v4.15.2

## 📦 升级指南

### 1. OpenSandbox 镜像升级

如果部署中启用了 OpenSandbox，请同步更新以下镜像：

- `opensandbox/server:v0.2.1`
- `opensandbox/execd:v1.0.21`
- `opensandbox/egress:v1.1.4`

升级后可修复中文文件名的文件无法下载的问题。完整配置请参考 [OpenSandbox 配置](../../config/sandbox/opensandbox)。

### 2. AGENT_ENGINE 环境变量值调整

V4.15.2 起，`AGENT_ENGINE` 使用新的枚举值。升级前，请按下表修改部署环境变量：

| 旧值      | 新值        |
| --------- | ----------- |
| `default` | `fastAgent` |
| `pi`      | `piAgent`   |

旧值不再兼容。继续使用 `default` 或 `pi` 会导致环境变量校验失败，FastGPT 无法启动。未配置 `AGENT_ENGINE` 时，可正常启动，系统默认使用 `fastAgent`。

### 3. 修改文件下载模式变量

V4.15.2 新增 `STORAGE_DOWNLOAD_URL_MODE` 环境变量，默认值为 `short-proxy`。

- `short-proxy`：返回 FastGPT 短链，由 FastGPT App 代理文件下载。
- `short-redirect`：返回 FastGPT 短链，校验后跳转到临时 S3/CDN 地址。

如需使用短链但不希望文件流量经过 FastGPT App，可配置：

`STORAGE_DOWNLOAD_URL_MODE=short-redirect`

使用 `short-redirect` 时，必须配置 `STORAGE_EXTERNAL_ENDPOINT`。

### 4. 镜像变更

- 更新 fastgpt-app(fastgpt 主服务) 镜像 tag: v4.15.2
- 更新 fastgpt-pro(fastgpt 商业版) 镜像 tag: v4.15.2
- 更新 fastgpt-plugin 镜像 tag: v1.0.2

## 🚀 新增内容

1. 工作流节点增加实时错误提示。
2. 自定义工具参数节点，支持手动输入 jsonschema，同时支持必填选项。
3. 文件上传、下载链接改用短访问链接，减少长链接占用上下文及模型输出异常；已签发的旧版链接仍保持兼容。
4. 针对无明确后缀的文件链接，进行 buffer 推测后缀，提高文件解析成功率。
5. 企业认证/公司认证能力。
6. 门户页支持选择 AgentV2 应用进行对话。

## ⚙️ 优化

1. Skill 未关联应用时的删除弹窗文案。
2. 适配最新微信发布渠道 sdk。
3. 将插件的已下线命名改成已卸载。
4. 判断器节点采用唯一 ID 作为标识，而不是 index，实现删除、排序时，目标分支保持不变。
5. 系统工具生成的文件不会 1 小时过期，改成长期，跟随会话一起删除。
6. 同步模式下不显示注册用户按钮。
7. 对话框流输出，淡入效果性能优化。
8. 升级 `LiteParse` 版本，解决并发解析 PDF 报错问题；文件解析 worker 默认数量由 10 调整为 5，仍可通过 `PARSE_FILE_WORKERS` 配置。
9. 前端请求增加并发去重能力，模型列表和沙盒依赖接口的相同请求会复用进行中的结果，减少工作流节点和选择器重复触发的请求。
10. 工作流 SSE 返回 nodeResponse。

## 🐛 修复

1. 优化 CI 流程，通过 hashtag 固定 step 版本，规避 CI 供应链投毒攻击风险。
2. 移除 PPTX 解析依赖的高风险解压库，改为流式解压解析流程，规避恶意代码执行风险。
3. 自定义分块标识符拒绝传入单一"|"或连续"||"符号，避免错误解析大量 chunks。
4. 企微版本客户付款后自动购买 license 判断逻辑优化，避免重复购买/少购买的情况
5. 插件市场空 Tag 标签问题
6. 修复循环运行节点的迭代项和并行运行节点的任务项耗时计算错误，改为分别记录每个子项的实际运行时间，不再累加子节点耗时。
7. Agent Loop 部分边界情况优化。
8. 删除正在上传的对话文件时，会同步中止预签名和上传请求，避免已删除文件重新出现或错误更新其他文件。
9. 修复调用上传、草稿上传及首轮媒体消息场景下，文件持久化、类型或元数据可能丢失的问题。

