huanghuoguoguo
ecea4c3d41
Merge pull request #2675 from langbot-app/test/quality-self-duplicates-20261017
...
test: remove redundant backend checks and migration aliases
2026-10-17 20:10:30 +08:00
RockChinQ
c05aac538f
fix(discord): complete streaming media and event delivery
2026-10-17 15:11:29 +08:00
huanghuoguoguo
4afd86c1f6
test: consolidate duplicate backend contracts and strengthen stage checks
2026-10-17 15:03:50 +08:00
huanghuoguoguo
bbf517edbc
test(auth): exercise knowledge and event action boundaries ( #2667 )
2026-10-17 12:46:41 +08:00
huanghuoguoguo
d54e533985
fix(skill): pin revisions per run and preserve shared Box state
2026-10-17 09:32:41 +08:00
RockChinQ and Hyu
616981b0cf
perf(llm): harden request policy and optimize connections, reasoning and prompt caching ( #2661 )
...
* fix(llm): centralize request policy and preserve stream diagnostics
* test(llm): dispose SQLite engine after migration regression
* perf(llm): reuse connections and unify reasoning and prompt cache policy
* fix(llm): preserve explicit native prompt cache options
* perf(llm): fix measured TLS setup and streaming reuse overhead
* fix(llm): resolve plugin request-chain regressions found by E2E
---------
Co-authored-by: Hyu <[email protected]
2026-10-15 19:48:35 +08:00
RockChinQ
b5fad9f04a
feat(cloud): configure dedicated and shared worker quotas independently
2026-10-13 03:19:36 +00:00
Hyu
34b5fe0202
fix(plugin): share the runtime file-transfer root and 404 uninstalled icon requests
...
The SDK binds one transfer root inode (mode 0700) and picks it per profile: a shared worker uses /tmp/lbp-rpc while a host without the profile env fell back to data/temp/lbp, so plugin icons and assets died with 'Invalid file transfer capability'. The host now pins the shared root, and a plugin absent from the resolved Workspace answers 404 instead of 500.
2026-10-02 01:34:47 +08:00
Hyu
38d5750785
fix(plugin): report when an installation failure happened, not when it was sampled
...
The connector stored only uuid/code/message, so the ops reporter stamped every entry with its own sampling time and a stale failure looked freshly broken on each report. Failures now carry failed_at and the payload publishes it.
2026-10-02 01:34:46 +08:00
Hyu
4c71de5eca
feat(plugin): push plugin runtime ops samples to the Space control plane
...
The shared Cloud deployment runs one Plugin Runtime for every Workspace, but
nothing reported its health: the instance only exposed two aggregate numbers on
its own health probe, and the per-installation failure registry, the desired
state registry and the reconcile outcome lived in memory with no reader.
Add RuntimeOpsReporter, which every 30 seconds reads the Runtime ``/healthz``
probe over HTTP (derived from ``plugin.runtime_ws_url``), merges it with the
connector's desired-state, failure and reconcile summaries, and posts one
sample to the Space control plane on the existing authenticated direction.
Delivery is best-effort and bounded: a single in-flight request, a ten second
timeout, dropped samples counted in ``runtime_ops`` on the instance health
probe, and a failed probe recorded as a drop so the dashboard shows staleness
instead of grading a stale sample as healthy.
Cloud-only: a non-cloud deployment never enables the reporter, and the channel
is independent of product telemetry so ``space.disable_telemetry`` cannot blind
the ops dashboard.
2026-10-01 19:01:16 +08:00
RockChinQ
1fde3b4283
fix(certification): align certified sharing and unsigned dedicated admission ( #2610 )
...
Integrate certification policy, SDK/Core semantics, and documentation on canonical branch. Resolve duplicated documentation and keep invalid Cloud signatures rejected.
2026-09-29 00:56:18 +08:00
RockChinQ
ce118b4f41
fix(plugin): allow unsigned Cloud plugins on dedicated workers
2026-09-28 14:26:10 +00:00
RockChinQ
c384e4715a
test(plugin): include stateless certificate model in shared fixtures
2026-09-28 09:14:54 +00:00
RockChinQ
b51a448b1e
feat: stateless certified shared worker
...
Implements stateless singleton component model for certified shared Workers, integrating with SDK 0.7.0.
