Linyao Du 616c6e2e36

fix(uploads): reject Windows staging aliases before batch ingestion (#6149) ...

* fix(uploads): reject Windows staging aliases before batch ingestion

* fix(uploads): cover shelf names and case-insensitive staging aliases

* test(uploads): isolate legacy alias filesystem cases

2026-10-02 22:50:30 +08:00

..

agents

feat(storage): restore tool outputs from shared blobs (#6159)

2026-10-02 19:33:25 +08:00

authz

feat(authz): middleware-declared tool path Layer 1 now covers tools declared by middlewares (#6105)

2026-10-01 18:26:58 +08:00

capabilities

feat(capabilities): unify catalog, plugin configuration and agent selection (#5497)

2026-09-19 12:14:24 +08:00

community

fix(community): resolve SSRF-guarded hostnames off the event loop (#6140)

2026-10-02 22:33:48 +08:00

config

fix(config): reject boolean title max_words/max_chars (#6187)

2026-10-02 19:25:14 +08:00

extensions

feat(authz): middleware-declared tool path Layer 1 now covers tools declared by middlewares (#6105)

2026-10-01 18:26:58 +08:00

guardrails

feat(authz): middleware-declared tool path Layer 1 now covers tools declared by middlewares (#6105)

2026-10-01 18:26:58 +08:00

integrations

fix(sandbox): give fresh bash.exec runs immediate stdin EOF (#6117)

2026-10-01 07:34:32 +08:00

mcp

feat(mcp): propagate cache resets across workers (#6126)

2026-10-01 10:21:24 +08:00

models

fix(config): correct Gemini official endpoint reasoning example (#6161)

2026-10-02 22:32:21 +08:00

persistence

feat(scheduler): push scheduled task results to IM channels via a notification outbox (#6135)

2026-10-01 17:59:30 +08:00

projects

fix(uploads): reject Windows staging aliases before batch ingestion (#6149)

2026-10-02 22:50:30 +08:00

reflection

docs: govern agent guidance size (#4799)

2026-08-13 21:49:04 +08:00

runtime

fix(runtime): honor both cursors when reading thread messages (#6136)

2026-10-01 20:11:10 +08:00

sandbox

fix(middlewares): include file line count in read-before-write block message and clarify read_file range error (#6020)

2026-10-01 14:40:04 +08:00

scheduler

fix(scheduler): prevent fixed-hour cron tasks from firing twice on DST fall-back (#6066)

2026-09-30 09:50:39 +08:00

skills

fix(paths): reject Windows reserved names on host-visible paths (#6102)

2026-10-01 09:11:19 +08:00

storage

feat(storage): restore tool outputs from shared blobs (#6159)

2026-10-02 19:33:25 +08:00

subagents

feat(authz): middleware-declared tool path Layer 1 now covers tools declared by middlewares (#6105)

2026-10-01 18:26:58 +08:00

tools

fix(community): resolve SSRF-guarded hostnames off the event loop (#6140)

2026-10-02 22:33:48 +08:00

tracing

fix(tracing): tag graph runs with the effective model (#5902)

2026-09-27 08:06:03 +08:00

tui

fix(cli): exit non-zero when a headless run ends in an LLM error fallback (#6056)

2026-09-30 19:48:32 +08:00

typesafe

feat(memory): add Jev pre-screening and signal classification over a shared TypeSafe client (#5906)

2026-09-27 20:28:05 +08:00

uploads

fix(uploads): reject Windows staging aliases before batch ingestion (#6149)

2026-10-02 22:50:30 +08:00

utils

fix: track converted upload ownership for outlines and listings (#6101)

2026-10-01 20:36:35 +08:00

workspace_changes

fix(workspace-changes): record symlink targets without the verbatim prefix (#5250)

2026-09-08 14:51:57 +08:00

__init__.py

refactor: split backend into harness (deerflow.*) and app (app.*) (#1131)

2026-03-14 22:55:52 +08:00

AGENTS.md

fix(cli): exit non-zero when a headless run ends in an LLM error fallback (#6056)

2026-09-30 19:48:32 +08:00

checkpoint_patches.py

chore(deps): bump langgraph-checkpoint to 4.2.0 / postgres 3.1.2 and delete the saver patch (#5734)

2026-09-23 09:18:26 +08:00

client.py

fix: track converted upload ownership for outlines and listings (#6101)

2026-10-01 20:36:35 +08:00

constants.py

fix(conversation): clarify reference semantics and keep reader pages inline (#5421)

2026-09-14 15:05:30 +08:00

knowledge_scope.py

feat(knowledge): add per-message RAGFlow retrieval scope (#5238)

2026-09-18 16:59:31 +08:00

logging_config.py

fix(logging): redact credential-bearing header values in urllib3's header-parse dump (#5752)

2026-09-26 15:06:48 +08:00

mcp_scope.py

fix(mcp): close thread-scoped MCP sessions on thread deletion (#5956)

2026-09-29 16:53:18 +08:00

trace_context.py

feature(gateway): issue request trace ids unconditionally (#5119)

2026-09-01 16:49:39 +08:00