Commit Graph
1845 Commits
Author SHA1 Message Date
Jyong d11ff0c2b5 Merge remote-tracking branch 'origin/codex/file-malware-scan' into tmp/deploy-knowledge-file-scan 2026-11-11 19:00:44 +08:00
JyongandClaude Fable 5.2 65de4cfb7b refactor(file-scan): resolve the dataset scope in the service layer
Controllers must not query the database directly, and new tests must not
introduce mocks or namespaces as test doubles.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
2026-11-11 18:50:03 +08:00
JyongandClaude Fable 5.2 11947c8fdc Merge PR #46090 (file malware scan) into deploy/konwledge
Brings main up to f5c0b49d4b along with the file scan feature. Generated
console contracts and OpenAPI markdown are regenerated from the merged
backend; the GitHub preview spec keeps the deploy branch's version.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
2026-11-11 18:43:54 +08:00
JyongandClaude Fable 5.2 7d6c1845b8 feat(file-scan): scan uploaded knowledge base files for malware
Add a shared file malware-scanning module and use it in the Classic
Knowledge Base, RAG Pipeline local files and the Agent Knowledge Base.

- core/file_scan: scanner adapters for ClamAV (deployment-configured),
  Cloudmersive, Scanii, OPSWAT MetaDefender Cloud and API-based
  extensions (new `file.malware_scan` extension point).
- services/file_scan: FileScanService is the single entry point other
  modules call. Providers are workspace-wide; a policy belongs to a
  scope (dataset, knowledge_fs_space), so further modules can adopt
  scanning without schema changes.
- Each file is scanned on its own: a rejected file fails only its own
  document. Malware always blocks and deletes the stored original;
  invalid credentials and exhausted quota stop processing regardless of
  the "allow" fallback.
- Console: workspace scanner management and a per-knowledge-base
  policy section in both settings forms; the Agent Knowledge Base
  upload keeps going after a rejected file and explains each failure.
- Off by default behind FILE_SCAN_ENABLED.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
2026-11-11 18:37:03 +08:00
3774ea85ae ci: bump tyck to check new err (#45614)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Codex <codex@openai.com>
2026-11-11 07:31:35 +00:00
非法操作 b39a44c0e1 refactor(agent): isolate API access configuration (#46024) 2026-11-11 06:18:34 +00:00
583615e412 feat: support personal access token (#45540)
Co-authored-by: twwu <twwu@dify.ai>
Co-authored-by: Eldar Dadashov <52511672+eldardada@users.noreply.github.com>
Co-authored-by: Byron.wang <byron@dify.ai>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Yunlu Wen <yunlu.wen@dify.ai>
2026-11-11 03:00:24 +00:00
FFXNandautofix-ci[bot] f3f9b121a4 feat(knowledge): add GitHub tree previews to source selection (#45990)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-11-11 02:47:23 +00:00
QuantumGhostandzxhlyh a4d64bcddd feat(hitl): improve forms, notifications, and IM contact sync (#45945)
Co-authored-by: zxhlyh <jasonapring2015@outlook.com>
2026-11-10 09:00:41 +00:00
非法操作andautofix-ci[bot] ce26b22970 refactor(api): isolate trigger execution lifecycle (#45950)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-11-10 08:17:39 +00:00
非法操作 27297e954f refactor(api): inject trigger debug runtime (#45946) 2026-11-10 07:09:35 +00:00
非法操作andStream 9fbd9dcd33 refactor(api): isolate native webhook runtime (#45912)
Co-authored-by: Stream <Stream_2@qq.com>
2026-11-10 05:08:50 +00:00
Tanishq 99683fe2e8 fix(trigger): store webhook uploads under the trigger end user (#44995) 2026-11-09 18:39:05 +00:00
XiaoBa 23ea5e3562 fix: validate retrieval attachment UUIDs and tolerate invalid image history (#45915) 2026-11-09 11:36:53 +00:00
非法操作 e37e727184 refactor(api): inject trigger workflow dispatch and execution logging (#45195) 2026-11-09 08:44:55 +00:00
FFXN 8e077ab5a3 feat(knowledge-fs): add GitHub tree preview in connected sources 2026-11-09 16:28:28 +08:00
Jyong a108aec823 Merge latest Tidy fixes from PR #45514 into deploy/konwledge 2026-11-09 15:20:37 +08:00
非法操作 b6d2d2170d refactor(api): inject app trigger publication and quota status lifecycle (#45188) 2026-11-09 06:29:12 +00:00
非法操作 dd21c981f2 refactor(api): inject trigger subscription renewal and event execution (#44653) 2026-11-09 02:42:52 +00:00
非法操作 a83ce881a1 refactor(api): inject plugin dynamic option queries (#44576) 2026-11-06 08:08:45 +00:00
非法操作 138ad48d30 refactor(api): inject plugin trigger endpoint dispatch (#44547) 2026-11-06 07:05:04 +00:00
