Commit Graph
6936 Commits
Author SHA1 Message Date
Charles Yao 83f347638e feat(dsl): enforce manager-only secret export at the export endpoint 2026-07-16 21:01:13 -07:00
Charles Yao 9ed6598d70 feat(dsl): add manager-only guard for secret-bearing DSL export 2026-07-16 21:01:13 -07:00
Charles YaoandClaude Sonnet 4.6 30258763e5 test(advanced_chat): supply new WorkflowSnapshot fields at direct construction sites
Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
2026-07-16 21:01:13 -07:00
Charles YaoandClaude Sonnet 4.6 fc1f55da9e feat(stream): collect env/conversation secrets into the stream redactor
Wire collect_workflow_secret_values into WorkflowResponseConverter at
both task-pipeline construction sites (workflow + advanced_chat); extend
WorkflowSnapshot with environment_variables/conversation_variables so
the advanced_chat pipeline can supply them.

Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
2026-07-16 21:01:13 -07:00
Charles YaoandClaude Sonnet 4.6 ef5fadccf9 fix(stream): type _redact generically to preserve shape; test workflow_finish redaction
Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
2026-07-16 21:01:13 -07:00
Charles YaoandClaude Opus 4.8 7b55944a8c feat(stream): redact secret values from SSE workflow stream responses
Adds `secret_values` param to `WorkflowResponseConverter.__init__` and a
`_redact` helper that delegates to `redact_secret_values` from
`core.workflow.secret_scrub`. Applies redaction to event-sourced
inputs/process_data/outputs in all four stream builders:
`workflow_node_finish_to_stream_response`,
`workflow_node_retry_to_stream_response`,
`workflow_finish_to_stream_response`, and
`workflow_pause_to_stream_response`. The `workflow_run.outputs_dict` path
(reconnect/resume) is intentionally untouched (already redacted by Plan 2).
Empty registry is a strict no-op, so existing tests pass unchanged.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
2026-07-16 21:01:13 -07:00
Charles YaoandClaude Opus 4.8 5ca7d9cee0 fix(persistence): redact error/error_message fields; document backstop limitations
Route all error/error_message write sites in WorkflowPersistenceLayer through
self._redact() so secrets in node errors and workflow failure messages are
scrubbed before persistence. Add module docstring, _split_values docstring,
corrected redact_secret_values summary, and Mapping-keys comment to secret_scrub.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
2026-07-16 21:01:13 -07:00
Charles YaoandClaude Sonnet 4.6 29fb526dc6 feat(runner): collect env/conversation secrets into the persistence redactor
Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
2026-07-16 21:01:12 -07:00
Charles YaoandClaude Opus 4.8 767f19c0ba test(persistence): cover graph-run handler redaction and process_data scrub
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
2026-07-16 21:01:12 -07:00
Charles Yao b1ac7ad613 feat(persistence): redact secret values from persisted run logs 2026-07-16 21:01:12 -07:00
Charles YaoandClaude Opus 4.8 66f5ba631a feat(workflow): add secret_scrub module for run-log redaction
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
2026-07-16 21:01:12 -07:00
非法操作andGitHub 61b07ab17d feat: default plugins for new user (#39167) 2026-07-17 02:49:58 +00:00
9de7e0fe44 perf(workflow-generator): parallelize node config generation (#38975)
Co-authored-by: Claude Fable 5 <[email protected]>
2026-07-17 02:34:15 +00:00
Asuka MinatoGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
1aea3460af test: use sqlite3 session in test_customized_retrieval (#38741)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-16 14:09:40 +00:00
Asuka MinatoGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
33fe0dfd60 test: use sqlite3 session in test_human_input_form (#38780)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-16 13:17:50 +00:00
Asuka MinatoandGitHub a8ffc93a5a test: move plugin parameter service coverage to unit tests (#38934) 2026-07-16 13:06:04 +00:00
Asuka MinatoandGitHub 14ac8dfbf6 test: use sqlite3 session in test_passport (#38763) 2026-07-16 12:59:52 +00:00
Asuka MinatoandGitHub b820ccf086 test: use sqlite3 session in test_tool_label_manager (#38762) 2026-07-16 12:56:08 +00:00
Asuka MinatoandGitHub 415c0db22e test: use sqlite3 session in test_tool_providers (#38754) 2026-07-16 12:28:26 +00:00
Asuka MinatoandGitHub 6ad1a66a50 test: use sqlite3 session in test_remote_retrieval (#38737) 2026-07-16 10:56:00 +00:00
Asuka MinatoandGitHub 2f2d7c26d4 test: use sqlite3 session in test_api (#38736) 2026-07-16 10:38:33 +00:00
Asuka MinatoGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
e9c0e9de9e test: use SQLite sessions in tasks (#39117)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-16 10:17:26 +00:00
