Commit Graph

  • 1073393e07
    Revert "fix(memory): follow config reload in get_memory_config (#4216)" (#4320) Willem Jiang 2026-07-21 09:34:04 +08:00
  • cd0f1e2212
    fix(memory): follow config reload in get_memory_config (#4216) Yufeng He 2026-07-21 09:24:02 +08:00
  • 92c8f2f03b
    feat(authz): add built-in RBAC provider and provider factory (#4260) hataa 2026-07-21 09:23:14 +08:00
  • 5eb59cb130
    fix(sandbox): stop multi-worker orphan reconcile from killing peer sandboxes (#4221) Aari 2026-07-21 09:09:40 +08:00
  • 3949340610
    fix: harden Postgres async engine with pool_recycle and command_timeout to stop stale-connection 504s (#4230) Matt Van Horn 2026-07-20 17:52:31 -07:00
  • 16a77cb780
    fix(serper): ignore malformed image URLs (#4319) VectorPeak 2026-07-21 08:15:33 +08:00
  • ac5fd46281
    feat(backend): bound LLM call concurrency and shed burst-rate (429) retries (#4294) Willem Jiang 2026-07-21 08:07:49 +08:00
  • e66f455d51
    fix(skills): don't treat a lazily evaluated PEP 695 type alias as a network sink (#4315) Aari 2026-07-21 00:02:16 +08:00
  • 24a45a4e68
    feat(tui): add clear command (#4306) Ryker_Feng 2026-07-20 23:56:37 +08:00
  • 6544d96cc4
    fix(skills): close AST literal-only shell=True bypass in SkillScan (#4057) Daoyuan Li 2026-07-20 08:50:47 -07:00
  • 09e25b8a32
    fix(auth): let deployments close local self-registration (#4311) Aari 2026-07-20 23:33:09 +08:00
  • 1a1c5def0d
    fix(agents): classify web_fetch error pages as errors, not successful evidence (#4314) Aari 2026-07-20 23:05:47 +08:00
  • b02308bb1d
    fix(dingtalk): drop inbound messages that carry no conversation identity (#4316) Aari 2026-07-20 23:00:44 +08:00
  • 16377b1206
    fix(frontend): encode uploaded filenames in delete requests (#4312) Ryker_Feng 2026-07-20 20:22:58 +08:00
  • cd34a1a504
    fix(skills): don't attach model tracing to the in-graph skill security scan (#4252) Aari 2026-07-20 08:18:23 +08:00
  • 39cc26ddfc
    feat(frontend): restore per-thread composer drafts (#4282) Ryker_Feng 2026-07-20 08:06:32 +08:00
  • 474a0fd6b7
    fix(gateway): correct GitHub auto-retry claim in webhook route docs (#4289) Daoyuan Li 2026-07-19 17:01:18 -07:00
  • a9a57fb711
    fix(gateway): handle null config.configurable in _resolve_thread_id (#4301) Andrew Chen 2026-07-20 07:54:15 +08:00
  • de024646a7
    feat(memory): memory template externalization (#4286) lllyfff 2026-07-20 07:24:34 +08:00
  • a8bf54cbbb
    feat(skillscan): detect exfil through instance/dataflow network clients (#4265) Aari 2026-07-20 07:04:59 +08:00
  • 0cd55067f3
    fix(skills): reject colon in zip member names to close NTFS ADS smuggling gap (#4236) Daoyuan Li 2026-07-19 07:36:15 -07:00
  • 3ed2e1f1d9
    fix(config): close out #4124 review follow-ups (shared signature helper, resolve_config_path None contract) (#4275) Daoyuan Li 2026-07-19 07:12:30 -07:00
  • 9a5d701355
    fix(channels): document GitHub dedupe TTL, tighten redelivery tests (#4274) Daoyuan Li 2026-07-19 07:08:48 -07:00
  • 532111b2e6
    fix(frontend): encode thread IDs in chat routes (#4302) Ryker_Feng 2026-07-19 22:03:25 +08:00
  • d075be0277
    fix(browserless): surface target-page error status in web_fetch_tool (#4239) Daoyuan Li 2026-07-19 05:08:52 -07:00
