Commit Graph
401 Commits
Author SHA1 Message Date
Sbaaoui Idriss 349ecfb5cc fix(api): align Go proxy contract parity (#19723) 2026-09-17 11:01:02 +08:00
coderdailyone af02d0a6e8 fix(api): stop trusting X-Forwarded-For from every peer in the agent webhook IP whitelist (#19550) 2026-09-16 15:22:10 +08:00
MarMar Labs a9a227f4c2 fix(dao): allowlist orderby columns on the search, chat, file and dataset lists (#19601)
Fix SQL injection in 4 Go list DAOs — orderby was concatenated into ORDER BY.
2026-09-16 15:02:13 +08:00
Lynn 079284c1fa Fix: allow use - in instance_name (#19709) 2026-09-16 14:12:51 +08:00
xugangqiang e83c1963de feat(ingestion): stop persisting business data in pipeline operation-log DSL (#19631) 2026-09-16 14:07:21 +08:00
Lynn 780081177d Fix: restrict instance name to digits, underscores, and letters (#19680) 2026-09-16 09:34:51 +08:00
Jin Hai b12e24f969 Go: invite member by send mail (#19675)
refer to #15301

---------

Signed-off-by: Jin Hai <haijin.chn@gmail.com>
2026-09-15 18:50:29 +08:00
buua436 839a4ec815 fix: filter compilation status by kind (#19666) 2026-09-15 16:25:11 +08:00
Wang Qi fe501ebb04 Refactor: move chat message/reference to dedicated tables (#19577) 2026-09-15 15:52:12 +08:00
jay77721 3a04af1dcd refactor(ingestion): migrate general parser and chunker contract (#19611) 2026-09-15 15:51:29 +08:00
buua436 8c9a0f65a1 fix: support keywords in navigation APIs (#19645) 2026-09-15 15:01:16 +08:00
buua436 1cb339ced7 fix: record generated wiki page versions (#19636) 2026-09-15 14:58:28 +08:00
jay77721 aa4061471a feat(ingestion): track a run's pipeline log from queue to terminal (#19494) 2026-09-15 14:26:35 +08:00
huyua9 10e211494b fix(api): reject empty provider instance deletes (#18919)
Fix batch-delete provider requests — now require at least one instance and reject empty names (previously empty list returned success without deleting)
2026-09-15 14:08:40 +08:00
jay77721 d45c8aa148 refactor(ingestion): decouple document parsing state from document.run in favor of ingestion_task (#19533) 2026-09-14 17:44:55 +08:00
qinling0210 aa78e8d224 Remove internal cli 'insert chunks from file' and 'insert metadata from file' (#19591) 2026-09-14 14:23:04 +08:00
coderdailyoneandcoderdailyone 7371255eda fix(api): authorize the dataset document download route by tenant in the Go API (#19543)
Fix #19542 — Go document download now checks caller access (datasetService.Accessible); previously any logged-in user could download any tenant's document. Returns same "not found" envelope to avoid leaking existence. 

Co-authored-by: coderdailyone <codecookie@proton.me>
2026-09-14 10:30:13 +08:00
euvre b19a10fb70 fix(wiki): version history always empty on Go API due to page-slug key mismatch (#19305) 2026-09-13 15:50:37 +08:00
Yingfeng 1f5d33333a Add claim/evidence to tree/pageindex compilation pipeline (#19267) 2026-09-11 22:37:33 +08:00
buua436 6051b2150f refa: remove Go artifact deletion APIs (#19519) 2026-09-11 16:08:00 +08:00
taek105 4ad809634f fix(document): validate immutable fields on update (#19444)
Fix #16831 — Go document endpoints now reject changes to ingestion-managed fields (progress, chunk_num, token_num, etc.), including zero-valued. PUT now persists name only, not full record.
2026-09-11 12:39:19 +08:00
xu jiaming 3dab5db315 fix(mcp): send rerank_candidates_count so retrieval paging works past 64 results (#19018)
Fix #19017 — MCP retrieval now sends rerank_candidates_count = max(64, page * page_size), fixing paging past 64 results.
2026-09-10 20:12:43 +08:00
buua436 e9a6397ab8 fix: support keyword search for dataset structure graphs (#19473) 2026-09-10 17:29:06 +08:00
euvre 7090ca834b fix(go): stop masking document preview failures as "document not found" and add tenant access check (#19348) 2026-09-10 16:56:32 +08:00
Sbaaoui Idriss 11f4d11920 fix(agent): preserve Starter values beside query inputs (#19420) 2026-09-10 10:16:32 +08:00
euvre f4b0478444 fix(dataset): honor keywords filter in Go wiki artifact list APIs (#19310) 2026-09-09 11:11:20 +08:00
Harsh Kashyap fb2f881871 fix(api): authorize dataset and workspace commit routes (#19357)
Fixes #19356

