GareArc
8482167f1c
fix(agent): authorize workflow-only agents against their parent workflow app
...
The RBAC resource resolver returned the hidden runtime backing app for
workflow-only agents, which never receives a resource access policy, so
per-resource overrides on the parent workflow app were ignored. Resolve
agent_id to the policy-owning agent.app_id instead and keep
backing_app_id strictly runtime-only.
2026-07-22 21:31:43 -07:00
GareArc
1b5fbb2142
Merge remote-tracking branch 'origin/main' into gareth/esq1-170-rbac-for-agent
2026-07-22 20:24:53 -07:00
zyssyz123 and GitHub
4da4fa72cd
fix(agent): refresh stale inline preview drafts ( #39415 )
2026-07-22 12:54:09 +00:00
0f9fffb7a2
fix(agent): isolate build and preview chat conversations ( #39405 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-22 09:17:55 +00:00
9b432d0d29
fix: enforce tool provider type contracts ( #39380 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-22 01:30:55 +00:00
GareArc
ac87341d69
Merge remote-tracking branch 'origin/main' into gareth/esq1-170-rbac-for-agent
...
# Conflicts:
# api/services/enterprise/rbac_service.py
2026-07-21 03:02:11 -07:00
GareArc
75cb8ea408
refactor(api): reuse the roster service's agent resolution for RBAC checks
...
The app-scoped RBAC gate hand-rolled a query to turn an agent_id into the id
of the App backing it, duplicating AgentRosterService.runtime_backing_app_id.
Worse, it filtered on id and tenant only, so the auth check accepted archived
Agents and sources the runtime resolver rejects -- a weaker notion of a valid
Agent than the layer it guards.
Add peek_runtime_backing_app_id, a read-only counterpart to
get_agent_runtime_app_model that never materializes the hidden backing App,
and share the eligibility filter between the two so they cannot drift.
The tenant filter was also untested: deleting it left all 50 tests passing,
since the specs stubbed the db module wholesale. Assert the resolver is called
with the caller's tenant instead, and cover the precedence and read-only
guarantees against the service directly.
2026-07-21 01:34:16 -07:00
zyssyz123 and GitHub
ed1289281d
fix(agent): include workflow runs in monitoring stats ( #39354 )
2026-07-21 08:33:23 +00:00
1bd5254ea7
test: use SQLite sessions in unit misc ( #39123 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-20 10:38:46 +00:00
zyssyz123 and GitHub
cd98193234
fix(agent): import workflow agents as inline ( #39135 )
2026-07-16 08:28:34 +00:00
4381ec8fee
fix(agent): accept legacy missing asset placeholders ( #39039 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-16 03:11:08 +00:00
79662d49af
fix(agent): aggregate monitor sources by workflow app ( #39021 )
...
Co-authored-by: yyh <[email protected]
2026-07-15 14:08:57 +00:00
73c3048599
fix(agent): preserve DSL asset placeholders and count draft references ( #39015 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 11:49:11 +00:00
ab3e4daa95
refactor: explicit DB session propagation across backend paths ( #38559 )
...
Co-authored-by: WH-2099 <[email protected]
2026-07-15 06:48:28 +00:00
f86bfb2a31
feat(agent): support new Agent DSL import and export ( #38849 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 02:02:14 +00:00
Asuka Minato and GitHub
8d0cf0e38b
test: use sqlite3 session in test_skill_standardize_service ( #38712 )
2026-07-14 03:57:17 +00:00
ab521c4cfd
refactor(chat): modernize speech-to-text pipeline ( #38653 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Yansong Zhang <[email protected]
2026-07-13 04:21:29 +00:00
+3
98d9b11f7b
chore(agent-v2): sync changes ( #38513 )
...
Co-authored-by: Joel <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-07-08 12:05:04 +00:00
68d8328b9c
chore: clean Db session from service ( #38227 )
...
Co-authored-by: chariri <[email protected] [email protected]
2026-07-08 03:07:27 +00:00
d0ea5a5e0d
chore(agent-v2): sync changes ( #38442 )
...
