xqvvu
1cc412e1d0
feat(security): account+IP login failure lockout and IP limit fail-closed
...
- Add loginLockout helpers on frequency_limit collection (assert, record, clear, audit log)
- Wire loginByPassword: lock before auth, count auth/password failures, clear on success
- useIPFrequencyLimit failClosed + authFrequencyLimit strict for Mongo errors
- Centralize PASSWORD_LOGIN_LOCK_SECONDS / LOGIN_FAIL_* in env.ts; slim type/env ProcessEnv
- Extend loginByPassword API tests (lockout via stubEnv + resetModules)
Made-with: Cursor
2026-04-15 14:13:00 +08:00
dependabot[bot]
b35288fe5b
chore(deps): bump gdown in /plugins/model/tts-cosevoice ( #6747 )
...
Bumps [gdown](https://github.com/wkentaro/gdown ) from 5.1.0 to 5.2.2.
- [Release notes](https://github.com/wkentaro/gdown/releases )
- [Commits](https://github.com/wkentaro/gdown/compare/v5.1.0...v5.2.2 )
---
updated-dependencies:
- dependency-name: gdown
dependency-version: 5.2.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-14 20:48:11 +08:00
yanzhicong
d23c72690e
feat: add openGauss DataVec as vector database backend ( #6666 )
...
* feat: add openGauss DataVec as vector database backend
Add openGauss with DataVec extension as a new vector storage option alongside PGVector and Milvus. Includes vector DB controller, Docker Compose deployment configs (CN/Global), deploy generation scripts, and test templates.
* test: add opengauss vectorDB integration entry
* test: adjust vector env template for opengauss run
* fix: ts
---------
Co-authored-by: archer <545436317@qq.com >
2026-04-13 20:41:33 +08:00
DigHuang
546b2a8998
refactor: optimize sandbox editor layout and improve preview mode switching logic ( #6746 )
2026-04-13 17:51:08 +08:00
dependabot[bot]
fbdc8e4b8b
chore(deps): bump axios in /plugins/webcrawler/SPIDER ( #6745 )
...
Bumps [axios](https://github.com/axios/axios ) from 1.13.5 to 1.15.0.
- [Release notes](https://github.com/axios/axios/releases )
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md )
- [Commits](https://github.com/axios/axios/compare/v1.13.5...v1.15.0 )
---
updated-dependencies:
- dependency-name: axios
dependency-version: 1.15.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-13 16:30:30 +08:00
Archer
ac04d44457
Add Zod check for api ( #6741 )
...
* feat: llm request zod
* feat: apidataset zod
* feat: training zod
* permission data
* feat: dataset data zod
* add log categories
* update skill
* fix: test
* fix: training billId field
* fix: review
* fix: review
* feat: collection zod
* feat: dataset colletion schema
* fix: review
* review
* fix: ts
* feat: update team
* fix: type
2026-04-13 11:25:12 +08:00
Jon
6253f2240b
build: Bundle server.ts into a single CJS file ( #6736 )
...
* build: Bundle server.ts into a single CJS file
* feat: Add providerSandboxId to sandbox metadata and updates
* feat: Add environment variable to toggle skill server entrypoint
* refactor: Remove providerStatus from sandbox schemas and logic
2026-04-13 10:55:30 +08:00
DigHuang
3df8908851
feat(sandbox): support multimedia preview and source/preview toggle in editor ( #6723 )
...
