dev by LIghtJUNction · Pull Request #6325 · AstrBotDevs/AstrBot

LIghtJUNction · 2026-03-15T07:56:08Z

This pull request introduces a new workflow for deploying the dashboard to GitHub Pages and makes significant improvements to the README.md for clarity, completeness, and consistency. It also includes minor formatting updates to the smoke test workflow and adds some convenience commands to .envrc.

Summary of changes:

Adds a GitHub Actions workflow for automated dashboard deployment.
Revamps the README.md with clearer descriptions, updated instructions, improved platform/model tables, and better contribution guidelines.
Minor workflow formatting and comment changes for consistency.
Resolves merge conflicts by merging the latest master changes into this branch.
Hardens dashboard config selector path handling to prevent prototype-pollution key assignment (__proto__, prototype, constructor) in dashboard/src/components/shared/AstrBotConfigV4.vue.

Dashboard Deployment Automation

Added .github/workflows/deploy-dashboard.yml to automate daily and manual dashboard builds and deployments to GitHub Pages, including build, artifact upload, and deployment steps.

Documentation Improvements

Major rewrite and expansion of README.md: clearer project description, improved feature list, updated deployment instructions, revised supported platforms/models tables, and enhanced contribution guidelines. [1] [2] [3] [4] [5]

Workflow Consistency

Updated .github/workflows/smoke_test.yml to use consistent YAML quoting, improved comments, and clarified Python version formatting. [1] [2] [3]

Developer Convenience

Added git pull and git status commands to .envrc for easier environment setup and status checking.

Post-feedback Updates

Resolved merge conflicts across backend, dashboard, i18n, and test files after syncing with master.
Addressed a JavaScript CodeQL finding by adding guarded key checks in selector traversal/assignment logic in AstrBotConfigV4.vue.

sourcery-ai

Sorry @LIghtJUNction, your pull request is larger than the review limit of 150000 diff characters

gemini-code-assist · 2026-03-15T07:57:33Z

Summary of Changes

Hello, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request significantly refactors AstrBot's core architecture by modularizing tool management and improving the robustness of tool execution. It streamlines the integration of various tools, enhances the dashboard's configurability, and ensures more predictable behavior for LLM interactions. These changes contribute to a more maintainable, extensible, and user-friendly system.

Highlights

Modular Tool Management: Introduced a decoupled tool provider mechanism (ToolProvider, ToolProviderContext) for enhanced extensibility and centralized tool definitions, moving away from hardcoded tool imports.
Improved Dashboard Integration & CLI: Enhanced CLI dashboard setup with user prompts for WebUI installation, consistent dashboard paths under the data directory, and new CLI flags/environment variables for backend-only mode.
Enhanced Tool Execution Safety & Determinism: Added sandbox capability checks for browser tools to prevent accidental invocation, implemented a normalize method in ToolSet for consistent LLM cache hits, and introduced a source attribute to FunctionTool for better WebUI display.
Refined Agent Streaming & Messaging: Improved streaming output handling in run_agent to filter and yield only relevant message components, and updated prompts/system messages for clarity in background task results.

