xinyin025/LangBot
1
0
Fork 0
mirror of https://github.com/langbot-app/LangBot.git synced 2026-08-08 12:20:58 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,791 Commits 58 Branches 204 Tags
002317d00a9019419ece4f28828f0af018f2d703
Commit Graph

3791 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
dadachann 002317d00a Merge remote-tracking branch origin/master into deploy/prod-telemetry 2026-08-04 09:27:57 +00:00
Hyu c08bfc8ced feat: report independent instance and workspace identities (#2394) 
* feat: report independent instance and workspace identities

* test: include workspace in OAuth callback fixture

* ci: pin production cloud adapter to Space release

* fix: preserve authenticated Workspace telemetry attribution

* ci: pin production cloud adapter to final Space release

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-04 17:27:23 +08:00
dadachann 5671de49e1 Merge remote-tracking branch origin/master into deploy/prod-member-emails 2026-08-04 03:49:17 +00:00
Hyu 7820949d3a fix(workspace): show member emails (#2393) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-04 11:48:43 +08:00
dadachann e82dce7e42 Merge remote-tracking branch 'origin/master' into deploy/prod-tooltip-wrap-2391 2026-08-03 13:27:05 +00:00
Hyu e263a5d1d7 fix(web): use natural tooltip wrapping (#2391) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 21:26:55 +08:00
dadachann 792fbfbe10 Merge remote-tracking branch 'origin/master' into deploy/prod-tooltip-2390 2026-08-03 12:11:05 +00:00
Hyu 6bad7bcffc fix(web): keep extension market navigable at quota (#2390) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 20:10:46 +08:00
dadachann 3df36dd63f Merge remote-tracking branch 'origin/master' into deploy/prod-quota-2389 2026-08-03 11:09:14 +00:00
Hyu f0b2c103c1 fix(web): disable quota-reached create actions (#2389) 
* fix(web): disable quota-reached create actions

* fix(web): close quota review gaps

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 19:08:47 +08:00
dadachann f48dc847ff [verified] fix: harden OSS and Cloud workspace UI (#2387) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 05:29:55 +00:00
Hyu 3101c9be6a [verified] fix: harden OSS and Cloud workspace UI (#2387) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 13:27:38 +08:00
Hyu 1e6e4c0ca7 fix(cloud): show owner model balance and enforce single owner (#2384) (#2385) 
* fix(cloud): show owner model balance and enforce single owner

* fix(migrations): create owner index idempotently

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 02:14:43 +08:00
Hyu 9b57183a99 fix(cloud): show owner model balance and enforce single owner (#2384) 
* fix(cloud): show owner model balance and enforce single owner

* fix(migrations): create owner index idempotently

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 01:53:40 +08:00
Hyu 408c8031d4 Merge pull request #2383 from langbot-app/sync/cloud-fixes-to-master 
merge: sync Cloud production fixes to master
 2026-08-02 17:24:48 +08:00
dadachann 0e6cca4690 merge: sync Cloud production fixes to master 2026-08-02 09:19:41 +00:00
Hyu 2cc6d10f33 fix(cloud): accept invitations with current account (#2382) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 17:13:26 +08:00
dadachann a7a7218afe fix(cloud): accept invitations with current account 2026-08-02 09:08:49 +00:00
Hyu a67728c163 fix cloud monitoring and invitation sign-in (#2381) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 16:39:14 +08:00
Hyu e9c9e896c6 fix(cloud): preserve pipeline routing in debug chat (#2380) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 01:49:17 +08:00
Hyu e2331c4967 fix(cloud): restore plugins and pipeline execution (#2379) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 01:34:11 +08:00
Hyu 0ccbcd5f5f fix(migrations): preserve published Cloud revision head (#2375) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 00:56:20 +08:00
Hyu c5aada494d fix(cloud): treat workspace owners as Space-bound (#2378) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 00:33:46 +08:00
Hyu e36e3aaea8 fix(cloud): accept null model abilities (#2377) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-01 18:50:47 +08:00
Hyu d64278ab3f feat(cloud): provision workspace model catalog (#2376) 
* feat(cloud): provision workspace model catalog

