wizardchen 0869f3e829 fix(im): harden Yunzhijia image download and prune dead validation ...

- Follow a single download redirect while re-validating the target stays
  within the allowed host suffix; never forward the bearer token across it.
  The shared http client disables auto-redirects for SSRF safety, so a 302
  from downloadfileOpen previously failed the download outright.
- Cap in-memory download size at 32 MiB via a limited read-closer that
  errors instead of silently truncating, avoiding OOM on large responses.
- Remove dead frontend host-suffix validation branch (normalize always
  fills the default) and drop the now-unused i18n keys
  yunzhijiaAllowedHostSuffixRequired / yunzhijiaRequiredCredentials.
- Add tests for redirect follow/reject and the size limit.

2026-07-23 12:41:19 +08:00

..

dingtalk

fix(im): harden DingTalk file download with SSRF checks and pictureDownloadCode fallback

2026-07-09 15:38:13 +08:00

feishu

feat(im,datasource): support Lark, Feishu's international edition

2026-07-17 11:05:54 +08:00

mattermost

fix(security): harden outbound requests and file previews

2026-07-02 19:15:46 +08:00

qqbot

fix(security): harden outbound requests and file previews

2026-07-02 19:15:46 +08:00

slack

feat(im): align agent stream display with web thinking and tool progress

2026-06-24 10:33:55 +08:00

telegram

fix(im): harden stream finalize and drop collapsed think header

2026-06-24 10:33:55 +08:00

wechat

fix(im): clamp reconnect backoff to avoid int64 overflow → busy loop

2026-05-05 00:36:18 +08:00

wecom

fix(im): address stream display review feedback

2026-06-24 10:33:55 +08:00

yunzhijia

fix(im): harden Yunzhijia image download and prune dead validation

2026-07-23 12:41:19 +08:00

adapter.go

feat(im): add Yunzhijia integration

2026-07-21 12:24:33 +08:00

channel_mapping_test.go

feat(im,datasource): support Lark, Feishu's international edition

2026-07-17 11:05:54 +08:00

cmd_clear.go

feat(im): add slash-command system with /help, /info, /search, /stop, /clear

2026-03-20 15:49:59 +08:00

cmd_help.go

feat(im): add slash-command system with /help, /info, /search, /stop, /clear

2026-03-20 15:49:59 +08:00

cmd_info.go

feat(im): add slash-command system with /help, /info, /search, /stop, /clear

2026-03-20 15:49:59 +08:00

cmd_search.go

fix(search): apply tag filters to knowledge search

2026-07-06 23:30:33 +08:00

cmd_stop.go

feat(im): add slash-command system with /help, /info, /search, /stop, /clear

2026-03-20 15:49:59 +08:00

command_registry.go

feat(im): add slash-command system with /help, /info, /search, /stop, /clear

2026-03-20 15:49:59 +08:00

command.go

feat(im): add slash-command system with /help, /info, /search, /stop, /clear

2026-03-20 15:49:59 +08:00

content_rewrite_test.go

feat(storage): add multi-instance storage backends per workspace

2026-07-15 14:54:39 +08:00

credentials.go

refactor(im): move adapter factories into per-platform subpackages

2026-04-29 20:08:22 +08:00

identity_test.go

test: address PR review follow-ups for OAuth and logger cleanup

2026-07-01 17:31:42 +08:00

im_file_service_test.go

feat(storage): add multi-instance storage backends per workspace

2026-07-15 14:54:39 +08:00

mode.go

refactor(im): move adapter factories into per-platform subpackages

2026-04-29 20:08:22 +08:00

oauth_notice_test.go

feat(im): include per-service MCP OAuth URLs in IM auth notices

2026-07-01 17:53:54 +08:00

qaqueue.go

feat: add unit tests for COS object name parsing and enhance error handling

2026-05-29 13:47:32 +08:00

service_agent_test.go

fix(integrations): polish agent filter UX and embed session rebind

2026-06-24 20:09:19 +08:00

service_quote_test.go

fix(im): anti-hallucination for non-text quotes and unprocessable media messages

2026-04-03 11:34:22 +08:00

service.go

feat(resource): add stable resource registry with LLM-context alias compaction

2026-07-15 17:02:43 +08:00

session_not_found_test.go

fix(im): recover from deleted session when GetSession returns app sentinel (#1499)

2026-05-27 11:51:11 +08:00

session_test.go

fix(im): harden stream finalize and drop collapsed think header

2026-06-24 10:33:55 +08:00

session_title_test.go

feat(im): IM session improvements — titles, in-flight recovery, classification

2026-06-12 17:01:28 +08:00

stream_display_test.go

fix(im): harden stream finalize and drop collapsed think header

2026-06-24 10:33:55 +08:00

stream_lifecycle_test.go

fix(im): address stream display review feedback

2026-06-24 10:33:55 +08:00

stream_section.go

fix(im): address stream display review feedback

2026-06-24 10:33:55 +08:00

stream_test.go

feat(im): align agent stream display with web thinking and tool progress

2026-06-24 10:33:55 +08:00

supervisor.go

fix(im): prevent DingTalk stream connection from going stale

2026-06-22 15:04:23 +08:00

think_test.go

fix(im): harden stream finalize and drop collapsed think header

2026-06-24 10:33:55 +08:00

think.go

feat(im,datasource): support Lark, Feishu's international edition

2026-07-17 11:05:54 +08:00

tool_display_test.go

fix(quick-qa): distinguish web and knowledge base retrieval in pipeline UI

2026-07-08 00:26:34 +08:00

tool_display.go

fix(quick-qa): distinguish web and knowledge base retrieval in pipeline UI

2026-07-08 00:26:34 +08:00

types_summary_test.go

fix(security): redact IM list credentials and harden MinerU SSRF

2026-07-02 17:58:20 +08:00

types_test.go

feat(im): add Yunzhijia integration

2026-07-21 12:24:33 +08:00

types.go

feat(im): add Yunzhijia integration

2026-07-21 12:24:33 +08:00