buua436
4ba8d801e9
feat: add knowledge compiler LLM progress hooks ( #22152 )
2026-11-09 15:40:12 +08:00
buua436
1e3c99ba64
docs: document v1.0.0.1 resource ID migration ( #22154 )
2026-11-09 15:33:18 +08:00
buua436
0bacfb2939
fix: apply agent advanced settings and Tavily defaults ( #22104 )
2026-11-09 14:36:25 +08:00
buua436
cf0551433d
fix: correct agent tool, schema, and save handling ( #22089 )
2026-11-09 14:34:29 +08:00
buua436
3f8dbf259b
fix: correct Scholar sorting and Skills fallbacks ( #22095 )
2026-11-09 14:34:21 +08:00
buua436
b4b6ff663e
fix: avoid false clipboard success ( #22094 )
2026-11-09 14:34:04 +08:00
buua436
61c46bf622
fix: align ChatChannel permission tests ( #22107 )
2026-11-06 19:09:30 +08:00
buua436
b83be6d0a0
fix: harden OAuth, gateway auth, and provider parsing ( #22072 )
2026-11-06 14:55:25 +08:00
buua436
92816b46c2
fix: scope upload quotas and lock WeCom listener binding ( #22076 )
2026-11-06 14:55:00 +08:00
buua436
1afe6eaa94
fix: resolve template, rerank, and migration regressions ( #22083 )
2026-11-06 14:53:30 +08:00
buua436
38725dc070
fix: clean agent subgraphs and repair frontend requests ( #22048 )
2026-11-06 11:48:56 +08:00
buua436
303776e89c
fix: harden agent export, timeout, and artifact handling ( #22037 )
2026-11-06 11:48:50 +08:00
buua436
58c78b9aa4
fix: harden native analyzer conversions and JSON output ( #22070 )
2026-11-06 11:39:05 +08:00
buua436
f37a9cf50d
fix: restore harness interrupt resume and events ( #22050 )
2026-11-06 09:42:40 +08:00
buua436
cf34ed9b52
fix: seed user rows in tenant service tests ( #22060 )
2026-11-05 20:51:14 +08:00
buua436
31e436c89d
fix(knowledge-compiler): honor node settings and degrade missing vector mapping ( #22026 )
2026-11-05 15:31:07 +08:00
buua436
b9d814f24c
refa: remove remaining identity arguments ( #22005 )
2026-11-05 13:09:28 +08:00
buua436
31f26a2b0c
fix: align version catalog test with EE permissions ( #22011 )
2026-11-05 11:21:16 +08:00
buua436
455a0d52c7
refa: derive connector, MCP, and memory identity from context ( #21952 )
2026-11-04 15:18:49 +08:00
buua436
18562f2cdc
refa: derive service identity from context ( #21942 )
2026-11-04 14:15:41 +08:00
buua436
7dd0164fb3
refa: derive service identity from request context ( #21923 )
2026-11-04 10:59:05 +08:00
buua436
535e8f6d15
fix(dao): include skill spaces in auto migration ( #21921 )
2026-11-03 19:32:14 +08:00
buua436
ff985091fb
refa: derive service identity from context ( #21904 )
2026-11-03 18:38:32 +08:00
buua436
84705f75c8
feat: add user ownership to resources ( #21914 )
2026-11-03 17:36:36 +08:00
buua436
42fc0bac45
refa: derive permission identity from context ( #21892 )
2026-11-03 13:24:26 +08:00
buua436
5fa96080df
test: gate community-only tenant cases from EE ( #21874 )
2026-11-02 21:14:32 +08:00
buua436
e9b1b6b48f
refa: remove permission service wrappers ( #21856 )
...
### What problem does this PR solve?
Remove service-layer permission wrappers that only forwarded calls, and
invoke the permission layer directly at call sites. Keep composite
authorization rules with their owning business flows.