Changelog

.gitignore
- Added .serena to the ignore list and bun.lock, pmpm-lock.yaml for frontend development.
.python-version
- Ensured the file ends with a newline character.
astrbot/cli/commands/cmd_init.py
- Modified the initialization process to prompt users for WebUI installation and updated the dashboard check to use the root path.
astrbot/cli/commands/cmd_run.py
- Added --host and --backend-only CLI options for dashboard control and integrated DASHBOARD_ENABLE environment variable.
astrbot/cli/utils/basic.py
- Updated dashboard download and extraction paths to be consistently under the data directory.
astrbot/core/agent/mcp_client.py
- Added a source attribute with value 'mcp' to MCPTool for tool origin tracking.
astrbot/core/agent/tool.py
- Introduced a source attribute to FunctionTool to indicate its origin (plugin, internal, mcp) and added a normalize method to ToolSet for deterministic tool serialization.
astrbot/core/astr_agent_run_util.py
- Implemented _extract_final_streaming_chain to filter streaming message components and integrated it into run_agent for llm_result processing.
astrbot/core/astr_agent_tool_exec.py
- Refactored tool acquisition to use the new ComputerToolProvider, added a sandbox capability check for browser-related tools, and corrected a typo in a background task message.
astrbot/core/astr_main_agent.py
- Removed direct imports of numerous tools and platform module, integrated ToolProvider for dynamic tool injection, updated prompt templates, and added logic to disable streaming for webchat image output.
astrbot/core/astr_main_agent_resources.py
- Removed the file, relocating its contents to dedicated modules for better modularity.
astrbot/core/computer/booters/base.py
- Defined abstract methods get_default_tools, get_tools, get_system_prompt_parts for tool and prompt provision in computer booters.
astrbot/core/computer/booters/boxlite.py
- Added logging for file operations and health checks, and implemented get_default_tools for Boxlite booter.
astrbot/core/computer/booters/constants.py
- Added constants for different booter types (BOOTER_SHIPYARD, BOOTER_SHIPYARD_NEO, BOOTER_BOXLITE).
astrbot/core/computer/booters/shipyard.py
- Added logging for sandbox operations and implemented get_default_tools for Shipyard booter.
astrbot/core/computer/booters/shipyard_neo.py
- Added logging for sandbox operations, implemented _base_tools, _browser_tools, get_default_tools, get_tools, and get_system_prompt_parts for Shipyard Neo booter.
astrbot/core/computer/computer_client.py
- Introduced unified API functions (get_sandbox_tools, get_sandbox_capabilities, get_default_sandbox_tools, get_sandbox_prompt_parts) for querying computer tools and prompts, and improved logging for Bay credentials discovery.
astrbot/core/computer/computer_tool_provider.py
- Added a new module to provide computer-use tools (local/sandbox) based on session context, encapsulating tool injection logic.
astrbot/core/computer/prompts.py
- Added a new module to store booter-specific system prompt fragments like Neo file path rules and skill lifecycle prompts.
astrbot/core/computer/tools/neo_skills.py
- Updated the payload parameter schema for CreateSkillPayloadTool to allow array items.
astrbot/core/cron/cron_tool_provider.py
- Added a new module to provide cron job management tools following the ToolProvider protocol.
astrbot/core/cron/manager.py
- Updated imports for prompt constants and integrated ComputerToolProvider into MainAgentBuildConfig for cron-woke agents.
astrbot/core/pipeline/process_stage/method/agent_sub_stages/internal.py
- Integrated decoupled ToolProvider instances (ComputerToolProvider, CronToolProvider) into the internal agent sub-stage initialization.
astrbot/core/provider/func_tool_manager.py
- Added _INTERNAL_TOOL_PROVIDERS list and register_internal_tools method to register built-in tools from various providers.
astrbot/core/provider/sources/gemini_source.py
- Modified _prepare_query_config to explicitly pass streaming flag, ensuring image modalities are downgraded for streaming requests.
astrbot/core/star/context.py
- Added a call to register_internal_tools in the Context initialization to ensure built-in tools are registered.
astrbot/core/tool_provider.py
- Added a new module defining the ToolProvider protocol and ToolProviderContext for decoupled tool injection.
astrbot/core/tools/cron_tools.py
- Added a get_all_tools function to return all cron-related tools for registration.
astrbot/core/tools/kb_query.py
- Added a new module for knowledge base query tool and retrieval logic, extracted from astr_main_agent_resources.py.
astrbot/core/tools/prompts.py
- Added a new module to consolidate system prompt constants previously scattered across astr_main_agent_resources.py.
astrbot/core/tools/send_message.py
- Added a new module for the SendMessageToUserTool, extracted from astr_main_agent_resources.py.
astrbot/core/utils/io.py
- Added asyncio and ipaddress imports, implemented get_public_ip_address, and updated get_local_ip_addresses to handle IPv6 addresses.
astrbot/dashboard/routes/init.py
- Imported LiveChatRoute, T2iRoute, Response, and RouteContext to expand dashboard routing capabilities.
astrbot/dashboard/routes/chat.py
- Removed the _poll_webchat_stream_result function, indicating a change in how webchat streaming results are handled.
