jyong
0ec037b803
dev/reformat
2025-09-16 16:08:04 +08:00
jyong
05aec66424
fix re-chunk document
2025-09-16 16:05:01 +08:00
jyong
610f0414db
fix document retry
2025-09-16 15:29:19 +08:00
jyong
2f1c47406c
Merge branch 'feat/rag-2' into feat/add-dataset-service-api-enable
...
# Conflicts:
# api/controllers/console/datasets/datasets.py
# api/controllers/service_api/wraps.py
# api/services/dataset_service.py
2025-09-16 15:21:23 +08:00
QuantumGhost
dd34002db2
Merge remote-tracking branch 'upstream/main' into feat/rag-2
2025-09-16 14:59:35 +08:00
-LAN-
bab4975809
chore: add ast-grep rule to convert Optional[T] to T | None ( #25560 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-15 13:06:33 +08:00
Guangdong Liu
07d383ffaa
refactor: update API routes and documentation for app and datasets endpoints ( #25628 )
2025-09-15 10:59:11 +08:00
Ritoban Dutta
67a686cf98
[Chore/Refactor] use __all__ to specify export member. ( #25681 )
2025-09-15 09:45:35 +08:00
Yongtao Huang
831548132e
Merge branch 'feat/rag-2' into fix-permission
2025-09-13 23:42:32 +08:00
Yongtao Huang
ec87474d45
Fix worng permission logic
2025-09-13 23:40:59 +08:00
Krito.
a13d7987e0
chore: adopt StrEnum and auto() for some string-typed enums ( #25129 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-12 21:14:26 +08:00
QuantumGhost
32a1a61d65
security(api): enforce privilege validation for dataset-to-pipeline transformation
...
The transformation from classic dataset to knowledge pipeline represents an irreversible
write operation that permanently alters the dataset structure. To prevent unauthorized
modifications, this change implements strict privilege validation in `RagPipelineTransformApi`.
Only users with editor privileges or dataset operator roles are authorized to execute
this transformation, ensuring proper access control for this critical operation.
2025-09-12 17:07:26 +08:00
jyong
ad870de554
add dataset service api enable
2025-09-12 15:35:13 +08:00
Guangdong Liu
285291f545
refactor: update API routes and documentation for console endpoints ( #25554 )
2025-09-12 11:51:24 +08:00
zyssyz123
c2fcd2895b
Feat/email register refactor ( #25369 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: Joel <iamjoel007@gmail.com>
2025-09-12 10:24:54 +08:00
Yongtao Huang
4511f4f537
Remove redundant parse_args call in WorkflowByIdApi.patch ( #25498 )
2025-09-12 09:40:41 +08:00
QuantumGhost
874406d934
security(api): fix privilege escalation vulnerability in model config and chat message APIs ( #25518 )
...
The `ChatMessageApi` (`POST /console/api/apps/{app_id}/chat-messages`) and
`ModelConfigResource` (`POST /console/api/apps/{app_id}/model-config`)
endpoints do not properly validate user permissions, allowing users without `editor`
permission to access restricted functionality.
This PR addresses this issue by adding proper permission check.
2025-09-11 14:53:35 +08:00
Asuka Minato
cbc0e639e4
update sql in batch ( #24801 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
2025-09-10 13:00:17 +08:00
Guangdong Liu
b51c724a94
refactor: Migrate part of the console basic API module to Flask-RESTX ( #24732 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
2025-09-10 12:15:47 +08:00
-LAN-
08dd3f7b50
Fix basedpyright type errors ( #25435 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-10 01:54:26 +08:00
Asuka Minato
38057b1b0e
add typing to all wraps ( #25405 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-09 16:48:33 +08:00
twwu
045d07885d
Merge branch 'main' into fix/value-content-rerender-error
2025-09-09 16:40:08 +08:00
Yongtao Huang
4aba570fa8
Fix flask response: 200 -> {}, 200 ( #25404 )
2025-09-09 15:06:18 +08:00
Xiyuan Chen
64c9a2f678
Feat/credential policy ( #25151 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-08 23:45:05 -07:00
zyssyz123
ea61420441
Revert "feat: email register refactor" ( #25367 )
2025-09-08 19:20:09 +08:00
zyssyz123
860ee20c71
feat: email register refactor ( #25344 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-08 17:51:43 +08:00
-LAN-
23cd615489
Merge branch 'feat/queue-based-graph-engine' into feat/rag-2
2025-09-08 14:30:43 +08:00
Cluas
f891c67eca
feat: add MCP server headers support #22718 ( #24760 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: Novice <novice12185727@gmail.com>
2025-09-08 14:10:55 +08:00
-LAN-
299141ae01
Merge remote-tracking branch 'origin/main' into feat/queue-based-graph-engine
2025-09-08 13:56:45 +08:00
Asuka Minato
f6059ef389
add more typing ( #24949 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-08 10:40:00 +08:00
Asuka Minato
16a3e21410
more assert ( #24996 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-08 09:59:43 +08:00
-LAN-
9b8a03b53b
[Chore/Refactor] Improve type annotations in models module ( #25281 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-08 09:42:27 +08:00
-LAN-
abb53f11ad
Merge remote-tracking branch 'origin/main' into feat/queue-based-graph-engine
2025-09-06 16:05:13 +08:00
Asuka Minato
a78339a040
remove bare list, dict, Sequence, None, Any ( #25058 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
2025-09-06 03:32:23 +08:00
jyong
b9394d542c
Merge branch 'feat/queue-based-graph-engine' into feat/rag-2
...
