Commit Graph

  • e89edb39b1
    fix(gateway): reject non-positive read limits (#4284) Ryker_Feng 2026-07-18 22:12:57 +08:00
  • f8bef42a04
    fix(wechat): validate timing configuration (#4280) Ryker_Feng 2026-07-18 17:53:30 +08:00
  • 5994fdf38c
    fix: avoid forcing frontend nginx upgrades (#4250) Zhengcy05 2026-07-18 17:50:20 +08:00
  • 7757e38b7f
    fix(nginx): allow long chat prompts through /api/langgraph/ without a raw 500 (#4277) Daoyuan Li 2026-07-18 02:48:42 -07:00
  • a0e1d82ef4
    fix(workspace-changes): offload blocking filesystem IO in text-cache lifecycle (#4268) Aari 2026-07-18 17:30:14 +08:00
  • 208df4931d
    doc(changelog): updated the changelog with latest changes (#4270) Willem Jiang 2026-07-18 17:25:45 +08:00
  • c9b6131f8f
    fix(skills): reload mounted skills without restarting Gateway (#4264) Huixin615 2026-07-17 23:22:16 +08:00
  • 1ae02913ea
    fix(skills): cap archive entry count in safe_extract_skill_archive (#4241) Daoyuan Li 2026-07-17 08:00:08 -07:00
  • 5a5c661e9f
    fix(middleware): recover malformed tool-call ids in dangling repair (#4246) Aari 2026-07-17 19:16:42 +08:00
  • 9a4c72db99
    fix(channels): isolate per-message failures in WeChat poll loop (#4231) Daoyuan Li 2026-07-17 01:08:53 -07:00
  • 13afef6278
    fix(tui): interrupt an active run before /quit exits (#4235) Daoyuan Li 2026-07-17 00:48:45 -07:00
  • 7156e745e0
    fix(channels): don't treat a bare "connect" as a bind command (#4251) Andrew Chen 2026-07-17 15:11:15 +08:00
  • 10890e10a8
    feat(authz): propagate trusted authorization principal context (#4203) hataa 2026-07-17 14:49:51 +08:00
  • f9340c1f08
    test(mcp): cover passive skill tool visibility (#4247) Huixin615 2026-07-17 14:39:35 +08:00
  • ae223199fd
    fix(security): escape MindIE tool-response content against </tool_response> breakout (#4253) Yufeng He 2026-07-17 14:23:44 +08:00
  • bc6f1adc71
    fix(channels): dispatch Feishu group commands prefixed with a bot @mention (#4229) Aari 2026-07-17 11:18:20 +08:00
  • 693507870c
    fix(frontend): preserve single tildes in markdown (#4245) Huixin615 2026-07-16 16:57:32 +08:00
  • 756eac0d1a
    feat(tool):Add structured synopsis for oversized tool output previews (#3377) HaotianChen616 2026-07-16 16:41:04 +08:00
  • 7df44f586c
    fix(agents): refuse empty SOUL.md updates in update_agent (#4219) Aari 2026-07-16 14:44:22 +08:00
  • d57f695769
    fix(helm): default sandbox Services to ClusterIP (#3929) (#4190) Zheng Feng 2026-07-16 14:30:05 +08:00
  • 65afc9b1d2
    fix(skills): apply allowed-tools only to active skills (#4098) Huixin615 2026-07-16 14:12:02 +08:00
  • e7d7da9e7c
    fix(frontend): strip <memory> tags in Streamdown to avoid React console error (#4209) qin-chenghan 2026-07-16 14:09:00 +08:00
  • b3a0dac8ad
    fix(channels): accept leading @mentions before /connect bind codes (#4222) Aari 2026-07-16 11:38:56 +08:00
  • 94a34f382d
    feat(context): record effective memory identity per run (#3556) AochenShen99 2026-07-16 09:39:09 +08:00
  • 8da7cbf028
    feat(memory): LLM-assigned per-fact expected_valid_days and staleFactsToExtend (#4143) Tianye Song 2026-07-16 09:34:21 +08:00
  • 259f51ca4f
