GareArc
8482167f1c
fix(agent): authorize workflow-only agents against their parent workflow app
...
The RBAC resource resolver returned the hidden runtime backing app for
workflow-only agents, which never receives a resource access policy, so
per-resource overrides on the parent workflow app were ignored. Resolve
agent_id to the policy-owning agent.app_id instead and keep
backing_app_id strictly runtime-only.
2026-07-22 21:31:43 -07:00
GareArc
1b5fbb2142
Merge remote-tracking branch 'origin/main' into gareth/esq1-170-rbac-for-agent
2026-07-22 20:24:53 -07:00
zyssyz123 and GitHub
4da4fa72cd
fix(agent): refresh stale inline preview drafts ( #39415 )
2026-07-22 12:54:09 +00:00
0f9fffb7a2
fix(agent): isolate build and preview chat conversations ( #39405 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-22 09:17:55 +00:00
GareArc
ac87341d69
Merge remote-tracking branch 'origin/main' into gareth/esq1-170-rbac-for-agent
...
# Conflicts:
# api/services/enterprise/rbac_service.py
2026-07-21 03:02:11 -07:00
GareArc
75cb8ea408
refactor(api): reuse the roster service's agent resolution for RBAC checks
...
The app-scoped RBAC gate hand-rolled a query to turn an agent_id into the id
of the App backing it, duplicating AgentRosterService.runtime_backing_app_id.
Worse, it filtered on id and tenant only, so the auth check accepted archived
Agents and sources the runtime resolver rejects -- a weaker notion of a valid
Agent than the layer it guards.
Add peek_runtime_backing_app_id, a read-only counterpart to
get_agent_runtime_app_model that never materializes the hidden backing App,
and share the eligibility filter between the two so they cannot drift.
The tenant filter was also untested: deleting it left all 50 tests passing,
since the specs stubbed the db module wholesale. Assert the resolver is called
with the caller's tenant instead, and cover the precedence and read-only
guarantees against the service directly.
2026-07-21 01:34:16 -07:00
zyssyz123 and GitHub
ed1289281d
fix(agent): include workflow runs in monitoring stats ( #39354 )
2026-07-21 08:33:23 +00:00
zyssyz123 and GitHub
cd98193234
fix(agent): import workflow agents as inline ( #39135 )
2026-07-16 08:28:34 +00:00
79662d49af
fix(agent): aggregate monitor sources by workflow app ( #39021 )
...
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com >
2026-07-15 14:08:57 +00:00
73c3048599
fix(agent): preserve DSL asset placeholders and count draft references ( #39015 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 11:49:11 +00:00
ab3e4daa95
refactor: explicit DB session propagation across backend paths ( #38559 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-07-15 06:48:28 +00:00
f86bfb2a31
feat(agent): support new Agent DSL import and export ( #38849 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 02:02:14 +00:00
ab521c4cfd
refactor(chat): modernize speech-to-text pipeline ( #38653 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Yansong Zhang <916125788@qq.com >
2026-07-13 04:21:29 +00:00
+3
98d9b11f7b
chore(agent-v2): sync changes ( #38513 )
...
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: 林玮 (Jade Lin) <linw1995@icloud.com >
Co-authored-by: 盐粒 Yanli <mail@yanli.one >
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
Co-authored-by: Jashwanth Reddy Gummula <gmrnlg1971@gmail.com >
Co-authored-by: WH-2099 <wh2099@pm.me >
Co-authored-by: 非法操作 <hjlarry@163.com >
Co-authored-by: wangxiaolei <fatelei@gmail.com >
Co-authored-by: FFXN <31929997+FFXN@users.noreply.github.com >
Co-authored-by: Yansong Zhang <916125788@qq.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-08 12:05:04 +00:00
68d8328b9c
chore: clean Db session from service ( #38227 )
...
Co-authored-by: chariri <w@chariri.moe >
Co-authored-by: WH-2099 <wh2099@pm.me >
2026-07-08 03:07:27 +00:00
d0ea5a5e0d
chore(agent-v2): sync changes ( #38442 )
...
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: zyssyz123 <916125788@qq.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: 林玮 (Jade Lin) <linw1995@icloud.com >
Co-authored-by: 盐粒 Yanli <mail@yanli.one >
2026-07-06 13:51:33 +00:00
1b3e8e9943
chore(agent-v2): sync daily changes ( #38298 )
...
Signed-off-by: yyh <yuanyouhuilyz@gmail.com >
Co-authored-by: 盐粒 Yanli <mail@yanli.one >
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: zyssyz123 <916125788@qq.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: 盐粒 Yanli <yanli@dify.ai >
Co-authored-by: 林玮 (Jade Lin) <linw1995@icloud.com >
2026-07-05 08:09:38 +00:00
+1
0923ebaf88
chore(agent-v2): sync daily changes ( #38162 )
...