astrbot/dashboard/routes/route.py
- Added asdict import and a to_json method to the Response dataclass for consistent JSON serialization.
astrbot/dashboard/routes/static_file.py
- Added a check to prevent re-registering the index route if it already exists.
astrbot/dashboard/routes/tools.py
- Enhanced tool listing to display the source attribute and prevented manual toggling of internal tools.
astrbot/dashboard/server.py
- Refactored server initialization, added quart_cors for CORS handling, introduced ALLOWED_ENDPOINT_PREFIXES for authentication bypass, and improved logging for server startup/shutdown.
dashboard/.gitignore
- Added bun.lock and pmpm-lock.yaml to the ignore list.
dashboard/env.d.ts
- Added a declare module '*.vue' entry for better Vue component type inference.
dashboard/package.json
- Moved overrides configuration from pnpm to the root level.
dashboard/public/config.json
- Added a new configuration file for API base URL and presets.
dashboard/src/components/chat/LiveMode.vue
- Updated WebSocket URL construction to dynamically use axios.defaults.baseURL.
dashboard/src/components/chat/StandaloneChat.vue
- Disabled chat input when streaming and updated file handling for handleFileSelect.
dashboard/src/components/extension/componentPanel/components/ToolTable.vue
- Added visual indicators and logic to differentiate and manage internal tools in the tool table.
dashboard/src/components/extension/componentPanel/types.ts
- Added a source property to the ToolItem interface.
dashboard/src/i18n/locales/en-US/core/header.json
- Added 'Log Out' translation.
dashboard/src/i18n/locales/en-US/features/auth.json
- Added 'Server Configuration' translations.
dashboard/src/i18n/locales/en-US/features/settings.json
- Added new translation keys for network proxy, server address, theme styles, reset options, and logout, and updated API key expiry options.
dashboard/src/i18n/locales/en-US/features/welcome.json
- Added 'Configure Backend URL' step to the onboarding process.
dashboard/src/i18n/locales/zh-CN/core/header.json
- Added '退出登录' translation.
dashboard/src/i18n/locales/zh-CN/features/auth.json
- Added '服务器配置' translations.
dashboard/src/i18n/locales/zh-CN/features/settings.json
- Added new translation keys for网络代理, 服务器地址, 主题样式, 恢复默认, and 退出登录, and updated API key expiry options.
dashboard/src/i18n/locales/zh-CN/features/welcome.json
- Added '配置后端地址' step to the onboarding process.
dashboard/src/layouts/full/vertical-header/VerticalHeader.vue
- Refactored header layout for desktop and mobile, added a logout button, and updated view mode toggle logic.
dashboard/src/main.ts
- Implemented dynamic loading of config.json for API base URL and presets, and integrated useApiStore for global API configuration.
dashboard/src/stores/api.ts
- Added a new Pinia store to manage API base URL, configuration presets, and custom presets.
dashboard/src/views/Settings.vue
- Refactored API key management to use new API endpoints, integrated API store for server configuration, and updated theme color management.
dashboard/src/views/WelcomePage.vue
- Added a new onboarding step for configuring the backend API address, including validation and saving functionality.
dashboard/src/views/authentication/auth/LoginPage.vue
- Integrated API store for server configuration and presets, allowing users to configure the backend URL from the login page.
dashboard/tsconfig.json
- Updated TypeScript compiler options for better compatibility and strictness.
dashboard/tsconfig.vite-config.json
- Updated TypeScript compiler options for Vite configuration.
dashboard/vite.config.ts
- Updated the development server host to :: for IPv6 support and adjusted chunkSizeWarningLimit.
docs/refactor-neo-decouple.md
- Added a new documentation file detailing the refactoring plan for Neo tool decoupling.
pyproject.toml
- Added quart-cors to project dependencies.
tests/test_booter_decoupling.py
- Added new TDD tests to verify the booter decoupling refactoring, covering constants, base interfaces, and booter-specific tool declarations.
tests/test_computer_config.py
- Renamed _discover_bay_credentials to discover_bay_credentials and updated related test cases.
tests/test_profile_aware_tools.py
- Updated test patches to align with the new tool provisioning logic in astr_main_agent.
tests/test_tool_loop_agent_runner.py
- Added MockFinalMediaStreamProvider and a test case to ensure run_agent correctly emits final media chains in streaming mode.
tests/unit/test_astr_main_agent.py
- Added tests for disabling streaming for webchat image output based on provider configuration and model metadata, and removed os.environ checks for shipyard configuration.
tests/unit/test_gemini_source.py
- Added new unit tests for ProviderGoogleGenAI to verify correct handling of image modalities in streaming and non-streaming requests.
tests/unit/test_internal_agent_sub_stage.py
- Added new unit tests for InternalAgentSubStage to verify its use of the effective streaming flag and agent runner initialization.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	`/gemini review`	Performs a code review for the current pull request in its current state.
Pull Request Summary	`/gemini summary`	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	`/gemini help`	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

