GareArc
8482167f1c
fix(agent): authorize workflow-only agents against their parent workflow app
...
The RBAC resource resolver returned the hidden runtime backing app for
workflow-only agents, which never receives a resource access policy, so
per-resource overrides on the parent workflow app were ignored. Resolve
agent_id to the policy-owning agent.app_id instead and keep
backing_app_id strictly runtime-only.
2026-07-22 21:31:43 -07:00
GareArc
75cb8ea408
refactor(api): reuse the roster service's agent resolution for RBAC checks
...
The app-scoped RBAC gate hand-rolled a query to turn an agent_id into the id
of the App backing it, duplicating AgentRosterService.runtime_backing_app_id.
Worse, it filtered on id and tenant only, so the auth check accepted archived
Agents and sources the runtime resolver rejects -- a weaker notion of a valid
Agent than the layer it guards.
Add peek_runtime_backing_app_id, a read-only counterpart to
get_agent_runtime_app_model that never materializes the hidden backing App,
and share the eligibility filter between the two so they cannot drift.
The tenant filter was also untested: deleting it left all 50 tests passing,
since the specs stubbed the db module wholesale. Assert the resolver is called
with the caller's tenant instead, and cover the precedence and read-only
guarantees against the service directly.
2026-07-21 01:34:16 -07:00
GareArc
edbaaeae23
fix(api): resolve agent routes to their backing app for app-scoped RBAC
2026-07-21 00:22:24 -07:00
ab3e4daa95
refactor: explicit DB session propagation across backend paths ( #38559 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-07-15 06:48:28 +00:00
3cd8d850fa
refactor(api): migrate workspace model endpoints to BaseModel ( #37963 )
...
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Byron Wang <byron@dify.ai >
2026-07-09 04:05:32 +00:00
68d8328b9c
chore: clean Db session from service ( #38227 )
...
Co-authored-by: chariri <w@chariri.moe >
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-07-08 03:07:27 +00:00
800c9f4fca
test(e2e): stabilize Agent v2 external runtime checks ( #38493 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-07 04:48:12 +00:00
d0ea5a5e0d
chore(agent-v2): sync changes ( #38442 )
...
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: zyssyz123 <916125788@qq.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: 林玮 (Jade Lin) <linw1995@icloud.com >
Co-authored-by: 盐粒 Yanli <mail@yanli.one >
2026-07-06 13:51:33 +00:00
Byron.wang and GitHub
070aed81d9
refactor: make session boundaries explicit for migration flows ( #38379 )
2026-07-04 04:43:01 +00:00
051f4b32e3
feat(web): add customizable input placeholder for Agent/Chatflow/Chatbot web app ( #37790 )
...
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com >
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com >
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
Co-authored-by: hjlarry <hjlarry@163.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-26 09:57:31 +00:00
82d08851be
feat: guard openapi with rbac ( #37752 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-06-22 09:35:33 +00:00
+11
33edf97f81
feat: RBAC ( #37107 )
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: fatelei <fatelei@gmail.com >
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: 盐粒 Yanli <yanli@dify.ai >
Co-authored-by: Charles Yao <chongbinyao33@gmail.com >
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com >
Co-authored-by: yunlu.wen <yunlu.wen@dify.ai >
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com >
Co-authored-by: Jingyi <jingyi.qi@dify.ai >
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: hjlarry <hjlarry@163.com >
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xiyuan Chen <52963600+GareArc@users.noreply.github.com >
Co-authored-by: gigglewang <gigglewang@dify.ai >
Co-authored-by: chariri <w@chariri.moe >
Co-authored-by: Evan <2869018789@qq.com >
Co-authored-by: zyssyz123 <916125788@qq.com >
2026-06-18 16:35:29 +00:00
c52eafe2ca
docs: enrich generated service API descriptions ( #37615 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-18 08:43:39 +00:00
af99414fc1
chore: port isinstance to match case ( #37271 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-06-18 00:18:03 +00:00
19838972dc
fix: add service api openapi descriptions ( #37595 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 16:02:43 +00:00
baf775134e
fix: improve Service API OpenAPI contracts ( #37592 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 14:25:30 +00:00
Yunlu Wen and GitHub
12159d6313
feat: rbac scaffold ( #37443 )
2026-06-15 05:16:41 +00:00
5d77c0af08
refactor: fix OpenAPI contract generation schemas ( #37387 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-12 14:25:53 +00:00
e0c6ca9930
fix: GET query parameter OpenAPI contracts ( #37378 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-12 09:01:22 +00:00
6c0cce4b7f
chore: update to openapi v3 by change dep ( #37316 )
...