Co-authored-by: Joel <[email protected] [email protected] [email protected] [email protected]
2026-07-06 13:51:33 +00:00
1b3e8e9943
chore(agent-v2): sync daily changes ( #38298 )
...
Signed-off-by: yyh <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-07-05 08:09:38 +00:00
+1
0923ebaf88
chore(agent-v2): sync daily changes ( #38162 )
...
Co-authored-by: yunlu.wen <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-07-01 05:07:23 +00:00
52c106b532
feat(agent-v2): sync nightly updates to main (2026-06-25) ( #37915 )
...
Co-authored-by: Joel <[email protected] [email protected] [email protected]
2026-06-26 13:13:35 +00:00
zyssyz123 and GitHub
1eafbf9763
fix(agent): save workflow agents as console roster apps ( #37848 )
2026-06-24 03:35:12 +00:00
26b0ff2a01
feat(agent): copy roster agent into workflow inline agent ( #37813 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-23 12:28:29 +00:00
林玮 (Jade Lin) and GitHub
04d226384f
fix(agent): agent composer publish validation ( #37803 )
2026-06-23 08:48:40 +00:00
f4fdbeba76
feat(agent-v2): sync nightly updates to main (2026-06-22) ( #37651 )
...
Co-authored-by: yyh <[email protected] [email protected] [email protected]
2026-06-23 08:05:16 +00:00
a3309cd857
fix: support agent duplicate role and skill file preview ( #37788 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-23 06:35:26 +00:00
26639e0923
feat: add agent debug conversation refresh API ( #37784 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-23 04:34:13 +00:00
b67a04aa22
fix: isolate agent debug conversations by account ( #37766 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-23 02:04:23 +00:00
99010dab3e
fix(agent): switch roster node to inline ( #37754 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-22 09:41:07 +00:00
4065f63dce
fix(agent): add stable debug conversation ( #37744 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-22 09:21:09 +00:00
c1ab6226a2
fix(agent): support restoring roster versions ( #37734 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-22 06:31:50 +00:00
34c1bf1062
feat(agent): add skill inspect API ( #37726 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-22 05:22:10 +00:00
fae607e2fe
chore: add Type to test ( #37191 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-19 16:44:20 +00:00
bd15b8e6ce
chore: add more type in test ( #37609 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-18 23:07:12 +00:00
0df30dd269
fix(agent): resolve roster file downloads versions and log filters ( #37626 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-18 12:06:27 +00:00
3f2d22ec0f
feat(agent-v2): sync nightly updates to main ( #37599 )
...
Co-authored-by: Jingyi-Dify <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-06-18 05:03:34 +00:00
4304044905
chore: example of make db.session pass from parameter. ( #37561 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-18 02:16:09 +00:00
59f8f2e7b3
fix(agent): align roster observability logs contract ( #37578 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 14:34:14 +00:00
912c0fa8d1
fix(agent): add agent app duplicate endpoint ( #37571 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 08:09:47 +00:00
zyssyz123 and GitHub
3b0f6aef8e
fix(api): allow inline workflow agent soul saves ( #37563 )
2026-06-17 06:02:03 +00:00
e970cbde0f
feat: add agent roster observability APIs ( #37566 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 05:22:52 +00:00
bacc48d16e
fix(agent): align config detail and output contracts ( #37535 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-17 01:17:20 +00:00
dcc0b95e11
fix: issue ( #37508 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-16 08:53:53 +00:00
b6b9165d2b
fix(agent): include app display fields in published references ( #37485 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-16 07:00:37 +00:00
b4e3a9095b
fix(agent): support agent-id chat and inline draft bindings ( #37483 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-16 06:04:30 +00:00
zyssyz123 and GitHub
2b7f5ab982
fix: project agent node outputs into draft graph ( #37467 )
2026-06-15 13:27:57 +00:00
1e8329f02c
feat: Unify Agent v2 console routes ( #37465 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-06-15 11:09:15 +00:00
a5499bb7dc
fix(agent-v2): sync node job prompt from draft graph ( #37441 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Yansong Zhang <[email protected]
2026-06-15 05:50:25 +00:00
GareArc