GareArc
3f75a420cd
fix(telemetry): remove app_id parameter from standalone prompt generation endpoints
...
Remove app_id=None from three prompt generation endpoints that lack proper
app context. These standalone utilities only have tenant_id available, so
we don't pass app_id at all rather than passing incomplete information.
Affected endpoints:
- /rule-generate (RuleGenerateApi)
- /code-generate (RuleCodeGenerateApi)
- /structured-output-generate (RuleStructuredOutputGenerateApi)
2026-02-04 02:01:43 -08:00
GareArc
c56e5a5b71
feat(telemetry): add prompt generation telemetry to Enterprise OTEL
...
- Add PromptGenerationTraceInfo trace entity with operation_type field
- Implement telemetry for rule-generate, code-generate, structured-output, instruction-modify operations
- Emit metrics: tokens (total/input/output), duration histogram, requests counter, errors counter
- Emit structured logs with model info and operation context
- Content redaction controlled by ENTERPRISE_INCLUDE_CONTENT env var
- Fix user_id propagation in TraceTask kwargs
- Fix latency calculation when llm_result is None
No spans exported - metrics and logs only for lightweight observability.
2026-02-04 00:38:17 -08:00
GareArc
69b11cc364
security: fix IDOR and privilege escalation in set_default_provider
...
- Add tenant_id verification to prevent IDOR attacks
- Add admin check for enterprise tenant-wide default changes
- Preserve non-enterprise behavior (users can set own defaults)
2026-01-26 16:01:06 -08:00
Xiyuan Chen
7058de7a88
feat: implement workspace permission checks for member invitations an… ( #31202 )
2026-01-25 21:21:58 -08:00
非法操作
491e1fd6a4
chore: case insensitive email ( #29978 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
2026-01-13 15:42:44 +08:00
zyssyz123
fe0802262c
feat: credit pool ( #30720 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-01-08 13:17:30 +08:00
Xiyuan Chen
adaf0e32c0
feat: add decryption decorators for password and code fields in webapp ( #30704 )
2026-01-08 10:03:39 +08:00
Asuka Minato
885f226f77
refactor: split changes for api/controllers/console/workspace/trigger… ( #30627 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-01-07 21:18:02 +08:00
Sara Rasool
4f0fb6df2b
chore: use from __future__ import annotations ( #30254 )
...
Co-authored-by: Dev <dev@Devs-MacBook-Pro-4.local>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Asuka Minato <i@asukaminato.eu.org>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2026-01-06 23:57:20 +09:00
Asuka Minato
0294555893
refactor: port api/fields/file_fields.py ( #30638 )
2026-01-06 22:55:58 +08:00
-LAN-
55de731f9c
refactor(api): clarify published RAG pipeline invoke naming ( #30644 )
2026-01-06 23:48:06 +09:00
lif
f3ca8be9f9
refactor: clean type: ignore comments in login.py and template_transformer.py ( #30510 )
...
Signed-off-by: majiayu000 <1835304752@qq.com>
2026-01-06 14:33:27 +08:00
Asuka Minato
f320fd5f95
refactor: port controllers/console/app/app.py ( #30522 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-01-06 10:12:52 +08:00
Asuka Minato
7e3bfb9250
refactor: split changes for api/controllers/console/datasets/hit_test… ( #30581 )
2026-01-06 10:08:09 +08:00
Asuka Minato
c0331b23a9
refactor: split changes for api/controllers/web/conversation.py ( #30582 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-01-06 10:06:48 +08:00
Asuka Minato
ce87371bef
refactor: split changes for api/controllers/web/saved_message.py ( #30583 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-01-06 10:06:21 +08:00
NeatGuyCoding
615c313f80
fix(api): refactors the SQL LIKE pattern escaping logic to use a centralized utility function, ensuring consistent and secure handling of special characters across all database queries. ( #30450 )
...
Signed-off-by: NeatGuyCoding <15627489+NeatGuyCoding@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-01-06 09:56:30 +08:00
wangxiaolei
bc317a0009
feat: return data_source_info and data_source_detail_dict ( #29912 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-01-05 11:04:03 +08:00
Maries
79913590ae
fix(api): surface subscription deletion errors to users ( #30333 )
2026-01-05 11:02:04 +08:00
Asuka Minato
2cef879209
refactor: more ns.model to BaseModel ( #30445 )
2026-01-04 17:12:28 +08:00
Asuka Minato
5b02e5dcb6
refactor: migrate some ns.model to BaseModel ( #30388 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-01-01 00:38:12 +08:00
wangxiaolei
fa69cce1e7
fix: fix create app xss issue ( #30305 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-12-31 15:57:39 +09:00
lif
925168383b
fix: keyword search now matches both content and keywords fields ( #29619 )
...
