mirror of
https://github.com/Shubhamsaboo/awesome-llm-apps.git
synced 2026-09-21 05:10:55 +08:00
thejesh23
8d619a82f4
- multi_agent_trust_layer: DelegationScope.narrow() intersected allowed_actions
sets, and allows_action() treated an EMPTY set as 'all allowed'. So a
sub-delegation whose scope didn't overlap the parent's collapsed to an empty
set and thus permitted EVERYTHING (privilege escalation). Use None as the
'all allowed' sentinel; an empty intersection now permits nothing. Verified:
parent{web_search,summarize}.narrow(child{read_document}) -> allows delete_file
False (was True).
- ai_domain_deep_research_agent: 'Compile Final Report' was nested inside the
'Start Research' button block, so clicking it reran the script with Start
Research False and the button was never rendered — the report was unreachable.
Hoist it out, gate on st.session_state.question_answers.
- ai_home_renovation_agent/tools.py + multimodal_uiux_feedback_agent_team/tools.py:
the asset version counter was clobbered by save_artifact()'s return value (ADK's
per-filename revision), so repeated generations for one asset collided on the
same filename and overwrote each other. Keep the version from
get_next_version_number; don't rebind it.
All four files compile-check clean.