xinyin025/LangBot
1
0
Fork 0
mirror of https://github.com/langbot-app/LangBot.git synced 2026-08-07 11:56:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,792 Commits 58 Branches 204 Tags
495d367d0746e2913b2f0418cea06b2dce16c8ec
Commit Graph

3792 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Chan 495d367d07 fix(cloud): track workspace membership provenance 2026-08-06 13:57:59 +00:00
Chan 2af4e111aa fix(cloud): converge legacy revision-zero members 2026-08-06 13:09:42 +00:00
Hyu ddb6dbf593 fix(cloud): tolerate slow plugin runtime reconciliation (#2405) 
Co-authored-by: Chan <dadachann@users.noreply.github.com>
 2026-08-06 20:39:20 +08:00
Hyu f59343fd5b fix: provision Cloud models after Workspace activation (#2403) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-05 23:26:23 +08:00
Hyu 211710e24c fix: allow trusted halfvec tenant search casts (#2402) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-05 22:09:01 +08:00
Hyu cdd5c6589c fix: support 3072-dimensional knowledge embeddings (#2401) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-05 21:19:57 +08:00
Hyu 3b4698463c chore: pin runtime control binding SDK (#2400) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-05 15:12:40 +08:00
Hyu edd6cad449 chore: pin fenced debug runtime sessions (#2396) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-04 19:59:51 +08:00
Hyu d78546967c feat: expose Workspace-scoped rotating plugin debug keys (#2395) 
* feat: add Workspace-scoped rotating plugin debug tokens

* chore: pin formatted Workspace debug runtime

* chore: pin merged Workspace debug runtime

* chore: pin tenant-safe debug runtime

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-04 19:20:06 +08:00
Hyu c08bfc8ced feat: report independent instance and workspace identities (#2394) 
* feat: report independent instance and workspace identities

* test: include workspace in OAuth callback fixture

* ci: pin production cloud adapter to Space release

* fix: preserve authenticated Workspace telemetry attribution

* ci: pin production cloud adapter to final Space release

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-04 17:27:23 +08:00
Hyu 7820949d3a fix(workspace): show member emails (#2393) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-04 11:48:43 +08:00
Hyu e263a5d1d7 fix(web): use natural tooltip wrapping (#2391) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 21:26:55 +08:00
Hyu 6bad7bcffc fix(web): keep extension market navigable at quota (#2390) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 20:10:46 +08:00
Hyu f0b2c103c1 fix(web): disable quota-reached create actions (#2389) 
* fix(web): disable quota-reached create actions

* fix(web): close quota review gaps

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 19:08:47 +08:00
Hyu 3101c9be6a [verified] fix: harden OSS and Cloud workspace UI (#2387) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 13:27:38 +08:00
Hyu 1e6e4c0ca7 fix(cloud): show owner model balance and enforce single owner (#2384) (#2385) 
* fix(cloud): show owner model balance and enforce single owner

* fix(migrations): create owner index idempotently

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-03 02:14:43 +08:00
Hyu 408c8031d4 Merge pull request #2383 from langbot-app/sync/cloud-fixes-to-master 
merge: sync Cloud production fixes to master
 2026-08-02 17:24:48 +08:00
dadachann 0e6cca4690 merge: sync Cloud production fixes to master 2026-08-02 09:19:41 +00:00
dadachann a7a7218afe fix(cloud): accept invitations with current account 2026-08-02 09:08:49 +00:00
Hyu a67728c163 fix cloud monitoring and invitation sign-in (#2381) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 16:39:14 +08:00
Hyu e9c9e896c6 fix(cloud): preserve pipeline routing in debug chat (#2380) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 01:49:17 +08:00
Hyu e2331c4967 fix(cloud): restore plugins and pipeline execution (#2379) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 01:34:11 +08:00
Hyu 0ccbcd5f5f fix(migrations): preserve published Cloud revision head (#2375) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 00:56:20 +08:00
Hyu c5aada494d fix(cloud): treat workspace owners as Space-bound (#2378) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-02 00:33:46 +08:00
Hyu e36e3aaea8 fix(cloud): accept null model abilities (#2377) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-01 18:50:47 +08:00
Hyu d64278ab3f feat(cloud): provision workspace model catalog (#2376) 
* feat(cloud): provision workspace model catalog

