b04d945b3d
Merge branch 'main' into feat/rag-2
2025-09-16 19:29:27 +08:00
b5a7e64e19
Fix incorrect API endpoint routing from PR #25628 ( #25778 )
2025-09-16 19:20:26 +08:00
8cbfaa2c03
dev/reformat
2025-09-16 19:13:22 +08:00
9ed6679966
dev/reformat
2025-09-16 17:34:22 +08:00
98db7d365c
dev/reformat
2025-09-16 17:33:56 +08:00
7b9326a411
dev/reformat
2025-09-16 17:08:39 +08:00
1c6e57d3df
dev/reformat
2025-09-16 16:41:50 +08:00
0ec037b803
dev/reformat
2025-09-16 16:08:04 +08:00
05aec66424
fix re-chunk document
2025-09-16 16:05:01 +08:00
610f0414db
fix document retry
2025-09-16 15:29:19 +08:00
2f1c47406c
Merge branch 'feat/rag-2' into feat/add-dataset-service-api-enable
...
# Conflicts:
# api/controllers/console/datasets/datasets.py
# api/controllers/service_api/wraps.py
# api/services/dataset_service.py
2025-09-16 15:21:23 +08:00
dd34002db2
Merge remote-tracking branch 'upstream/main' into feat/rag-2
2025-09-16 14:59:35 +08:00
8346506978
fix document retry
2025-09-16 14:14:09 +08:00
bab4975809
chore: add ast-grep rule to convert Optional[T] to T | None ( #25560 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-15 13:06:33 +08:00
07d383ffaa
refactor: update API routes and documentation for app and datasets endpoints ( #25628 )
2025-09-15 10:59:11 +08:00
67a686cf98
[Chore/Refactor] use __all__ to specify export member. ( #25681 )
2025-09-15 09:45:35 +08:00
80c32a130f
add dataset service api enable
2025-09-14 20:43:49 +08:00
4f868275a9
example for __all__ ( #25666 )
2025-09-14 18:40:06 +08:00
831548132e
Merge branch 'feat/rag-2' into fix-permission
2025-09-13 23:42:32 +08:00
ec87474d45
Fix worng permission logic
2025-09-13 23:40:59 +08:00
a13d7987e0
chore: adopt StrEnum and auto() for some string-typed enums ( #25129 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com >
2025-09-12 21:14:26 +08:00
32a1a61d65
security(api): enforce privilege validation for dataset-to-pipeline transformation
...
The transformation from classic dataset to knowledge pipeline represents an irreversible
write operation that permanently alters the dataset structure. To prevent unauthorized
modifications, this change implements strict privilege validation in `RagPipelineTransformApi`.
Only users with editor privileges or dataset operator roles are authorized to execute
this transformation, ensuring proper access control for this critical operation.
2025-09-12 17:07:26 +08:00
ad870de554
add dataset service api enable
2025-09-12 15:35:13 +08:00
285291f545
refactor: update API routes and documentation for console endpoints ( #25554 )
2025-09-12 11:51:24 +08:00
ec808f3fe8
refactor: centralize default end user session ID constant ( #25416 )
...
This PR refactors the handling of the default end user session ID by centralizing it as an enum in the models module where the `EndUser` model is defined. This improves code organization and makes the relationship between the constant and the model clearer.
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com >
2025-09-12 10:27:16 +08:00
c2fcd2895b
Feat/email register refactor ( #25369 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com >
Co-authored-by: Joel <iamjoel007@gmail.com >
2025-09-12 10:24:54 +08:00
bb1514be2d
Force update search method to keyword_search ( #25464 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-12 10:12:25 +08:00
4511f4f537
Remove redundant parse_args call in WorkflowByIdApi.patch ( #25498 )
2025-09-12 09:40:41 +08:00
84e3571ec3
fix: delete get upload file endpoint ( #25543 )
...
Co-authored-by: jyong <718720800@qq.com >
2025-09-12 09:36:53 +08:00
874406d934
security(api): fix privilege escalation vulnerability in model config and chat message APIs ( #25518 )
...
The `ChatMessageApi` (`POST /console/api/apps/{app_id}/chat-messages`) and
`ModelConfigResource` (`POST /console/api/apps/{app_id}/model-config`)
endpoints do not properly validate user permissions, allowing users without `editor`
permission to access restricted functionality.
This PR addresses this issue by adding proper permission check.
2025-09-11 14:53:35 +08:00
cbc0e639e4
update sql in batch ( #24801 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com >
2025-09-10 13:00:17 +08:00
b51c724a94
refactor: Migrate part of the console basic API module to Flask-RESTX ( #24732 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com >
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com >
Co-authored-by: -LAN- <laipz8200@outlook.com >
2025-09-10 12:15:47 +08:00
fecdb9554d
fix: inner_api get_user_tenant ( #25462 )
2025-09-10 11:31:16 +08:00
08dd3f7b50
Fix basedpyright type errors ( #25435 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-10 01:54:26 +08:00
38057b1b0e
add typing to all wraps ( #25405 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-09 16:48:33 +08:00
045d07885d
Merge branch 'main' into fix/value-content-rerender-error
2025-09-09 16:40:08 +08:00
4aba570fa8
Fix flask response: 200 -> {}, 200 ( #25404 )
2025-09-09 15:06:18 +08:00
64c9a2f678
Feat/credential policy ( #25151 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-08 23:45:05 -07:00
720ecea737
fix: tenant_id was not specific when retrieval end-user in plugin backwards invocation wraps ( #25377 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-09-09 09:49:35 +08:00
ea61420441
Revert "feat: email register refactor" ( #25367 )
2025-09-08 19:20:09 +08:00
860ee20c71
feat: email register refactor ( #25344 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com >
2025-09-08 17:51:43 +08:00
23cd615489
Merge branch 'feat/queue-based-graph-engine' into feat/rag-2
2025-09-08 14:30:43 +08:00
f891c67eca
feat: add MCP server headers support #22718 ( #24760 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com >
Co-authored-by: Novice <novice12185727@gmail.com >
2025-09-08 14:10:55 +08:00
299141ae01
Merge remote-tracking branch 'origin/main' into feat/queue-based-graph-engine
2025-09-08 13:56:45 +08:00
4ee49f3550
chore: remove weird account login ( #22247 )
...
Co-authored-by: zhuqingchao <zhuqingchao@xiaomi.com >
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com >
2025-09-08 10:44:36 +08:00
f6059ef389
add more typing ( #24949 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-08 10:40:00 +08:00
16a3e21410
more assert ( #24996 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com >
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com >
2025-09-08 09:59:43 +08:00
9b8a03b53b
[Chore/Refactor] Improve type annotations in models module ( #25281 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com >
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com >
2025-09-08 09:42:27 +08:00
abb53f11ad
Merge remote-tracking branch 'origin/main' into feat/queue-based-graph-engine
2025-09-06 16:05:13 +08:00
a78339a040
remove bare list, dict, Sequence, None, Any ( #25058 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com >
2025-09-06 03:32:23 +08:00