gemini-code-assist

Code Review

This pull request introduces a significant and well-executed refactoring of the tool management system, centered around a new ToolProvider protocol. This change decouples tool registration from the main agent logic, greatly enhancing modularity and making the system more extensible. Key improvements include the introduction of ComputerToolProvider and CronToolProvider, a new sandbox capability check to prevent the use of browser tools in unsupported environments, and deterministic tool serialization to improve caching. The command-line interface and dashboard have also been substantially improved, offering better configuration options like a backend-only mode and flexible API URL settings. Overall, these changes represent a major architectural improvement, increasing the robustness, safety, and maintainability of the codebase. The implementation is solid, and I have no specific issues to raise.

chatgpt-codex-connector · 2026-03-18T09:19:00Z

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

sourcery-ai

Sorry, we are unable to review this pull request

The GitHub API does not allow us to fetch diffs exceeding 20000 lines

Copilot

Copilot wasn't able to review this pull request because it exceeds the maximum number of lines (20,000). Try reducing the number of changed lines and requesting a review from Copilot again.

cloudflare-workers-and-pages · 2026-06-26T02:17:34Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	astrbot-docs	`a36e048`	Commit Preview URL Branch Preview URL	Aug 16 2026, 09:06 AM

# Conflicts: # astrbot/__init__.py # astrbot/core/platform/sources/mattermost/client.py # astrbot/core/platform/sources/slack/slack_event.py # astrbot/core/platform/sources/webchat/webchat_event.py # astrbot/core/platform/sources/wecom/wecom_adapter.py # astrbot/core/platform/sources/weixin_oc/weixin_oc_adapter.py

LIghtJUNction · 2026-06-28T17:47:50Z

一次往master合一点点，慢慢减少差异

# Conflicts: # AGENTS.md # astrbot/__init__.py # astrbot/cli/utils/__init__.py # astrbot/core/astr_agent_tool_exec.py # astrbot/core/computer/booters/local.py # astrbot/core/cron/manager.py # astrbot/core/knowledge_base/kb_mgr.py # astrbot/core/knowledge_base/retrieval/manager.py # astrbot/core/platform/sources/discord/discord_platform_adapter.py # astrbot/core/platform/sources/qqofficial/qqofficial_message_event.py # astrbot/core/platform/sources/qqofficial/qqofficial_platform_adapter.py # astrbot/core/platform/sources/qqofficial_webhook/qo_webhook_server.py # astrbot/core/platform/sources/wecom/wecom_adapter.py # astrbot/core/platform/sources/wecom_ai_bot/wecomai_adapter.py # astrbot/core/provider/func_tool_manager.py # astrbot/core/provider/sources/mimo_api_common.py # astrbot/core/star/star_manager.py # astrbot/core/tools/computer_tools/fs.py # astrbot/core/tools/computer_tools/python.py # astrbot/core/tools/computer_tools/shell.py # astrbot/core/tools/message_tools.py # astrbot/core/tools/web_search_tools.py # astrbot/core/utils/io.py # astrbot/core/utils/tencent_record_helper.py # dashboard/package.json # dashboard/src/assets/mdi-subset/materialdesignicons-subset.css # dashboard/src/assets/mdi-subset/materialdesignicons-webfont-subset.woff # dashboard/src/assets/mdi-subset/materialdesignicons-webfont-subset.woff2 # dashboard/src/components/ConfirmDialog.vue # dashboard/src/components/chat/Chat.vue # dashboard/src/components/chat/ChatInput.vue # dashboard/src/components/chat/ChatMessageList.vue # dashboard/src/components/chat/ConfigSelector.vue # dashboard/src/components/chat/MessageList.vue # dashboard/src/components/chat/ProjectDialog.vue # dashboard/src/components/chat/ProjectList.vue # dashboard/src/components/chat/ProjectView.vue # dashboard/src/components/chat/ProviderModelMenu.vue # dashboard/src/components/chat/RegenerateMenu.vue # dashboard/src/components/chat/StandaloneChat.vue # dashboard/src/components/chat/ThreadPanel.vue # dashboard/src/components/chat/ThreadedMarkdownMessagePart.vue # dashboard/src/components/chat/message_list_comps/MarkdownMessagePart.vue # dashboard/src/components/chat/message_list_comps/ReasoningTimeline.vue # dashboard/src/components/chat/message_list_comps/RefsSidebar.vue # dashboard/src/components/config/UnsavedChangesConfirmDialog.vue # dashboard/src/components/extension/MarketPluginCard.vue # dashboard/src/components/extension/McpServersSection.vue # dashboard/src/components/extension/SkillsSection.vue # dashboard/src/components/extension/componentPanel/components/DetailsDialog.vue # dashboard/src/components/extension/componentPanel/components/RenameDialog.vue # dashboard/src/components/folder/BaseCreateFolderDialog.vue # dashboard/src/components/folder/BaseFolderItemSelector.vue # dashboard/src/components/folder/BaseMoveToFolderDialog.vue # dashboard/src/components/platform/AddNewPlatform.vue # dashboard/src/components/provider/AddNewProvider.vue # dashboard/src/components/provider/ProviderModelsPanel.vue # dashboard/src/components/shared/BackupDialog.vue # dashboard/src/components/shared/ChangelogDialog.vue # dashboard/src/components/shared/ExtensionCard.vue # dashboard/src/components/shared/FileConfigItem.vue # dashboard/src/components/shared/KnowledgeBaseSelector.vue # dashboard/src/components/shared/ListConfigItem.vue # dashboard/src/components/shared/ObjectEditor.vue # dashboard/src/components/shared/PersonaForm.vue # dashboard/src/components/shared/PluginSetSelector.vue # dashboard/src/components/shared/ProviderSelector.vue # dashboard/src/components/shared/ReadmeDialog.vue # dashboard/src/components/shared/SidebarCustomizer.vue # dashboard/src/components/shared/T2ITemplateEditor.vue # dashboard/src/components/shared/UninstallConfirmDialog.vue # dashboard/src/components/shared/WaitingForRestart.vue # dashboard/src/composables/useMessages.ts # dashboard/src/composables/useProjects.ts # dashboard/src/composables/useProviderModelConfigDialog.ts # dashboard/src/composables/useProviderSources.ts # dashboard/src/i18n/locales/ru-RU/features/config-metadata.json # dashboard/src/i18n/locales/ru-RU/features/extension.json # dashboard/src/i18n/locales/ru-RU/features/provider.json # dashboard/src/layouts/full/vertical-header/VerticalHeader.vue # dashboard/src/scss/_override.scss # dashboard/src/stores/common.js # dashboard/src/stores/customizer.ts # dashboard/src/views/ConfigPage.vue # dashboard/src/views/ConversationPage.vue # dashboard/src/views/PlatformPage.vue # dashboard/src/views/SessionManagementPage.vue # dashboard/src/views/WelcomePage.vue # dashboard/src/views/alkaid/KnowledgeBase.vue # dashboard/src/views/alkaid/LongTermMemory.vue # dashboard/src/views/authentication/auth/LoginPage.vue # dashboard/src/views/extension/InstalledPluginsTab.vue # dashboard/src/views/extension/useExtensionPage.js # dashboard/src/views/knowledge-base/DocumentDetail.vue # dashboard/src/views/knowledge-base/KBList.vue # dashboard/src/views/knowledge-base/components/DocumentsTab.vue # dashboard/src/views/knowledge-base/components/SettingsTab.vue # dashboard/src/views/knowledge-base/components/TavilyKeyDialog.vue # dashboard/src/views/persona/FolderTree.vue # dashboard/src/views/persona/MoveToFolderDialog.vue # dashboard/src/views/persona/PersonaManager.vue # requirements.txt # tests/test_local_shell_component.py # tests/unit/test_func_tool_manager.py # tests/unit/test_web_search_tools.py

