Sbaaoui Idriss
349ecfb5cc
fix(api): align Go proxy contract parity ( #19723 )
2026-09-17 11:01:02 +08:00
coderdailyone
af02d0a6e8
fix(api): stop trusting X-Forwarded-For from every peer in the agent webhook IP whitelist ( #19550 )
2026-09-16 15:22:10 +08:00
MarMar Labs
a9a227f4c2
fix(dao): allowlist orderby columns on the search, chat, file and dataset lists ( #19601 )
...
Fix SQL injection in 4 Go list DAOs — orderby was concatenated into ORDER BY.
2026-09-16 15:02:13 +08:00
Lynn
079284c1fa
Fix: allow use - in instance_name ( #19709 )
2026-09-16 14:12:51 +08:00
xugangqiang
e83c1963de
feat(ingestion): stop persisting business data in pipeline operation-log DSL ( #19631 )
2026-09-16 14:07:21 +08:00
Lynn
780081177d
Fix: restrict instance name to digits, underscores, and letters ( #19680 )
2026-09-16 09:34:51 +08:00
Jin Hai
b12e24f969
Go: invite member by send mail ( #19675 )
...
refer to #15301
---------
Signed-off-by: Jin Hai <haijin.chn@gmail.com >
2026-09-15 18:50:29 +08:00
buua436
839a4ec815
fix: filter compilation status by kind ( #19666 )
2026-09-15 16:25:11 +08:00
Wang Qi
fe501ebb04
Refactor: move chat message/reference to dedicated tables ( #19577 )
2026-09-15 15:52:12 +08:00
jay77721
3a04af1dcd
refactor(ingestion): migrate general parser and chunker contract ( #19611 )
2026-09-15 15:51:29 +08:00
buua436
8c9a0f65a1
fix: support keywords in navigation APIs ( #19645 )
2026-09-15 15:01:16 +08:00
buua436
1cb339ced7
fix: record generated wiki page versions ( #19636 )
2026-09-15 14:58:28 +08:00
jay77721
aa4061471a
feat(ingestion): track a run's pipeline log from queue to terminal ( #19494 )
2026-09-15 14:26:35 +08:00
huyua9
10e211494b
fix(api): reject empty provider instance deletes ( #18919 )
...
Fix batch-delete provider requests — now require at least one instance and reject empty names (previously empty list returned success without deleting)
2026-09-15 14:08:40 +08:00
jay77721
d45c8aa148
refactor(ingestion): decouple document parsing state from document.run in favor of ingestion_task ( #19533 )
2026-09-14 17:44:55 +08:00
qinling0210
aa78e8d224
Remove internal cli 'insert chunks from file' and 'insert metadata from file' ( #19591 )
2026-09-14 14:23:04 +08:00
coderdailyone and coderdailyone
7371255eda
fix(api): authorize the dataset document download route by tenant in the Go API ( #19543 )
...
Fix #19542 — Go document download now checks caller access (datasetService.Accessible); previously any logged-in user could download any tenant's document. Returns same "not found" envelope to avoid leaking existence.
Co-authored-by: coderdailyone <codecookie@proton.me >
2026-09-14 10:30:13 +08:00
euvre
b19a10fb70
fix(wiki): version history always empty on Go API due to page-slug key mismatch ( #19305 )
2026-09-13 15:50:37 +08:00
Yingfeng
1f5d33333a
Add claim/evidence to tree/pageindex compilation pipeline ( #19267 )
2026-09-11 22:37:33 +08:00
buua436
6051b2150f
refa: remove Go artifact deletion APIs ( #19519 )
2026-09-11 16:08:00 +08:00
taek105
4ad809634f
fix(document): validate immutable fields on update ( #19444 )
...
Fix #16831 — Go document endpoints now reject changes to ingestion-managed fields (progress, chunk_num, token_num, etc.), including zero-valued. PUT now persists name only, not full record.
2026-09-11 12:39:19 +08:00
xu jiaming
3dab5db315
fix(mcp): send rerank_candidates_count so retrieval paging works past 64 results ( #19018 )
...
Fix #19017 — MCP retrieval now sends rerank_candidates_count = max(64, page * page_size), fixing paging past 64 results.
2026-09-10 20:12:43 +08:00
buua436
e9a6397ab8
fix: support keyword search for dataset structure graphs ( #19473 )
2026-09-10 17:29:06 +08:00
euvre
7090ca834b
fix(go): stop masking document preview failures as "document not found" and add tenant access check ( #19348 )
2026-09-10 16:56:32 +08:00
Sbaaoui Idriss
11f4d11920
fix(agent): preserve Starter values beside query inputs ( #19420 )
2026-09-10 10:16:32 +08:00
euvre
f4b0478444
fix(dataset): honor keywords filter in Go wiki artifact list APIs ( #19310 )
2026-09-09 11:11:20 +08:00
Harsh Kashyap
fb2f881871
fix(api): authorize dataset and workspace commit routes ( #19357 )
...