  • 5b65d543b1
    fix(channels): key inbound dedupe on chat-scoped workspaces (#4287) Aari 2026-07-19 20:01:52 +08:00
  • d2f8f61e3a
    fix(skills): add security_fail_closed option for moderation model outages (#4297) Hanchen Qiu 2026-07-19 18:56:03 +08:00
  • 271a921baf
    refactor(sandbox): reuse E2B kill helper during eviction (#4298) luo jiyin 2026-07-19 18:45:52 +08:00
  • 867235389d
    Add trace-based behavioral tests with Monocle Test Tools (#4025) Mohammed Ansari 2026-07-19 03:26:26 -07:00
  • 65792c20a5
    fix(frontend): encode artifact URL path segments (#4278) VectorPeak 2026-07-19 17:37:58 +08:00
  • bc9c027a54
    fix(uploads): claim the converted markdown filename before writing it (#4288) Aari 2026-07-19 17:24:31 +08:00
  • 4746a2579b
    fix(loop-detection): clear the per-tool frequency counter on evict/reset (#4295) Andrew Chen 2026-07-19 17:13:44 +08:00
  • dd2f73c1a1
    fix(config): normalize the postgres:// short scheme for the async ORM engine (#4293) Andrew Chen 2026-07-19 17:01:28 +08:00
  • 90d511f3d2
    refactor(sandbox): consolidate E2B client lifecycle helpers (#4262) luo jiyin 2026-07-19 16:20:57 +08:00
  • 0f088033fe
    fix(gateway): prefer X-Trace-Id over metadata.deerflow_trace_id when header is set (#4283) yym36991 2026-07-19 09:13:51 +08:00
  • 283cea567e
    fix(scripts): broaden support bundle secret-key redaction denylist (#4242) Daoyuan Li 2026-07-18 16:39:52 -07:00
  • 75fa028e89
    fix(artifacts): serve inline binary artifacts via FileResponse for Range support (#4281) Daoyuan Li 2026-07-18 16:31:29 -07:00
  • a028dfd5fb
    feat(auth): add keep me signed in login option (#4255) Ryker_Feng 2026-07-18 22:17:15 +08:00
  • e89edb39b1
    fix(gateway): reject non-positive read limits (#4284) Ryker_Feng 2026-07-18 22:12:57 +08:00
  • f8bef42a04
    fix(wechat): validate timing configuration (#4280) Ryker_Feng 2026-07-18 17:53:30 +08:00
  • 5994fdf38c
    fix: avoid forcing frontend nginx upgrades (#4250) Zhengcy05 2026-07-18 17:50:20 +08:00
  • 7757e38b7f
    fix(nginx): allow long chat prompts through /api/langgraph/ without a raw 500 (#4277) Daoyuan Li 2026-07-18 02:48:42 -07:00
  • a0e1d82ef4
    fix(workspace-changes): offload blocking filesystem IO in text-cache lifecycle (#4268) Aari 2026-07-18 17:30:14 +08:00
  • 208df4931d
    doc(changelog): updated the changelog with latest changes (#4270) Willem Jiang 2026-07-18 17:25:45 +08:00
  • c9b6131f8f
    fix(skills): reload mounted skills without restarting Gateway (#4264) Huixin615 2026-07-17 23:22:16 +08:00
  • 1ae02913ea
    fix(skills): cap archive entry count in safe_extract_skill_archive (#4241) Daoyuan Li 2026-07-17 08:00:08 -07:00
  • 5a5c661e9f
    fix(middleware): recover malformed tool-call ids in dangling repair (#4246) Aari 2026-07-17 19:16:42 +08:00
  • 9a4c72db99
    fix(channels): isolate per-message failures in WeChat poll loop (#4231) Daoyuan Li 2026-07-17 01:08:53 -07:00
  • 13afef6278
    fix(tui): interrupt an active run before /quit exits (#4235) Daoyuan Li 2026-07-17 00:48:45 -07:00
  • 7156e745e0
    fix(channels): don't treat a bare "connect" as a bind command (#4251) Andrew Chen 2026-07-17 15:11:15 +08:00
  • 10890e10a8
