klinsmaya/SQLBot
1
0
Fork 0
mirror of https://gh-proxy.org/https://github.com/klinsmaya/SQLBot.git synced 2026-11-08 01:06:59 +08:00
Code Issues Packages Projects Releases Wiki Activity
2,452 Commits 1 Branch 0 Tags
67601e64945535859a5a1e7fccf1f429afd99cdf
Commit Graph
2452 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
kris tan 67601e6494 fix(datasource): filter Hive partition metadata from table fields 
Ignore blank names and DESCRIBE metadata headers. Retain partition columns once in their original order, preserve valid hash-prefixed column names, and keep support for extra driver columns.

Refs dataease/SQLBot#1250.
 2026-09-15 16:09:52 +08:00
junjun 1d7b78d4a6 build: Replace pm2 with Supervisor 2026-09-15 16:06:46 +08:00
ulleo 0b5588b5bf feat: add system param: SAMPLE_DATA_ENABLED 2026-09-15 11:46:16 +08:00
junjun c705bafb13 build: Replace pm2 with Supervisor 2026-09-15 11:17:30 +08:00
ulleo bc3403b8ff feat: implement LLM keyword extraction and fusion scoring for table matching 
- add log
 2026-09-15 10:49:12 +08:00
ulleo e37105316b feat: implement LLM keyword extraction and fusion scoring for table matching 
- add log
 2026-09-15 10:20:38 +08:00
ulleo e685a749c6 feat: implement LLM keyword extraction and fusion scoring for table matching 
- improve table matching
 2026-09-14 18:52:15 +08:00
ulleo 3fd6fa867d feat: implement LLM keyword extraction and fusion scoring for table matching 
- Add extract_keywords() to LLMService with conversation context support,
  using process_stream + start_log/end_log for logging consistency
- Add expand_with_terminology() to expand keywords with synonym matching
- Add fusion scoring in calc_table_embedding(): α * vec_score + (1-α) * keyword_score
- Add calc_keyword_score() with multi-level matching:
  table name exact (1.0), comment exact (0.9), comment substring (0.7),
  table name partial (0.25-0.5), field comment exact (0.5),
  field comment substring (0.4), field name partial (0.3)
- Scoring considers keyword coverage rate to differentiate tables
  with different numbers of matched keywords
- Extracted keywords persisted to ChatRecord for reuse across endpoints
- get_terminology_template() supports comma-separated keyword input
  with per-keyword matching for higher precision
- Add TABLE_EMBEDDING_ALPHA and TABLE_EMBEDDING_KEYWORD_ENABLED config
 2026-09-14 17:51:45 +08:00
fit2cloud-chenyw aac200aef5 fix(X-Pack): Assistant API call timeout issue #1288 2026-09-14 14:39:17 +08:00
junjun 8424dcbf92 refactor: Optimizing Excel header fields with too long prompts #1364 2026-09-14 10:40:52 +08:00
master_lin 5d60284499 test(datasource): cover SQLAlchemy pool disposal 2026-09-14 10:32:05 +08:00
master_lin b744ca6c28 fix(datasource): dispose SQLAlchemy engine when removing pool 2026-09-14 10:32:05 +08:00
junjun ba9aa5db66 fix: Oracle timeout #1360 2026-09-11 14:13:28 +08:00
wangjiahao 3f68b618ef fix: Authenticated IDOR in Dashboard update endpoints allows cross-user Dashboard modification 2026-09-09 16:36:19 +08:00
wangjiahao 1bc83867e5 fix: Cross-Workspace Recommended-Problem Read and Overwrite (IDOR) 2026-09-09 16:26:39 +08:00
wangjiahao 33c87b61a4 fix: Authenticated IDOR in Dashboard update endpoints allows cross-user Dashboard modification 2026-09-09 14:11:08 +08:00
wangjiahao 835d0b10bd refactor: Use the new rich text component TinyMCE 6.x 2026-09-09 14:03:37 +08:00
fit2cloud-chenyw 900eb2d28e perf: Internationalization (i18n) for In‑line Error Prompts 2026-09-09 11:07:36 +08:00
fit2cloud-chenyw 4ee923c968 Add config to hide default passwords or force password change at first login #1355 2026-09-02 16:41:01 +08:00
junjun c1d333e62d fix: Cross-Workspace Data-Source Schema Disclosure and Modification (Incomplete IDOR Remediation) 2026-08-31 11:09:23 +08:00