                "Set dashboard.host in data/cmd_config.json to enable remote access.\n"
            )
+        logger.info("".join(parts))


General fix: never log secrets (passwords/tokens/keys) in plaintext. If operators need setup guidance, log only non-sensitive fields (e.g., username) and redact or replace secret values with a safe instruction.

Best minimal fix without changing core functionality: update astrbot/dashboard/server.py in _build_dashboard_credentials_display so it no longer interpolates generated_password into credentials_display. Keep username and “change after login” messaging, plus an explicit instruction to retrieve/reset password through a secure channel/config flow if needed. Keep the existing object.__setattr__(..., None) clearing behavior unchanged.

Concrete region to change:

astrbot/dashboard/server.py, method _build_dashboard_credentials_display, lines around 500–504 where credentials_display is built.

No new imports, dependencies, or helper methods are required.

+        try:
+            with socket.socket(family, socket.SOCK_STREAM) as s:
+                s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
+                s.bind((probe_host, port))


Use explicit, defensive host normalization inside check_port_in_use so wildcard/unspecified bind targets can never reach socket.bind, even if upstream logic changes.

Best minimal fix in astrbot/dashboard/server.py:

In check_port_in_use, replace the current if/elif host mapping with a canonicalized check using host.strip() and an allowlist-style remap:

"", "0.0.0.0", "::", "*" → loopback (127.0.0.1 or ::1).

Keep existing functionality (port probe behavior unchanged) while making the sink-side protection self-contained.

No new imports/dependencies are needed.

Resolves 57 conflicted files across the Python backend and Vue dashboard frontend, plus two cross-file/consistency gaps uncovered during review: - astrbot/core/utils/io.py was auto-merged cleanly but silently dropped is_dashboard_dist_compatible/is_dashboard_version_compatible, which main.py's merged check_dashboard_files (taken from master) depends on — re-added both functions verbatim from master. - astrbot/core/star/base.py's Star.context class attribute was left annotated as the now-removed master-only Context type instead of dev's _ContextLike Protocol, caught by the ruff pre-commit hook (F821 undefined name). Verified: no leftover conflict markers repo-wide, all touched Python files compile and import cleanly, dashboard files pass vue-tsc with no newly introduced type errors (ConversationPage.vue's pre-existing errors confirmed byte-identical to dev's pre-merge HEAD).