2026-09-28 13:25:40 +08:00
huanghuoguoguo
3987051da3
test(skill): align native exec assertion with mount API
2026-09-28 11:10:37 +08:00
RockChinQ
f488087cc4
Merge remote-tracking branch 'origin/master' into feat/certified-cross-tenant-worker-pool
2026-09-25 13:33:22 +00:00
RockChinQ
300f5825bb
fix(plugin): fail closed on incomplete certification records
2026-09-25 13:13:35 +00:00
RockChinQ
9f296bd57e
feat(plugin): route certified installs to shared workers
2026-09-25 12:48:55 +00:00
TyperBody
afe700f1d8
fix(plugin): keep certified marketplace packages installable on OSS
...
The certified-archive admission gate treated any declared certificate it could
not resolve as an untrusted archive and rejected the install with
CERTIFIED_PLUGIN_OSS_FORCE_REQUIRED. OSS ships an empty
plugin.certification.trusted_public_keys ring and the marketplace signs every
package with its own issuer key, so all certified marketplace packages (for
example langbot-team/RunnerDemo and langbot-team/LocalAgent) failed at the
'validating plugin package' step before artifact storage.
Admission now distinguishes an unresolvable declaration from a configured trust
decision that fails:
- record certificate_id only when the key_id is actually present in the
configured ring, so an empty ring yields an unresolvable declaration;
- OSS degrades an unresolvable declaration to the existing oss_dev dedicated
profile with CERTIFIED_PLUGIN_OSS_UNTRUSTED_DEDICATED instead of blocking;
- a resolvable declaration that still fails keeps requiring the explicit
administrator force (CERTIFIED_PLUGIN_OSS_FORCE_REQUIRED);
- Cloud stays fail-closed and rejects before storage.
No shared-runtime privilege is granted when the issuer is not trusted, so this
withholds isolation rather than escalating it.
2026-09-25 19:32:54 +08:00
RockChinQ
5d9684731e
merge(4.11): integrate master marketplace updates preserving Runner lifecycle
2026-09-21 16:58:35 +00:00
RockChinQ
27871e4363
merge: integrate master certification and document identity fixes into 4.11
2026-09-21 10:55:40 +00:00
RockChinQ
52f5699533
fix(plugin): honor requested marketplace version ( #2555 )
2026-09-20 23:59:50 +08:00
RockChinQ
20a04a77bf
feat(plugin): enforce certified archive admission ( #2553 )
...
* feat(plugin): add certified admission policy
* feat(plugin): enforce certified archive admission
* chore(plugin): pin certified SDK beta
* fix(plugin): consume SDK beta 5
* style(plugin): format certification admission
2026-09-20 18:54:45 +08:00
RockChinQ
79cac0c6a3
fix(reasoning): apply explicit per-call levels without runner config caching
2026-09-19 00:05:49 +08:00
RockChinQ
60606e1997
fix(migration): improve runner migration and plugin installation feedback
2026-09-18 13:10:32 +08:00
RockChinQ
b264d46d77
feat: delegate sandbox policy to runners and simplify pipeline migration
2026-09-17 23:05:27 +08:00
RockChinQ
8c119bc4b6
feat: add verified manual pipeline migration for plugin runners
2026-09-16 18:13:11 +00:00
RockChinQ
273b1ea3cf
Merge master into dev/4.11.x and preserve plugin runner architecture
...
Reconcile migration branches without rewriting published revisions; retain additive Codex, monitoring, provider and platform fixes. Keep dynamic runner schemas and Host ownership, restore compatibility regressions, and preserve safe model-test error handling.
2026-09-16 08:13:07 +00:00
Hyu
d497defbf7
fix(runner): keep installation context within each stream resume
2026-09-15 13:51:27 +08:00
Hyu and dadachann
45d77c3926
fix(plugin): preserve explicit nested installation scope ( #2528 )
...
* fix(plugin): preserve explicit nested installation scope
* fix(deps): pin released RAG runtime SDK 0.5.8
---------
Co-authored-by: dadachann <[email protected]
2026-09-11 17:41:33 +08:00
RockChinQ
d93e44d82d
feat(runner): authorize contextual platform APIs
2026-09-11 00:02:44 +08:00
RockChinQ
f24a7c9bb2
feat(runner): unify plugin execution across agents and event processors
2026-09-10 18:04:38 +08:00
RockChinQ
8903a40c41
fix(runtime): preserve explicit replies and report bot configuration errors
2026-09-10 17:21:22 +08:00
RockChinQ
812eb09ee4
fix(pipeline): apply returned plugin event contexts
2026-09-07 23:51:34 +08:00
Hyu
a87c814dae
feat(web): improve marketplace install workflows
2026-09-01 16:43:50 +08:00
Hyu
e5e62c8fe9
fix(plugin): keep status responsive during installation
2026-09-01 12:46:16 +08:00
Hyu
fde04e64f6
Merge remote-tracking branch 'origin/master' into dev/4.11.x
...