    feat(authz): propagate trusted authorization principal context (#4203) hataa 2026-07-17 14:49:51 +08:00
  • f9340c1f08
    test(mcp): cover passive skill tool visibility (#4247) Huixin615 2026-07-17 14:39:35 +08:00
  • ae223199fd
    fix(security): escape MindIE tool-response content against </tool_response> breakout (#4253) Yufeng He 2026-07-17 14:23:44 +08:00
  • bc6f1adc71
    fix(channels): dispatch Feishu group commands prefixed with a bot @mention (#4229) Aari 2026-07-17 11:18:20 +08:00
  • 693507870c
    fix(frontend): preserve single tildes in markdown (#4245) Huixin615 2026-07-16 16:57:32 +08:00
  • 756eac0d1a
    feat(tool):Add structured synopsis for oversized tool output previews (#3377) HaotianChen616 2026-07-16 16:41:04 +08:00
  • 7df44f586c
    fix(agents): refuse empty SOUL.md updates in update_agent (#4219) Aari 2026-07-16 14:44:22 +08:00
  • d57f695769
    fix(helm): default sandbox Services to ClusterIP (#3929) (#4190) Zheng Feng 2026-07-16 14:30:05 +08:00
  • 65afc9b1d2
    fix(skills): apply allowed-tools only to active skills (#4098) Huixin615 2026-07-16 14:12:02 +08:00
  • e7d7da9e7c
    fix(frontend): strip <memory> tags in Streamdown to avoid React console error (#4209) qin-chenghan 2026-07-16 14:09:00 +08:00
  • b3a0dac8ad
    fix(channels): accept leading @mentions before /connect bind codes (#4222) Aari 2026-07-16 11:38:56 +08:00
  • 94a34f382d
    feat(context): record effective memory identity per run (#3556) AochenShen99 2026-07-16 09:39:09 +08:00
  • 8da7cbf028
    feat(memory): LLM-assigned per-fact expected_valid_days and staleFactsToExtend (#4143) Tianye Song 2026-07-16 09:34:21 +08:00
  • 259f51ca4f
    fix(github): match allow_authors logins case-insensitively (#4218) Aari 2026-07-16 09:12:29 +08:00
  • 5c80c07dfe
    fix(memory): treat explicit null backend_config values as omitted in DeerMemConfig (#4217) ajayr 2026-07-16 01:29:30 +01:00
  • 1769b2de0d
    fix: read run stop_reason from runtime context (#4188) Vanzeren 2026-07-16 08:19:52 +08:00
  • de55982c5a
    fix(subagents): preserve parent checkpoint namespace (#4215) Nan Gao 2026-07-16 01:03:08 +02:00
  • 45865e9f3f
    fix(tracing): attach Langfuse trace metadata to the goal evaluator (#4202) Daoyuan Li 2026-07-15 07:30:34 -07:00
  • 6ef0aa2aea
    fix(tui): stop empty-id assistant deltas from merging across turns (#4201) Daoyuan Li 2026-07-15 07:27:00 -07:00
  • 3247f61750
    fix(middleware): sanitize invalid tool call arguments (#4193) Huixin615 2026-07-15 22:06:29 +08:00
  • 289adcbb02
    fix(mcp): offload blocking filesystem IO in MCP config update (#3552) ly-wang19 2026-07-15 20:41:56 +08:00
  • a0acdda103
    fix(gateway): keep create_thread idempotent when the insert loses a race (#3800) Yufeng He 2026-07-15 20:33:43 +08:00
  • 959bf13406
    fix(memory): flush memory queue on graceful shutdown to prevent loss (#4181) Tu Naichao 2026-07-15 20:25:41 +08:00
  • fa419b3e4c
    fix(goal): stop continuation_count double-bump in thread_changed_before_continuation stand-down (#4199) Daoyuan Li 2026-07-15 05:21:04 -07:00
  • f0e56dde80
    build(deps): bump h3 from 1.15.6 to 1.15.9 in /frontend (#4211) dependabot[bot] 2026-07-15 20:10:03 +08:00
  • 16919f7c52
