
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md )
- [Commits](https://github.com/astral-sh/ruff/compare/0.15.22...0.16.0 )
---
updated-dependencies:
- dependency-name: fastapi
dependency-version: 0.140.7
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: langchain-anthropic
dependency-version: 1.5.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: langchain-openai
dependency-version: 1.4.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: langchain-fireworks
dependency-version: 1.5.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: fireworks-ai
dependency-version: 1.2.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: langchain-e2b
dependency-version: 0.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: exa-py
dependency-version: 2.16.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: langchain-google-genai
dependency-version: 4.3.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: langchain-mcp-adapters
dependency-version: 0.3.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: ruff
dependency-version: 0.16.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-30 19:05:36 +00:00
dependabot[bot]
4b676022e7
chore(deps-dev): bump jsdom from 29.1.1 to 30.0.0 in /ui
...
Bumps [jsdom](https://github.com/jsdom/jsdom ) from 29.1.1 to 30.0.0.
- [Release notes](https://github.com/jsdom/jsdom/releases )
- [Commits](https://github.com/jsdom/jsdom/compare/v29.1.1...v30.0.0 )
---
updated-dependencies:
- dependency-name: jsdom
dependency-version: 30.0.1
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-30 18:50:11 +00:00
Adam Moussa
2655bf95fc
Merge pull request #235 from Sea-Haven-Industries/dependabot/npm_and_yarn/ui/pierre/trees-1.0.0-beta.6
...
CI / Lint (push) Waiting to run
CI / Format check (push) Waiting to run
CI / Typecheck (push) Waiting to run
CI / Unit tests (push) Waiting to run
CI / Playwright E2E (push) Waiting to run
CI / Docker build smoke (push) Waiting to run
CI / Triage ledger up to date (push) Waiting to run
CI / ui bun.lock in sync (push) Waiting to run
chore(deps): bump @pierre/trees from 1.0.0-beta.5 to 1.0.0-beta.6 in /ui
2026-07-30 14:46:17 -04:00
8aeed0a72d
fix: regenerate bun.lock with updated dependencies
2026-07-30 14:41:30 -04:00
dependabot[bot]
0d518a1399
chore(deps): bump @pierre/trees from 1.0.0-beta.5 to 1.0.0-beta.6 in /ui
...
Bumps @pierre/trees from 1.0.0-beta.5 to 1.0.0-beta.6.
---
updated-dependencies:
- dependency-name: "@pierre/trees"
dependency-version: 1.0.0-beta.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-30 18:37:04 +00:00
Adam Moussa
5cfc1ed64f
Merge pull request #233 from Sea-Haven-Industries/dependabot/npm_and_yarn/tests/e2e/minor-and-patch-edf4b8f5b6
...
chore(deps-dev): bump @playwright/test from 1.61.1 to 1.62.1 in /tests/e2e in the minor-and-patch group across 1 directory
2026-07-30 14:32:46 -04:00
dependabot[bot]
aeec4f09dc
chore(deps-dev): bump @playwright/test
...
Bumps the minor-and-patch group with 1 update in the /tests/e2e directory: [@playwright/test](https://github.com/microsoft/playwright ).
Updates `@playwright/test` from 1.61.1 to 1.62.1
- [Release notes](https://github.com/microsoft/playwright/releases )
- [Commits](https://github.com/microsoft/playwright/compare/v1.61.1...v1.62.1 )
---
updated-dependencies:
- dependency-name: "@playwright/test"
dependency-version: 1.62.1
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-30 18:10:02 +00:00
Adam Moussa
1b3f735cc4
Merge pull request #232 from Sea-Haven-Industries/dependabot/github_actions/minor-and-patch-224896af34
...
chore(deps): bump the minor-and-patch group with 2 updates
2026-07-30 14:08:40 -04:00
dependabot[bot]
06a607e13c
chore(deps): bump the minor-and-patch group with 2 updates
...
Bumps the minor-and-patch group with 2 updates: [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422
2026-07-30 16:44:29 +00:00
Adam Moussa
ef7b666340
Merge pull request #231 from Sea-Haven-Industries/ci/weekly-upstream-sync
...
CI / Lint (push) Has been cancelled
CI / Format check (push) Has been cancelled
CI / Typecheck (push) Has been cancelled
CI / Unit tests (push) Has been cancelled
CI / Playwright E2E (push) Has been cancelled
CI / Docker build smoke (push) Has been cancelled
CI / Triage ledger up to date (push) Has been cancelled
CI / ui bun.lock in sync (push) Has been cancelled
ci: run ledger sync weekly on Mondays instead of daily
2026-07-29 11:58:30 -04:00
d6bc90f625
ci(upstream-sync): run ledger sync weekly on Mondays instead of daily
2026-07-29 11:51:25 -04:00
Adam Moussa
c18b676d6b
Merge pull request #230 from Sea-Haven-Industries/fix/audit-dep-review
...
CI / Lint (push) Waiting to run
CI / Format check (push) Waiting to run
CI / Typecheck (push) Waiting to run
CI / Unit tests (push) Waiting to run
CI / Playwright E2E (push) Waiting to run
CI / Docker build smoke (push) Waiting to run
CI / Triage ledger up to date (push) Waiting to run
CI / ui bun.lock in sync (push) Waiting to run
ci: replace bespoke dependency-review with the org callable
2026-07-28 18:40:49 -04:00
Adam Moussa
6efa00b67d
ci: replace bespoke dependency-review with the org callable
2026-07-28 18:37:34 -04:00
Adam Moussa
9af427f014
Merge pull request #229 from Sea-Haven-Industries/ci/pin-reusables-v1.0.2
...
