00995545e7
fix import
2026-06-22 11:28:58 +08:00
475dafb8b7
fix missing decorator
2026-06-22 11:19:20 +08:00
a0bdb16cb9
Merge branch 'feat/openapi-rbac' into deploy/enterprise
2026-06-22 11:01:12 +08:00
4111751bdf
refactor(openapi/cli): split app usage-face from studio-app build-face
...
Squash of PR #37641 (worktree-fix+app-abstraction-noun).
Introduces two app nouns:
- app: usage face (run/get/describe/resume), dual-subject account + external-SSO
- studio-app: build face (export/import), account-only
Backend: split read routes by subject with token-type-restricted guards;
shared public projection builder (build_app_describe_response); drop
author/tags from describe to prevent cross-tenant identity leak.
CLI: selectAppReader subject dispatch (account vs permitted-external),
AppReader strategy, studio-app export/import, refreshed help/guides.
2026-06-21 19:48:22 -07:00
c62276d7de
Merge remote-tracking branch 'origin/main' into deploy/enterprise
2026-06-21 19:47:32 -07:00
8cc6b16661
Merge remote-tracking branch 'upstream/main' into feat/openapi-rbac
2026-06-22 10:25:29 +08:00
9b4dd9d4e8
refactor: accept db.session explicitly in APIBasedExtensionService ( #37693 )
2026-06-21 00:53:36 +00:00
75d50455d6
refactor: accept db.session explicitly in FeedbackService ( #37694 )
2026-06-21 00:52:36 +00:00
dcff1870d5
refactor: accept db.session explicitly in SavedMessageService ( #37682 )
2026-06-20 12:35:06 +00:00
a7b53b33ee
chore: move one db.session ( #37656 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-19 19:52:59 +00:00
8052c93133
refactor(api): type end user records with enum ( #36945 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-06-19 01:02:01 +00:00
33edf97f81
feat: RBAC ( #37107 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: fatelei <fatelei@gmail.com >
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: 盐粒 Yanli <yanli@dify.ai >
Co-authored-by: Charles Yao <chongbinyao33@gmail.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
Co-authored-by: yunlu.wen <yunlu.wen@dify.ai >
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com >
Co-authored-by: Jingyi <jingyi.qi@dify.ai >
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: hjlarry <hjlarry@163.com >
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xiyuan Chen <52963600+GareArc@users.noreply.github.com >
Co-authored-by: gigglewang <gigglewang@dify.ai >
Co-authored-by: chariri <w@chariri.moe >
Co-authored-by: Evan <2869018789@qq.com >
Co-authored-by: zyssyz123 <916125788@qq.com >
2026-06-18 16:35:29 +00:00
0df30dd269
fix(agent): resolve roster file downloads versions and log filters ( #37626 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-18 12:06:27 +00:00
933df2f490
fix(agent): decouple roster from app quota ( #37625 )
2026-06-18 08:48:18 +00:00
c52eafe2ca
docs: enrich generated service API descriptions ( #37615 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-18 08:43:39 +00:00
26b0137c83
chore: improve invite member flow ( #37479 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Jingyi <jingyi.qi@dify.ai >
2026-06-18 06:30:01 +00:00
3f2d22ec0f
feat(agent-v2): sync nightly updates to main ( #37599 )
...
Co-authored-by: Jingyi-Dify <jingyi.qi@dify.ai >
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: hjlarry <hjlarry@163.com >
Co-authored-by: Bond Zhu <783504079@qq.com >
Co-authored-by: Yansong Zhang <916125788@qq.com >
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com >
2026-06-18 05:03:34 +00:00
4304044905
chore: example of make db.session pass from parameter. ( #37561 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-18 02:16:09 +00:00
43192036fa
fix: require Agent App role ( #37601 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-18 01:23:45 +00:00
af99414fc1
chore: port isinstance to match case ( #37271 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-06-18 00:18:03 +00:00
19838972dc
fix: add service api openapi descriptions ( #37595 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 16:02:43 +00:00
59f8f2e7b3
fix(agent): align roster observability logs contract ( #37578 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 14:34:14 +00:00
baf775134e
fix: improve Service API OpenAPI contracts ( #37592 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 14:25:30 +00:00
c7ceaa5fe2
fix typecheck
2026-06-17 18:42:24 +08:00
48452aefbc
feat: app deploy ( #35670 )
...
