Commit Graph

1698 Commits

Author SHA1 Message Date
Willem Jiang
612bddd3fb feat(server): add MCP server configuration validation (#830)
* feat(server): add MCP server configuration validation

Add comprehensive validation for MCP server configurations,
inspired by Flowise's validateMCPServerConfig implementation.

MCPServerConfig checks implemented:
- Command allowlist validation (node, npx, python, docker, uvx, etc.)
- Path traversal prevention (blocks ../, absolute paths, ~/)
- Shell command injection prevention (blocks ; & | ` $ etc.)
- Dangerous environment variable blocking (PATH, LD_PRELOAD, etc.)
- URL validation for SSE/HTTP transports (scheme, credentials)
- HTTP header injection prevention (blocks newlines)

* fix the unit test error of test_chat_request

* Added the related path cases as reviewer commented

* Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-01-24 17:32:17 +08:00
Henry Li
3ffce7667c Merge pull request #16 from amszuidas/experimental
fix: refactor env var resolution to support complex structures and fix in-place mutation bug
2026-01-24 10:14:20 +08:00
Henry Li
c66995bcc0 Merge pull request #16 from amszuidas/experimental
fix: refactor env var resolution to support complex structures and fix in-place mutation bug
2026-01-24 10:14:20 +08:00
Henry Li
b1e7028ea0 Merge pull request #17 from amszuidas/fix/tavily-api-key-config
fix: support loading tavily ak from config.yaml
2026-01-24 10:14:04 +08:00
Henry Li
9498e783f1 Merge pull request #17 from amszuidas/fix/tavily-api-key-config
fix: support loading tavily ak from config.yaml
2026-01-24 10:14:04 +08:00
amszuidas
d6176e86d6 fix: support loading tavily ak from config.yaml 2026-01-23 23:50:40 +08:00
amszuidas
c1c8942491 fix: support loading tavily ak from config.yaml 2026-01-23 23:50:40 +08:00
amszuidas
3972485fe0 fix: use return value of resolve_env_variables in config loading 2026-01-23 21:51:48 +08:00
amszuidas
761cb6a7f5 fix: use return value of resolve_env_variables in config loading 2026-01-23 21:51:48 +08:00
hetao
f6a20a69e3 feat: implement file upload feature 2026-01-23 18:47:39 +08:00
hetao
1fe37fdb6c feat: implement file upload feature 2026-01-23 18:47:39 +08:00
amszuidas
eb802361e1 fix: correct spelling 2026-01-23 18:29:20 +08:00
amszuidas
2ef320f107 fix: correct spelling 2026-01-23 18:29:20 +08:00
amszuidas
82a6ae81bd fix: robust environment variable resolution in config 2026-01-23 17:01:38 +08:00
amszuidas
303e0252ce fix: robust environment variable resolution in config 2026-01-23 17:01:38 +08:00
Henry Li
3f4bcd9433 feat: implement the first version of landing page 2026-01-23 13:24:03 +08:00
Henry Li
0908127bd7 feat: implement the first version of landing page 2026-01-23 13:24:03 +08:00
Xun
c0849af37e feat(context): decrease token in web_search AIMessage (#827)
This PR addresses token limit issues when web_search is enabled with include_raw_content by implementing a two-pronged approach: changing the default behavior to exclude raw content and adding compression logic for when raw content is included.
2026-01-23 08:31:48 +08:00
Henry Li
307972f93e feat: implement the first section of landing page 2026-01-23 00:15:21 +08:00
Henry Li
b69c13a3e5 feat: implement the first section of landing page 2026-01-23 00:15:21 +08:00
Henry Li
65cdc182d3 docs: add notes for v2.0 (#828) 2026-01-22 20:08:59 +08:00
Henry Li
459d9d0287 fix: fix menu item in side bar collapsed mode 2026-01-22 15:18:42 +08:00
Henry Li
6e1f63e47f fix: fix menu item in side bar collapsed mode 2026-01-22 15:18:42 +08:00
Henry Li
e9ab427326 feat: adjust styles 2026-01-22 14:28:10 +08:00
Henry Li
dc9d28018c feat: adjust styles 2026-01-22 14:28:10 +08:00
Henry Li
c48a3f499d docs: rewording 2026-01-22 14:21:03 +08:00
Henry Li
9df56299c1 docs: rewording 2026-01-22 14:21:03 +08:00
Henry Li
e0f491dcdb feat: add main menu 2026-01-22 14:19:54 +08:00
Henry Li
e1378123f5 feat: add main menu 2026-01-22 14:19:54 +08:00
Henry Li
80b07bcac0 feat: update opacities 2026-01-22 13:50:09 +08:00
Henry Li
cb996f0858 feat: update opacities 2026-01-22 13:50:09 +08:00
Henry Li
8c994293a8 feat: make reasoning mode as default 2026-01-22 13:46:43 +08:00
Henry Li
99eb2474b3 feat: make reasoning mode as default 2026-01-22 13:46:43 +08:00
Henry Li
ec4b3a0ead docs: update description 2026-01-22 13:46:31 +08:00
Henry Li
b938f40e4c docs: update description 2026-01-22 13:46:31 +08:00
Henry Li
7d4d706738 feat: put all options into '+' 2026-01-22 13:43:45 +08:00
Henry Li
8ef89b3004 feat: put all options into '+' 2026-01-22 13:43:45 +08:00
hetao
31bf49917c feat: add unified development environment with nginx proxy
Add a root-level Makefile to manage frontend, backend, and nginx services:
- `make check` validates required dependencies (Node.js 22+, pnpm, uv, nginx)
- `make install` installs all project dependencies
- `make dev` starts all services with unified port 2026
- `make stop` and `make clean` for cleanup