# Conflicts: # astrbot/core/db/migration/migra_webchat_session.py # astrbot/core/pipeline/scheduler.py # astrbot/core/pipeline/stage.py # astrbot/core/platform/sources/telegram/tg_adapter.py # dashboard/src/components/shared/AstrBotConfig.vue # dashboard/src/i18n/locales/ru-RU/core/common.json

* chore: update readme * feat: support PowerShell 7 for Windows local shell (#9622) * feat(config): add Windows PowerShell version option * feat(computer): honor Windows PowerShell version in local runtime * fix(computer): correct stale shell comment for configurable PowerShell * refactor(computer): inline windows shell resolution per AGENTS.md * test(computer): assert windows_shell in exec_managed call * test: make shell tests cross-platform Co-authored-by: Donoym <prober13c14@gmail.com> * refactor(computer): auto-detect Windows shell instead of config * fix(computer): drop stale cmd.exe references after shell auto-detect * style: apply ruff format and import order * Update astrbot/core/astr_main_agent.py Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com> --------- Co-authored-by: Donoym <prober13c14@gmail.com> Co-authored-by: Soulter <37870767+Soulter@users.noreply.github.com> Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com> * feat: add download-count sorting to plugin marketplace (#9570) * feat: 插件市场支持按下载量排序为插件市场现有的前端本地排序补充下载量选项，复用已规范化的 download_count，不改变默认推荐顺序、后端接口和 OpenAPI。新增稳定且不修改输入的下载量排序工具：支持升降序、未知值双向置底、非法值兜底及相同值原始顺序保留；接入市场排序控件并补齐中、英、俄三语文案。新增 9 项专项单元测试，覆盖正常排序、零值、缺失与非法值、负数、数字字符串、小数、稳定性和输入不可变。验证通过 45 项 Dashboard Node 测试、额外性质检查、三语 JSON 校验、Vue 类型检查和生产构建。 * Delete dashboard/tests/marketPluginSort.test.mjs * refactor: 内联插件市场下载量排序删除独立的市场下载量排序工具，将下载量比较逻辑直接放在现有市场排序分支。缺失下载量使用默认值 0，保持前端本地排序与现有排序行为一致。验证：vue-tsc --noEmit；pnpm run build；node --test dashboard/tests/*.test.mjs；git diff --check。 --------- Co-authored-by: C₂₂H₂₅NO₆ <Sisyphbaous-DT-Project@users.noreply.github.com> Co-authored-by: Soulter <37870767+Soulter@users.noreply.github.com> * fix: improve dark theme text contrast (#9643) * fix: propagate QQ media upload failures (#9644) * feat(qqofficial): add chunked file uploads (#9646) Add a dedicated chunked uploader for large local QQ Official media. Keep C2C and group endpoints explicit, support server-provided part index bases, and retry transient upload operations. Co-authored-by: Fuyan Yuan <33221728+TheRainstorm@users.noreply.github.com> * fix(kb): support UUID fallback in get_kb_by_name and warn on missing KBs (#9636) Fixes #9529. When kb_names contains UUIDs instead of names, get_kb_by_name() would return None and check_all_kb() would silently skip retrieval with only a DEBUG-level log. Modifications: - get_kb_by_name() now falls back to UUID lookup when name match fails - check_all_kb() distinguishes None (not found) from empty KBs and logs a WARNING with the count of missing KBs - Add regression tests covering UUID lookup, name preference, and logging * fix: prevent SharedPreferences deadlocks (#9649) * fix: avoid blocking shared preference access * docs: clarify shared preference cache roles * docs: explain shared preference cache purpose * docs: link cache rationale to pull request * chore: bump version to 4.27.3 (#9650) * chore: bump version to 4.27.3 * Update changelog for version 4.27.3 Updated changelog for version 4.27.3 with new features, maintenance updates, and bug fixes. * Refactor: stat service deprecated stats (#9658) * refactor(dashboard): migrate get_stat off deprecated stats methods Rewrite StatService.get_stat to query PlatformStat directly via db_helper.get_db(), following the existing get_provider_token_stats pattern in the same file, instead of the deprecated get_base_stats/get_grouped_base_stats/get_total_message_count. - Windowed rows are fetched once with an explicit ORDER BY timestamp (the old get_base_stats relied on insertion order) - Per-platform sums and hourly time-series buckets are aggregated in Python; total message count uses func.coalesce(func.sum(...), 0) - Response shape is unchanged: platform entries keep the {name, count, timestamp} keys, now built as plain dicts so no deprecated po.Platform/Stats classes are instantiated - Verified semantically identical against the old methods with an A/B comparison over a seeded database (time series, per-platform sums, total count, and empty-window case all match) * test(dashboard): cover StatService.get_stat aggregation semantics The existing test_get_stat route test only asserts the HTTP status and the presence of the platform key, so an aggregation regression would pass unnoticed. Add focused unit tests that seed PlatformStat rows and assert the windowed per-platform sums, the global message total, the hourly time-series bucket shape, the response key set, and the empty-window behavior. * feat(provider): add SSYCloud chat completion provider (#9659) * fix: include JSON cards in group context (#9655) * fix: include JSON cards in group context * fix: allow JSON cards to trigger active replies * docs: add ShengSuanYun provider guide * fix: detect audio format from file content (#9612) * feat: log effective Windows local runtime shell (#9648) * feat: log effective Windows local runtime shell * chore: remove Windows shell logging tests --------- Co-authored-by: Soulter <905617992@qq.com> * refactor(misskey): migrate off deprecated visibility resolver alias (#9674) --------- Co-authored-by: Soulter <905617992@qq.com> Co-authored-by: Wei Chengqian <wcqqq1214@gmail.com> Co-authored-by: Donoym <prober13c14@gmail.com> Co-authored-by: Soulter <37870767+Soulter@users.noreply.github.com> Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com> Co-authored-by: C₂₂H₂₅NO₆ <96930391+Sisyphbaous-DT-Project@users.noreply.github.com> Co-authored-by: C₂₂H₂₅NO₆ <Sisyphbaous-DT-Project@users.noreply.github.com> Co-authored-by: Fuyan Yuan <33221728+TheRainstorm@users.noreply.github.com> Co-authored-by: lxfight <1686540385@qq.com> Co-authored-by: Ruochen Pan <badbatch0x01@gmail.com> Co-authored-by: xxshu26 <15197757832@163.com> Co-authored-by: PeiPei233 <49641967+PeiPei233@users.noreply.github.com> Co-authored-by: xiaoxuan010 <2592053474@qq.com> Co-authored-by: C10H14N2O5 <100066858+C10H14N2O5@users.noreply.github.com>