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-12-31 10:28:14 +08:00
zyssyz123
3a59ae9617
feat: add oauth_new_user flag for frontend when user oauth login ( #30370 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: hj24 <mambahj24@gmail.com>
2025-12-31 10:10:58 +08:00
Maries
14bff10201
fix(api): remove tool provider list cache to fix cache inconsistency ( #30323 )
...
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-12-29 16:58:38 +08:00
Asuka Minato
f0d02b4b91
refactor: split changes for api/controllers/console/explore/message.py ( #29890 )
2025-12-26 11:02:12 +08:00
Asuka Minato
d100354851
refactor: split changes for api/controllers/console/explore/saved_mes… ( #29889 )
2025-12-26 11:00:31 +08:00
Asuka Minato
93d1b2fc32
refactor: split changes for api/controllers/console/workspace/load_ba… ( #29887 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-12-26 11:00:03 +08:00
zhaobingshuang
fa1009b938
fix(dataset): dataset tags service_api error "Dataset not found" ( #30028 )
...
Co-authored-by: zbs <zbs@cailian.onaliyun.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-12-26 10:55:42 +08:00
wangxiaolei
bdd8a35b9d
feat: add mcp tool display directly ( #30019 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-12-26 10:41:10 +08:00
Asuka Minato
7e06225ce2
refactor: part of remove all reqparser ( #29847 )
2025-12-25 19:57:07 +08:00
-LAN-
1ebc17850b
fix(api): force download for HTML previews ( #30090 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-12-25 11:43:07 +08:00
Maries
02e0fadef7
feat: add editing support for trigger subscriptions ( #29957 )
...
Co-authored-by: yyh <yuanyouhuilyz@gmail.com>
2025-12-24 19:15:54 +08:00
Rhys
a5309bee25
fix: handle missing `credential_id` ( #30051 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-12-24 11:21:51 +08:00
Asuka Minato
037b8ae9e2
refactor: split changes for api/controllers/web/forgot_password.py ( #29858 )
2025-12-24 09:41:51 +08:00
Asuka Minato
0a448a13c8
refactor: split changes for api/controllers/console/extension.py ( #29888 )
2025-12-24 09:41:42 +08:00
Asuka Minato
de021ff3e0
refactor: split changes for api/controllers/web/remote_files.py ( #29853 )
2025-12-23 21:30:30 +09:00
非法操作
d005689d0a
chore: remove unused login call from activation flow ( #30017 )
2025-12-23 12:26:52 +08:00
wangxiaolei
65e8fdc0e4
feat: support var filer in conversation service ( #29245 )
2025-12-22 21:48:11 +08:00
Asuka Minato
accc91e89d
refactor: split changes for api/controllers/web/message.py ( #29874 )
2025-12-22 21:47:24 +08:00
Asuka Minato
95c58eac83
refactor: split changes for api/controllers/web/app.py ( #29857 )
2025-12-22 20:09:58 +08:00
Novice
0ab80fe5c0
fix: invalidate tool provider cache after MCP authentication ( #29972 )
2025-12-22 12:38:42 +08:00
Asuka Minato
ba73964dfd
refactor: split changes for api/controllers/console/explore/conversat… ( #29893 )
2025-12-22 09:40:41 +08:00
Asuka Minato
4cf65f0137
refactor: split changes for api/controllers/console/explore/installed… ( #29891 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-12-22 09:40:32 +08:00
Novice
7501360663
fix: add RFC 9728 compliant well-known URL discovery with path insertion fallback ( #29960 )
2025-12-21 09:19:11 +08:00
Asuka Minato
4320503209
refactor: split changes for api/controllers/console/explore/completio… ( #29894 )
2025-12-19 17:51:13 +08:00
Asuka Minato
3b8650eb6b
refactor: split changes for api/controllers/web/completion.py ( #29855 )
2025-12-19 12:16:12 +08:00
Asuka Minato
82220a645c
refactor: split changes for api/controllers/web/audio.py ( #29856 )
...
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-12-18 17:30:58 +08:00
quicksand
b0bef1a120
fix(api): resolve errors when setting visibility to partial members ( #29830 )
2025-12-18 16:56:24 +08:00
Asuka Minato
a954bd0616
refactor: part of remove all reqparser ( #29848 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-12-18 16:52:51 +08:00