Update nginx configuration:
- Change port from 8000 to 2026
- Add frontend upstream and routing (port 3000)
- Add /api/langgraph/* routing with path rewriting to LangGraph server
- Keep other /api/* routes to Gateway API
- Route non-API requests to frontend

Update frontend configuration:
- Use relative URLs through nginx proxy by default
- Support environment variables for direct backend access
- Construct full URL for LangGraph SDK compatibility

Clean up backend Makefile by removing nginx and serve targets.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-22 12:00:46 +08:00
hetao
2fac72601e feat: add unified development environment with nginx proxy
Add a root-level Makefile to manage frontend, backend, and nginx services:
- `make check` validates required dependencies (Node.js 22+, pnpm, uv, nginx)
- `make install` installs all project dependencies
- `make dev` starts all services with unified port 2026
- `make stop` and `make clean` for cleanup

Update nginx configuration:
- Change port from 8000 to 2026
- Add frontend upstream and routing (port 3000)
- Add /api/langgraph/* routing with path rewriting to LangGraph server
- Keep other /api/* routes to Gateway API
- Route non-API requests to frontend

Update frontend configuration:
- Use relative URLs through nginx proxy by default
- Support environment variables for direct backend access
- Construct full URL for LangGraph SDK compatibility

Clean up backend Makefile by removing nginx and serve targets.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-01-22 12:00:46 +08:00
hetao
c00f780501 fix: fix nginx conf 2026-01-22 12:00:46 +08:00
hetao
50c25f5c4d fix: fix nginx conf 2026-01-22 12:00:46 +08:00
Henry Li
16a499190b feat: show in-progress 2026-01-22 11:56:45 +08:00
Henry Li
93f70893fc feat: show in-progress 2026-01-22 11:56:45 +08:00
Henry Li
aa7436db2f feat: adjust input background in light mode 2026-01-22 11:51:56 +08:00
Henry Li
4f712861a3 feat: adjust input background in light mode 2026-01-22 11:51:56 +08:00
Henry Li
93842e81a4 feat: adjust styles 2026-01-22 11:42:25 +08:00
Henry Li
aed2f7ce67 feat: adjust styles 2026-01-22 11:42:25 +08:00
Henry Li
54710960cb docs: remove '/' 2026-01-22 11:31:23 +08:00
Henry Li
3774d0453c docs: remove '/' 2026-01-22 11:31:23 +08:00
Henry Li
11918b5270 fix: update summarization configuration values 2026-01-22 10:36:19 +08:00