fit2cloud-chenywandClaude bbfc4cc8f5 fix(Security): Host header injection auth bypass and forged admin embedded token (CNVD) 
- TokenMiddleware/ResponseMiddleware/audit logger use scope['path']
  instead of request.url.path for whitelist checks: a crafted Host
  header (e.g. x/api/v1/mcp) was concatenated into Starlette's URL
  and made protected routes match the /mcp* whitelist entry
- validateEmbedded rejects admin accounts and non-type-4 apps, so a
  self-signed token with account=admin can no longer impersonate the
  administrator
- Add HostValidationMiddleware rejecting malformed Host headers at the
  outermost layer (defense in depth)
- Add regression tests for host validation, whitelist matching and
  source-level guards

Co-Authored-By: Claude <[email protected]>
 2026-08-31 11:05:05 +08:00
ulleo cc8a7546e9 chron: update X-Pack version 2026-08-28 18:25:37 +08:00
ulleo 6518701913 fix: Prevent Authorization Bypass Through User-Controlled Key problem (CWE-639) 2026-08-28 18:22:35 +08:00
ulleo 66a1b33ac4 fix: prevent path traversal in Excel upload (CWE-22) 2026-08-28 17:51:27 +08:00
fit2cloud-chenyw 49a50e3bce fix: Cross-Workspace Assistant Modification and Deletion (IDOR) 2026-08-28 15:37:45 +08:00
dataeaseShu 56130658b9 fix(Embedded Systems): The top and bottom spacing is inconsistent between floating mode and full-screen mode; optimization is recommended. 2026-08-27 16:31:40 +08:00
junjun 273171b8d1 fix: Kingbase SQL inject 2026-08-27 15:04:39 +08:00
dataeaseShu fe142f9f75 fix(Embedded Systems): The top and bottom spacing is inconsistent between floating mode and full-screen mode; optimization is recommended. 2026-08-27 14:55:15 +08:00
dataeaseShu 24a6463b1f fix(System Variables): The key-value type system variable has only one option, and an empty option will be available when selecting it. 2026-08-27 10:02:57 +08:00
ulleo 1fdc28b6fd improve: Support similarity sorting across account, name, and email fields 2026-08-26 21:08:43 +08:00
ulleo fcf858ccfc fix: show errors in execution details 2026-08-26 11:41:03 +08:00
Iams4kura 6396042795 fix: show errors in execution details 2026-08-26 11:33:12 +08:00
ulleo a2d1a9d423 improve: Support similarity sorting across account, name, and email fields 2026-08-26 11:13:23 +08:00
ulleo b99f140300 improve: Sort search results by account similarity 2026-08-26 10:52:24 +08:00
dataeaseShu d20a7d9b64 feat(Member Management): Added Enter key search function when adding users in Member Management. 2026-08-26 10:04:38 +08:00
dataeaseShu 84868594d1 feat(System Variables): There is only one option when selecting a variable; you do not need to select it again. 2026-08-26 10:04:38 +08:00
dataeaseShu 774f19caf3 fix(Workspace): The workspace page freezes when adding users. 2026-08-25 14:36:02 +08:00
xuwei-fit2cloud 53bedcc555 update version to 1.10.1 2026-08-24 18:36:56 +08:00
ulleo bc9f7607dc improve: chat list sort during chat 2026-08-24 16:05:09 +08:00
ulleo 37752e9f1b feat: change SQL sample search filter 2026-08-24 15:22:23 +08:00
ulleo 8a1845aaf4 improve: chat list order during chat 2026-08-24 14:53:56 +08:00
ulleo ed19e8997e fix: i18n 2026-08-24 14:08:09 +08:00
xuwei-fit2cloud 59ca09708f Update build_and_push.yml 2026-08-22 14:33:06 +08:00
junjun bfe3fc4dc9 fix: The number of columns returned by Hive DESCRIBE does not match the ColumnSchema constructor #1210 2026-08-20 14:17:11 +08:00
junjun 7a32b139f7 feat: Hive datasource supports LDAP authentication #1209 2026-08-20 11:26:46 +08:00
junjun d31e6a0277 feat: Hive datasource supports LDAP authentication 2026-08-20 10:05:49 +08:00
ulleo 10663cc793 fix: get_chart_usage add undefined value check 2026-08-19 15:00:40 +08:00
junjun d33e42004c feat: MCP support model 2026-08-19 10:20:40 +08:00
junjun 2a86aa926c feat: MCP support model 2026-08-18 17:02:43 +08:00
junjun 150b98c930 feat: MCP support model 2026-08-18 16:20:53 +08:00