Zhichang Yu 4c54cefd29 Port 14 upstream agent security / correctness fixes to Go canvas (#16455) ...

Mirrors 14 merged upstream PRs into the Go agent port.

PRs ported:
  - #15609 ExeSQL SSRF guard + DNS pin
  - #15436 HTTP timeout on external API tools
  - #16363 be_output restore + DeepL error path
  - #15644 switch no longer matches empty condition
  - #15374 session_id bind to path agent_id (DAO idor guard)
  - #16169 sandbox artifact ownership gate
  - #15457 tenant ownership on agentbots
  - #15145 rerun agent document access check
- #15446 thinking switch (component portion; provider policy lives in
internal/llm)
  - #15426 Invoke URL/proxy SSRF + DNS pin + no-redirects
  - #15238 agentbot thinking-logs beta endpoint
  - #14589 UserFillUp SSE event propagation
  - #14890 anonymous webhook opt-in
- #15068 PipelineChunker new component (text/file_ref/parser_id
dispatch; file-format extraction is a follow-up)

40 files, +2355 / -58 lines. 33 new tests, all targeted package suites
pass (1721 + 4 skipped); 1 pre-existing flaky test unrelated.

2026-06-30 16:28:48 +08:00

..

api_token_beta_test.go

feat(go-api): migrate searchbot share detail endpoint to go (#16124)

2026-06-22 18:17:37 +08:00

api_token_test.go

feat[Go]: implement /api/v1/agents/<agent_id> and test_db_connection (#15771)

2026-06-10 09:54:07 +08:00

api_token.go

feat[Go]: port agent attachment download, chatbot + agentbot completion/info endpoints from Python (#16405)

2026-06-29 09:45:16 +08:00

canvas_template.go

feat[Go]: implement GET /agents/templates (issue #15240) (#15573)

2026-06-05 10:13:30 +08:00

chat_channel_test.go

feat(go/dao): migrate chat channel database entity and DAO to Go (#16055)

2026-06-17 11:26:13 +08:00

chat_channel.go

feat(go-api): complete chat channel API migration with tests (#16139)

2026-06-22 18:16:15 +08:00

chat_session_test.go

fix: new chat cannot be edit (#16434)

2026-06-29 19:04:59 +08:00

chat_session.go

fix: new chat cannot be edit (#16434)

2026-06-29 19:04:59 +08:00

chat.go

fix: new chat cannot be edit (#16434)

2026-06-29 19:04:59 +08:00

connector.go

feat[go]: implement /api/v1/datasets/<dataset_id> PUT (#16122)

2026-06-18 17:57:07 +08:00

database.go

refactor(log): unify Go logging to zap with rotation, strip per-package levels (#16261)

2026-06-23 16:21:46 +08:00

document_test.go

feat[Go]: implement datasets/<dataset_id>/index P/G (#16153)

2026-06-18 17:57:24 +08:00

document.go

feat(go-api): implement dataset document upload API (#16295)

2026-06-25 13:36:49 +08:00

file2document_test.go

feat: migrate DELETE /api/v1/datasets/:dataset_id/documents to Go (#15577)

2026-06-03 20:55:53 +08:00

file2document.go

feat[Go]: implement POST /api/v1/files/link-to-datasets (#15674)

2026-06-10 16:46:55 +08:00

file_commit.go

Add git-like file commit API (#15978)

2026-06-15 11:19:56 +08:00

file.go

Add git-like file commit API (#15978)

2026-06-15 11:19:56 +08:00

ingestion.go

Go: use NATS as the message queue (#15327)

2026-06-12 14:56:44 +08:00

kb_test.go

feat: migrate DELETE /api/v1/datasets/:dataset_id/documents to Go (#15577)

2026-06-03 20:55:53 +08:00

kb.go

Refine handling of POST /api/v1/datasets/search in GO (#15583)

2026-06-08 11:49:37 +08:00

langfuse_test.go

feat(go-api): Langfuse API key migration behavior (#16356)

2026-06-25 19:25:55 +08:00

langfuse.go

feat(go-api): Langfuse API key migration behavior (#16356)

