Zhichang Yu 4c54cefd29 Port 14 upstream agent security / correctness fixes to Go canvas (#16455) ...

Mirrors 14 merged upstream PRs into the Go agent port.

PRs ported:
  - #15609 ExeSQL SSRF guard + DNS pin
  - #15436 HTTP timeout on external API tools
  - #16363 be_output restore + DeepL error path
  - #15644 switch no longer matches empty condition
  - #15374 session_id bind to path agent_id (DAO idor guard)
  - #16169 sandbox artifact ownership gate
  - #15457 tenant ownership on agentbots
  - #15145 rerun agent document access check
- #15446 thinking switch (component portion; provider policy lives in
internal/llm)
  - #15426 Invoke URL/proxy SSRF + DNS pin + no-redirects
  - #15238 agentbot thinking-logs beta endpoint
  - #14589 UserFillUp SSE event propagation
  - #14890 anonymous webhook opt-in
- #15068 PipelineChunker new component (text/file_ref/parser_id
dispatch; file-format extraction is a follow-up)

40 files, +2355 / -58 lines. 33 new tests, all targeted package suites
pass (1721 + 4 skipped); 1 pre-existing flaky test unrelated.

2026-06-30 16:28:48 +08:00

..

admin_runtime_test.go

feat(agent): Go port — canvas engine, 22 components, DSL v2, 13 endpoints (#15952)

2026-06-12 22:58:28 +08:00

admin_runtime.go

feat(agent): Go port — canvas engine, 22 components, DSL v2, 13 endpoints (#15952)

2026-06-12 22:58:28 +08:00

agent_attachment.go

feat[Go]: port agent attachment download, chatbot + agentbot completion/info endpoints from Python (#16405)

2026-06-29 09:45:16 +08:00

agent_component_test.go

feat[Go]: port agent webhook trigger, agent file upload/download, component input-form + debug endpoints from Python (#16403)

2026-06-29 09:45:16 +08:00

agent_component.go

feat[Go]: port agent webhook trigger, agent file upload/download, component input-form + debug endpoints from Python (#16403)

2026-06-29 09:45:16 +08:00

agent_download_test.go

feat[Go]: port agent webhook trigger, agent file upload/download, component input-form + debug endpoints from Python (#16403)

2026-06-29 09:45:16 +08:00

agent_download.go

feat[Go]: port agent webhook trigger, agent file upload/download, component input-form + debug endpoints from Python (#16403)

2026-06-29 09:45:16 +08:00

agent_test.go

Port 14 upstream agent security / correctness fixes to Go canvas (#16455)

2026-06-30 16:28:48 +08:00

agent_upload_test.go

feat[Go]: port agent webhook trigger, agent file upload/download, component input-form + debug endpoints from Python (#16403)

2026-06-29 09:45:16 +08:00

agent_upload.go

feat[Go]: port agent webhook trigger, agent file upload/download, component input-form + debug endpoints from Python (#16403)

2026-06-29 09:45:16 +08:00

agent_wait_for_user_test.go

feat(go-agent): Ported retrieval node, added Keenable web search tool (#16396)

2026-06-29 09:45:16 +08:00

agent_webhook_schema_test.go

feat[Go]: port agent webhook trigger, agent file upload/download, component input-form + debug endpoints from Python (#16403)

2026-06-29 09:45:16 +08:00

agent_webhook_schema.go

feat[Go]: port agent webhook trigger, agent file upload/download, component input-form + debug endpoints from Python (#16403)

2026-06-29 09:45:16 +08:00

agent_webhook_security_test.go

Port 14 upstream agent security / correctness fixes to Go canvas (#16455)

2026-06-30 16:28:48 +08:00

agent_webhook_security.go

Port 14 upstream agent security / correctness fixes to Go canvas (#16455)

2026-06-30 16:28:48 +08:00

agent_webhook_test.go

Port 14 upstream agent security / correctness fixes to Go canvas (#16455)

2026-06-30 16:28:48 +08:00

agent_webhook.go

feat[Go]: port agent webhook trigger, agent file upload/download, component input-form + debug endpoints from Python (#16403)

2026-06-29 09:45:16 +08:00

agent.go

Port 14 upstream agent security / correctness fixes to Go canvas (#16455)

2026-06-30 16:28:48 +08:00

api_token.go

Go CLI: refactor (#16299)

2026-06-24 16:50:40 +08:00

auth_test.go

feat[Go]: port agent attachment download, chatbot + agentbot completion/info endpoints from Python (#16405)

2026-06-29 09:45:16 +08:00

auth.go

Port 14 upstream agent security / correctness fixes to Go canvas (#16455)

2026-06-30 16:28:48 +08:00

bot_test.go

Port 14 upstream agent security / correctness fixes to Go canvas (#16455)

2026-06-30 16:28:48 +08:00

bot.go

Port 14 upstream agent security / correctness fixes to Go canvas (#16455)

2026-06-30 16:28:48 +08:00

chat_channel_test.go

feat(go-api): complete chat channel API migration with tests (#16139)

2026-06-22 18:16:15 +08:00

chat_channel.go

feat(go-api): complete chat channel API migration with tests (#16139)

2026-06-22 18:16:15 +08:00

chat_session_test.go

feat(go-api): align chat session get/update with python behavior (#16239)

2026-06-24 17:34:01 +08:00

chat_session.go

Revert "feat(go-api): Add Go chat session message delete and feedback APIs" (#16465)

2026-06-29 21:37:11 +08:00

chat_test.go

feat(go-api): add chat update endpoints (#16378)

2026-06-26 19:22:57 +08:00

chat.go

feat[Go]: implement Create-Chat/Session, Delete-Session (#16386)

