xinyin025/LangBot
1
0
Fork 0
mirror of https://github.com/langbot-app/LangBot.git synced 2026-08-09 04:40:57 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,806 Commits 58 Branches 204 Tags
deploy/prod
Commit Graph

3806 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Chan e6d4b712d6 deploy: pin Cloud adapter recovery 2026-08-06 12:39:46 +00:00
Chan 6008f4a555 Merge remote-tracking branch 'origin/master' into deploy/prod 2026-08-06 12:39:46 +00:00
Hyu ddb6dbf593 fix(cloud): tolerate slow plugin runtime reconciliation (#2405) 
Co-authored-by: Chan <dadachann@users.noreply.github.com>
 2026-08-06 20:39:20 +08:00
dadachann 87db6a4b24 deploy: provision Cloud models after activation 2026-08-05 15:26:45 +00:00
Hyu f59343fd5b fix: provision Cloud models after Workspace activation (#2403) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-05 23:26:23 +08:00
dadachann a3c81aac7a deploy: enable 3072-dimensional knowledge retrieval 2026-08-05 14:09:14 +00:00
Hyu 211710e24c fix: allow trusted halfvec tenant search casts (#2402) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-05 22:09:01 +08:00
dadachann f213fe3757 deploy: restore knowledge indexing 2026-08-05 13:20:29 +00:00
Hyu cdd5c6589c fix: support 3072-dimensional knowledge embeddings (#2401) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-05 21:19:57 +08:00
dadachann 31c2fd9cc8 Merge remote-tracking branch 'origin/master' into deploy/prod-runtime-control-bind-all 2026-08-05 07:14:24 +00:00
Hyu 3b4698463c chore: pin runtime control binding SDK (#2400) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-05 15:12:40 +08:00
dadachann a70d77ab57 Merge remote-tracking branch 'origin/master' into deploy/prod-debug-session-security 2026-08-04 12:00:03 +00:00
Hyu edd6cad449 chore: pin fenced debug runtime sessions (#2396) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-04 19:59:51 +08:00
dadachann 519b7ed39f Merge remote-tracking branch 'origin/master' into deploy/prod-workspace-debug 2026-08-04 11:20:21 +00:00
Hyu d78546967c feat: expose Workspace-scoped rotating plugin debug keys (#2395) 
* feat: add Workspace-scoped rotating plugin debug tokens

* chore: pin formatted Workspace debug runtime

* chore: pin merged Workspace debug runtime

* chore: pin tenant-safe debug runtime

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-04 19:20:06 +08:00
dadachann 002317d00a Merge remote-tracking branch origin/master into deploy/prod-telemetry 2026-08-04 09:27:57 +00:00
Hyu c08bfc8ced feat: report independent instance and workspace identities (#2394) 
* feat: report independent instance and workspace identities

* test: include workspace in OAuth callback fixture

* ci: pin production cloud adapter to Space release

* fix: preserve authenticated Workspace telemetry attribution

* ci: pin production cloud adapter to final Space release

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-04 17:27:23 +08:00
dadachann 5671de49e1 Merge remote-tracking branch origin/master into deploy/prod-member-emails 2026-08-04 03:49:17 +00:00
Hyu 7820949d3a fix(workspace): show member emails (#2393) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-04 11:48:43 +08:00
dadachann e82dce7e42 Merge remote-tracking branch 'origin/master' into deploy/prod-tooltip-wrap-2391 2026-08-03 13:27:05 +00:00
Hyu e263a5d1d7 fix(web): use natural tooltip wrapping (#2391) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 21:26:55 +08:00
dadachann 792fbfbe10 Merge remote-tracking branch 'origin/master' into deploy/prod-tooltip-2390 2026-08-03 12:11:05 +00:00
Hyu 6bad7bcffc fix(web): keep extension market navigable at quota (#2390) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 20:10:46 +08:00
dadachann 3df36dd63f Merge remote-tracking branch 'origin/master' into deploy/prod-quota-2389 2026-08-03 11:09:14 +00:00
Hyu f0b2c103c1 fix(web): disable quota-reached create actions (#2389) 
* fix(web): disable quota-reached create actions

* fix(web): close quota review gaps

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 19:08:47 +08:00
dadachann f48dc847ff [verified] fix: harden OSS and Cloud workspace UI (#2387) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 05:29:55 +00:00
Hyu 3101c9be6a [verified] fix: harden OSS and Cloud workspace UI (#2387) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 13:27:38 +08:00
Hyu 1e6e4c0ca7 fix(cloud): show owner model balance and enforce single owner (#2384) (#2385) 
* fix(cloud): show owner model balance and enforce single owner

