de0a44be06
Merge branch 'main' into feat/cli
2026-05-19 10:37:42 +08:00
c6792ce415
[autofix.ci] apply automated fixes
2026-05-18 11:13:20 +00:00
1cee1a25b6
fix(console): require admin/owner to set default builtin tool credential ( #36264 )
...
Signed-off-by: NeatGuyCoding <15627489+NeatGuyCoding@users.noreply.github.com >
2026-05-18 10:15:51 +00:00
2eb37caf2e
refactor(api): migrate console.app.workflow to BaseModel ( #36216 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-18 07:31:37 +00:00
e2d6ae818c
Merge remote-tracking branch 'upstream/main' into feat/cli
2026-05-18 14:00:59 +08:00
9d0906c684
chore: improve swagger markdown optional fields typing ( #36247 )
2026-05-16 16:40:20 +00:00
8be6665d22
feat(api,cli): openapi HITL endpoints — always-stream, human_input_form, workflow_events, stop-task
...
- Remove response_mode from AppRunRequest; openapi /run always streams
- Add POST /apps/<id>/tasks/<task_id>/stop (SIGINT hook target)
- Add GET/POST /apps/<id>/form/human_input/<token> (HITL form fetch/submit)
- Add GET /apps/<id>/tasks/<task_id>/events (SSE reconnect after resume)
- Add HumanInputSurface.OPENAPI; map to STANDALONE_WEB_APP recipient type
- Regenerate cli/src/types/data-contracts.ts via pnpm sync-models
2026-05-15 02:50:54 -07:00
a252fbddfa
feat: initialize user timezone and language from browser ( #36170 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-15 08:12:52 +00:00
e0f4e98a2f
chore(cli): pre-merge cleanup — docker images, comments, tsconfig lib
...
- docker-compose.yaml: revert api/web from build: back to image tags
(1.14.1); fix api_websocket/worker/worker_beat downgraded to 1.14.0
- Remove verbose internal design comments from openapi controllers
- web/next.config.ts: trim anti-framing comment to one line
- cli/tsconfig.json: drop lib:ES2015 override (broke Error.cause typing)
- eslint.config.mjs: ignore cli/context/** and cli/docs/** (local caches)
- pnpm-lock.yaml: regenerate after fresh install
2026-05-14 20:44:51 -07:00
c2868075fa
Merge remote-tracking branch 'origin/main' into feat/cli
...
# Conflicts:
# docker/docker-compose.yaml
# pnpm-lock.yaml
# pnpm-workspace.yaml
2026-05-14 20:11:59 -07:00
194b54bae4
fix: allow tag rename without type payload ( #36182 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-15 01:29:17 +00:00
432a6412a3
fix(security): tenant-scope FilePreviewApi text-extract endpoint (GHSA-2qwc-c2cc-2xwv) ( #35797 )
...
Signed-off-by: xr843 <137012659+xr843@users.noreply.github.com >
Co-authored-by: Ido Shani <ido@zafran.io >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com >
2026-05-14 16:13:04 +00:00
55d05fe52d
fix(security): enforce tenant scoping on app trace-config endpoints (GHSA-48xc-wmw8-3jr3) ( #35793 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Ido Shani <ido@zafran.io >
Co-authored-by: -LAN- <laipz8200@outlook.com >
2026-05-14 15:59:31 +00:00
5798610f27
refactor(api): migrate console.app.workflow_comment to BaseModel ( #36180 )
2026-05-14 12:13:47 +00:00
a35b28dbef
refactor: cleanup duplicate code ( #36173 )
2026-05-14 10:34:31 +00:00
af4b9bfa8f
chore: Remove pyright in favor of pyrefly ( #36154 )
2026-05-14 05:49:08 +00:00
9d545144ce
chore: remove obsolete admin console routes ( #35637 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-13 08:08:50 +00:00
2afa39cdcb
fix: knowledge hit-testing render failed. ( #36106 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-13 07:31:38 +00:00
1a83dfaf1f
refactor: use BaseModel in openapi group. Generate ts code from swagger ( #36076 )
...
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-13 12:56:42 +08:00
680ef077ae
chore: admin also has the permission of changing role ( #36069 )
...
Co-authored-by: Yansong Zhang <916125788@qq.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-12 10:15:05 +00:00
4bb987eca3
fix: validate missing text indexing technique ( #35941 )
2026-05-12 05:07:03 +00:00
4fd4615c56
fix: avoid trial workflow schema model collision ( #36061 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-12 03:24:14 +00:00
1f7da9c191
Merge branch 'main' into feat/cli
...