林玮 (Jade Lin)andGitHub 678ce2ab37 refactor(api): pass tenant_id explicitly to workflow repositories (#39042) 2026-07-16 09:36:30 +00:00
Asuka MinatoGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
b737833e2a test: use SQLite sessions in services core (#39112)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-16 09:32:11 +00:00
Asuka MinatoGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
872b6906f2 test: use SQLite sessions in core workflow (#39110)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-16 09:18:55 +00:00
zyssyz123andGitHub cd98193234 fix(agent): import workflow agents as inline (#39135) 2026-07-16 08:28:34 +00:00
zyssyz123GitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
4381ec8fee fix(agent): accept legacy missing asset placeholders (#39039)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-16 03:11:08 +00:00
林玮 (Jade Lin)GitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
cb41fb3e76 fix(api): serialize trial workflow conversation variables (#39038)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-16 02:57:06 +00:00
wangxiaoleiandGitHub 7dfd84472f fix: fix miss create rbac binding (#39023) 2026-07-16 02:25:42 +00:00
非法操作GitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
85cc183501 feat: improve ai-credits display (#38589)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-16 01:51:46 +00:00
79662d49af fix(agent): aggregate monitor sources by workflow app (#39021)
Co-authored-by: yyh <[email protected]>
2026-07-15 14:08:57 +00:00
zyssyz123GitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
73c3048599 fix(agent): preserve DSL asset placeholders and count draft references (#39015)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 11:49:11 +00:00
WH-2099andGitHub 6a511da325 fix(api): bind scoped lookups to nested owner refs (#38470) 2026-07-15 09:31:09 +00:00
wangxiaoleiGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
d914ece3fb fix: fix conversation title is overwrite empty (#39004)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 08:24:11 +00:00
Xin ZhangandGitHub 120c38bad8 feat(enterprise): reject member invites that would exceed licensed seats (#38995) 2026-07-15 07:59:16 +00:00
ab3e4daa95 refactor: explicit DB session propagation across backend paths (#38559)
Co-authored-by: WH-2099 <[email protected]>
2026-07-15 06:48:28 +00:00
wangxiaoleiGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2c1313d13a feat: redis support keepalive and retry more error (#38973)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 06:20:19 +00:00
Xiyuan ChenandGitHub 651111fb0d chore(deps): bump httplib2, setuptools, wandb for CVE fixes (#38976) 2026-07-15 06:12:38 +00:00
林玮 (Jade Lin)andGitHub edca982b1e fix(api): harden trial apps access for recommended apps (#38970) 2026-07-15 06:04:07 +00:00
wangxiaoleiandGitHub b3386192cc chore: workflow comment remove rbac check (#38978) 2026-07-15 06:01:38 +00:00
BlackouttaGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
7dc3126ff4 fix: preserve and display workflow retry details (#38854)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 05:58:37 +00:00
Asuka MinatoGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
c17a0f4e18 test: move feedback service coverage to unit tests (#38927)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 05:42:12 +00:00
Asuka MinatoandGitHub 15acaf1fa6 test: use sqlite3 session in test_provider_configuration (#38689) 2026-07-15 04:54:49 +00:00
Asuka MinatoGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
3afd81a028 test: move MCP controller coverage to unit tests (#38930)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 04:40:34 +00:00
Asuka MinatoGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
fbd6e04810 test: move console app API coverage to unit tests (#38915)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 04:40:15 +00:00
Asuka MinatoGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
c277f48084 test: move email registration coverage to unit tests (#38928)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 04:05:59 +00:00
Asuka MinatoGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
70462d96bd test: move RAG pipeline controller coverage to unit tests (#38939)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 03:59:57 +00:00
Asuka MinatoandGitHub 22429d275a test: move console forgot-password coverage to unit tests (#38922) 2026-07-15 03:56:41 +00:00
Asuka MinatoGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
0c15a71cc4 test: move API key authentication coverage to unit tests (#38919)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 03:52:20 +00:00
Asuka MinatoGitHubautofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
557d92735d test: move account deletion sync coverage to unit tests (#38917)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-15 03:47:55 +00:00