    fix(github): match allow_authors logins case-insensitively (#4218) Aari 2026-07-16 09:12:29 +08:00
  • 5c80c07dfe
    fix(memory): treat explicit null backend_config values as omitted in DeerMemConfig (#4217) ajayr 2026-07-16 01:29:30 +01:00
  • 1769b2de0d
    fix: read run stop_reason from runtime context (#4188) Vanzeren 2026-07-16 08:19:52 +08:00
  • de55982c5a
    fix(subagents): preserve parent checkpoint namespace (#4215) Nan Gao 2026-07-16 01:03:08 +02:00
  • 45865e9f3f
    fix(tracing): attach Langfuse trace metadata to the goal evaluator (#4202) Daoyuan Li 2026-07-15 07:30:34 -07:00
  • 6ef0aa2aea
    fix(tui): stop empty-id assistant deltas from merging across turns (#4201) Daoyuan Li 2026-07-15 07:27:00 -07:00
  • 3247f61750
    fix(middleware): sanitize invalid tool call arguments (#4193) Huixin615 2026-07-15 22:06:29 +08:00
  • 289adcbb02
    fix(mcp): offload blocking filesystem IO in MCP config update (#3552) ly-wang19 2026-07-15 20:41:56 +08:00
  • a0acdda103
    fix(gateway): keep create_thread idempotent when the insert loses a race (#3800) Yufeng He 2026-07-15 20:33:43 +08:00
  • 959bf13406
    fix(memory): flush memory queue on graceful shutdown to prevent loss (#4181) Tu Naichao 2026-07-15 20:25:41 +08:00
  • fa419b3e4c
    fix(goal): stop continuation_count double-bump in thread_changed_before_continuation stand-down (#4199) Daoyuan Li 2026-07-15 05:21:04 -07:00
  • f0e56dde80
    build(deps): bump h3 from 1.15.6 to 1.15.9 in /frontend (#4211) dependabot[bot] 2026-07-15 20:10:03 +08:00
  • 16919f7c52
    fix(skills): reuse the resolved app config in the no-arg skills prompt section (#4160) Xinmin Zeng 2026-07-15 19:56:09 +08:00
  • e7e9c51988
    Classify four HTTP identity sources (browser session, OIDC, IM channel (#4179) yym36991 2026-07-15 19:42:35 +08:00
  • b68e1c686a
    docs: add the link of LLM Space (#4195) Henry Li 2026-07-15 14:44:08 +08:00
  • 2a7469cdbc
    fix(channels): dedupe GitHub webhook redeliveries (#4104) Daoyuan Li 2026-07-14 21:29:54 -07:00
  • ad45f59d66
    feat(memory): pluggable memory abstraction with self-contained DeerMem backend (#4122) qin-chenghan 2026-07-15 11:21:04 +08:00
  • 1300c6d36b
    feat(authz): add pluggable AuthorizationProvider protocol and config scaffolding (Phase 0, #4063) (#4127) hataa 2026-07-15 10:03:33 +08:00
  • f3e4e5f8f0
    ci(helm): publish chart to charts/ namespace prefix on GHCR (#4175) Zheng Feng 2026-07-15 08:54:36 +08:00
  • 0dd90ccfde
    fix(agents): require config.yaml in update_agent's legacy-agent guard (#4166) Daoyuan Li 2026-07-14 17:13:17 -07:00
  • 8e96a6a252
    fix(security): html-escape the conversation block in MEMORY_UPDATE_PROMPT (#4162) Aari 2026-07-14 23:35:46 +08:00
  • 656f6b364c
    fix(skills): recognize fully deleted public skill packages in review CI (#4169) Daoyuan Li 2026-07-14 08:08:33 -07:00
  • 713ee544b7
    fix(agents): stop persisting base64 image data in checkpoint state (#4140) qin-chenghan 2026-07-14 23:02:26 +08:00
  • 51bb19fa1b
    fix(channels): drop redundant GitHub review-comment webhook fan-out (#4131) Daoyuan Li 2026-07-14 07:56:50 -07:00
  • 60e50537f3
    fix(subagents): prohibit task tool in general-purpose system prompt (#4161) qin-chenghan 2026-07-14 22:51:21 +08:00
  • 9c77046d10
