Repository navigation
What's Changed
Knowledgebase, Agents & CLI
- feat(knowledgebase): integrate RAGFlow knowledge sets with document upload, parsing, session-scoped retrieval, and connection updates without restarting
- feat(agent): support asynchronous delegation, inter-agent messages, and follow-ups, with improved cancellation and background-result delivery
- feat(cli): add headless execution, session continuation, structured output, permission and budget controls, and platform management commands
- fix(cli): repair session lookup and model selection, incremental streaming output, JSON formatting, MCP commands, and host/container path handling
Sessions & Runtime
- fix(session): preserve task context during compaction, improve truncated tool-call recovery, correct token usage, and clear stale task progress after completion
- fix(llm): add provider concurrency controls and coordinated 429 retries, restore retry status after refresh, and isolate model clients across event loops
- fix(task): prevent task ID and output-directory collisions, restore background-task APIs, and make task status and cancellation reliable
Workflows & Security
- fix(workflow): preserve strict mapping settings and trigger IDs, restore Pro compatibility for internal triggers and verified webhooks, and record rejected executions with clear reasons
- fix(security): isolate user events, enforce file-write restrictions across delegated sessions, and protect built-in Agent prompts
- fix(soc): improve Sangfor SE alert parsing, normalization, and deduplication while preserving original evidence through triage
WebUI & Hub
- feat(webui): add workspace-specific navigation and global session history, refresh the Flocks logo, and improve menus and workflow cards on smaller screens
- fix(hub): reduce catalog loading delays and preserve administrator-created pages and navigation during WebUI plugin upgrades, with explicit conflict handling
Deployment & Models
- feat(packaging): support custom offline installation directories and existing-data migration, improve RHEL 8.10 compatibility, and remove sensitive examples from bundled content
- fix(provider): retire
qwen3-maxfrom built-in ThreatBook providers and clean up stale configuration references; users previously using it as the default must select another model
Notifications
- fix(notifications): load bilingual notes for the installed Core release for all users, with Markdown rendering and per-version dismissal
Upgrade notes:
- Flocks Pro deployments should upgrade the matching Pro component alongside Core for tool-hook compatibility.
- To apply the Sangfor SE alert fixes, update both Flocks and the corresponding SOC workflow.
Chinese Release Notes
知识库、Agent 与 CLI
- feat(knowledgebase)：接入 RAGFlow 知识集，支持文档上传、解析、会话绑定检索，以及无需重启的连接配置更新
- feat(agent)：支持异步任务委派、Agent 间消息和后续指令，完善取消操作及后台结果回传
- feat(cli)：新增无交互执行、会话续接、结构化输出、权限与预算控制，以及平台资源管理命令
- fix(cli)：修复会话查找、模型选择、流式增量输出、JSON 格式、MCP 命令及主机与容器路径处理
会话与运行稳定性
- fix(session)：压缩上下文时保留任务信息，完善工具参数截断后的恢复，修正 Token 统计，并清理任务完成后残留的进行中状态
- fix(llm)：增加模型请求并发控制及 429 协同重试，刷新后恢复重试状态，并按事件循环隔离模型客户端
- fix(task)：避免任务 ID 和输出目录冲突，修复后台任务接口，完善运行状态展示及任务取消
工作流与安全
- fix(workflow)：保留严格映射配置及触发器 ID，修复内部触发器和已验证 Webhook 的 Pro 兼容性，并为被拒绝的执行记录明确原因
- fix(security)：隔离不同用户的事件推送，使文件写入限制在子 Agent 中持续生效，并保护内置 Agent 提示词
- fix(soc)：完善深信服 SE 告警解析、字段归一化和去重，并在研判过程中保留原始证据
WebUI 与 Hub
- feat(webui)：新增按工作区组织的导航及全局会话历史，更新 Flocks 标识，并优化小屏幕下的菜单和工作流卡片
- fix(hub)：减少插件目录加载耗时，升级 WebUI 插件时保留管理员自建页面及导航位置，并明确提示冲突处理方式
部署与模型
- feat(packaging)：离线安装支持自定义基目录和旧配置、数据迁移，完善 RHEL 8.10 兼容性，并清理随包内容中的敏感示例
- fix(provider)：从内置 ThreatBook 服务中下架
qwen3-max，清理旧配置引用；原默认模型为该型号的用户需重新选择模型
通知公告
- fix(notifications)：所有用户均可查看当前已安装 Core 版本的中英文更新说明，支持 Markdown 展示及按版本关闭提醒
升级提示：
- Flocks Pro 环境请同步升级配套 Pro 组件，以兼容工具钩子调整。
- 使用深信服 SE 告警接入的环境，请同时更新 Flocks 和对应 SOC 工作流。