wizardchen 663d13eb58 fix(security): harden outbound requests and file previews

2026-07-02 19:15:46 +08:00

..

chat_pipeline

feat(chat): add @Skill/@MCP mentions with scoped agent runtime

2026-06-29 18:09:44 +08:00

file

test: fix stale Doris SQL-shape and flaky OSS bucket assertions

2026-06-29 17:44:56 +08:00

memory

feat: implement preview of user level memory graph

2026-02-25 14:29:54 +08:00

metric

fix: resolve failing test and build errors

2026-04-22 21:17:29 +08:00

retriever

refactor(tracing): remove Jaeger integration and related components

2026-06-08 21:01:04 +08:00

agent_history_test.go

fix(chat): preserve provider tool-call metadata

2026-06-09 20:55:20 +08:00

agent_history.go

fix(agent): harden @mention scope and simplify must_use hints

2026-06-29 18:09:44 +08:00

agent_rerank_requirement_test.go

feat(agent): enforce model readiness and polish selector UX

2026-06-25 23:33:39 +08:00

agent_service_scope_test.go

feat(chat): add @Skill/@MCP mentions with scoped agent runtime

2026-06-29 18:09:44 +08:00

agent_service_test.go

fix(agent): exclude processing docs from prompt

2026-05-18 16:49:14 +08:00

agent_service.go

feat(agent): add configurable MCP OAuth wait timeout per agent

2026-07-01 14:37:37 +08:00

agent_share.go

feat(agent): enforce model readiness and polish selector UX

2026-06-25 23:33:39 +08:00

audit_log_retention_test.go

fix(audit_log): prevent deadlock in Stop() when Start() is never called

2026-05-18 17:28:58 +08:00

audit_log_retention.go

fix(audit_log): prevent deadlock in Stop() when Start() is never called

2026-05-18 17:28:58 +08:00

audit_log_test.go

feat(rbac): per-tenant audit log for RBAC events (PR 6, #1303)

2026-05-18 17:28:58 +08:00

audit_log.go

fix(audit_log): prevent deadlock in Stop() when Start() is never called

2026-05-18 17:28:58 +08:00

chunk.go

refactor(retriever): introduce factory for KB-scoped retrieve engine resolution

2026-05-14 15:53:58 +08:00

custom_agent.go

feat(chat): add @Skill/@MCP mentions with scoped agent runtime

2026-06-29 18:09:44 +08:00

dataset.go

init commit

2025-08-05 15:08:07 +08:00

datasource_service_test.go

fix(knowledgebase): delete data sources when knowledge base is removed

2026-06-23 17:30:38 +08:00

datasource_service.go

feat: support multi-tag for document knowledge (#1790)

2026-06-26 00:18:48 +08:00

embed_channel_chunk_test.go

feat(embed): add backend embed channels with auth and rate limiting (#1657)

2026-06-12 23:10:39 +08:00

embed_channel_public_config_test.go

feat(embed): add backend embed channels with auth and rate limiting (#1657)

2026-06-12 23:10:39 +08:00

embed_channel_update_test.go

feat(integrations): polish embed/IM channel editors and agent rebind

2026-06-24 20:09:19 +08:00

embed_channel.go

feat(chat): add @Skill/@MCP mentions with scoped agent runtime

2026-06-29 18:09:44 +08:00

embed_session_test.go

feat(embed): add backend embed channels with auth and rate limiting (#1657)

2026-06-12 23:10:39 +08:00

embed_session.go

feat(embed): add backend embed channels with auth and rate limiting (#1657)