Co-authored-by: Stephen Zhou <38493346+hyoban@users.noreply.github.com >
Co-authored-by: Stephen Zhou <hi@hyoban.cc >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-12 07:52:19 +00:00
4fb3210f9a
fix: validate conversation variable description length to prevent varchar(255) truncation error ( #33038 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: 非法操作 <hjlarry@163.com >
Co-authored-by: -LAN- <laipz8200@outlook.com >
2026-06-10 07:28:12 +00:00
3c98f96ae8
feat(api): introduce select, file and file list form input types to Human Input node ( #36322 )
...
Co-authored-by: JzoNg <jzongcode@gmail.com >
Co-authored-by: GPT 5.4 <codex@openai.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com >
2026-06-04 01:54:28 +00:00
chariri and GitHub
4fc62d3b38
refactor(api): migrate console.datasets.rag_pipeline partially to BaseModel ( #36649 )
2026-06-03 17:44:10 +00:00
928f888ef5
refactor(api): migrate console/service_api.dataset.segment to BaseModel ( #36522 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-30 13:54:01 +00:00
Bodhiswattwa Chakraborty and GitHub
92181dbe09
fix(api): preserve remote file URL query params ( #36478 )
2026-05-22 01:45:20 +00:00
b04b4449db
chore(api): annotate simple contract responses ( #36331 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
2026-05-19 06:13:20 +00:00
chariri and GitHub
9d0906c684
chore: improve swagger markdown optional fields typing ( #36247 )
2026-05-16 16:40:20 +00:00
chariri and GitHub
a35b28dbef
refactor: cleanup duplicate code ( #36173 )
2026-05-14 10:34:31 +00:00
chariri and GitHub
4a56763d2f
refactor(api): migrate console.app.workflow etc. to BaseModel ( #35967 )
2026-05-09 08:34:15 +00:00
d5ad6aedc0
fix(swagger): add util to convert BaseModel to schema for query params ( #35959 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-09 04:52:45 +00:00
38a419d073
ci: auto gen api doc and download link ( #35919 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-05-09 03:01:47 +00:00
ff5c2c57a1
fix: Clean upload filenames parsed from URLs ( #35706 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-05-02 14:45:31 +00:00
be4c828214
feat: add service api of HITL ( #32826 )
...
Co-authored-by: Blackoutta <hyytez@gmail.com >
Co-authored-by: QuantumGhost <QuantumGhost@users.noreply.github.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com >
Co-authored-by: Yunlu Wen <yunlu.wen@dify.ai >
2026-04-24 06:37:10 +00:00
3193e8a712
chore: reorg imports ( #35308 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-04-16 08:50:02 +00:00
Jake Armstrong and GitHub
5a446f8200
refactor(api): deduplicate dataset controller schemas into controller_schemas.py ( #34756 )
2026-04-13 05:33:20 +00:00
Jake Armstrong and GitHub
9121f24181
refactor(api): deduplicate TextToAudioPayload and MessageListQuery into controller_schemas.py ( #34757 )
2026-04-13 05:27:35 +00:00
Jake Armstrong and GitHub
bd257777a0
refactor(api): deduplicate workflow controller schemas into controller_schemas.py ( #34755 )
2026-04-08 23:49:04 +00:00
0ba66ab155
refactor(api): deduplicate shared controller request schemas into controller_schemas.py ( #34700 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-04-08 03:10:04 +00:00
8f9dbf269e
chore(api): align Python support with 3.12 ( #34419 )
...
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
2026-04-02 05:07:32 +00:00
99 and GitHub
f27d669f87
chore: normalize frozenset literals and myscale typing ( #34327 )
2026-03-31 08:21:22 +00:00
40591a7c50
refactor(api): use standalone graphon package ( #34209 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-03-27 21:05:32 +00:00
99 and GitHub
52e7492cbc
refactor(api): rename dify_graph to graphon ( #34095 )
2026-03-25 21:58:56 +08:00
-LAN- and GitHub
c917838f9c
refactor: move workflow package to dify_graph ( #32844 )
2026-03-02 18:42:30 +08:00
7656d514b9
refactor(workflow-file): move core.file to core.workflow.file ( #32252 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-02-16 22:38:19 +08:00
5b06203ef5
feat: Service API - add end-user lookup endpoint ( #32015 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-02-09 14:01:22 +08:00
8ec4233611
fix: doc not gen bug ( #31547 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Stephen Zhou <38493346+hyoban@users.noreply.github.com >
2026-01-27 20:19:39 +09:00
5b02e5dcb6
refactor: migrate some ns.model to BaseModel ( #30388 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-01-01 00:38:12 +08:00
1ebc17850b
fix(api): force download for HTML previews ( #30090 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-12-25 11:43:07 +08:00
05fe92a541
refactor: port reqparse to BaseModel ( #28993 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-12-08 15:31:19 +09:00
Novice and GitHub
ef1db35f80
feat: implement file extension blacklist for upload security ( #27540 )
2025-11-04 15:45:22 +08:00
GareArc