### Type of change
- [x] Refactor (no functional change)
2026-11-02 19:25:45 +08:00
buua436
6aec415a33
refa: consolidate model access and tenant defaults ( #21740 )
2026-11-02 13:10:41 +08:00
buua436
f5afffb38b
fix: show bell for pending tenant invitations ( #21778 )
2026-10-30 17:51:19 +08:00
buua436
293936c4f5
fix: show pending tenant invitations ( #21763 )
2026-10-30 16:07:08 +08:00
buua436
fb33d2e0af
fix: unify saved provider model listing ( #21753 )
2026-10-30 14:47:51 +08:00
buua436
4e730d4d0f
fix: isolate dataset test helpers by edition ( #21707 )
2026-10-29 19:49:34 +08:00
buua436
97b08d6585
fix: isolate community test stubs from EE builds ( #21672 )
2026-10-29 14:49:19 +08:00
buua436
91a53bc2dd
fix: protect provider instance credentials ( #21618 )
2026-10-29 14:05:16 +08:00
buua436
738a239650
fix: harden credential and input handling ( #21593 )
2026-10-29 14:03:56 +08:00
buua436
6ef2656a4d
fix: prevent channel error leaks and iterator panics ( #21565 )
2026-10-29 09:35:54 +08:00
buua436
1ed2737ffa
fix: isolate analyzer and benchmark worker state ( #21583 )
2026-10-29 09:35:43 +08:00
buua436
61da347a60
fix: align chat permission tests across editions ( #21589 )
2026-10-28 12:11:09 +08:00
buua436
79e84ebb9c
docs: clarify admin bootstrap password setup ( #21586 )
2026-10-28 11:14:09 +08:00
buua436
752dc02157
fix: prevent concurrent state crashes ( #21568 )
2026-10-28 09:44:43 +08:00
buua436
56582a9926
fix: harden SMTP, SQL, and tokenizer boundaries ( #21558 )
2026-10-28 09:38:20 +08:00
buua436
256edaf959
fix: guard Notion downloads and REST auth redirects ( #21545 )
2026-10-27 19:13:00 +08:00
buua436
e4070b48ba
fix: prevent command and path injection ( #21539 )
2026-10-27 19:09:31 +08:00
buua436
dbda628a85
fix: handle malformed provider and CLI responses ( #21546 )
2026-10-27 17:59:24 +08:00
buua436
e7bf77e1da
fix: honor STORAGE_IMPL and enforce chat dataset access ( #21548 )
2026-10-27 17:59:11 +08:00
buua436
580b844bff
fix: add tenant context to shared permission tests ( #21556 )
2026-10-27 17:21:09 +08:00
buua436
20273da939
fix: secure Azure DevOps connector requests ( #21509 )
2026-10-27 14:00:28 +08:00
buua436
18ddc7f87f
feat: configure dataset document upload size ( #21517 )
2026-10-27 13:59:44 +08:00
buua436
de93dd2d46
fix: secure MWS model requests ( #21505 )
2026-10-27 10:23:51 +08:00
buua436
09540bd04e
fix: secure channel egress against SSRF ( #21486 )
2026-10-26 19:37:29 +08:00
buua436
2f99548911
fix: limit API request body size ( #21474 )
2026-10-26 19:27:58 +08:00
buua436
9ca22393ae
test: prepare tenant permission fixtures ( #21493 )
2026-10-26 19:25:53 +08:00
buua436
d3f6d032a1
test: keep EE test placeholders in OSS ( #21476 )
...
### What problem does this PR solve?
Keeps enterprise-only test files as placeholders in the open-source tree
instead of moving enterprise-specific test behavior into
`community_test` files.
### Type of change
- [x] Refactor (no functional change)
2026-10-26 15:31:07 +08:00
buua436
e8185a519c
fix: increase scheme-safe response header timeout ( #21469 )
2026-10-26 13:56:26 +08:00
buua436
67f9b211ab
fix: respect active tenant in service operations ( #21462 )
2026-10-26 13:05:36 +08:00
buua436
a921941796
feat: bind agent webhooks to user credentials ( #21421 )
2026-10-26 10:06:42 +08:00
buua436
ad5c331c0b
fix: remove system variable API routes ( #21410 )
2026-10-23 16:59:28 +08:00
buua436
e4ab718ca6
feat(permission): enforce tenant and resource access ( #21377 )
2026-10-23 16:04:46 +08:00
buua436
0b46ece31b
feat(permission): align resource and agent ownership ( #21350 )
2026-10-23 09:36:46 +08:00
buua436
07209543cf
feat(tenant): add tenant roles and permissions ( #21257 )
2026-10-21 10:32:52 +08:00
buua436
51351ef7dc
feat(go-auth): bind tenant context to access tokens and API keys ( #21153 )
2026-10-19 17:46:57 +08:00
buua436
9218cb6d11
feat: migrate permission schema fields ( #21085 )
2026-10-19 14:13:09 +08:00
buua436
d3d5488ad8
fix: update tenant model max tokens migration version ( #21045 )
2026-10-16 13:05:00 +08:00
buua436
63235983ab
fix: preserve named Begin inputs in agent bot runs ( #21014 )
2026-10-15 17:12:20 +08:00
buua436
4854a64285
fix: clarify compiler timeout errors during ingestion ( #21011 )
2026-10-15 16:50:19 +08:00
buua436
0c7adf2a8e
