GareArc
d16d2d1efa
Merge remote-tracking branch 'origin/gareth/esq1-170-rbac-for-agent' into gareth/esq1-170-rbac-for-agent
2026-07-22 21:32:30 -07:00
GareArc
91126a5fda
fix(agent): stack agent.manage onto agent app management and import paths
...
Roster composer writes keep their app_edit / snippets gate and require
workspace agent.manage in addition, instead of replacing it. Generic app
management routes (update/delete/copy/export/name/icon/site/site-enable/
api-enable/api-keys) enforce agent.manage when the target is a roster
Agent App and reject hidden workflow-only backing apps outright, which
stay usable only through the Agent runtime surfaces. Importing an Agent
DSL requires agent.manage and the denial surfaces as 403 instead of a
generic failed import.
2026-07-22 21:31:56 -07:00
GareArc
8482167f1c
fix(agent): authorize workflow-only agents against their parent workflow app
...
The RBAC resource resolver returned the hidden runtime backing app for
workflow-only agents, which never receives a resource access policy, so
per-resource overrides on the parent workflow app were ignored. Resolve
agent_id to the policy-owning agent.app_id instead and keep
backing_app_id strictly runtime-only.
2026-07-22 21:31:43 -07:00
yyh and GitHub
6cd10f5e04
Merge branch 'main' into gareth/esq1-170-rbac-for-agent
2026-07-23 12:07:51 +08:00
45711eb6dd
chore(api): cloud use presigned download url on api site ( #39436 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-23 03:34:49 +00:00
Asuka Minato and GitHub
fd703739b5
test: use sqlite3 session in test_async_workflow_service ( #38692 )
2026-07-23 03:34:10 +00:00
Asuka Minato and GitHub
82c8741c73
test: use sqlite3 session in test_hitl_service_api ( #38685 )
2026-07-23 03:33:01 +00:00
Asuka Minato and GitHub
78023bf50d
test: use sqlite3 session in test_conversation ( #38684 )
2026-07-23 03:32:17 +00:00
GareArc
1b5fbb2142
Merge remote-tracking branch 'origin/main' into gareth/esq1-170-rbac-for-agent
2026-07-22 20:24:53 -07:00
0ad985515b
test: move password reset coverage to unit tests ( #38936 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-23 03:16:06 +00:00
David Park and GitHub
da2177c7b2
fix(api): send valid body in external knowledge validation probe ( #39410 )
2026-07-23 02:52:52 +00:00
GareArc
09d7e44bd1
fix(agent): gate roster composer writes with agent.manage
...
Require agent.manage on the composer endpoints that create or write shared
roster/normal drafts (copy-from-roster, save-to-roster, and the agent
composer PUT) for both app and snippet variants, leaving the local node and
snippet draft saves on their existing edit permissions. Hide the Make Copy
and Save to Roster controls when the user cannot manage agents.
2026-07-22 19:49:05 -07:00
bd8f0104d6
feat(dataset): expose New RAG KnowledgeFS contracts ( #39314 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-23 01:48:36 +00:00
GareArc
fd88da9743
refactor(web): gate community-edition tip on deployment edition
...
Replace the enterprise_enabled system feature with an env-derived edition
signal. enterprise_enabled expanded both the Console and Web API contracts,
and via cloudSystemFeatures it made Cloud render the Community Edition
warning.
- Drop enterprise_enabled from SystemFeatureModel; regenerate contracts and
openapi docs.
- Add NEXT_PUBLIC_ENTERPRISE_ENABLED (forwarding the existing backend
ENTERPRISE_ENABLED) and derive IS_ENTERPRISE_EDITION / IS_COMMUNITY_EDITION.
- CommunityEditionTip renders only on community edition, so enterprise and
cloud both correctly hide it.
Review fixes:
- edit-in-console-link: render the enabled control as an anchor instead of a
Button-rendered link, which forced type="button" onto the <a>; export
buttonVariants for the styling.
- agents-access-guard: named export; redirect to '/'.
- Remove the redundant @detailSidebar/agents access-guard layout.
2026-07-22 17:44:27 -07:00
d5788cc019
feat: support tool multi-select input ( #39346 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: WH-2099 <[email protected]
2026-07-23 00:38:54 +00:00
zyssyz123 and GitHub
4da4fa72cd
fix(agent): refresh stale inline preview drafts ( #39415 )
2026-07-22 12:54:09 +00:00
34a5ca191b
feat(dataset): add New Knowledge list and empty state ( #39300 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-22 12:00:50 +00:00
Asuka Minato and GitHub
1271cfcf3f
test: use sqlite3 session in test_workflow_events_openapi ( #38683 )
2026-07-22 11:25:14 +00:00
Asuka Minato and GitHub
2a0b1a8a63
test: use sqlite3 session in test_runtime_credentials ( #38682 )
2026-07-22 09:50:31 +00:00
Asuka Minato and GitHub
4a2e92f43f
test: use sqlite3 session in test_plugin_wraps ( #38681 )
2026-07-22 09:49:54 +00:00
Asuka Minato and GitHub
84889b88ec
test: use sqlite3 session in test_init_validate ( #38680 )
2026-07-22 09:44:29 +00:00
Asuka Minato and GitHub
6f034d2c93
test: use sqlite3 session in test_tags ( #38679 )
2026-07-22 09:43:41 +00:00
f91ea49414
test: use sqlite3 session in test_app_import_api ( #38674 )
...