sourcery-ai Bot reviewed Mar 15, 2026

View reviewed changes

gemini-code-assist Bot reviewed Mar 15, 2026

View reviewed changes

LIghtJUNction added enhancement New feature or request area:core The bug / feature is about astrbot's core, backend labels Mar 15, 2026

LIghtJUNction assigned LIghtJUNction, advent259141, w31r4 and zouyonghe Mar 15, 2026

This was referenced Mar 16, 2026

feat: add OneBot V11 file API support for sending files #6404

Merged

[AGENT] refactor: dashboard i18n dynamic loading #6289

Closed

feat: add clone persona functionality #6429

Merged

Fix 修正shell工具未正确应用工具调用超时的问题 #6434

Merged

LIghtJUNction marked this pull request as ready for review March 18, 2026 09:18

Copilot AI review requested due to automatic review settings March 18, 2026 09:18

auto-assign Bot requested review from Soulter and advent259141 March 18, 2026 09:18

dosubot Bot added the size:XXL This PR changes 1000+ lines, ignoring generated files. label Mar 18, 2026

sourcery-ai Bot reviewed Mar 18, 2026

View reviewed changes

Copilot AI reviewed Mar 18, 2026

dosubot Bot added the area:webui The bug / feature is about webui(dashboard) of astrbot. label Mar 18, 2026