Co-authored-by: zhangx1n <zhangxin@dify.ai >
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 09:28:43 +00:00
0ea0647dd0
feat(agent): wire knowledge base retrieval into runtime ( #37577 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 09:27:38 +00:00
912c0fa8d1
fix(agent): add agent app duplicate endpoint ( #37571 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 08:09:47 +00:00
758bea1a91
fix(api): hide agent apps from installed apps ( #37570 )
2026-06-17 06:47:39 +00:00
f203ab7f1d
fix(agent-v2): include workflow references in agent list ( #37567 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 05:56:53 +00:00
e970cbde0f
feat: add agent roster observability APIs ( #37566 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 05:22:52 +00:00
547340ecca
allow enduser access for app list/desc
2026-06-17 11:23:10 +08:00
0ca14cd8ad
[autofix.ci] apply automated fixes
2026-06-17 03:18:50 +00:00
3c8d03d24f
handle enduser in decorator
2026-06-17 11:15:34 +08:00
39bf04e7fe
[autofix.ci] apply automated fixes
2026-06-17 02:30:55 +00:00
c38cba1f8c
reorder decorators
2026-06-17 10:27:32 +08:00
a811522d5f
Merge remote-tracking branch 'upstream/main' into feat/openapi-rbac
2026-06-17 09:53:32 +08:00
bacc48d16e
fix(agent): align config detail and output contracts ( #37535 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 01:17:20 +00:00
f533e992d4
fix(hitl): scope OpenAPI/Service-API resume to author-configured webapp forms
...
Pause-time token emission now draws only from the recipient set each API
surface is allowed to act on (emit ⊆ validate), so the CLI/OpenAPI caller is
never handed a token the resume endpoint would reject as 404 (WTA-867).
A form's recipients are partitioned once, per surface, into a single
FormDisposition: the surface-actionable recipient yields `form_token`, while
the rest are reported as `approval_channels` (e.g. ["email", "console"]) so the
caller is told where approval actually happens. Token and channels are two
projections of one decision (disposition_for_surface) loaded by one recipient
query (load_form_dispositions_by_form_id); the live pause path and the
reconnect snapshot path consume the same FormDisposition so they cannot drift.
RecipientType carries its user-facing approval-channel label as an enum tuple
value, set in __new__, so a new recipient type cannot be declared without one.
Tests: consolidate recipient/disposition/enrich tests into parametrized
matrices, add CONSOLE-surface and empty-token coverage, extract a shared fake
session for the pause-event tests.
2026-06-16 16:11:29 -07:00
dcc0b95e11
fix: issue ( #37508 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-16 08:53:53 +00:00
b6b9165d2b
fix(agent): include app display fields in published references ( #37485 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-16 07:00:37 +00:00
b4e3a9095b
fix(agent): support agent-id chat and inline draft bindings ( #37483 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-16 06:04:30 +00:00
1b2d397fc9
test: example of make db.session pass from parameter. #37403 ( #37471 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-16 04:07:01 +00:00
2b7f5ab982
fix: project agent node outputs into draft graph ( #37467 )
2026-06-15 13:27:57 +00:00
1e8329f02c
feat: Unify Agent v2 console routes ( #37465 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-15 11:09:15 +00:00
9b74df21d0
feat(web): refine onboarding UI ( #37433 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: hjlarry <hjlarry@163.com >
Co-authored-by: fatelei <fatelei@gmail.com >
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xiyuan Chen <52963600+GareArc@users.noreply.github.com >
Co-authored-by: gigglewang <gigglewang@dify.ai >
Co-authored-by: Yunlu Wen <yunlu.wen@dify.ai >
Co-authored-by: chariri <w@chariri.moe >
Co-authored-by: Evan <2869018789@qq.com >
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com >
2026-06-15 08:47:15 +00:00
d82b6fe48e
guard openapi with rbac decorator
2026-06-15 13:51:30 +08:00
d21bf291bb
fix: align agent app backing roster API ( #37442 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-15 05:21:38 +00:00
12159d6313
feat: rbac scaffold ( #37443 )
2026-06-15 05:16:41 +00:00
e0773c4d8f
refactor: TagService to accept db.session explicitly ( #37416 )
2026-06-15 02:04:28 +00:00
c6b3e525d1
refactor: accept db.session explicitly in RecommendedAppService ( #37417 )
...
Co-authored-by: Shahil Kadia <shahil@users.noreply.github.com >
2026-06-15 01:19:16 +00:00