Conflicts resolved:
- api/services/app_service.py: extend AppListParams with status + openapi_visible fields so the openapi caller's per-page visibility gate survives the dict->BaseModel refactor; openapi controller now constructs AppListParams.
- pnpm-workspace.yaml: union of CLI-only entries (@napi-rs/keyring, @oclif/*) with main's bumped versions (@next/*, @orpc/*, eslint-plugin-sonarjs, eslint-plugin-storybook); kept eventsource-parser.
- pnpm-lock.yaml: regenerated.
- web/app/signin/utils/post-login-redirect.ts: union impl — keep main's resolvePostLoginRedirect(searchParams) + setOAuthPendingRedirect; add hardened sessionStorage-based setPostLoginRedirect for device flow with same-origin + path whitelist; device redirect takes precedence over oauth pending.
2026-05-11 19:29:37 -07:00
6779366dca
feat(api,web,cli): difyctl v1.0 — OAuth device flow, /openapi/v1 auth pipeline, CLI client
2026-05-11 18:40:39 -07:00
d625ac0bf1
refactor: port some if else to match ( #31841 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-11 06:39:59 +00:00
f1c4c1a5ff
refactor: replace dict params with BaseModel in AppService ( #35904 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-11 06:09:50 +00:00
7b5c371b9d
chore: api para type ( #35985 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-10 06:04:42 +00:00
c67ce6f66d
chore: unify api && clean some type ignore ( #35984 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-10 04:16:29 +00:00
4a56763d2f
refactor(api): migrate console.app.workflow etc. to BaseModel ( #35967 )
2026-05-09 08:34:15 +00:00
d5ad6aedc0
fix(swagger): add util to convert BaseModel to schema for query params ( #35959 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-09 04:52:45 +00:00
38a419d073
ci: auto gen api doc and download link ( #35919 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-05-09 03:01:47 +00:00
19bf36a716
chore: dep inject for session ( #35934 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-05-08 17:48:33 +00:00
927a17804b
feat: support configurable explore app categories ( #35723 )
2026-05-08 06:04:07 +00:00
29f34848cd
fix(tools): scope builtin tool default-credential clear to tenant ( #35887 )
2026-05-08 05:08:23 +00:00
5cc62fd1c9
fix(web): pass end_user.external_user_id string to transcript_asr ( #35898 )
2026-05-08 02:55:32 +00:00
7901ac9a97
chore: example of isinstance to match case ( #35903 )
2026-05-08 01:07:19 +00:00
00bf3f83f2
refactor: verticalize tag management and batch bindings ( #35840 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-07 01:36:10 +00:00
995c43f3dd
refactor: migrate workflow queries to contracts ( #35799 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-05 14:53:38 +00:00
c0431ec843
fix: workflow online users polling for large app lists ( #35786 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-05 10:48:14 +00:00
7ba408eebe
fix: IDOR on console GET /account/avatar ( #35771 )
...
Signed-off-by: NeatGuyCoding <15627489+NeatGuyCoding@users.noreply.github.com >
2026-05-03 14:42:56 +00:00
ff5c2c57a1
fix: Clean upload filenames parsed from URLs ( #35706 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-02 14:45:31 +00:00
38eb04dc98
fix: hit-testing response failed because of Pydantic check. ( #35640 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-04-28 08:37:13 +00:00
d2e1da269c
chore: port one api ( #35609 )
2026-04-28 08:22:01 +00:00
ce50c6cf1c
chore: port 2 api ( #35542 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-04-24 09:07:17 +00:00
5e336c47fd
feat: marketplace and oauth fixes ( #35509 )
...
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Crazywoola <100913391+crazywoola@users.noreply.github.com >
2026-04-24 07:53:14 +00:00
be4c828214
feat: add service api of HITL ( #32826 )
...
Co-authored-by: Blackoutta <hyytez@gmail.com >
Co-authored-by: QuantumGhost <QuantumGhost@users.noreply.github.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com >
Co-authored-by: Yunlu Wen <yunlu.wen@dify.ai >
2026-04-24 06:37:10 +00:00
8b1533438f
chore: update 3 api ( #35481 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-04-22 08:53:53 +00:00
2e1b11bdb2
chore: port 2 api as deprecated ( #35261 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: 99 <wh2099@pm.me >
2026-04-21 12:29:39 +00:00
e561788809
fix(auth): enforce phase-bound change-email token flow (GHSA-4q3w-q5mc-45rq) ( #35425 )
2026-04-20 10:10:03 +00:00
97bb338e7d
fix: prevent double /v1 in MCP server URL causing 404 authorization failure ( #34596 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-04-20 02:42:59 +00:00