* style: re-component Editor
* style: re-component Editor
* feat: sandbox file preview support with binary detection and mime type handling
* feat: preview support for markdown, svg, and html files in sandbox editor
* feat(sandbox): support multimedia preview and source/preview toggle in editor
* fix: XSS SVG rendering with MyPhotoView
* refactor: blob URL lifecycle management, improve filename encoding in downloads
* feat: implement S3-based HTML preview for sandbox editor and add PDF support to binary file detection
* refactor: improve sandbox editor stability by adding file size validation
* feat: introduce fileService to encapsulate sandbox file operations and add unit tests
* refactor: secure HTML sandbox preview by fetching content from server and injecting CSP meta tags
* refactor: replace unified file operation API with dedicated endpoints for list, read, write, and download operations
* chore: remove packageManager field from package.json
* fix: sandbox file read error message
* refactor: improve sandbox editor UI styling, type safety, and CSP security policy
* feat: HTML preview link API and standardize sandbox request/response types
* fix: improve log view layout responsiveness by adding overflow handling and flex constraints
* perf: fix review
---------
Co-authored-by: archer <545436317@qq.com >
2026-04-10 23:02:59 +08:00
Archer
8524487034
feat: zod schema ( #6740 )
...
* feat: zod schema
move file api
feat: chat and dataset zod
* fix: review
* feat: dataset openapi
* fix: test
* update cr
2026-04-10 22:55:44 +08:00
Archer
fc6953fcb3
Fix secret ( #6738 )
...
* fix: nosql inject
* fix: nosql
* fix: ts
* doc
* fix: update feedbacksession
v4.14.10.4
2026-04-10 13:58:10 +08:00
Jon
6173a74510
Refactor/unify sandbox client ( #6735 )
...
* chore: update sandbox-adapter to version 0.0.35
* refactor: unify sandbox creation through getSandboxClient
* refactor: Simplify sandbox instance handling logic
* feat: Add support for custom create config in sandbox
2026-04-09 19:26:05 +08:00
Archer
cd75ee160e
fix: team token auth ( #6734 )
...
* fix: team token auth
* fix: Authentication escape
* fix: cr
* Apply suggestions from code review
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* .claude doc
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2026-04-09 18:55:10 +08:00
Archer
e3b5b3788f
fix: mcp auth ( #6733 )
...
* fix: mcp auth
* doc
* doc
v4.14.10.3
2026-04-09 15:12:39 +08:00
Archer
d2d48fc177
doc ( #6730 )
2026-04-08 18:15:20 +08:00
Archer
ec9e8fdfc5
deploy doc ( #6728 )
2026-04-08 16:15:25 +08:00
Ryo
d579559cb1
fix: openapi schema issue while creating openapi json ( #6727 )
2026-04-08 09:53:17 +08:00
Archer
c8bbd8a660
version ( #6726 )
...
* version
* fix: default model
v4.14.10.2
2026-04-08 09:37:25 +08:00
Jon
57a505f837
Agent skill dev ( #6668 )
...
* chore: Rename service & container names for consistency in Docker configs (#6710 )
* chore: Rename container names for consistency in Docker configs
* chore: Rename service names for consistency in Docker configs
chore: Update OpenSandbox versions and image repositories (#6709 )
* chore: Update OpenSandbox versions and image repositories
* yml version
* images
* init yml
* port
---------
Co-authored-by: archer <545436317@qq.com >
refactor(chat): optimize sandbox status logic and decouple UI/Status hooks (#6713 )
* refactor(chat): optimize sandbox status logic and decouple UI/Status hooks
* fix: useRef, rename onClose to afterClose
Update .env.template (#6720 )
aiproxy默认的请求地址改成http协议
feat: comprehensive agent skill management and sandbox infrastructure optimization
- Skill System: Implemented a full skill management module including CRUD operations, folder organization, AI-driven skill generation, and versioning (switch/update).
- Sandbox Infrastructure: Introduced 'volume-manager' for PVC and Docker volume lifecycle management, replacing the MinIO sync-agent for better data persistence.
- Workflow Integration: Enhanced the Agent node to support skill selection and configuration, including new UI components and data normalization.
- Permission Management: Added granular permission controls for skills, supporting collaborators, owner transfers, and permission inheritance.
- UI/UX: Added a dedicated Skill dashboard, sandbox debug interface (terminal, logs, and iframe proxy), and comprehensive i18n support.
