倪程伟 3d8d266e3b fix(skill): enforce agent skill bindings in skill meta-tools at runtime (#265) ... The skill meta-tools (listAvailableSkills, readSkillFile, listSkillFiles, load_skill, runSkillScript) queried the full skill catalog without checking the calling agent's bindings, so an agent scoped to a subset of skills could still read, load, or execute any skill via direct tool calls. Resolve the agent's bound skill ids from the tool context and filter/deny accordingly: a null binding set means no restriction (backward compatible), a non-null set (including empty) restricts access to that set — matching the system-prompt catalog filtering. Closes #264		2026-06-07 17:30:41 +08:00
..
main	fix(skill): enforce agent skill bindings in skill meta-tools at runtime (#265)	2026-06-07 17:30:41 +08:00
test	fix(tool): emit absolute download URLs for streaming-generated files (#164)	2026-06-07 15:03:48 +08:00