xinyin025/LangBot
1
0
Fork 0
mirror of https://github.com/langbot-app/LangBot.git synced 2026-10-23 00:45:25 +08:00
Code Issues Packages Projects Releases Wiki Activity
4,559 Commits 191 Branches 220 Tags
fef2688225ba654ccfd8a9cc6efc9694ddea25e5
Commit Graph
143 Commits
Author SHA1 Message Date
BiFangKNT 57077740bd chore(merge): sync master and preserve monitoring test coverage 2026-10-18 12:43:44 +08:00
BiFangKNT b73f66a234 feat(persistence): enforce image reference storage contract 
- Reject structured inline images on ORM and Core writes
- Route plugin run results through the media-aware journal
- Redact legacy inline images before merging run metadata
- Cover storage contracts and regressions on SQLite and PostgreSQL
 2026-10-18 12:26:09 +08:00
BiFangKNT 80b8358d8d test(monitoring): add status column to monitoring messages table 2026-10-18 11:10:35 +08:00
huanghuoguoguo 13b8edeace Merge pull request #2705 from langbot-app/test/required-contract-suites 
test(ci): decouple required suites from test names and counts
 2026-10-17 23:12:59 +08:00
huanghuoguoguo 407e352e5d Merge pull request #2695 from langbot-app/test/quality-migration-oracles-20261017 
test(migrations): reuse historical data contracts and measure startup peaks
 2026-10-17 20:12:34 +08:00
huanghuoguoguo fc877f73df Merge pull request #2693 from langbot-app/test/quality-box-platform-oracles-20261017 
test(runtime): verify sandbox and platform behavior contracts
 2026-10-17 20:12:22 +08:00
huanghuoguoguo c9f886a203 Merge pull request #2692 from langbot-app/test/quality-valkey-search-oracles-20261017 
test(vector): verify real Valkey search and deletion results
 2026-10-17 20:12:15 +08:00
huanghuoguoguo 64cdb7095d Merge pull request #2691 from langbot-app/test/quality-bot-api-oracles-20261017 
test(api): verify bot response and service delegation contracts
 2026-10-17 20:12:09 +08:00
huanghuoguoguo da4c987976 Merge pull request #2687 from langbot-app/test/quality-persistence-core-oracles-20261017 
test: strengthen startup and persistence boundary oracles
 2026-10-17 20:11:42 +08:00
huanghuoguoguo 1d9e551908 Merge pull request #2681 from langbot-app/test/quality-auth-boundary-oracles-20261017 
test(auth): verify revocation and authorization ordering
 2026-10-17 20:11:06 +08:00
huanghuoguoguo 98cc2ec2d6 Merge pull request #2680 from langbot-app/fix/auth-invalid-json-contract-20261017 
fix(auth): reject malformed credential payloads before authentication
 2026-10-17 20:11:01 +08:00
huanghuoguoguo 0b0201a3f5 Merge pull request #2679 from langbot-app/test/quality-api-observability-20261017 
test(api): verify monitoring payloads and embed side effects
 2026-10-17 20:10:55 +08:00
huanghuoguoguo ecea4c3d41 Merge pull request #2675 from langbot-app/test/quality-self-duplicates-20261017 
test: remove redundant backend checks and migration aliases
 2026-10-17 20:10:30 +08:00
huanghuoguoguo 567ce3a841 Merge pull request #2674 from langbot-app/test/quality-api-response-contracts-20261017 
test(api): verify resource payloads and scoped service arguments
 2026-10-17 20:10:20 +08:00
huanghuoguoguo 0f522e5286 test(persistence): verify migration data and startup task bounds 2026-10-17 16:08:08 +08:00
huanghuoguoguo 9b350132f4 test(api): cover send delegation and reuse the prior list contract 2026-10-17 15:57:35 +08:00
huanghuoguoguo c03f33d855 test(runtime): verify sandbox and platform contracts 2026-10-17 15:57:15 +08:00
huanghuoguoguo 4a2780b841 test(vector): verify real Valkey search and deletion results 2026-10-17 15:53:26 +08:00
huanghuoguoguo cbc049400c test(api): verify bot response and service delegation contracts 2026-10-17 15:53:00 +08:00
huanghuoguoguo 1c0fd7d0ba test: strengthen startup and persistence boundary oracles 2026-10-17 15:45:09 +08:00
huanghuoguoguo efe1e4a758 test(auth): verify revocation and authorization ordering 2026-10-17 15:29:39 +08:00
huanghuoguoguo 569dd07024 fix(auth): reject malformed credential payloads before authentication 2026-10-17 15:25:16 +08:00
huanghuoguoguo d25c1e0f0c test(api): verify monitoring payloads and embed side effects 2026-10-17 15:16:26 +08:00
huanghuoguoguo 4afd86c1f6 test: consolidate duplicate backend contracts and strengthen stage checks 2026-10-17 15:03:50 +08:00
huanghuoguoguo 8bad1a14fe test(api): verify resource payloads and scoped service arguments 2026-10-17 15:02:41 +08:00
huanghuoguoguo 24300adc72 test(runtime): assert filter and message delivery semantics 2026-10-17 15:01:09 +08:00
huanghuoguoguo 3f2d52e557 Merge pull request #2512 from langbot-app/feat/2410-sdk-skill-store 
feat(skill): decouple read-only skills from Box execution
 2026-10-17 10:13:26 +08:00
huanghuoguoguo d54e533985 fix(skill): pin revisions per run and preserve shared Box state 2026-10-17 09:32:41 +08:00
huanghuoguoguo 2b79b04d36 Merge pull request #2635 from langbot-app/test/core-contract-coverage-gaps 
test(core): verify runtime behavior and close PostgreSQL coverage gaps
 2026-10-17 09:13:07 +08:00
RockChinQandClaude Opus 5.5 16cfb6f8bd feat(cloud): show purchased plan revision alongside the latest revision 
- Expose the workspace's purchased plan revision from the entitlement
  snapshot.
- Stack the purchased revision card in front of the latest revision in
  the plan comparison dialog; both cards share the same layout, and the
  purchased card's copy and prices come from the Space revision endpoint
  while benefits stay on the entitlement snapshot.
- Add a cancel-first tooltip for subscribing to the newer revision.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
 2026-10-17 00:25:41 +08:00
RockChinQ 338b856eec fix(monitoring): restore Cloud in-flight snapshots and collapsed dock 2026-10-15 16:42:24 +08:00
RockChinQ 625ee67113 fix(ci): align workspace fixtures and constrain mobile tours 2026-10-15 05:31:04 +00:00
Hyu e29fd27f02 feat(i18n): localize backend messages by workspace language 2026-10-15 05:31:04 +00:00
RockChinQ b6c4e2c395 feat(cloud): enforce signed workspace subscription resource limits 2026-10-15 05:30:36 +00:00
RockChinQ 0ed2a513f9 test(persistence): verify tagged 4.10.11 upgrades on sqlite and postgres 2026-10-13 13:28:03 +00:00
RockChinQ 48c6a1f536 fix(sqlite): enable WAL for concurrent plugin callback commits 2026-10-13 11:40:55 +00:00
Hyu 3ff849d243 test: align processor fixtures with current creation and startup behavior 2026-10-11 01:03:31 +08:00
RockChinQ 1fde3b4283 fix(certification): align certified sharing and unsigned dedicated admission (#2610) 
Integrate certification policy, SDK/Core semantics, and documentation on canonical branch. Resolve duplicated documentation and keep invalid Cloud signatures rejected.
 2026-09-29 00:56:18 +08:00
Hyu 6515ba3b94 fix(api): serve the passkey and password routes for the authenticated Account 
Passkeys and passwords belong to the Account, but those routes required a Workspace -- which the WebUI never sends for them -- and then resolved the caller by looking the login name up as an email address. Every Account whose login name is not its email answered 404, so the passkey panel could neither add nor list a key.