fix: scope chunk deletion to route dataset and add Go API coverage ( #21000 )
2026-10-15 15:24:25 +08:00
buua436
baeba399ef
fix: clarify extractor timeout errors ( #20983 )
2026-10-15 10:51:07 +08:00
buua436
a6126d8430
fix: disable max token defaults in agent templates ( #20946 )
2026-10-14 16:45:20 +08:00
buua436
1c6536ab75
fix: allow declining pending tenant invitations ( #20896 )
2026-10-13 16:46:18 +08:00
buua436
1262641b3e
fix: seed dataset owner membership in artifact tests ( #20886 )
2026-10-13 15:15:57 +08:00
buua436
8a95d55d63
feat: migrate resource checks to permission layer ( #20792 )
2026-10-13 14:17:43 +08:00
buua436
da1915f060
refa: centralize agent canvas permissions ( #20709 )
2026-10-10 16:11:49 +08:00
buua436
7b5dc82f8b
feat: expose dataset connector sync logs ( #20704 )
2026-10-10 13:50:52 +08:00
buua436
4c9edbfdf7
refa: centralize Go resource permissions ( #20657 )
2026-10-10 10:37:43 +08:00
buua436
510b5c114c
fix: backfill tenant model max tokens in rc2 ( #20601 )
2026-10-08 17:45:57 +08:00
buua436
fceacbfb27
feat: add SiliconFlow model catalog entries ( #20596 )
2026-10-08 17:45:20 +08:00
buua436
9e548794e7
refa: simplify model resolution and rerank calls ( #20457 )
2026-10-08 11:04:53 +08:00
buua436
dd8f57048f
refa: route chat calls through ChatModel ( #20441 )
2026-09-30 15:18:31 +08:00
buua436
c8a00c6f6d
refactor: use model tokenizer for rerank ( #20422 )
2026-09-30 14:30:32 +08:00
buua436
2dac3d5982
refactor: route audio models through wrappers ( #20387 )
2026-09-29 19:08:00 +08:00
buua436
b912faf964
fix: route embeddings through model wrapper ( #20378 )
2026-09-29 17:29:15 +08:00
buua436
710b9eb48e
refa: migrate provider model calls ( #20355 )
2026-09-29 16:40:29 +08:00
buua436
317db0c939
refa: migrate model wrappers to model solver ( #20100 )
2026-09-29 14:19:11 +08:00
buua436
0385d2fbe2
refa: move model resolution helpers to model solver ( #20103 )
2026-09-29 14:19:04 +08:00
buua436
921d652808
refa: resolve openai models as chat ( #20073 )
2026-09-29 14:17:47 +08:00
buua436
e4d13ac1ac
refa: remove NVIDIA model list reconciliation ( #20301 )
...
### What problem does this PR solve?
Listing supported NVIDIA models should be a read-only operation. The
previous implementation modified tenant model records while handling the
list request, including creating, updating, and deleting models.
This change removes that database reconciliation from the model-list
path and deletes the reconciliation code and tests that are no longer
used.
### Type of change
- [x] Refactor (no change to the model-list response contract)
2026-09-29 14:02:57 +08:00
buua436
24b6eede6e
refa: remove unused instance connection method ( #20303 )
2026-09-29 14:02:49 +08:00
buua436
3f1a0a1190
refa: remove provider-specific Bedrock validation ( #20308 )
2026-09-29 14:02:42 +08:00
buua436
3b5ee7c6ce
fix: drop orphan knowledge graph relations ( #20293 )
2026-09-28 16:49:19 +08:00
buua436
5a089b4fb9
fix: support wiki map writes on Infinity ( #20203 )
2026-09-28 10:30:26 +08:00
buua436
269fed973b
fix: adjust sandbox SSH host configuration ( #20155 )
2026-09-28 09:44:11 +08:00
buua436
6fec6bba59
fix: exclude disabled documents from Wiki products ( #20154 )
2026-09-24 11:51:41 +08:00
buua436
9785a0dd26
fix: use configured known_hosts path for SSH sandbox ( #20114 )
...
### What problem does this PR solve?
Use the configured SSH known_hosts path inside the Go sandbox container
when the SSH provider configuration does not specify one explicitly.
### Type of change
- [x] Bug Fix (non-breaking change which fixes an issue)
2026-09-23 19:28:59 +08:00
buua436
3830b99f78
fix: wait for Elasticsearch chunk updates ( #20116 )
2026-09-23 19:09:59 +08:00
buua436
0ecd01254d
fix: scope document deletion compile events ( #20108 )
2026-09-23 19:04:39 +08:00
buua436
a03c9777af
fix: add standalone CJK font for Go PDF generation ( #20095 )
2026-09-23 15:33:48 +08:00
buua436
04090ada0f
refa: remove chat model target resolver ( #20055 )
2026-09-23 10:07:55 +08:00
buua436
8fac717cd1
refa: remove standalone tool support resolver ( #20047 )
2026-09-22 19:16:36 +08:00
buua436
59eb2bf153
fix: prevent agent message template feedback ( #20042 )
2026-09-22 19:16:16 +08:00
buua436
9e99f996ff
fix: synchronize document compilation and navigation projections ( #20030 )
2026-09-22 14:54:47 +08:00
buua436