Co-authored-by: yunlu.wen <yunlu.wen@dify.ai >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Yunlu Wen <wylswz@163.com >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: Yanli 盐粒 <yanli@dify.ai >
Co-authored-by: 盐粒 Yanli <beautyyuyanli@gmail.com >
Co-authored-by: zyssyz123 <916125788@qq.com >
Co-authored-by: 盐粒 Yanli <mail@yanli.one >
2026-07-01 05:07:23 +00:00
52c106b532
feat(agent-v2): sync nightly updates to main (2026-06-25) ( #37915 )
...
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
Co-authored-by: Yansong Zhang <916125788@qq.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-26 13:13:35 +00:00
zyssyz123 and GitHub
1eafbf9763
fix(agent): save workflow agents as console roster apps ( #37848 )
2026-06-24 03:35:12 +00:00
26b0ff2a01
feat(agent): copy roster agent into workflow inline agent ( #37813 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-23 12:28:29 +00:00
林玮 (Jade Lin) and GitHub
04d226384f
fix(agent): agent composer publish validation ( #37803 )
2026-06-23 08:48:40 +00:00
f4fdbeba76
feat(agent-v2): sync nightly updates to main (2026-06-22) ( #37651 )
...
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com >
2026-06-23 08:05:16 +00:00
a3309cd857
fix: support agent duplicate role and skill file preview ( #37788 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-23 06:35:26 +00:00
26639e0923
feat: add agent debug conversation refresh API ( #37784 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-23 04:34:13 +00:00
b67a04aa22
fix: isolate agent debug conversations by account ( #37766 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-23 02:04:23 +00:00
99010dab3e
fix(agent): switch roster node to inline ( #37754 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-22 09:41:07 +00:00
4065f63dce
fix(agent): add stable debug conversation ( #37744 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-22 09:21:09 +00:00
c1ab6226a2
fix(agent): support restoring roster versions ( #37734 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-22 06:31:50 +00:00
34c1bf1062
feat(agent): add skill inspect API ( #37726 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-22 05:22:10 +00:00
0df30dd269
fix(agent): resolve roster file downloads versions and log filters ( #37626 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-18 12:06:27 +00:00
3f2d22ec0f
feat(agent-v2): sync nightly updates to main ( #37599 )
...
Co-authored-by: Jingyi-Dify <jingyi.qi@dify.ai >
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: hjlarry <hjlarry@163.com >
Co-authored-by: Bond Zhu <783504079@qq.com >
Co-authored-by: Yansong Zhang <916125788@qq.com >
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com >
2026-06-18 05:03:34 +00:00
af99414fc1
chore: port isinstance to match case ( #37271 )
...
Co-authored-by: WH-2099 <wh2099@pm.me >
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-06-18 00:18:03 +00:00
59f8f2e7b3
fix(agent): align roster observability logs contract ( #37578 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 14:34:14 +00:00
912c0fa8d1
fix(agent): add agent app duplicate endpoint ( #37571 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 08:09:47 +00:00
zyssyz123 and GitHub
3b0f6aef8e
fix(api): allow inline workflow agent soul saves ( #37563 )
2026-06-17 06:02:03 +00:00
f203ab7f1d
fix(agent-v2): include workflow references in agent list ( #37567 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 05:56:53 +00:00
e970cbde0f
feat: add agent roster observability APIs ( #37566 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 05:22:52 +00:00
bacc48d16e
fix(agent): align config detail and output contracts ( #37535 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 01:17:20 +00:00
dcc0b95e11
fix: issue ( #37508 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-16 08:53:53 +00:00
b6b9165d2b
fix(agent): include app display fields in published references ( #37485 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-16 07:00:37 +00:00
b4e3a9095b
fix(agent): support agent-id chat and inline draft bindings ( #37483 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-16 06:04:30 +00:00
zyssyz123 and GitHub
2b7f5ab982
fix: project agent node outputs into draft graph ( #37467 )
2026-06-15 13:27:57 +00:00
1e8329f02c
feat: Unify Agent v2 console routes ( #37465 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-15 11:09:15 +00:00
a5499bb7dc
fix(agent-v2): sync node job prompt from draft graph ( #37441 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Yansong Zhang <916125788@qq.com >
2026-06-15 05:50:25 +00:00
d21bf291bb
fix: align agent app backing roster API ( #37442 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-15 05:21:38 +00:00
8cac86d5c5
feat(agent): Skills & Files effective chain — drive runtime exposure, inspector, lifecycle, infer-tools ( #37370 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-13 02:30:55 +00:00
5e8c182970
fix(agent-v2): filter workflow invite options ( #37368 )
...
Co-authored-by: Yansong Zhang <916125788@qq.com >
2026-06-12 08:20:29 +00:00
e32a732812
refactor: agent draft ( #37356 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-12 03:46:21 +00:00
6cfd96ccd6
feat: agent slash menu backend ( #37331 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-12 02:06:35 +00:00
GareArc