LIghtJUNction marked this pull request as draft March 18, 2026 09:30

github-advanced-security AI found potential problems Mar 18, 2026

View reviewed changes

Comment thread astrbot/cli/commands/cmd_conf.py Fixed

github-advanced-security AI found potential problems Mar 18, 2026

View reviewed changes

Comment thread astrbot/cli/commands/cmd_conf.py Fixed

Comment thread astrbot/cli/commands/cmd_conf.py Fixed

Comment thread astrbot/cli/commands/cmd_conf.py Fixed

github-advanced-security AI found potential problems Mar 19, 2026

View reviewed changes

Comment thread astrbot/cli/commands/cmd_conf.py Fixed

Comment thread astrbot/cli/commands/cmd_conf.py Fixed

github-advanced-security AI found potential problems Mar 19, 2026

View reviewed changes

Comment thread astrbot/cli/commands/cmd_conf.py Fixed

Comment thread astrbot/cli/commands/cmd_conf.py Fixed

github-advanced-security AI found potential problems Mar 19, 2026

View reviewed changes

Comment thread astrbot/core/provider/sources/gemini_source.py Fixed

Comment thread astrbot/core/provider/sources/gemini_source.py Fixed

Comment thread astrbot/core/provider/sources/openai_source.py Fixed

github-advanced-security AI found potential problems Mar 20, 2026

View reviewed changes

Comment thread tests/test_dashboard.py Fixed

LIghtJUNction changed the title ~~v4.21.0~~ dev Mar 22, 2026

Copilot started work on behalf of LIghtJUNction May 30, 2026 16:56 View session

Copilot stopped work on behalf of LIghtJUNction due to an error May 30, 2026 16:56
Request session.create failed with message: Model "gpt-5.3-codex" is not available.

LIghtJUNction added 4 commits June 8, 2026 01:32

merge: master into dev

a3ba7bd

chore: fix dashboard style checks

398086a

fix: resolve merge conflicts and complete dashboard API migration

5d22db5

feat: migrate dashboard api runtime

fcfe5ca

vercel Bot deployed to Preview June 26, 2026 02:18 View deployment

fix: correct dashboard run return annotation

f8ce2fb

vercel Bot deployed to Preview June 26, 2026 03:45 View deployment

vercel Bot deployed to Preview June 26, 2026 04:04 View deployment

github-advanced-security AI found potential problems Jun 26, 2026

View reviewed changes

chore: apply pre-commit fixes

5c219ff

LIghtJUNction added 2 commits July 16, 2026 17:39

chore: sync master into dev

1f5accc

github-advanced-security AI found potential problems Jul 16, 2026

View reviewed changes

github-actions Bot mentioned this pull request Jul 27, 2026

🦞 OpenClaw 生态日报 2026-07-28 huajiao1998/big_model_radar#39

Open

feat: release v4.27.2

7a2ef6a

github-actions Bot mentioned this pull request Aug 8, 2026

🦞 OpenClaw 生态日报 2026-08-09 huajiao1998/big_model_radar#51

Open

LIghtJUNction mentioned this pull request Aug 13, 2026

fix(dashboard): harden config selector paths #9656

Open

LIghtJUNction and others added 5 commits August 14, 2026 13:51

chore: record master sync ancestry

eede34c

chore: sync master into dev

96018e6

fix: repair dev test baseline after master sync

a4bdde7

fix: resolve sync regressions and CI failures

a36e048

github-actions Bot mentioned this pull request Aug 16, 2026

🦞 OpenClaw 生态日报 2026-08-17 huajiao1998/big_model_radar#56

Open

@@ -499,7 +499,7 @@
                     credentials_display = (
                         f"   ➜  Initial username: {username}\n"
-                        f"   ➜  Initial password: {generated_password}\n"
+                        "   ➜  Initial password: [REDACTED]\n"
                         "   ➜  Change it after logging in\n ✨✨✨\n"
                     )
                     object.__setattr__(self.config, "_generated_dashboard_password", None)

@@ -395,10 +395,11 @@
                 def check_port_in_use(self, host: str, port: int) -> bool:
                     """跨平台检测端口是否被占用"""
-                    probe_host = host
-                    if host in ("", "0.0.0.0"):
+                    normalized_host = host.strip()
+                    probe_host = normalized_host
+                    if normalized_host in ("", "0.0.0.0", "*"):
                         probe_host = "127.0.0.1"
-                    elif host == "::":
+                    elif normalized_host == "::":
                         probe_host = "::1"
                     family = socket.AF_INET6 if ":" in probe_host else socket.AF_INET

Uh oh!

Uh oh!

Conversation

LIghtJUNction commented Mar 15, 2026 • edited by Copilot AI Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

sourcery-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

gemini-code-assist Bot commented Mar 15, 2026

Summary of Changes

Highlights

Footnotes

Uh oh!

gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

chatgpt-codex-connector Bot commented Mar 18, 2026

Uh oh!

sourcery-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

cloudflare-workers-and-pages Bot commented Jun 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying with Cloudflare Workers

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

LIghtJUNction commented Jun 28, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Check failure

Uh oh!

Uh oh!

Copilot Autofix

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Check warning

Uh oh!

Copilot Autofix

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

12 participants

LIghtJUNction commented Mar 15, 2026 •

edited by Copilot AI

Loading

cloudflare-workers-and-pages Bot commented Jun 26, 2026 •

edited

Loading