Fixes #19356
The file-commit endpoints resolved a dataset or folder id but never
checked that the caller can access it. Any logged-in user could read
another tenant's commit history, diffs, and file contents, pull version
history for any file id, and create commits in a workspace they don't
own. Sibling artifact routes in dataset_api.py apply
KnowledgebaseService.accessible for the same data; these did not.
2026-09-09 10:33:23 +08:00
buua436
afb01aa887
fix: filter chunks by requested IDs ( #19377 )
2026-09-09 10:00:24 +08:00
MarMar Labs
6c280f10a0
fix(api): accept repeated memory_type and tenant_id filters when listing memories ( #19281 )
...
Fix GET /api/v1/memories list filters — memory_type, tenant_id, owner_ids, ids now read all repeated query keys (was only first). Matches /datasets//documents pattern.
2026-09-08 11:48:16 +08:00
Wang Qi
b7e577ce48
Refactor: combine 3 retrieval/search API as one ( #19303 )
2026-09-08 11:41:46 +08:00
Wang Qi
f8b0a1de19
Refactor: update dataset API should not have ext ( #19272 )
2026-09-07 14:25:15 +08:00
euvre
60fcf20c89
fix(agent): wire document service so dataflow rerun works instead of 500ing ( #19094 )
2026-09-04 10:02:08 +08:00
jay77721
471dd91e43
feat(ingestion): surface queued document task status ( #19137 )
2026-09-03 12:05:41 +08:00
Sbaaoui Idriss
89a43f6872
fix(file): classify ancestry authorization failures as data errors ( #19157 )
2026-09-03 10:05:05 +08:00
MarMar Labs
ec9271337d
fix(dify): return the custom document metadata the handler already fetches ( #19123 )
...
Fix Go Dify retrieval dropping custom metadata — restore merge loop that was lost in #16983 merge resolution. Now SearchMetadataByKBs results are actually applied.
2026-09-02 19:19:02 +08:00
xu jiaming
c187dfdc73
fix(mcp): read total_datasets so the fetch-all early-exit works ( #19020 )
...
Fix #19019 — MCP _fetch_all_datasets() used wrong total key (total vs total_datasets), causing extra empty-page requests. Now reads total_datasets with fallback.
2026-09-02 19:05:50 +08:00
mkaaad
a36865c09b
refactor(go-syncer): route GetConnector access errors through helper ( #19146 )
...
#15265
2026-09-02 16:41:33 +08:00
MarMar Labs
4841fef5e6
fix(test): expect the bare attachment disposition the download path emits ( #19132 )
...
Fix test
2026-09-02 13:42:24 +08:00
Guofang.Tang
09586c5ddb
fix(agent): finalize interrupted webhook traces ( #19089 )
2026-09-01 16:12:21 +08:00
Guofang.Tang
8cbe55c896
fix(agent): prevent concurrent webhook trace overwrites ( #19026 )
2026-09-01 13:38:39 +08:00
Jin Hai
638bb13e06
Go: refactor ( #19084 )
...
Signed-off-by: Jin Hai <haijin.chn@gmail.com >
2026-09-01 12:34:08 +08:00
Guofang.Tang
d45008090f
fix(agent): persist webhook traces as JSON objects ( #18883 )
2026-08-29 23:45:39 +08:00
Sbaaoui Idriss
9efdfb2c24
fix(agent): reject fractional integer DSL parameters ( #18964 )
2026-08-28 15:20:19 +08:00
天海蒼灆 and Cursor
9ca62e8da3
fix: include filename in file download Content-Disposition header ( #17105 )
...
### Summary
GET /api/v1/files/{id} now sets attachment filename for both Python and
Go handlers so browsers can save downloads with the correct name.
---------
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-28 14:42:04 +08:00
Guofang.Tang
1cc2761f6d
fix(agent): implement webhook trace polling ( #18815 )
2026-08-27 15:04:55 +08:00
Wang Qi
ba625dc52b
Refactor: refine error messages - use %W ( #18834 )
2026-08-27 11:21:17 +08:00
Jin Hai
6c2bca893c
Go: fix context, part3 ( #18821 )
...
Signed-off-by: Jin Hai <haijin.chn@gmail.com >
2026-08-26 22:33:10 +08:00
Guofang.Tang
5827620a61
fix(agent): propagate webhook terminal states ( #18758 )
2026-08-26 15:32:21 +08:00
Lem0nTea2002
a940dad39f
fix(chat): propagate mind map stream failures ( #18733 )
2026-08-25 19:34:40 +08:00
Wang Qi
158d672c5e
Porting #18737 to go ( #18745 )
...
Porting #18737 to go
Test: passed.
2026-08-25 18:58:34 +08:00