## 🛠️ 代码优化

### 常规代码优化

1. Agent V2 辅助生成/ChatAgentHelper 重构，复用对话框。
2. 保存包含超长 base64/data URL 的 AI 请求记录时可能触发栈溢出，提前进行截断。
3. SSE 事件统一封装，强化类型提示。
4. packages/service 和 packages/global 移除 next 依赖。
5. 新增 `AUTH_COOKIE_SECURE` 环境变量，启用后登录 Cookie 将添加 `Secure` 属性，仅通过 HTTPS 传输。

### Agent Loop 重构

1. Workflow Agent 与 ToolCall 统一接入共享的 Agent Loop 执行内核。ToolCall 关闭 plan 和 ask 能力，其他循环执行、上下文处理、工具事件、交互恢复及计费规则与 Workflow Agent 保持一致。
2. 统一 `fastAgent` 和 `piAgent` 的 Provider 接口，可通过 `AGENT_ENGINE` 切换执行引擎，并共用标准化的输入、运行时和返回结果协议。
3. 统一 plan、ask、sandbox、文件读取、知识库搜索和业务工具的事件生命周期，使 SSE、运行详情和错误信息保持一致。
4. 统一 `assistantResponses`、节点响应、Provider 状态和上下文压缩快照的生成及持久化流程，移除旧执行链路中的重复适配层。
5. 统一模型调用、上下文压缩和工具执行的 usage 收集入口，避免同一笔用量被重复计费或统计。
6. 优化工具调度：允许安全工具批量并行执行，并保持工具响应按模型调用顺序写回；plan、ask 等有状态工具继续串行执行。