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 18:11:48 -04:00
Adam Moussa
0267159c49
style(ci): normalize workflow block spacing
2026-07-28 18:07:05 -04:00
Adam Moussa
d82f5257af
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 17:57:08 -04:00
Adam Moussa
42e8af84ed
ci: pin reusable-workflow refs to commit SHA ( #228 )
...
CI / Lint (push) Has been cancelled
CI / Format check (push) Has been cancelled
CI / Typecheck (push) Has been cancelled
CI / Unit tests (push) Has been cancelled
CI / Playwright E2E (push) Has been cancelled
CI / Docker build smoke (push) Has been cancelled
CI / Triage ledger up to date (push) Has been cancelled
CI / ui bun.lock in sync (push) Has been cancelled
Pins the labeler caller to the current .github main tip per the SHA-pin
convention (engineering-handbook PR #18 ). Dependabot github-actions
updates advance the pin weekly.
2026-07-27 15:45:07 -04:00
Adam Moussa
d48cb12e08
feat(open-swe): port upstream clean batch ( #1788 , #1786 , #1764 , #1782 , #1791 , #1799 ) + guard hardening ( #226 )
...
CI / Lint (push) Has been cancelled
CI / Format check (push) Has been cancelled
CI / Typecheck (push) Has been cancelled
CI / Unit tests (push) Has been cancelled
CI / Playwright E2E (push) Has been cancelled
CI / Docker build smoke (push) Has been cancelled
CI / Triage ledger up to date (push) Has been cancelled
CI / ui bun.lock in sync (push) Has been cancelled
* Fix: Fix Insecure Direct Object Reference in slack_start_new_thread.py (#1788 )
Co-authored-by: corridor-security[bot] <203152403+corridor-security[bot]@users.noreply.github.com>
(cherry picked from commit 32e81f2979a7baf11fe387df59f7d13a31889c74)
* Fix PR creation guard shell bypasses (#1786 )
Co-authored-by: langsmith-fleet[bot] <langsmith-fleet[bot]@users.noreply.github.com>
(cherry picked from commit 75fb8b487852003916c4984504a13ee7226b2ceb)
* fix: add exc_info to swallowed exception in push re-review webhook (#1764 )
(cherry picked from commit ab85b372b4f37b7feb849054553daed10852a42c)
* chore: clarify shared response image guidance (#1782 )
Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com>
Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>
(cherry picked from commit 2e8ff4b72f1148bb36c0c1181063a3abd78b15d0)
* fix: match embedded review description background (#1791 )
Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>
(cherry picked from commit 4ea2441ada1229bc414b02950d821786be2f7301)
* fix: show current shared thread in sidebar (#1799 )
* fix: show current shared thread in sidebar
Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>
* fix: preserve resolved active sidebar threads
Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>
---------
Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com>
Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>
Co-authored-by: Johannes du Plessis <51395795+johannes117@users.noreply.github.com>
(cherry picked from commit a77c4e475643b4a55bb2f0c93c0aa2669014fbac)
* chore: switch deferred items to landed in upstream-sync triage documentation and jsonl entries (fork PR #226 ).
Signed-off-by: Adam Moussa <adam@seahavenind.com>
* harden PR guards + sidebar after security review
- Mirror upstream #1786 's nested-shell / executable-normalization hardening
into the fork-only pr_verdict_guard.py (verdict-gating is a real fork
control), keeping it in parity with pr_creation_guard.py.
- Close the glued short-flag bypass (bash -c'...') in BOTH guards: a shell's
-c argument can be concatenated into the same argv token, which the
space-separated -c detection missed. Diverges pr_creation_guard.py from
upstream #1786 by design; to be upstreamed.
- Gate the new #1799 sidebar active-thread refresh on ownership so a non-owner
viewing a shared thread reads last-known state without persisting a metadata
write (mirrors the is_owner gate on the single-thread read path).
- Fix an F821 in the #1799 cherry-pick (Mapping import / concrete dict type).
Guards remain intentionally fail-open per the honest-agent threat model;
docstrings narrowed to name the residual exotic-shell / stdin-fed vectors.
---------
Signed-off-by: Adam Moussa <adam@seahavenind.com>
Co-authored-by: corridor-security[bot] <203152403+corridor-security[bot]@users.noreply.github.com>
Co-authored-by: John Kennedy <65985482+jkennedyvz@users.noreply.github.com>
Co-authored-by: langsmith-fleet[bot] <langsmith-fleet[bot]@users.noreply.github.com>
Co-authored-by: Suraj Bayas <surajyou24@gmail.com>
Co-authored-by: Ramon Nogueira <ramon.nogueira@langchain.dev>
Co-authored-by: Ramon Nogueira <270434257+ramon-langchain@users.noreply.github.com>
Co-authored-by: open-swe[bot] <open-swe@users.noreply.github.com>
Co-authored-by: Johannes du Plessis <johannes@langchain.dev>
Co-authored-by: Johannes du Plessis <51395795+johannes117@users.noreply.github.com>
2026-07-24 18:49:53 -04:00