# Conflicts:
# src/langbot/pkg/api/http/controller/groups/pipelines/pipelines.py
# src/langbot/pkg/api/http/service/bot.py
# src/langbot/pkg/provider/runners/localagent.py
# src/langbot/templates/metadata/pipeline/ai.yaml
# tests/unit_tests/api/service/test_bot_service.py
# tests/unit_tests/provider/runners/test_difysvapi_runner.py
# tests/unit_tests/utils/test_safe_regex.py
# web/src/app/infra/entities/adapter-categories.ts
# web/src/app/wizard/page.tsx
# web/src/i18n/locales/en-US.ts
# web/src/i18n/locales/ja-JP.ts
# web/src/i18n/locales/zh-Hans.ts
# web/tests/e2e/plugin-page-auth.spec.ts
2026-08-31 17:17:47 +08:00
RockChinQ and Hyu
1b7ae791b3
fix(plugin): return not found after removal ( #2483 )
...
Co-authored-by: Hyu <[email protected]
2026-08-31 13:40:03 +08:00
dadachann
0559d9d441
Merge master into dev/4.11.x
...
# Conflicts:
# pyproject.toml
# uv.lock
2026-08-24 02:34:14 +00:00
dadachann
c4bad508d2
fix(runtime): honor configured cold reconcile timeout
2026-08-20 18:55:24 +00:00
Hyu and dadachann
7803d56254
fix(plugin): keep pre-tenancy plugin storage readable ( #2446 )
...
* fix(plugin): adopt legacy scoped storage rows
* fix(plugin): delete adopted legacy storage rows
* test(plugin): cover legacy storage deletion
* fix(plugin): avoid mutating legacy storage on reads
* fix(plugin): make legacy storage adoption atomic
* fix(plugin): resolve concurrent legacy adoption
* fix(plugin): upsert concurrent storage writes
* fix(plugin): retry reads after legacy adoption
* fix(plugin): deduplicate migrated storage keys
---------
Co-authored-by: dadachann <[email protected]
2026-08-17 11:49:26 +08:00
Junyan Qin
f94243c725
chore: merge master into dev/4.11.x
2026-08-14 16:04:52 +08:00
Hyu and Chan
8b14d2ab8e
fix(runtime): allow shared plugin reconcile to finish ( #2419 )
...
Co-authored-by: Chan <[email protected]
2026-08-12 19:31:23 +08:00
Hyu and Chan
97428310b9
fix(runtime): require Cloud control secrets ( #2418 )
...
Co-authored-by: Chan <[email protected]
2026-08-12 18:42:23 +08:00
RockChinQ
bbc912d0ef
fix(runtime): restore standalone runtime compatibility
2026-08-11 21:35:03 +08:00
Hyu and Chan
7dc9dafb7c
fix(plugin): validate runtime timeout before startup ( #2407 )
...
Co-authored-by: Chan <[email protected]
2026-08-07 11:26:42 +08:00
Hyu and Chan
ddb6dbf593
fix(cloud): tolerate slow plugin runtime reconciliation ( #2405 )
...
Co-authored-by: Chan <[email protected]
2026-08-06 20:39:20 +08:00
Hyu and dadachann
d78546967c
feat: expose Workspace-scoped rotating plugin debug keys ( #2395 )
...
* feat: add Workspace-scoped rotating plugin debug tokens
* chore: pin formatted Workspace debug runtime
* chore: pin merged Workspace debug runtime
* chore: pin tenant-safe debug runtime
---------
Co-authored-by: dadachann <[email protected]
2026-08-04 19:20:06 +08:00
huanghuoguoguo
79611a5513
fix(agent): harden runner integration and QA
2026-08-01 09:23:41 +08:00
huanghuoguoguo
55f42a4ebc
chore(merge): sync master into dev/4.11.x
2026-07-31 19:29:38 +08:00
huanghuoguoguo