* ci(cloud): pin model catalog adapter source

* fix: make cloud model catalog sync recoverable

* ci: pin cloud adapter source for release

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-01 18:16:02 +08:00
dadachann 161ea9b3eb fix(cloud): restore fragment-based Space launch callback 2026-08-01 04:41:44 +00:00
dadachann c7d14676fc fix(cloud): restore disabled Box production mode 2026-08-01 04:11:17 +00:00
dadachann 2456bf1350 fix(migrations): preserve published Cloud revision head 2026-07-31 18:35:21 +00:00
dadachann 05a941ff16 Merge remote-tracking branch 'origin/deploy/prod' into release/cloud-monitoring-prod 2026-07-31 18:18:46 +00:00
dadachann 0330788d14 chore(prod): release workspace monitoring 2026-07-31 18:18:46 +00:00
Hyu d8ab0ba567 feat(telemetry): report workspace execution generation (#2374) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-01 02:10:59 +08:00
Hyu e3832ca536 style: format workspace identity modules (#2372) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-07-31 23:46:03 +08:00
Hyu 5d9fd15671 feat: use workspace identity for telemetry (#2371) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-07-31 23:35:14 +08:00
Hyu 404e3466d9 feat(cloud): add scoped support admin sessions (#2369) 
* feat(cloud): add scoped support admin sessions

* style(web): format support admin session changes

* fix(cloud): isolate support adapter sessions

* fix(cloud): authenticate plugin assets and report workspace resources

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-07-31 17:41:55 +08:00
Constantine 9df021eb8f fix(telegram): stop leaking bot token via Image.url (#2366) 
Telegram file.file_path is a full URL of the form
https://api.telegram.org/file/bot<TOKEN>/<path> that embeds the bot
token. Since #2362 this URL was copied into Image.url, so the token was
serialized into the message chain and thereby persisted to the
monitoring database, shown in the dashboard, and forwarded to every
installed plugin via event dispatch. Anyone with dashboard or plugin
access could recover the token and take full control of the bot.

Unlike the public CDN URLs used by the other adapters changed in #2362,
Telegram file URLs are only usable with the embedded token, so there is
no safe URL to expose. Store base64 only (as before #2362); the vision
path already relies solely on base64, so nothing downstream changes.

Add a regression test asserting the token never appears in the
converted Image or the serialized message chain.

Co-authored-by: Constantine1916 <Constantine1916@users.noreply.github.com>
 2026-07-31 17:25:19 +08:00
Hyu 98d0dba6d4 fix(web): restore locale key parity (#2370) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-07-31 17:07:04 +08:00
Hyu 5ec2371879 fix(config): preserve typed list environment overrides (#2367) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-07-31 16:06:09 +08:00
dadachann 473ba573a3 fix(cloud): retain launch replay records through clock skew 2026-07-30 21:37:06 +00:00
dadachann 93dbd3541e fix(cloud): make direct launch replay-safe 2026-07-30 21:02:38 +00:00
dadachann a5a26f81ee feat(auth): accept direct Space launch assertions 2026-07-30 20:05:17 +00:00
dadachann 92d9db8f95 chore(plugin): pin SDK 0.5.0 2026-07-30 20:05:17 +00:00
dadachann 59db012594 feat(cloud): enforce workspace resource quotas 2026-07-30 18:48:42 +00:00
dadachann 88f328066b fix(cloud): keep runtime sdk ahead of plugin dependencies 2026-07-30 16:42:01 +00:00
dadachann d155d9d5a8 fix(cloud): allow explicitly disabled box runtime 2026-07-30 15:42:49 +00:00
dadachann dd95545309 fix(prod): configure shared Box runtime 2026-07-30 15:17:17 +00:00
dadachann 9066c25729 fix(deploy): let migration own exact runtime ACLs 2026-07-30 14:58:31 +00:00
dadachann 6d2e9d3d72 fix(deploy): do not start disabled Box runtime 2026-07-30 14:48:51 +00:00
dadachann a0b85e11fd fix(deploy): keep runtime role schema read-only 2026-07-30 14:44:57 +00:00
dadachann 122d8fa659 fix(deploy): retry transient image pull failures 2026-07-30 14:34:20 +00:00
dadachann ace8cc67f2 fix(config): preserve typed list environment overrides 2026-07-30 14:26:41 +00:00