- Maintenance: Migrated Docker services to named volumes, optimized sandbox instance limits, and improved error handling for sandbox providers.
Co-authored-by: chanzhi82020 <chenzhi@sangfor.com.cn >
Co-authored-by: lavine77
Signed-off-by: Jon <ljp@sangfor.com.cn >
feat: hide skill
prettier
* perf: hide skill code
* fix: ts
* lock
* perf: tool code
* fix: ts
* lock
* fix: test
* fix: openapi
* lock
* fix: test
* null model
---------
Co-authored-by: archer <545436317@qq.com >
2026-04-07 22:52:03 +08:00
Archer
5c709afef0
fix: model refresh ( #6725 )
2026-04-07 21:48:43 +08:00
Deepturn
16b46c7d7d
Update FastGPT image tags to v4.14.9.5 ( #6721 )
2026-04-07 21:01:52 +08:00
cafe babe
ccdc85c423
Update .env.template ( #6720 )
...
aiproxy默认的请求地址改成http协议
2026-04-06 22:10:41 +08:00
DigHuang
7cca3f9f57
refactor(chat): optimize sandbox status logic and decouple UI/Status hooks ( #6713 )
...
* refactor(chat): optimize sandbox status logic and decouple UI/Status hooks
* fix: useRef, rename onClose to afterClose
2026-04-03 15:22:50 +08:00
Jon
8f731b55b3
chore: Update OpenSandbox versions and image repositories ( #6709 )
...
* chore: Update OpenSandbox versions and image repositories
* yml version
* images
* init yml
* port
---------
Co-authored-by: archer <545436317@qq.com >
2026-04-02 23:10:34 +08:00
Jon
0e46ccc72d
chore: Rename service & container names for consistency in Docker configs ( #6710 )
...
* chore: Rename container names for consistency in Docker configs
* chore: Rename service names for consistency in Docker configs
2026-04-02 17:01:04 +08:00
Archer
a55fdb4b0e
deploy doc ( #6711 )
...
* deploy doc
* deploy doc
2026-04-02 13:43:47 +08:00
Jon
515f1077c8
chore: Update Docker compose files to use named volumes ( #6704 )
...
* chore: Update Docker compose files to use named volumes
* chore: Update Docker compose files to use named volumes (prod)
2026-04-02 13:40:44 +08:00
Deepturn
7049167c88
Fix docker-compose command syntax ( #6701 )
2026-04-02 10:04:45 +08:00
Archer
8e248d7bed
mcp perf ( #6697 )
...
* mcp perf
* fix: null object
v4.14.10.1
2026-04-01 19:04:42 +08:00
Ryo
e382a74e62
fix: number input ( #6698 )
2026-04-01 18:24:31 +08:00
Archer
fbbe852596
update deploy yml ( #6695 )
...
* deploy doc
* doc
* doc
* doc
2026-04-01 13:34:01 +08:00
Ryo
529e29e02e
chore: add cpu metrics, lower frequency to report metrics and trace ( #6693 )
2026-04-01 11:24:50 +08:00
Archer
04d2caa81a
dockerfile ( #6694 )
2026-04-01 11:23:54 +08:00
Archer
6c71bdfeb2
dockerfile ( #6692 )
2026-04-01 10:48:36 +08:00
Archer
33a796397f
update version ( #6691 )
2026-04-01 10:17:15 +08:00
Archer
e77145f9e6
udpate docker volumn manager ( #6690 )
2026-04-01 10:15:03 +08:00
Archer
d5ea3179a0
V4.14.10 dev ( #6686 )
...
* docker
* fix: community version check
* perf: deploy doc
* doc
* doc
* remove invalide md
2026-03-31 23:15:29 +08:00
Archer
8a2b321296
version ( #6685 )
2026-03-31 19:00:09 +08:00
Archer
7f2dd9d24a
fix: mcp toolcall ( #6683 )
...