2026-06-12 23:10:39 +08:00

embed_webhook_test.go

fix(security): harden outbound requests and file previews

2026-07-02 19:15:46 +08:00

embed_webhook.go

fix(security): harden outbound requests and file previews

2026-07-02 19:15:46 +08:00

evaluation.go

feat(knowledge): add channel support to knowledge entries and related components

2026-03-25 22:08:29 +08:00

extract.go

feat(client): enhance knowledge file upload with process configuration support

2026-06-09 20:38:24 +08:00

graph.go

fix(knowledge): stitch chunks by text overlap, not by position

2026-05-30 17:53:47 +08:00

image_multimodal.go

feat(client): enhance knowledge file upload with process configuration support

2026-06-09 20:38:24 +08:00

kbshare.go

fix(rbac): allow source-tenant Admin+ to manage their cross-tenant shares

2026-05-18 17:28:58 +08:00

knowledge_clone_image_test.go

fix: deep-copy stored files and images when cloning a knowledge base

2026-06-03 14:45:59 +08:00

knowledge_clone_move.go

fix(knowledge): harden multi-tag data integrity and UX follow-ups

2026-06-26 10:52:52 +08:00

knowledge_create_test.go

test(knowledge): unbreak service test package after tag-loading change

2026-06-29 18:09:44 +08:00

knowledge_create.go

fix(knowledge): harden multi-tag data integrity and UX follow-ups

2026-06-26 10:52:52 +08:00

knowledge_delete_test.go

fix(wiki): clear stale citation chunks on deletion

2026-06-12 23:08:20 +08:00

knowledge_delete.go

fix(knowledge): harden multi-tag data integrity and UX follow-ups

2026-06-26 10:52:52 +08:00

knowledge_faq_import.go

refactor(retriever): introduce factory for KB-scoped retrieve engine resolution

2026-05-14 15:53:58 +08:00

knowledge_faq.go

feat(configuration): update asynq concurrency settings and enhance FAQ handling

2026-06-04 15:48:04 +08:00

knowledge_housekeeping_test.go

feat(configuration): update asynq concurrency settings and enhance FAQ handling

2026-06-04 15:48:04 +08:00

knowledge_housekeeping.go

feat(configuration): update asynq concurrency settings and enhance FAQ handling

2026-06-04 15:48:04 +08:00

knowledge_image_cleanup_test.go

fix(knowledge): delete extracted images from storage when knowledge is removed

2026-04-02 12:04:04 +08:00

knowledge_manual_test.go

fix: sanitize tab chars and avoid double .md extension in manual download filename

2026-03-16 18:18:23 +08:00

knowledge_move_gate_test.go

fix: reject cross-store reuse_vectors knowledge move

2026-06-05 15:00:41 +08:00

knowledge_owner_chain_test.go

feat(rbac): per-KB ownership for knowledge / chunks / wiki pages (#1303)

2026-05-18 17:28:58 +08:00

knowledge_post_process.go

feat(client): enhance knowledge file upload with process configuration support

2026-06-09 20:38:24 +08:00

knowledge_process_config_test.go

feat(docreader): support forcing PDF scanned-page OCR parsing

2026-06-25 17:30:22 +08:00

knowledge_process_config.go

feat(docreader): support forcing PDF scanned-page OCR parsing

2026-06-25 17:30:22 +08:00

knowledge_process_status_test.go

fix(knowledge): unstick summary and isolate manual re-index trace attempts

2026-05-29 17:52:01 +08:00

knowledge_process.go

fix(knowledge): harden batch reparse UX and async processing

2026-06-25 23:57:54 +08:00

knowledge_shared_access_test.go

feat(rbac): lift org membership from per-user to per-tenant (Plan 3, #1303)

2026-05-18 17:28:58 +08:00

knowledge_span_tracker_test.go

feat(knowledge): instrument postprocess subspans + polish timeline UI

2026-05-28 15:14:45 +08:00

knowledge_span_tracker.go

fix(knowledge): make finalizing subtask counter reliable + async question fan-out

2026-05-30 01:00:15 +08:00

knowledge_storage_config_test.go

fix(storage): merge tos/s3/oss/ks3 tenant configs in buildStorageConfig (#1117)

2026-05-06 17:09:42 +08:00

knowledge_summary_test.go

test(ingest): cover insufficient-content gate; allow threshold override

2026-05-06 11:23:32 +08:00

knowledge_task_options_test.go

test: add document process task options tests

2026-05-28 20:27:53 +08:00

knowledge_task_options.go

test: add document process task options tests

2026-05-28 20:27:53 +08:00

knowledge_util_ssrf_test.go

fix(security): block SSRF via redirects in knowledge URL import

2026-07-02 12:27:48 +08:00

knowledge_util.go

fix(security): block SSRF via redirects in knowledge URL import

2026-07-02 12:27:48 +08:00

knowledge.go

test(knowledge): unbreak service test package after tag-loading change

2026-06-29 18:09:44 +08:00

knowledgebase_delete_datasource_test.go

fix(knowledgebase): delete data sources when knowledge base is removed

2026-06-23 17:30:38 +08:00

knowledgebase_pr3_test.go

fix(model): block deletion when model is referenced by KB or agent

2026-06-23 20:36:16 +08:00

knowledgebase_search_fanout_test.go

feat(retriever): add OpenSearch driver skeleton + interface stubs (PR 2a of 3)