2026-06-26 19:23:45 +08:00

chunk_test.go

feat(go-api): add Go support for POST /api/v1/datasets/{dataset_id}/documents/{document_id}/chunks (#16256)

2026-06-25 14:15:29 +08:00

chunk.go

feat(go-api): add Go support for POST /api/v1/datasets/{dataset_id}/documents/{document_id}/chunks (#16256)

2026-06-25 14:15:29 +08:00

common.go

…

connector_test.go

feat[Go] implement /connectors/google/oauth (#15584)

2026-06-03 20:08:55 +08:00

connector.go

feat[Go] implement /connectors/google/oauth (#15584)

2026-06-03 20:08:55 +08:00

datasets_aggregate_tags_test.go

feat(go-api): migrate datasets tags aggregation API to Go (#16181)

2026-06-24 14:42:10 +08:00

datasets_list_tags_test.go

feat(go-api): add dataset tags endpoints (#16231)

2026-06-24 17:05:58 +08:00

datasets_rename_tag_test.go

feat(go-api): add dataset tags endpoints (#16231)

2026-06-24 17:05:58 +08:00

datasets_search_test.go

feat(go-api): add dataset search endpoint (#16304)

2026-06-25 13:32:22 +08:00

datasets.go

feat(go-api): add dataset search endpoint (#16304)

2026-06-25 13:32:22 +08:00

dify_retrieval_handler_test.go

feat(go-agent): Ported retrieval node, added Keenable web search tool (#16396)

2026-06-29 09:45:16 +08:00

dify_retrieval_handler.go

feat(go-api): add RAG retrieval to chat completions (#15739)

2026-06-10 11:07:45 +08:00

document_test.go

Port 14 upstream agent security / correctness fixes to Go canvas (#16455)

2026-06-30 16:28:48 +08:00

document.go

Port 14 upstream agent security / correctness fixes to Go canvas (#16455)

2026-06-30 16:28:48 +08:00

error_response_test.go

fix(go): redact internal handler errors (#15746)

2026-06-12 16:09:10 +08:00

error.go

fix(go): redact internal handler errors (#15746)

2026-06-12 16:09:10 +08:00

file_commit_test.go

feat(go-agent): Ported retrieval node, added Keenable web search tool (#16396)

2026-06-29 09:45:16 +08:00

file_commit.go

feat(go-agent): Ported retrieval node, added Keenable web search tool (#16396)

2026-06-29 09:45:16 +08:00

file.go

fix(go): redact internal handler errors (#15746)

2026-06-12 16:09:10 +08:00

kb.go

fix(go): redact internal handler errors (#15746)

2026-06-12 16:09:10 +08:00

langfuse_test.go

feat(go-api): Langfuse API key migration behavior (#16356)

2026-06-25 19:25:55 +08:00

langfuse.go

feat(go-api): Langfuse API key migration behavior (#16356)

2026-06-25 19:25:55 +08:00

llm.go

Remove unused codes (#15579)

2026-06-03 17:35:36 +08:00

mcp_test.go

feat(go-api): migrate MCP server detail and download API to Go (#16113)

2026-06-18 11:09:22 +08:00

mcp.go

feat(go-agent): Ported retrieval node, added Keenable web search tool (#16396)

2026-06-29 09:45:16 +08:00

memory_message_test.go

feat: Implement API of ragflow server in Go (#15256)

2026-06-10 21:27:35 +08:00

memory.go

feat[Go]: implement Add messages for Go (#16375)

2026-06-26 19:21:52 +08:00

models.go

Go CLI: Fix show model and list models (#16380)

2026-06-26 15:36:01 +08:00

oauth_login.go

fix(codeql): close remaining 44 CodeQL alerts post-merge (#16408)

2026-06-29 09:45:16 +08:00

openai_chat_test.go

Implement OpenAI chat completions in GO (#16177)

2026-06-18 18:07:27 +08:00

openai_chat.go

Implement OpenAI chat completions in GO (#16177)

2026-06-18 18:07:27 +08:00

plugin_test.go

feat[Go]: implement GET /plugin/tools (issue #15240) (#15570)

2026-06-08 11:53:19 +08:00

plugin.go

feat[Go]: implement GET /plugin/tools (issue #15240) (#15570)

2026-06-08 11:53:19 +08:00

providers_test.go

feat[Go]: add modelID for delete_model and update_status (#16025)

2026-06-18 17:56:51 +08:00

providers.go

Go CLI: refactor commands (#16447)

2026-06-29 17:03:26 +08:00

search.go

feat[Go]: implement searches/<search_id>/completions POST (#16440)

2026-06-29 20:07:12 +08:00

searchbot_detail_test.go

feat(go-api): migrate searchbot share detail endpoint to go (#16124)

2026-06-22 18:17:37 +08:00

searchbot_test.go

feat(go-agent): Ported retrieval node, added Keenable web search tool (#16396)

2026-06-29 09:45:16 +08:00

searchbot.go

[Go] Fix searchbot retrieval_test accept kb_id as array, fix model recognize (#16452)

2026-06-29 17:17:20 +08:00

skill_search.go

Decouple skill space from Python API (#15971)

2026-06-12 18:18:55 +08:00

stats.go

feat[Go]: implement /system/stats and refactor /system/config/log (#15407)

2026-05-29 19:32:21 +08:00

streaming_test.go

fix: SSE write timeout (#15852)

2026-06-12 20:49:34 +08:00

streaming.go

fix: SSE write timeout (#15852)

2026-06-12 20:49:34 +08:00

system.go

Go CLI: fix show variable (#16370)

2026-06-26 13:51:56 +08:00

tenant.go

fix(codeql): close remaining 44 CodeQL alerts post-merge (#16408)

2026-06-29 09:45:16 +08:00

user.go

Move REDIS to engine dir (#16006)

2026-06-15 14:44:16 +08:00