倪程伟 3d8d266e3b fix(skill): enforce agent skill bindings in skill meta-tools at runtime (#265) ... The skill meta-tools (listAvailableSkills, readSkillFile, listSkillFiles, load_skill, runSkillScript) queried the full skill catalog without checking the calling agent's bindings, so an agent scoped to a subset of skills could still read, load, or execute any skill via direct tool calls. Resolve the agent's bound skill ids from the tool context and filter/deny accordingly: a null binding set means no restriction (backward compatible), a non-null set (including empty) restricts access to that set — matching the system-prompt catalog filtering. Closes #264		2026-06-07 17:30:41 +08:00
..
src	fix(skill): enforce agent skill bindings in skill meta-tools at runtime (#265)	2026-06-07 17:30:41 +08:00
Dockerfile	fix(wiki): surface scan errors and fix Chinese path handling in Docker (#260)	2026-06-07 16:18:49 +08:00
pom.xml	fix(build): repackage server as executable jar	2026-05-18 10:21:42 +08:00
settings.xml	build(maven): declare US + CN repositories in pom.xml, drop opaque mirror	2026-04-25 09:56:17 +08:00