2026-05-26 20:54:58 +08:00

knowledgebase_search_fanout.go

feat(search): fan-out KB retrieval across bound vector stores

2026-05-20 22:25:39 +08:00

knowledgebase_search_faq.go

feat(search): fan-out KB retrieval across bound vector stores

2026-05-20 22:25:39 +08:00

knowledgebase_search_fusion.go

feat(retrieval): configurable RRF parameters per tenant

2026-05-06 17:17:07 +08:00

knowledgebase_search_results.go

feat(logger): implement LLM debug logging functionality

2026-04-16 23:15:02 +08:00

knowledgebase_search_shared.go

feat(rbac): lift org membership from per-user to per-tenant (Plan 3, #1303)

2026-05-18 17:28:58 +08:00

knowledgebase_search_storegroup.go

feat(knowledge): refactor retrieval parameters for multi-KB search

2026-06-04 15:48:04 +08:00

knowledgebase_search.go

feat(observability): enhance Langfuse retrieve and rerank tracing

2026-06-16 01:09:23 +08:00

knowledgebase.go

fix(knowledgebase): delete data sources when knowledge base is removed

2026-06-23 17:30:38 +08:00

mcp_service_test.go

feat(mcp): add OAuth2 authorization for MCP services

2026-06-22 20:19:31 +08:00

mcp_service.go

feat: scope API MCP OAuth by principal

2026-06-30 20:01:05 +08:00

mcp_tool_approval_service.go

feat(agent): human-in-the-loop approval for MCP tool calls (#1173)

2026-05-10 22:57:12 +08:00

message.go

feat(embed): scope OAuth and sessions per visitor principal

2026-06-30 20:01:05 +08:00

metric_hook.go

refactor: Clean up code by removing unnecessary blank lines and improving comments for better readability and maintainability

2025-11-28 16:10:37 +08:00

model_delete_test.go

fix(model): block deletion when model is referenced by KB or agent

2026-06-23 20:36:16 +08:00

model.go

fix(model): block deletion when model is referenced by KB or agent

2026-06-23 20:36:16 +08:00

ocr_sanitizer_test.go

feat: introduce WeKnora Lite edition with lightweight configuration and deployment

2026-03-02 21:21:49 +08:00

ocr_sanitizer.go

feat: use language-neutral English prompts for multilingual LLM responses

2026-03-06 21:08:12 +08:00

organization.go

feat(organization): transition membership model to tenant-level and enhance invite functionality

2026-05-18 17:28:58 +08:00

session_agent_qa_scope_test.go

refactor(agent): fix grep scope loss and consolidate per-turn @mention scoping

2026-06-29 18:09:44 +08:00

session_agent_qa.go

feat(agent): add configurable MCP OAuth wait timeout per agent

2026-07-01 14:37:37 +08:00

session_knowledge_qa_test.go

feat(agent): enforce model readiness and polish selector UX

2026-06-25 23:33:39 +08:00

session_knowledge_qa.go

feat(embed): scope OAuth and sessions per visitor principal

2026-06-30 20:01:05 +08:00

session_model_requirement_test.go

fix(agent): address readiness review findings

2026-06-25 23:33:39 +08:00

session_qa_helpers.go

feat(chat): add @Skill/@MCP mentions with scoped agent runtime

2026-06-29 18:09:44 +08:00

session_user_scope_test.go

feat(embed): scope OAuth and sessions per visitor principal

2026-06-30 20:01:05 +08:00

session.go

feat(embed): scope OAuth and sessions per visitor principal

2026-06-30 20:01:05 +08:00

skill_service.go

feat: adapt preloaded skills to smart-reasoning agent

2026-02-04 20:08:49 +08:00

slug_fuzzy_test.go

perf(wiki-ingest): scale to 4w-doc KBs + generic task queue / dead-letter

2026-05-10 00:01:06 +08:00

slug_fuzzy.go

perf(wiki-ingest): scale to 4w-doc KBs + generic task queue / dead-letter

2026-05-10 00:01:06 +08:00

system_setting.go

feat(configuration): update asynq concurrency settings and enhance FAQ handling

2026-06-04 15:48:04 +08:00

tag.go

feat: support multi-tag for document knowledge (#1790)

2026-06-26 00:18:48 +08:00

tenant_invitation_test.go

feat(rbac): add multi-use share-link invitations for invite_only mode (#1504)

2026-05-27 19:42:01 +08:00

tenant_invitation.go

feat(rbac): add multi-use share-link invitations for invite_only mode (#1504)