# Conflicts:
# api/core/app/apps/advanced_chat/generate_task_pipeline.py
# api/pyproject.toml
# api/uv.lock
# docker/docker-compose-template.yaml
# docker/docker-compose.yaml
# web/package.json
2025-09-04 20:30:08 +08:00
-LAN-
938a845852
Merge remote-tracking branch 'origin/main' into feat/queue-based-graph-engine
2025-09-04 12:48:58 +08:00
Yongtao Huang
865ba8bb4f
Minor fix: correct get_app_model mode for delete() ( #25082 )
...
Signed-off-by: Yongtao Huang <yongtaoh2022@gmail.com>
2025-09-04 11:08:31 +08:00
Novice
68f4d4b97c
fix(rag-pipeline-dsl): dsl import session error
2025-09-04 11:03:45 +08:00
-LAN-
9c96b23d55
Merge remote-tracking branch 'origin/main' into feat/queue-based-graph-engine
2025-09-04 00:27:08 +08:00
NeatGuyCoding
a9c7669c16
chore: comply to RFC 6750 and improve bearer token split ( #24955 )
2025-09-03 22:29:08 +08:00
jyong
d4aed3df5c
Merge branch 'feat/queue-based-graph-engine' into feat/rag-2
...
# Conflicts:
# api/core/memory/token_buffer_memory.py
# api/core/rag/extractor/notion_extractor.py
# api/core/repositories/sqlalchemy_workflow_node_execution_repository.py
# api/core/variables/variables.py
# api/core/workflow/graph/graph.py
# api/core/workflow/graph_engine/entities/event.py
# api/services/dataset_service.py
# web/app/components/app-sidebar/index.tsx
# web/app/components/base/tag-management/selector.tsx
# web/app/components/base/toast/index.tsx
# web/app/components/datasets/create/website/index.tsx
# web/app/components/datasets/create/website/jina-reader/base/options-wrap.tsx
# web/app/components/workflow/header/version-history-button.tsx
# web/app/components/workflow/hooks/use-inspect-vars-crud-common.ts
# web/app/components/workflow/hooks/use-workflow-interactions.ts
# web/app/components/workflow/panel/version-history-panel/index.tsx
# web/service/base.ts
2025-09-03 15:01:06 +08:00
-LAN-
8c97937cae
Merge remote-tracking branch 'origin/main' into feat/queue-based-graph-engine
2025-09-03 13:53:43 +08:00
非法操作
b673560b92
feat: improve multi model credentials ( #25009 )
...
Co-authored-by: Claude <noreply@anthropic.com>
2025-09-03 13:52:31 +08:00
QuantumGhost
e2ff7fac77
fix(api): fix variable truncation related field not returned.
2025-09-03 12:29:38 +08:00
-LAN-
b81745aed8
Merge remote-tracking branch 'origin/main' into feat/queue-based-graph-engine
2025-09-03 11:56:05 +08:00
-LAN-
9d5956cef8
[Chore/Refactor] Switch from MyPy to Basedpyright for type checking ( #25047 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
2025-09-03 11:52:26 +08:00
湛露先生
1fff4620e6
clean console apis and rag cleans. ( #25042 )
...
Signed-off-by: zhanluxianshen <zhanluxianshen@163.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-03 11:25:18 +08:00
-LAN-
8c41d95d03
Merge remote-tracking branch 'origin/main' into feat/queue-based-graph-engine
2025-09-03 11:06:42 +08:00
Will
5092e5f631
fix: workflow not published ( #25030 )
2025-09-03 10:07:31 +08:00
Yongtao Huang
bc9efa7ea8
Refactor: use DatasourceType.XX.value instead of hardcoded ( #25015 )
...
Signed-off-by: Yongtao Huang <yongtaoh2022@gmail.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-03 08:56:48 +08:00