2026-06-25 19:25:55 +08:00

license.go

Add rename model directory to entity to avoid name misunderstanding (#13829)

2026-03-27 19:25:18 +08:00

llm.go

Add rename model directory to entity to avoid name misunderstanding (#13829)

2026-03-27 19:25:18 +08:00

mcp_test.go

feat: add Go MCP server list API (#15253)

2026-06-02 09:37:05 +08:00

mcp.go

feat: add Go MCP server update API (#15261)

2026-06-02 15:58:44 +08:00

memory.go

feat: Implement API of ragflow server in Go (#15256)

2026-06-10 21:27:35 +08:00

migration.go

GO: align time units with Python and centralize timestamp injection in BaseModel (#14875)

2026-05-14 13:46:46 +08:00

pipeline_operation_log.go

fix(codeql): close remaining 44 CodeQL alerts post-merge (#16408)

2026-06-29 09:45:16 +08:00

search_detail_test.go

feat(go-api): migrate searchbot share detail endpoint to go (#16124)

2026-06-22 18:17:37 +08:00

search.go

feat(go-api): migrate searchbot share detail endpoint to go (#16124)

2026-06-22 18:17:37 +08:00

skill_search_config.go

GO: align time units with Python and centralize timestamp injection in BaseModel (#14875)

2026-05-14 13:46:46 +08:00

skill_space.go

GO: align time units with Python and centralize timestamp injection in BaseModel (#14875)

2026-05-14 13:46:46 +08:00

system_settings.go

Fix admin CLI system variable commands (#14956)

2026-05-18 19:08:45 +08:00

task_test.go

feat: migrate POST /api/v1/datasets/<dataset_id>/documents/stop to Go (#15597)

2026-06-04 14:16:13 +08:00

task.go

feat[Go]: implement api /api/v1/datasets/<dataset_id>/chunks POST (#16067)

2026-06-22 18:14:01 +08:00

tenant_llm.go

Implement retrieval_test in GO (#14231)

2026-04-24 15:30:14 +08:00

tenant_model_group_mapping.go

Refactor model provider and command (#13887)

2026-04-02 20:20:35 +08:00

tenant_model_group.go

Refactor model provider and command (#13887)

2026-04-02 20:20:35 +08:00

tenant_model_instance.go

feat(agent): Go port — canvas engine, 22 components, DSL v2, 13 endpoints (#15952)

2026-06-12 22:58:28 +08:00

tenant_model_provider.go

feat(agent): Go port — canvas engine, 22 components, DSL v2, 13 endpoints (#15952)

2026-06-12 22:58:28 +08:00

tenant_model_test.go

feat[Go]: add modelID for delete_model and update_status (#16025)

2026-06-18 17:56:51 +08:00

tenant_model.go

feat[Go]: add modelID for delete_model and update_status (#16025)

2026-06-18 17:56:51 +08:00

tenant_test.go

feat[Go]: add modelID for delete_model and update_status (#16025)

2026-06-18 17:56:51 +08:00

tenant.go

Refine handling of POST /api/v1/datasets/search in GO (#15583)

2026-06-08 11:49:37 +08:00

time_record.go

Add rename model directory to entity to avoid name misunderstanding (#13829)

2026-03-27 19:25:18 +08:00

user_canvas_test.go

feat[Go]: implement /api/v1/agents/<agent_id>/sessions (#15705)

2026-06-08 16:26:27 +08:00

user_canvas_version_test.go

feat(agent): Go port — canvas engine, 22 components, DSL v2, 13 endpoints (#15952)

2026-06-12 22:58:28 +08:00

user_canvas_version.go

feat(agent): Go port — canvas engine, 22 components, DSL v2, 13 endpoints (#15952)

2026-06-12 22:58:28 +08:00

user_canvas.go

Port 14 upstream agent security / correctness fixes to Go canvas (#16455)

2026-06-30 16:28:48 +08:00

user_tenant.go

feat: Implement API of ragflow server in Go (#15256)

2026-06-10 21:27:35 +08:00

user.go

Add rename model directory to entity to avoid name misunderstanding (#13829)

2026-03-27 19:25:18 +08:00