周龙杰 da24f6d133 test(api): verify workflow publish transactions with SQLite (#45142) 2026-11-06 04:02:44 +00:00
非法操作 803f5d3d9c refactor(api): isolate trigger subscription management (#44541) 2026-11-05 09:54:35 +00:00
非法操作 45279b704d feat: restrict SaaS workflow collaboration to paid plans (#45549) 2026-11-05 08:19:37 +00:00
非法操作 107bbf85ca refactor(api): inject trigger subscription builder lifecycle (#44532) 2026-11-05 08:18:01 +00:00
非法操作 db3ffcc92b refactor(api): isolate trigger provider and subscription queries (#44514) 2026-11-05 07:20:07 +00:00
Tianyu Cai ce7ccc3754 fix(api): use the dataset doc_form when document requests omit it (#45581) 2026-11-05 06:55:00 +00:00
非法操作 11517691d2 refactor(api): isolate trigger OAuth authorization flow (#44505) 2026-11-05 06:21:44 +00:00
Evan 5d0c0b6657 refactor(api): inject sessions into RAG pipeline console controllers (#45605) 2026-11-05 04:17:24 +00:00
Stephen Zhou 943323d92d Merge remote-tracking branch 'origin/main' into deploy/konwledge 2026-11-05 11:07:50 +08:00
非法操作 b501b64f82 refactor(api): isolate trigger OAuth client configuration (#44469) 2026-11-04 12:02:15 +00:00
JyongandClaude Opus 5.5 62b44d2a90 feat(knowledge-fs): free Tidy duplicate review, conflict opt-in and progress
Sync with langgenius/knowledge-fs#94 revision 2 (13dbb69):

- Duplicate, overlapping and reworded content are detected from text and
  the embeddings indexing already created, with no model calls; the
  token consent now covers only factual conflict detection, with its own
  switch and a checkbox in the enable dialog.
- Proxy GET .../tidy/summary and the kind/state filters; settings expose
  conflicts and the space pause reason; findings may be outdated.
- Show scan progress and model calls, the pause reason with Retry,
  failed documents, counts per review status and per kind, a kind
  filter, and explain reworded duplicates found by stored vectors.
- Re-pin the KnowledgeFS contract; regenerate console contracts and docs;
  add the new copy to all 25 locales.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-11-04 16:41:01 +08:00
Evan 0fe1b06d1e fix: reject malformed pagination params with 400 instead of silent fallback (#36855) 2026-11-04 07:52:27 +00:00
Jyong eae62f0142 feat(knowledge-fs): add opt-in Tidy review and source comparison 2026-11-03 19:11:13 +08:00
非法操作andautofix-ci[bot] 52ae152e00 fix(api): reject invalid model provider icon paths (#45445)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-11-03 10:01:37 +00:00
28dabd92ac feat(agent): add opt-in show thinking toggle for Agent v2 chat (#45427)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: yyh <yuanyouhuilyz@gmail.com>
2026-11-03 09:49:33 +00:00
非法操作 cf38e6ad67 feat(api): add workflow collaboration metrics (#45446) 2026-11-03 09:40:53 +00:00
Eddy ZHANG 074e9e0b92 refactor(api): annotate KnowledgeFS Service API return types (#45295) 2026-11-03 06:05:40 +00:00
-LAN-andautofix-ci[bot] 0257f20b48 fix(openapi): exclude directories from skill import file counts (#45393)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-11-03 05:48:00 +00:00
Guishi Wang b5722ed557 fix(api): enforce dataset service API token scope (#44840) 2026-11-02 21:30:01 +00:00
96b1b20c76 feat(api): validate models before knowledge base upgrades (#45312)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Stephen Zhou <hi@hyoban.cc>
2026-11-02 11:13:21 +00:00
Xiyuan Chen 61d2c7402f fix(openapi): mark import.skill as destructive (#45314) 2026-11-02 09:44:17 +00:00
-LAN- 43d8c3715a refactor(tracing): one trace pipeline behind a minimal provider interface (#44673) 2026-11-02 12:16:49 +08:00
64a99c5556 chore: bump restx. now deco has type (#37391)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Codex <codex@openai.com>
2026-11-02 03:24:33 +00:00
QuantumGhost 9dd087b885 feat(hitl): expose bound IM providers in contact options (#45233) 2026-11-01 07:48:22 +00:00
yyh 4c521a3c0a feat(api): type billing error reasons per proto service (#45203) 2026-10-31 14:07:12 +00:00
Peter PanandWH-2099 5907db83b0 fix(oauth): serialize and persist provider credential refreshes (#32195)
Co-authored-by: WH-2099 <wh2099@pm.me>
2026-10-31 12:04:00 +00:00
yyh 3ae9147417 feat(api): map billing error reasons to typed console errors (#45170) 2026-10-31 06:27:30 +00:00
非法操作 e3ef66b8b9 refactor(api): detach console statistics admission (#44411) 2026-10-30 16:40:23 +00:00
yyhandClaude Opus 5.5 749754fcd9 feat(api): return education verification as a status-discriminated result (#45165)
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-30 15:01:46 +00:00