Save writes the config atomically with mode 0600 via internal/xdg.WriteAtomicYAML.

InjectTracing stamps the current trace/span ids (and a best-effort user/session label) from ctx onto the given payload, provided the payload embeds ty

═══════════════════════════════════════════════════════════════════════════ Helper: visual test reporter ═════════════════════════════════════════════

Finish updates a span with its final output, extra metadata and any error. A non-nil err marks the span as ERROR level in Langfuse.

TenantRoleFromContext extracts the caller's TenantRole in the currently active tenant. Returns TenantRoleViewer when the key is absent so that callers

jsonToMarkdown converts raw JSON bytes into markdown text Key properties: - Every output chunk is a **valid JSON object** (not a fragment). - Nested

Parse document and return markdown + image references. No chunking, no OCR, no VLM caption — those are done in Go.

EnsureDefaults sets default values for the agent

Load reads the config file. If it does not exist, returns a zero-value Config with no error (commands like `version` and `--help` must not fail just b

newTestServer wires svc to an in-process MCP server and returns a connected client session ready to CallTool against it.

EncryptAESGCM encrypts plaintext with AES-256-GCM. Returns the original string if empty, already encrypted, or key is nil.

GetString safely extracts a string value from a credentials map.

IsValid reports whether r is one of the four defined tenant roles.

Result returns the accumulated answer-event content.

Make a request to the WeKnora API Args: method: HTTP method (GET, POST, PUT, DELETE) endpoint: API endpoint path

access_test.go covers the four exported helpers in access.go: IsCrossTenantSuperuser, IsTenantAccessible, RequireCrossTenantAccess, RequirePathTenantM

Chat 进行非流式聊天

Feed processes a new argument delta and returns any new content to emit. Returns empty string if no new content is available yet.

NewForbiddenError creates a forbidden error

NewUnauthorizedError creates an unauthorized error

On registers an event handler for a specific event type Multiple handlers can be registered for the same event type

createTestPNG generates a minimal PNG image with the given dimensions.

AddDryRunFlag registers --dry-run on a cobra command, binding to a bool pointer. A bool is sufficient because the CLI is single-tenant and self-hosted

GetDimensions returns the vector dimensions

GetEmbeddingModel gets an embedding model

NewImageResolver creates a resolver.

HandleDryRun bundles the dry-run preamble for mutation command RunE: FormatOptions resolution + envelope emit. Returns (handled, err) — when handled i

On registers an event handler for a specific event type

Register 添加一个提供者到全局注册表

Type returns the sandbox type

GetManager returns the installed singleton, or nil if Init has not been called. Callers must tolerate a nil return.

Offset gets the offset for database query

memberTestRouter wires the handler with the same errorCapture middleware production uses, so c.Error() shows up as a real HTTP status in the recorder.

newTestMemberHandler builds a TenantMemberHandler with no extra dependencies. The cross-tenant URL check moved to middleware.RequirePathTenantMatch in

SanitizeForLog 清理日志输入,防止日志注入攻击 日志注入攻击是指攻击者通过在输入中插入换行符和其他控制字符, 伪造日志条目,可能导致日志分析工具误判或隐藏恶意活动

Helper function for type assertion with default value

tracker returns a usable SpanTracker — falls back to a no-op when the service was constructed without one (test harness, lite mode w/o repo). All pipe

IsAppError checks if the error is an AppError type

NewVectorStoreService creates a new vector store service. kbRepo and db are required by the delete guard, which counts bound KBs inside a transaction

Observe parses line and updates the hierarchy if line is a Markdown heading. Returns the (level, headingText) when a heading was recognized, or (0, ""

SetForTestWithTTY is like SetForTest but reports IsStdoutTTY/IsStderrTTY = true so tests can exercise interactive code paths (confirm prompts, color,

linkifyContent injects [[slug|matchText]] cross-links into content for each ref, skipping occurrences that fall inside code or existing links and requ

tracker returns a non-nil span tracker so callers don't have to nil-check on every Begin/End. Matches the noopSpanTracker pattern used elsewhere (see

GetChatModel gets a chat model

List lists all models

NewConnector creates a new Feishu connector.

Stop gracefully shuts down the service, stopping all channels and background goroutines.

CloneContext 复制上下文中的关键信息到新上下文

GetAESKey reads the 32-byte AES key from SYSTEM_AES_KEY env. Returns nil if not set or not exactly 32 bytes.

GetAgentByID retrieves agent information by ID (uses tenant from context) Parameters: - ctx: Context information - id: Unique identifier of the agent

NewKVHybridRetrieveEngine creates a new instance of the hybrid retrieval engine KV stands for KeywordsVector

ResolveProcessConfig merges KB defaults with per-upload overrides for the parse pipeline.

TenantInfoFromContext extracts the *Tenant from ctx.

bptr returns a pointer to a bool literal. MCP ToolAnnotations uses pointer types for DestructiveHint and OpenWorldHint so that "explicit false" can be

validateWikiKB validates that the KB exists and is a wiki type

Append consumes one StreamResponse event. Safe to call multiple times; idempotent post-Done so callers do not need to special-case late events.

EngineType gets the retrieve engine type

Enqueue inserts a single op. The caller fills in TenantID, TaskType, Scope, ScopeID, Op, DedupKey, Payload; ID, FailCount, EnqueuedAt are server-side

FAQMetadata 解析 Chunk 中的 FAQ 元数据 返回原始数据（仅做基础清理）

NewConnector creates a new Yuque connector.

NewEventBus creates a new EventBus instance

Ownership-or-role guards. Required role here is the privilege level that bypasses the ownership check; Contributors ALWAYS pass when they own the reso

Reset removes the DB override for `key` so the resolver falls back to ENV / built-in default. Idempotent: deleting a key that was never persisted retu

SafeObjectKey 校验对象存储的 key（如 COS/MinIO objectName），禁止包含 ".." 等路径遍历

Status reports whether the current user has authorized this service. Status godoc @Summary 查询 MCP OAuth 授权状态 @Description 返回当前用户对指定 MCP 服务是否已完成

ValidateIndexConfig checks IndexConfig fields for safe values. Call this from the service layer before persisting a VectorStore.

blockIsValidJSON checks that each code block inside the result is valid JSON.

callTool invokes name with args and returns the parsed structured output.

--------------------------------------------------------------------------- BuildEnvVectorStores — virtual stores from RETRIEVE_DRIVER env var -------

Enabled reports whether the manager would actually emit events.

EntryCount returns the number of active cron entries (for testing/monitoring).

GetModelByID gets a model by ID

GetPageBySlug retrieves a wiki page by its slug within a knowledge base.

HasPermission reports whether r is at least as privileged as required. Used by RequireRole-style middleware to gate endpoints.

PipelineInfo logs pipeline info level entries.