## What's Changed
* Deplot doc by @c121914yu in https://github.com/labring/FastGPT/pull/7251
* fix: hide skill delete reference text when unused by @DigHuang in https://github.com/labring/FastGPT/pull/7255
* fix: secure wechat outlink binding by @c121914yu in https://github.com/labring/FastGPT/pull/7260
* feat: company certification by @shortlight5980 in https://github.com/labring/FastGPT/pull/7122
* feat(chat): support Agent v2 in portal app selectors by @DigHuang in https://github.com/labring/FastGPT/pull/7259
* feat(login): add WeCom auto redirect switch by @FinleyGe in https://github.com/labring/FastGPT/pull/7264
* fix: pin DNS for safe axios direct requests by @c121914yu in https://github.com/labring/FastGPT/pull/7261
* docs: add admin coupon openapi schema by @c121914yu in https://github.com/labring/FastGPT/pull/7272
* feat(marketplace): support community plugins and uninstall flow by @FinleyGe in https://github.com/labring/FastGPT/pull/7250
* feat(chat): helper bot ui & file upload support by @DigHuang in https://github.com/labring/FastGPT/pull/7245
* chore(deploy): configure plugin service base url by @FinleyGe in https://github.com/labring/FastGPT/pull/7273
* feat(chat): show Agent v2 in team app filters by @DigHuang in https://github.com/labring/FastGPT/pull/7274
* fix certification by @shortlight5980 in https://github.com/labring/FastGPT/pull/7270
* perf(marketplace): cap tool grid columns by @FinleyGe in https://github.com/labring/FastGPT/pull/7278
* fix(service): set default expiration for invoked file uploads by @FinleyGe in https://github.com/labring/FastGPT/pull/7279
* ci: add Forgejo platform support with custom variables by @ctlaltlaltc in https://github.com/labring/FastGPT/pull/7265
* fix(ai): avoid stack overflow saving base64 request records by @YYH211 in https://github.com/labring/FastGPT/pull/7280
* fix: use stable branch ids for ifelse node by @c121914yu in https://github.com/labring/FastGPT/pull/7276
* feat(skill): update sandbox runtime upgrade modal by @DigHuang in https://github.com/labring/FastGPT/pull/7275
* refactor(workflow): type workflow SSE events by @c121914yu in https://github.com/labring/FastGPT/pull/7283
* fix(marketplace): filter empty tool card tags by @FinleyGe in https://github.com/labring/FastGPT/pull/7285
* fix certification by @shortlight5980 in https://github.com/labring/FastGPT/pull/7282
* fix(certification): remove initiative expire by @shortlight5980 in https://github.com/labring/FastGPT/pull/7288
* fix: clamp uploaded file access url expiration by @c121914yu in https://github.com/labring/FastGPT/pull/7289
* fix(volume-manager): default pvc storage class to empty by @lingdie in https://github.com/labring/FastGPT/pull/7291
* fix: guard embedding token limits by @YYH211 in https://github.com/labring/FastGPT/pull/7269
* chore(deploy): upgrade OpenSandbox images and integrate agent-sandbox-proxy by @DigHuang in https://github.com/labring/FastGPT/pull/7294
* fix(wecom): track purchased license capacity by @FinleyGe in https://github.com/labring/FastGPT/pull/7292
* fix(security): harden archive parsing and CI actions by @FinleyGe in https://github.com/labring/FastGPT/pull/7293
* fix：split register methods from team sync mode by @shortlight5980 in https://github.com/labring/FastGPT/pull/7230
* docs(upgrading): sync v4.15.2 release notes by @FinleyGe in https://github.com/labring/FastGPT/pull/7299
* fix(ci): use allowlisted action versions by @c121914yu in https://github.com/labring/FastGPT/pull/7301
* perf(chat): reduce long stream rendering cost by @c121914yu in https://github.com/labring/FastGPT/pull/7297
* fix(markdown): strengthen streaming tail fade by @c121914yu in https://github.com/labring/FastGPT/pull/7303
* perf(markdown): cache completed streaming blocks by @c121914yu in https://github.com/labring/FastGPT/pull/7306
* fix(workflow): record loop and parallel item runtimes independently by @c121914yu in https://github.com/labring/FastGPT/pull/7312
* fix(workflow): materialize editable node text by @DigHuang in https://github.com/labring/FastGPT/pull/7308
* perf: agent loop by @c121914yu in https://github.com/labring/FastGPT/pull/7055
* feat:add new UI components for pricing plans by @siiigure in https://github.com/labring/FastGPT/pull/7188
* refactor: decouple engine packages from Next.js by @ctlaltlaltc in https://github.com/labring/FastGPT/pull/7300
* feat(s3): add short access links and SDK core by @xqvvu in https://github.com/labring/FastGPT/pull/7281
* fix: stabilize concurrent PDF parsing with LiteParse WASM by @c121914yu in https://github.com/labring/FastGPT/pull/7318
* feat(workflow): add workflow check issue handling and validation mess… by @siiigure in https://github.com/labring/FastGPT/pull/7167
* refactor(s3): remove presigned download mode by @xqvvu in https://github.com/labring/FastGPT/pull/7321
* fix(chat): add MyTooltip for app name overflow handling by @siiigure in https://github.com/labring/FastGPT/pull/7322
* fix(chat): allow users to update own history metadata by @xqvvu in https://github.com/labring/FastGPT/pull/7325
* chore(workflow): update workflowUtilsContext and add normalization fo… by @siiigure in https://github.com/labring/FastGPT/pull/7324
* feat: configure auth cookies, simplify form results, and track referrals by @c121914yu in https://github.com/labring/FastGPT/pull/7320

## New Contributors
* @lingdie made their first contribution in https://github.com/labring/FastGPT/pull/7291

**Full Changelog**: https://github.com/labring/FastGPT/compare/v4.15.1...v4.15.2