    fix(skills): reuse the resolved app config in the no-arg skills prompt section (#4160) Xinmin Zeng 2026-07-15 19:56:09 +08:00
  • e7e9c51988
    Classify four HTTP identity sources (browser session, OIDC, IM channel (#4179) yym36991 2026-07-15 19:42:35 +08:00
  • b68e1c686a
    docs: add the link of LLM Space (#4195) Henry Li 2026-07-15 14:44:08 +08:00
  • 2a7469cdbc
    fix(channels): dedupe GitHub webhook redeliveries (#4104) Daoyuan Li 2026-07-14 21:29:54 -07:00
  • ad45f59d66
    feat(memory): pluggable memory abstraction with self-contained DeerMem backend (#4122) qin-chenghan 2026-07-15 11:21:04 +08:00
  • 1300c6d36b
    feat(authz): add pluggable AuthorizationProvider protocol and config scaffolding (Phase 0, #4063) (#4127) hataa 2026-07-15 10:03:33 +08:00
  • f3e4e5f8f0
    ci(helm): publish chart to charts/ namespace prefix on GHCR (#4175) Zheng Feng 2026-07-15 08:54:36 +08:00
  • 0dd90ccfde
    fix(agents): require config.yaml in update_agent's legacy-agent guard (#4166) Daoyuan Li 2026-07-14 17:13:17 -07:00
  • 8e96a6a252
    fix(security): html-escape the conversation block in MEMORY_UPDATE_PROMPT (#4162) Aari 2026-07-14 23:35:46 +08:00
  • 656f6b364c
    fix(skills): recognize fully deleted public skill packages in review CI (#4169) Daoyuan Li 2026-07-14 08:08:33 -07:00
  • 713ee544b7
    fix(agents): stop persisting base64 image data in checkpoint state (#4140) qin-chenghan 2026-07-14 23:02:26 +08:00
  • 51bb19fa1b
    fix(channels): drop redundant GitHub review-comment webhook fan-out (#4131) Daoyuan Li 2026-07-14 07:56:50 -07:00
  • 60e50537f3
    fix(subagents): prohibit task tool in general-purpose system prompt (#4161) qin-chenghan 2026-07-14 22:51:21 +08:00
  • 9c77046d10
    fix(middleware): drop orphan ToolMessages so strict providers don't 400 (#4080) 黄云龙 2026-07-14 22:43:47 +08:00
  • cdefd4a8aa
    fix(mcp): invalidate tools cache on config content + path, not just newer mtime (#4124) Daoyuan Li 2026-07-14 07:40:51 -07:00
  • abd0c7a585
    docs(api): document stateless /api/runs/stream endpoint (#4177) yym36991 2026-07-14 22:33:57 +08:00
  • c57cf221d3
    fix(security): html-escape the summary input blocks in the summarization prompt (#4182) Aari 2026-07-14 21:51:47 +08:00
  • e492bb1c68
    fix(middleware): window LoopDetection tool-frequency counter so long runs don't false-trip (#4072) 黄云龙 2026-07-14 21:45:37 +08:00
  • 88a1311fe8
    fix(DB): legacy backfill creates missing Index objects on existing tables (#4090) 黄云龙 2026-07-14 21:41:35 +08:00
  • 13fd8e229a
    fix(checkpoint): persist run duration in checkpoints for history reads (#4118) Vanzeren 2026-07-14 21:37:47 +08:00
  • fabadae416
    add Volcengine Coding Plan to quikly setup (#4141) pclin 2026-07-14 13:01:58 +08:00
  • 192ea5155e
    Revert "fix(firecrawl): align tools with installed firecrawl-py v2 SDK surfac…" (#4165) Willem Jiang 2026-07-14 11:57:48 +08:00
  • b7b4b49bfe
    fix(firecrawl): align tools with installed firecrawl-py v2 SDK surface (#4151) 黄云龙 2026-07-14 11:29:47 +08:00
  • 24648194ae
    fix(frontend): show branch action only for completed turns (#4147) Huixin615 2026-07-14 11:11:43 +08:00
  • 41b137c4c4
    fix(security): block forged framework tags in the input guardrail (#4155) Aari 2026-07-14 11:04:11 +08:00