2026-05-27 19:42:01 +08:00

tenant_member_test.go

fix(audit_log): prevent deadlock in Stop() when Start() is never called

2026-05-18 17:28:58 +08:00

tenant_member.go

fix(audit_log): prevent deadlock in Stop() when Start() is never called

2026-05-18 17:28:58 +08:00

tenant.go

feat(system): consolidate system admin and settings into one Settings panel

2026-05-26 21:13:56 +08:00

user_auth_token_test.go

fix(security): harden refresh token validation and add auth tests

2026-07-02 17:08:17 +08:00

user_jwt_test.go

fix(security): block refresh tokens as bearer and sandbox MCP uploads

2026-07-02 17:08:17 +08:00

user_oidc_security_test.go

fix(security): harden outbound requests and file previews

2026-07-02 19:15:46 +08:00

user_resource_favorite.go

feat(favorites): implement user favorites and recents functionality

2026-05-18 17:28:58 +08:00

user.go

fix(security): harden outbound requests and file previews

2026-07-02 19:15:46 +08:00

vectorstore_healthcheck.go

fix: validate vector store connection addresses against SSRF policy

2026-06-04 15:26:56 +08:00

vectorstore_opensearch_test.go

feat(retriever): activate OpenSearch k-NN driver (PR 3 of 3)

2026-05-29 16:32:27 +08:00

vectorstore_ssrf_test.go

fix: validate vector store connection addresses against SSRF policy

2026-06-04 15:26:56 +08:00

vectorstore_test.go

fix(model): block deletion when model is referenced by KB or agent

2026-06-23 20:36:16 +08:00

vectorstore.go

fix: validate vector store connection addresses against SSRF policy

2026-06-04 15:26:56 +08:00

web_search_provider.go

refactor(credentials): introduce /credentials subresource pattern

2026-05-17 15:27:52 +08:00

web_search_state.go

fix: update environment configuration for debugging and logging, enhance SQLite FTS5 table management, and improve API base URL handling

2026-04-11 18:51:16 +08:00

web_search.go

feat: search engine adds proxy addresses and adds SSRF verification.

2026-04-17 16:38:02 +08:00

weknoracloud.go

refactor(weknoracloud): update credential handling and configuration

2026-04-15 11:37:24 +08:00

wiki_ingest_batch.go

feat(wiki): implement folder management features in wiki API

2026-06-16 23:51:29 +08:00

wiki_ingest_cite_test.go

feat: Enhance wiki extraction and configuration options

2026-04-22 21:18:32 +08:00

wiki_ingest_cite.go

feat(wiki): add page hierarchy/category metadata and retrieval APIs

2026-06-16 20:26:06 +08:00

wiki_ingest_dedup_test.go

feat: Enhance wiki extraction and configuration options

2026-04-22 21:18:32 +08:00

wiki_ingest_dedup.go

feat: Enhance wiki extraction and configuration options

2026-04-22 21:18:32 +08:00

wiki_ingest_retry_test.go

perf(wiki): move ingest log to event table and index to on-demand API

2026-05-08 21:48:52 +08:00

wiki_ingest_taxonomy_test.go

feat(i18n): add optional embedding model descriptions for multiple locales

2026-06-16 23:51:29 +08:00

wiki_ingest_taxonomy.go

feat(wiki): implement folder management features in wiki API

2026-06-16 23:51:29 +08:00

wiki_ingest_test.go

fix(wiki): mask image URLs before LLM to prevent UUID/path corruption

2026-06-15 17:27:56 +08:00

wiki_ingest.go

feat(wiki): implement folder management features in wiki API

2026-06-16 23:51:29 +08:00

wiki_linkify_test.go

feat: Refactor cross-link injection logic for wiki pages

2026-04-22 21:18:09 +08:00

wiki_linkify.go

feat: Refactor cross-link injection logic for wiki pages

2026-04-22 21:18:09 +08:00

wiki_lint.go

perf(wiki-ingest): scale to 4w-doc KBs + generic task queue / dead-letter

2026-05-10 00:01:06 +08:00

wiki_log_entry.go

perf(wiki): move ingest log to event table and index to on-demand API

2026-05-08 21:48:52 +08:00

wiki_page_test.go

feat(wiki): add page hierarchy/category metadata and retrieval APIs

2026-06-16 20:26:06 +08:00

wiki_page.go

feat(wiki): enhance anchored form popups and internationalization updates

2026-06-17 00:28:30 +08:00