    fix(middleware): drop orphan ToolMessages so strict providers don't 400 (#4080) 黄云龙 2026-07-14 22:43:47 +08:00
  • cdefd4a8aa
    fix(mcp): invalidate tools cache on config content + path, not just newer mtime (#4124) Daoyuan Li 2026-07-14 07:40:51 -07:00
  • abd0c7a585
    docs(api): document stateless /api/runs/stream endpoint (#4177) yym36991 2026-07-14 22:33:57 +08:00
  • c57cf221d3
    fix(security): html-escape the summary input blocks in the summarization prompt (#4182) Aari 2026-07-14 21:51:47 +08:00
  • e492bb1c68
    fix(middleware): window LoopDetection tool-frequency counter so long runs don't false-trip (#4072) 黄云龙 2026-07-14 21:45:37 +08:00
  • 88a1311fe8
    fix(DB): legacy backfill creates missing Index objects on existing tables (#4090) 黄云龙 2026-07-14 21:41:35 +08:00
  • 13fd8e229a
    fix(checkpoint): persist run duration in checkpoints for history reads (#4118) Vanzeren 2026-07-14 21:37:47 +08:00
  • fabadae416
    add Volcengine Coding Plan to quikly setup (#4141) pclin 2026-07-14 13:01:58 +08:00
  • 192ea5155e
    Revert "fix(firecrawl): align tools with installed firecrawl-py v2 SDK surfac…" (#4165) Willem Jiang 2026-07-14 11:57:48 +08:00
  • b7b4b49bfe
    fix(firecrawl): align tools with installed firecrawl-py v2 SDK surface (#4151) 黄云龙 2026-07-14 11:29:47 +08:00
  • 24648194ae
    fix(frontend): show branch action only for completed turns (#4147) Huixin615 2026-07-14 11:11:43 +08:00
  • 41b137c4c4
    fix(security): block forged framework tags in the input guardrail (#4155) Aari 2026-07-14 11:04:11 +08:00
  • 446fa03801
    fix(context): resolve context compress bug (#4065) AnoobFeng 2026-07-14 10:43:13 +08:00
  • 81b3ed0188
    fix(skillscan): recognize remaining outbound network sinks (#4153) Aari 2026-07-14 09:55:38 +08:00
  • 79cdd99fca
    fix(mcp): validate MCP tool names at load so deferred prompts stay inert (#4154) Aari 2026-07-14 09:49:43 +08:00
  • e2816eaa97
    fix(models): scope the OpenAI-compat rules to BaseChatOpenAI, not a class-path allowlist (#4146) Aari 2026-07-14 09:32:53 +08:00
  • 4af6178358
    feat(trace): add agent observability with Monocle (#4024) Mohammed Ansari 2026-07-13 17:58:06 -07:00
  • e361122b9a
    fix(security): html-escape subagent descriptions before the <subagent_system> block (#4157) Yufeng He 2026-07-14 08:14:21 +08:00
  • 8cc4b3abeb
    fix(sandbox): the sandbox provisioner api exposes endpoints need to check API KEY (#4116) OrbisAI Security 2026-07-14 05:21:59 +05:30
  • e32456d337
    fix(memory): coerce stored confidence in the three remaining raw reads (#4034) Aari 2026-07-14 07:40:49 +08:00
  • b53c1ae0e0
    fix(runs): cancel degrades to lease takeover for multi-worker (#4064) heart-scalpel 2026-07-14 07:37:59 +08:00
  • 3e7baba39a
    fix(models): apply stream_chunk_timeout default to all BaseChatOpenAI subclasses (#4102) Daoyuan Li 2026-07-13 06:28:44 -07:00
  • a94ea9325b
    fix(agents): load SOUL.md from agent dirs without config.yaml (#4136) qin-chenghan 2026-07-13 21:13:33 +08:00
  • 807c3c5218
    fix(security): html-escape SOUL.md before it enters the <soul> prompt block (#4137) Yufeng He 2026-07-13 19:33:40 +08:00
  • 4e209827f3
    feat(agent): Add subagent total delegation cap (#4115) DanielWalnut 2026-07-13 19:26:07 +08:00
