GareArc
ac87341d69
Merge remote-tracking branch 'origin/main' into gareth/esq1-170-rbac-for-agent
...
# Conflicts:
# api/services/enterprise/rbac_service.py
2026-07-21 03:02:11 -07:00
GareArc
75cb8ea408
refactor(api): reuse the roster service's agent resolution for RBAC checks
...
The app-scoped RBAC gate hand-rolled a query to turn an agent_id into the id
of the App backing it, duplicating AgentRosterService.runtime_backing_app_id.
Worse, it filtered on id and tenant only, so the auth check accepted archived
Agents and sources the runtime resolver rejects -- a weaker notion of a valid
Agent than the layer it guards.
Add peek_runtime_backing_app_id, a read-only counterpart to
get_agent_runtime_app_model that never materializes the hidden backing App,
and share the eligibility filter between the two so they cannot drift.
The tenant filter was also untested: deleting it left all 50 tests passing,
since the specs stubbed the db module wholesale. Assert the resolver is called
with the caller's tenant instead, and cover the precedence and read-only
guarantees against the service directly.
2026-07-21 01:34:16 -07:00
Asuka Minato and GitHub
145b0e622e
test: use sqlite3 session in test_workspace_account ( #38757 )
2026-07-21 08:07:57 +00:00
Asuka Minato and GitHub
32d2594877
test: move app import API coverage to unit tests ( #38920 )
2026-07-21 07:54:32 +00:00
Asuka Minato and GitHub
7b188287da
test: use sqlite3 session in test_accounts ( #38752 )
2026-07-21 07:50:05 +00:00
Asuka Minato and GitHub
852169d99c
test: use SQLite sessions in unit misc ( #39118 )
2026-07-21 07:27:13 +00:00
GareArc
edbaaeae23
fix(api): resolve agent routes to their backing app for app-scoped RBAC
2026-07-21 00:22:24 -07:00
aa718add24
fix(api): return 400 instead of 500 when 'file' is missing from trial-app audio-to-text ( #39305 )
...
Co-authored-by: Harsh Kashyap <[email protected]
2026-07-21 05:59:48 +00:00
yyh and GitHub
861831f176
fix(api): keep workflow log archives owner-admin only ( #39338 )
2026-07-21 04:31:14 +00:00
cbd7872520
test: use SQLite sessions in unit misc ( #39121 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-20 10:38:52 +00:00
23882a704e
test: use SQLite sessions in unit misc ( #39122 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-20 10:38:49 +00:00
1bd5254ea7
test: use SQLite sessions in unit misc ( #39123 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-20 10:38:46 +00:00
cb64446fa3
feat(web): add step-by-step tour shell ( #38785 )
...
Co-authored-by: hjlarry <[email protected] [email protected] [email protected]
2026-07-20 09:23:25 +00:00
43d725a1ce
feat(dataset): proxy KnowledgeFS Console requests ( #39158 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-20 08:10:06 +00:00
f93a5b95c6
fix(api, web): scope trial app file uploads to the app tenant ( #39149 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-20 07:00:45 +00:00
6022939bf0
fix: prevent hidden-tab collaboration leader from saving stale drafts ( #38997 )
...
Co-authored-by: hjlarry <[email protected] [email protected] [email protected]
2026-07-20 06:58:01 +00:00
Asuka Minato and GitHub
415c0db22e
test: use sqlite3 session in test_tool_providers ( #38754 )
2026-07-16 12:28:26 +00:00
cb41fb3e76
fix(api): serialize trial workflow conversation variables ( #39038 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-16 02:57:06 +00:00
73c3048599
fix(agent): preserve DSL asset placeholders and count draft references ( #39015 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 11:49:11 +00:00
WH-2099 and GitHub
6a511da325
fix(api): bind scoped lookups to nested owner refs ( #38470 )
2026-07-15 09:31:09 +00:00
Xin Zhang and GitHub
120c38bad8
feat(enterprise): reject member invites that would exceed licensed seats ( #38995 )
2026-07-15 07:59:16 +00:00
ab3e4daa95
refactor: explicit DB session propagation across backend paths ( #38559 )
...