Co-authored-by: Byron Wang <[email protected]
2026-07-22 09:43:30 +00:00
Asuka Minato and GitHub
de07730548
test: use sqlite3 session in test_snippet_workflow_draft_variable ( #38678 )
2026-07-22 09:20:51 +00:00
Asuka Minato and GitHub
9b2aa8b216
test: use sqlite3 session in test_snippet_workflow ( #38677 )
2026-07-22 09:20:21 +00:00
Asuka Minato and GitHub
8ee3a7eabc
test: use sqlite3 session in test_rag_pipeline_workflow ( #38676 )
2026-07-22 09:19:25 +00:00
0f9fffb7a2
fix(agent): isolate build and preview chat conversations ( #39405 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-22 09:17:55 +00:00
Asuka Minato and GitHub
187501f53e
test: use sqlite3 session in test_reset_encrypt_key_pair ( #38673 )
2026-07-22 09:17:34 +00:00
acb5ee29e1
test(e2e): validate generated console contracts ( #39400 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-22 07:48:37 +00:00
林玮 (Jade Lin) and GitHub
c5aadfe557
fix(api,billing): invalidate vector space cache after cleanup ( #39404 )
2026-07-22 07:30:16 +00:00
c76ff4c38c
test: use sqlite3 session in test_base_app_runner ( #38740 )
...
Co-authored-by: Byron.wang <[email protected]
2026-07-22 07:21:22 +00:00
林玮 (Jade Lin) and GitHub
a3654d6a7d
fix(oauth): reauth after accepting invitation ( #39366 )
2026-07-22 05:59:04 +00:00
05a25943e7
fix(e2e): align fixtures with generated contracts ( #39394 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-22 05:09:23 +00:00
Asuka Minato and GitHub
c5d471dbdd
test: use sqlite3 session in test_model_config_api ( #38675 )
2026-07-22 04:53:13 +00:00
Asuka Minato and GitHub
ba449890a9
test: use sqlite3 session in test_app_runner_conversation_variables ( #38687 )
2026-07-22 04:53:00 +00:00
Asuka Minato and GitHub
072953a83a
test: use sqlite3 session in test_export_service ( #38718 )
2026-07-22 04:52:19 +00:00
Asuka Minato and GitHub
7b95e2a75f
test: use sqlite3 session in test_generator_api_missing ( #38719 )
2026-07-22 04:52:06 +00:00
01efc6eecb
test: use SQLite sessions in service API fixtures ( #38784 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-22 04:51:49 +00:00
Asuka Minato and GitHub
a4c7261bf9
test: use sqlite3 session in test_workflow ( #38686 )
2026-07-22 04:51:33 +00:00
Asuka Minato and GitHub
66afa3bf4a
test: use sqlite3 session in test_clear_free_plan_tenant_expired_logs ( #38693 )
2026-07-22 04:16:21 +00:00
389a7608bf
chore: bump gitpython from 3.1.50 to 3.1.52 in /api ( #39389 )
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-22 04:05:53 +00:00
3abbab4798
chore: bump pyasn1 from 0.6.3 to 0.6.4 in /api ( #39390 )
...
Signed-off-by: dependabot[bot] <[email protected]
2026-07-22 04:05:40 +00:00
Xiyuan Chen and GitHub
3f0f57c594
fix: apply configured timeout to enterprise inner API requests ( #39335 )
2026-07-22 02:56:08 +00:00
Asuka Minato and GitHub
79a5b31bc6
test: move console OAuth coverage to unit tests ( #38923 )
2026-07-22 02:27:55 +00:00
Asuka Minato and GitHub
f35655a5bb
test: use sqlite3 session in test_human_input_forms ( #38777 )
2026-07-22 02:27:30 +00:00
Asuka Minato and GitHub
e9bd8741f4
test: use sqlite3 session in test_auth_wraps ( #38760 )
2026-07-22 02:23:37 +00:00
Asuka Minato and GitHub
33acaa558e
test: use SQLite sessions in core workflow ( #39109 )
2026-07-22 02:18:56 +00:00
Asuka Minato and GitHub
b38caf3cdb
test: use SQLite sessions in services core ( #39111 )
2026-07-22 02:15:01 +00:00
Asuka Minato and GitHub
cb2b36f1aa
test: use SQLite sessions in services enterprise ( #39113 )
2026-07-22 02:13:52 +00:00
Asuka Minato and GitHub
2d15743b96
test: use SQLite sessions in services misc ( #39114 )
2026-07-22 02:11:52 +00:00
GareArc