The routes now authenticate with the account token and address the Account the caller authenticated as, matching the self-service second-factor routes in the same file. /space/bind-authorize-url carried the same Workspace requirement.

The login page also surfaced a TypeError instead of the passkey login failure message when an assertion was rejected.
 2026-09-28 23:53:14 +08:00
RockChinQ 0468c2be15 Merge pull request #2609 from langbot-app/fix/cloud-unsigned-dedicated-20260928 
fix(plugin): allow unsigned Cloud plugins as dedicated
 2026-09-28 22:40:02 +08:00
Hyu e14e277424 fix(api): scope TOTP oversight to the caller's workspace 
The second-factor listing was instance-wide and the three mutating endpoints never checked that the target Account belongs to the caller's Workspace, so an owner or admin could see and reset another tenant's account. The listing now resolves the Workspace members and the mutations answer 404 for a foreign account, which does not disclose that it exists.

Also fixes the TOTP write path on Postgres: six write points passed timezone-aware datetimes into timestamp-without-time-zone columns, which asyncpg rejects, so every enroll, confirm, revoke and recovery-code consumption raised a 500 there. SQLite tolerated the same values.

The panel derives its oversight view from the API authorization instead of the length of the account list, which would have hidden it in a single-member Workspace.
 2026-09-28 22:38:30 +08:00
RockChinQ ce118b4f41 fix(plugin): allow unsigned Cloud plugins on dedicated workers 2026-09-28 14:26:10 +00:00
RockChinQ b51a448b1e feat: stateless certified shared worker 
Implements stateless singleton component model for certified shared Workers, integrating with SDK 0.7.0.
 2026-09-28 13:25:40 +08:00
huanghuoguoguo 7bf20490f4 feat(skill): use SDK store without box execution 2026-09-28 10:18:16 +08:00
huanghuoguoguo 4f95016998 test(api): align CLI diagnostics with integration gates 2026-09-27 17:46:19 +08:00
RockChinQ a5e5ee5fb8 fix(plugin): backfill certified artifact digest 2026-09-25 21:03:47 +00:00
RockChinQ deca26a666 chore(plugin): pin SDK 0.6.3 2026-09-25 19:09:16 +00:00
RockChinQ f488087cc4 Merge remote-tracking branch 'origin/master' into feat/certified-cross-tenant-worker-pool 2026-09-25 13:33:22 +00:00
RockChinQ 300f5825bb fix(plugin): fail closed on incomplete certification records 2026-09-25 13:13:35 +00:00
RockChinQ 9f296bd57e feat(plugin): route certified installs to shared workers 2026-09-25 12:48:55 +00:00