* ci(cloud): pin model catalog adapter source

* fix: make cloud model catalog sync recoverable

* ci: pin cloud adapter source for release

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-01 18:16:02 +08:00
dadachann 161ea9b3eb fix(cloud): restore fragment-based Space launch callback 2026-08-01 04:41:44 +00:00
dadachann c7d14676fc fix(cloud): restore disabled Box production mode 2026-08-01 04:11:17 +00:00
dadachann 2456bf1350 fix(migrations): preserve published Cloud revision head 2026-07-31 18:35:21 +00:00
dadachann 05a941ff16 Merge remote-tracking branch 'origin/deploy/prod' into release/cloud-monitoring-prod 2026-07-31 18:18:46 +00:00
dadachann 0330788d14 chore(prod): release workspace monitoring 2026-07-31 18:18:46 +00:00
Hyu d8ab0ba567 feat(telemetry): report workspace execution generation (#2374) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-08-01 02:10:59 +08:00
Hyu e3832ca536 style: format workspace identity modules (#2372) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-07-31 23:46:03 +08:00
Hyu 5d9fd15671 feat: use workspace identity for telemetry (#2371) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-07-31 23:35:14 +08:00
Hyu 404e3466d9 feat(cloud): add scoped support admin sessions (#2369) 
* feat(cloud): add scoped support admin sessions

* style(web): format support admin session changes

* fix(cloud): isolate support adapter sessions

* fix(cloud): authenticate plugin assets and report workspace resources

---------

Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-07-31 17:41:55 +08:00
Constantine 9df021eb8f fix(telegram): stop leaking bot token via Image.url (#2366) 
Telegram file.file_path is a full URL of the form
https://api.telegram.org/file/bot<TOKEN>/<path> that embeds the bot
token. Since #2362 this URL was copied into Image.url, so the token was
serialized into the message chain and thereby persisted to the
monitoring database, shown in the dashboard, and forwarded to every
installed plugin via event dispatch. Anyone with dashboard or plugin
access could recover the token and take full control of the bot.

Unlike the public CDN URLs used by the other adapters changed in #2362,
Telegram file URLs are only usable with the embedded token, so there is
no safe URL to expose. Store base64 only (as before #2362); the vision
path already relies solely on base64, so nothing downstream changes.

Add a regression test asserting the token never appears in the
converted Image or the serialized message chain.

Co-authored-by: Constantine1916 <Constantine1916@users.noreply.github.com>
 2026-07-31 17:25:19 +08:00
Hyu 98d0dba6d4 fix(web): restore locale key parity (#2370) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-07-31 17:07:04 +08:00
Hyu 5ec2371879 fix(config): preserve typed list environment overrides (#2367) 
Co-authored-by: dadachann <185672915+dadachann@users.noreply.github.com>
 2026-07-31 16:06:09 +08:00
dadachann 473ba573a3 fix(cloud): retain launch replay records through clock skew 2026-07-30 21:37:06 +00:00
dadachann 93dbd3541e fix(cloud): make direct launch replay-safe 2026-07-30 21:02:38 +00:00
dadachann a5a26f81ee feat(auth): accept direct Space launch assertions 2026-07-30 20:05:17 +00:00
dadachann 92d9db8f95 chore(plugin): pin SDK 0.5.0 2026-07-30 20:05:17 +00:00
dadachann 59db012594 feat(cloud): enforce workspace resource quotas 2026-07-30 18:48:42 +00:00
dadachann 88f328066b fix(cloud): keep runtime sdk ahead of plugin dependencies 2026-07-30 16:42:01 +00:00
dadachann d155d9d5a8 fix(cloud): allow explicitly disabled box runtime 2026-07-30 15:42:49 +00:00
dadachann dd95545309 fix(prod): configure shared Box runtime 2026-07-30 15:17:17 +00:00
dadachann 9066c25729 fix(deploy): let migration own exact runtime ACLs 2026-07-30 14:58:31 +00:00
dadachann 6d2e9d3d72 fix(deploy): do not start disabled Box runtime 2026-07-30 14:48:51 +00:00
dadachann a0b85e11fd fix(deploy): keep runtime role schema read-only 2026-07-30 14:44:57 +00:00
dadachann 122d8fa659 fix(deploy): retry transient image pull failures 2026-07-30 14:34:20 +00:00