Co-authored-by: WH-2099 <[email protected]
2026-07-15 06:48:28 +00:00
林玮 (Jade Lin) and GitHub
edca982b1e
fix(api): harden trial apps access for recommended apps ( #38970 )
2026-07-15 06:04:07 +00:00
fbd6e04810
test: move console app API coverage to unit tests ( #38915 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 04:40:15 +00:00
c277f48084
test: move email registration coverage to unit tests ( #38928 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 04:05:59 +00:00
70462d96bd
test: move RAG pipeline controller coverage to unit tests ( #38939 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 03:59:57 +00:00
Asuka Minato and GitHub
22429d275a
test: move console forgot-password coverage to unit tests ( #38922 )
2026-07-15 03:56:41 +00:00
Asuka Minato and GitHub
571e50175e
test: move RAG pipeline dataset coverage to unit tests ( #38933 )
2026-07-15 03:26:34 +00:00
a4b64d1fd7
test: move tool provider controller coverage to unit tests ( #38944 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 03:12:43 +00:00
f86bfb2a31
feat(agent): support new Agent DSL import and export ( #38849 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 02:02:14 +00:00
Asuka Minato and GitHub
40df83de66
test: move trigger provider coverage to unit tests ( #38942 )
2026-07-14 14:56:22 +00:00
c278148c8f
feat: when knowledge permission is all team need update rbac setttings ( #38911 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-14 09:07:33 +00:00
f09d2b191f
feat: archive logs export ( #38207 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-14 08:25:37 +00:00
82ff93cbdd
feat(oauth): preserve redirect_url through OAuth state for post-login… ( #38900 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-14 08:23:39 +00:00
28a036066a
feat(enterprise): enforce licensed seats cap at account creation ( #38883 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-14 06:51:19 +00:00
509a8b1452
fix: align member invitation state and errors ( #38885 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-14 03:05:44 +00:00
7865ffd429
chore: Improve workflow generator accessibility and API contracts ( #38838 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-13 09:15:54 +00:00
林玮 (Jade Lin) and GitHub
8e0d10bf5e
fix(api): require trial app registration for reads ( #38858 )
2026-07-13 09:12:44 +00:00
Asuka Minato and GitHub
e6d598065e
test: use sqlite3 session in test_banner ( #38746 )
2026-07-13 06:20:40 +00:00
Asuka Minato and GitHub
831443b45c
test: use sqlite3 session in test_wraps ( #38749 )
2026-07-13 06:04:14 +00:00
ab521c4cfd
refactor(chat): modernize speech-to-text pipeline ( #38653 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Yansong Zhang <[email protected]
2026-07-13 04:21:29 +00:00
fde08d24fe
fix: eagerly validate conversation on service-api and explore chat endpoints ( #38801 )
...
Signed-off-by: Yufeng He <[email protected]
2026-07-12 15:19:07 +00:00
7e05f28a46
feat: create app init rbac scope to all and add workspace members. ( #38636 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-10 09:31:41 +00:00
925f97be20
feat: daily sync ( #38593 )
...
Co-authored-by: 盐粒 Yanli <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-07-09 10:35:15 +00:00
89d5f74a40
refactor(api): migrate dataset endpoints to BaseModel ( #37957 )
...
Co-authored-by: Asuka Minato <[email protected]
2026-07-09 04:22:30 +00:00
3cd8d850fa
refactor(api): migrate workspace model endpoints to BaseModel ( #37963 )
...
Co-authored-by: Asuka Minato <[email protected] [email protected]
2026-07-09 04:05:32 +00:00
+3
98d9b11f7b
chore(agent-v2): sync changes ( #38513 )
...
Co-authored-by: Joel <[email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]
2026-07-08 12:05:04 +00:00
chariri and GitHub
9465dc2477
refactor(api): remove remaining legacy field remnants ( #37967 )
2026-07-08 09:59:10 +00:00
chariri and GitHub
74f177efe6
refactor(api): migrate workspace tool endpoints to BaseModel ( #37959 )
2026-07-08 09:56:04 +00:00
68d8328b9c
chore: clean Db session from service ( #38227 )
...
Co-authored-by: chariri <[email protected] [email protected]
2026-07-08 03:07:27 +00:00
GareArc