  • 95a35f3725
    docs(deployment-guide): fix stale userdata PVC subPath (#4139) Xinmin Zeng 2026-07-13 19:08:13 +08:00
  • 63e2da1401
    fix landing hero background positioning (#4092) nonoge 2026-07-13 17:38:49 +07:00
  • 2fa0505070
    fix(skills): activate a slash skill once per run, not per model call (#4103) Daoyuan Li 2026-07-13 03:38:32 -07:00
  • bcee5a9061
    refactor(sandbox): give the host→virtual output-mask regex a single owner (#4108) Aari 2026-07-13 18:34:41 +08:00
  • 62f905342c
    fix(tool_search): remove MAX_RESULTS cap on select: exact-name lookups (#4086) 黄云龙 2026-07-13 17:57:34 +08:00
  • 37580862b9
    fix(channels): scope the slash-skill whitelist check to the run's owner (#4129) Aari 2026-07-13 16:14:36 +08:00
  • cbbd72a1ab
    fix(skillscan): recognize remaining requests/httpx HTTP methods as network sinks (#4130) Yufeng He 2026-07-13 16:11:17 +08:00
  • 216309426f
    test(front): cover artifact image path variants (#4134) chaoxi007 2026-07-13 12:40:42 +08:00
  • 42544755ac
    fix(skills): escape untrusted skill metadata before it enters the model prompt (#4128) Aari 2026-07-13 10:40:22 +08:00
  • 2bd0f56a0f
    fix(subagents): classify recursion-capped LLM error fallbacks as failed (#4056) Daoyuan Li 2026-07-12 09:06:46 -07:00
  • 08fd218b83
    fix(sandbox): use os.sep in reverse-resolve containment check on Windows (#4058) Daoyuan Li 2026-07-12 09:01:22 -07:00
  • c82fba41d9
    fix(sandbox): guard the command path-translation regex with a segment boundary (#4110) Aari 2026-07-12 23:42:58 +08:00
  • 0542d3c5f3
    fix(sandbox): allow bash after cwd setup failure (#4051) 明年我18 2026-07-12 23:40:52 +08:00
  • 897be7e064
    fix(skillscan): detect os.environ access via from-import pattern (#4087) 黄云龙 2026-07-12 23:34:26 +08:00
  • 224f8de2cf
    fix(goal): prevent continuation_count regression from racing continuations (#4088) 黄云龙 2026-07-12 23:33:52 +08:00
  • 035045716e
    fix: CVE-2026-33128 security vulnerability (#4125) OrbisAI Security 2026-07-12 20:52:46 +05:30
  • 490deeb931
    fix(memory): coerce null source.confidence so it no longer blocks memory updates (#4074) 黄云龙 2026-07-12 23:22:09 +08:00
  • 6af6cfc70b
    fix(memory): don't gate memory-update parse on optional factsToRemove key (#4075) 黄云龙 2026-07-12 23:14:21 +08:00
  • c4b651fb9d
    Fix lost loop_capped stop reason when a subagent's run_id is None (#4059) Daoyuan Li 2026-07-12 08:12:20 -07:00
  • d2ab5bb819
    fix(sandbox): str_replace on empty file only returns OK when old_str is empty (#4079) 黄云龙 2026-07-12 23:04:59 +08:00
  • d8d8a34114
    fix(memory): coerce null confidence when ranking search results (#4076) 黄云龙 2026-07-12 23:00:45 +08:00
  • a9145e426c
    feat(frontend): show real project version on About page (#4126) Zheng Feng 2026-07-12 22:54:03 +08:00
  • 2730ee1f7b
    fix(memory): replace busy timer spin with deferred single re-run flag (#4073) 黄云龙 2026-07-12 20:41:41 +08:00
  • 65d474202f
    fix(front): Show assistant text during tool steps (#4114) DanielWalnut 2026-07-12 19:50:15 +08:00
  • feb287077e
    fix(security): html-escape memory context summaries rendered into the injection prompt (#4119) Aari 2026-07-12 18:22:22 +08:00