The file-commit endpoints resolved a dataset or folder id but never
checked that the caller can access it. Any logged-in user could read
another tenant's commit history, diffs, and file contents, pull version
history for any file id, and create commits in a workspace they don't
own. Sibling artifact routes in dataset_api.py apply
KnowledgebaseService.accessible for the same data; these did not.
2026-09-09 10:33:23 +08:00
buua436 afb01aa887 fix: filter chunks by requested IDs (#19377) 2026-09-09 10:00:24 +08:00
MarMar Labs 6c280f10a0 fix(api): accept repeated memory_type and tenant_id filters when listing memories (#19281)
Fix GET /api/v1/memories list filters — memory_type, tenant_id, owner_ids, ids now read all repeated query keys (was only first). Matches /datasets//documents pattern.
2026-09-08 11:48:16 +08:00
Wang Qi b7e577ce48 Refactor: combine 3 retrieval/search API as one (#19303) 2026-09-08 11:41:46 +08:00
Wang Qi f8b0a1de19 Refactor: update dataset API should not have ext (#19272) 2026-09-07 14:25:15 +08:00
euvre 60fcf20c89 fix(agent): wire document service so dataflow rerun works instead of 500ing (#19094) 2026-09-04 10:02:08 +08:00
jay77721 471dd91e43 feat(ingestion): surface queued document task status (#19137) 2026-09-03 12:05:41 +08:00
Sbaaoui Idriss 89a43f6872 fix(file): classify ancestry authorization failures as data errors (#19157) 2026-09-03 10:05:05 +08:00
MarMar Labs ec9271337d fix(dify): return the custom document metadata the handler already fetches (#19123)
Fix Go Dify retrieval dropping custom metadata — restore merge loop that was lost in #16983 merge resolution. Now SearchMetadataByKBs results are actually applied.
2026-09-02 19:19:02 +08:00
xu jiaming c187dfdc73 fix(mcp): read total_datasets so the fetch-all early-exit works (#19020)
Fix #19019 — MCP _fetch_all_datasets() used wrong total key (total vs total_datasets), causing extra empty-page requests. Now reads total_datasets with fallback.
2026-09-02 19:05:50 +08:00
mkaaad a36865c09b refactor(go-syncer): route GetConnector access errors through helper (#19146)
#15265
2026-09-02 16:41:33 +08:00
MarMar Labs 4841fef5e6 fix(test): expect the bare attachment disposition the download path emits (#19132)
Fix test
2026-09-02 13:42:24 +08:00
Guofang.Tang 09586c5ddb fix(agent): finalize interrupted webhook traces (#19089) 2026-09-01 16:12:21 +08:00
Guofang.Tang 8cbe55c896 fix(agent): prevent concurrent webhook trace overwrites (#19026) 2026-09-01 13:38:39 +08:00
Jin Hai 638bb13e06 Go: refactor (#19084)
Signed-off-by: Jin Hai <haijin.chn@gmail.com>
2026-09-01 12:34:08 +08:00
Guofang.Tang d45008090f fix(agent): persist webhook traces as JSON objects (#18883) 2026-08-29 23:45:39 +08:00
Sbaaoui Idriss 9efdfb2c24 fix(agent): reject fractional integer DSL parameters (#18964) 2026-08-28 15:20:19 +08:00
天海蒼灆andCursor 9ca62e8da3 fix: include filename in file download Content-Disposition header (#17105)
### Summary

GET /api/v1/files/{id} now sets attachment filename for both Python and
Go handlers so browsers can save downloads with the correct name.

---------

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-28 14:42:04 +08:00
Guofang.Tang 1cc2761f6d fix(agent): implement webhook trace polling (#18815) 2026-08-27 15:04:55 +08:00
Wang Qi ba625dc52b Refactor: refine error messages - use %W (#18834) 2026-08-27 11:21:17 +08:00
Jin Hai 6c2bca893c Go: fix context, part3 (#18821)
Signed-off-by: Jin Hai <haijin.chn@gmail.com>
2026-08-26 22:33:10 +08:00
Guofang.Tang 5827620a61 fix(agent): propagate webhook terminal states (#18758) 2026-08-26 15:32:21 +08:00
Lem0nTea2002 a940dad39f fix(chat): propagate mind map stream failures (#18733) 2026-08-25 19:34:40 +08:00
Wang Qi 158d672c5e Porting #18737 to go (#18745)
Porting #18737 to go
Test: passed.
2026-08-25 18:58:34 +08:00