* fix(migrations): create owner index idempotently

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 02:14:43 +08:00
Hyu 9b57183a99 fix(cloud): show owner model balance and enforce single owner (#2384) 
* fix(cloud): show owner model balance and enforce single owner

* fix(migrations): create owner index idempotently

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 01:53:40 +08:00
Hyu 408c8031d4 Merge pull request #2383 from langbot-app/sync/cloud-fixes-to-master 
merge: sync Cloud production fixes to master
 2026-08-02 17:24:48 +08:00
dadachann 0e6cca4690 merge: sync Cloud production fixes to master 2026-08-02 09:19:41 +00:00
Hyu 2cc6d10f33 fix(cloud): accept invitations with current account (#2382) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 17:13:26 +08:00
dadachann a7a7218afe fix(cloud): accept invitations with current account 2026-08-02 09:08:49 +00:00
Hyu a67728c163 fix cloud monitoring and invitation sign-in (#2381) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 16:39:14 +08:00
Hyu e9c9e896c6 fix(cloud): preserve pipeline routing in debug chat (#2380) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 01:49:17 +08:00
Hyu e2331c4967 fix(cloud): restore plugins and pipeline execution (#2379) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 01:34:11 +08:00
Hyu 0ccbcd5f5f fix(migrations): preserve published Cloud revision head (#2375) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 00:56:20 +08:00
Hyu c5aada494d fix(cloud): treat workspace owners as Space-bound (#2378) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 00:33:46 +08:00
Hyu e36e3aaea8 fix(cloud): accept null model abilities (#2377) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-01 18:50:47 +08:00
Hyu d64278ab3f feat(cloud): provision workspace model catalog (#2376) 
* feat(cloud): provision workspace model catalog

* ci(cloud): pin model catalog adapter source

* fix: make cloud model catalog sync recoverable

* ci: pin cloud adapter source for release

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-01 18:16:02 +08:00
dadachann 161ea9b3eb fix(cloud): restore fragment-based Space launch callback 2026-08-01 04:41:44 +00:00
dadachann c7d14676fc fix(cloud): restore disabled Box production mode 2026-08-01 04:11:17 +00:00
dadachann 2456bf1350 fix(migrations): preserve published Cloud revision head 2026-07-31 18:35:21 +00:00
dadachann 05a941ff16 Merge remote-tracking branch 'origin/deploy/prod' into release/cloud-monitoring-prod 2026-07-31 18:18:46 +00:00
dadachann 0330788d14 chore(prod): release workspace monitoring 2026-07-31 18:18:46 +00:00
Hyu d8ab0ba567 feat(telemetry): report workspace execution generation (#2374) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-01 02:10:59 +08:00
Hyu e3832ca536 style: format workspace identity modules (#2372) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-07-31 23:46:03 +08:00
Hyu 5d9fd15671 feat: use workspace identity for telemetry (#2371) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-07-31 23:35:14 +08:00
Hyu 404e3466d9 feat(cloud): add scoped support admin sessions (#2369) 
* feat(cloud): add scoped support admin sessions

* style(web): format support admin session changes

* fix(cloud): isolate support adapter sessions

* fix(cloud): authenticate plugin assets and report workspace resources

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-07-31 17:41:55 +08:00
Constantine 9df021eb8f fix(telegram): stop leaking bot token via Image.url (#2366) 
Telegram file.file_path is a full URL of the form
https://api.telegram.org/file/bot<TOKEN>/<path> that embeds the bot
token. Since #2362 this URL was copied into Image.url, so the token was
serialized into the message chain and thereby persisted to the
monitoring database, shown in the dashboard, and forwarded to every
installed plugin via event dispatch. Anyone with dashboard or plugin
access could recover the token and take full control of the bot.

Unlike the public CDN URLs used by the other adapters changed in #2362,
Telegram file URLs are only usable with the embedded token, so there is
no safe URL to expose. Store base64 only (as before #2362); the vision
path already relies solely on base64, so nothing downstream changes.

Add a regression test asserting the token never appears in the
converted Image or the serialized message chain.

Co-authored-by: Constantine1916 <Constantine1916@users.noreply.github.com>
 2026-07-31 17:25:19 +08:00