* fix: mcp toolcall
* perf: test sign
2026-03-31 17:02:56 +08:00
Xin Xiao
736667fbd1
fix: fix left-aligned list marker styling in chat welcome guide ( #6681 )
2026-03-31 17:02:30 +08:00
gaga0714
c5371ae886
fix: deal with undefined valueType ( #6684 )
...
* fix: deal with undefined valueType
* fix
* fix
* fix key
2026-03-31 16:56:32 +08:00
Archer
b884631363
feat: sandbox readfile tool ( #6679 )
...
* feat: sandbox readfile tool
* perf: read stream
* fix: schema name
* update sdk version
* udpate enum
* perf: time
2026-03-31 13:50:26 +08:00
Archer
3f4400a500
V4.14.10 dev ( #6674 )
...
* feat: model config with brand-new price calculate machanism (#6616 )
* fix: image read and json error (Agent) (#6502 )
* fix:
1.image read
2.JSON parsing error
* dataset cite and pause
* perf: plancall second parse
* add test
---------
Co-authored-by: archer <545436317@qq.com >
* master message
* remove invalid code
* wip: model config
* feat: model config with brand-new price calculate machanism
* merge main branch
* ajust calculate way
* ajust priceTiers resolve procession
* perf: price config code
* fix: default price
* fix: test
* fix: comment
* fix test
---------
Co-authored-by: YeYuheng <57035043+YYH211@users.noreply.github.com >
Co-authored-by: archer <545436317@qq.com >
* wip: fix modal UI (#6634 )
* wip: fix modal UI
* fix: maxInputToken set
* chore: add price unit for non llm models
* chore: replace question mark icon with beta tag (#6672 )
* feat:rerank too long; fix:rerank ui(agent),embedding returns 0 (#6663 )
* feat:rerank too long; fix:rerank ui(agent),embedding returns 0
* rerank
* fix:rerank function
* perf: rerank code
* fix rerank
* perf: model price ui
---------
Co-authored-by: archer <545436317@qq.com >
* remove llmtype field
* revert model init
* fix: filed
* fix: model select filter
* perf: multiple selector render
* remove invalid checker
* remove invalid i18n
* perf: model selector tip
* perf: model selector tip
* fix cr
* limit pnpm version
* fix: i18n
* fix action
* set default mintoken
* update i18n
* perf: usage push
* fix:rerank model ui (#6677 )
* fix: tier match error
* fix: testr
---------
Co-authored-by: Ryo <whoeverimf5@gmail.com >
Co-authored-by: YeYuheng <57035043+YYH211@users.noreply.github.com >
2026-03-30 10:05:42 +08:00
Archer
03dd9c00a8
perf: runtime performance ( #6665 )
...
* perf: runtime performance
* add stringify trace
* remove trace val
* remove trace val
* remove logger
* remove logger
* add test
* add log
2026-03-27 17:06:36 +08:00
Ryo
2234859440
perf: add process memory metrics ( #6656 )
...
* perf: reduce trace span and metrics
* perf: add process memory metrics
* fix: translations
2026-03-26 23:37:45 +08:00
Archer
6e6b026d13
fix: auth code secret ( #6662 )
2026-03-26 22:47:11 +08:00
Archer
34c85ad5b2
fix: action ( #6659 )
2026-03-26 18:33:16 +08:00
Archer
cc3a91d009
Opensandbox ( #6657 )
...
* Opensandbox (#6651 )
* volumn manager
* feat: opensandbox volumn
* perf: action (#6654 )
* perf: action
* doc
* doc
* deploy tml
* update template
2026-03-26 18:25:57 +08:00
Archer
d0f96723ea
fix: plugin catch ( #6643 )
v4.14.9.5
2026-03-25 20:20:19 +08:00
Archer
064b2ce65d
fix: ui ( #6642 )
2026-03-25 18:49:55 +08:00
Ryo
0ce410d742
clean icons and translations ( #6641 )
2026-03-25 18:07:18 +08:00