Commit Graph

1272 Commits

Author SHA1 Message Date
Pranav Agarwal
24f5e2ac69
fix(api): enforce admin and RBAC permissions on default model and provider models GET endpoints (#41099) (#41100) 2026-08-23 07:33:57 +00:00
Pranav Agarwal
07119e3f00
fix(api): enforce admin and RBAC permissions on data source integrates GET endpoint (#41079) (#41080) 2026-08-21 17:57:23 +00:00
Xiyuan Chen
d6147456e3
feat: Enterprise Home Snapshot — runtime endpoints and dify-agent adapter (#40996) 2026-08-21 10:39:36 +00:00
Yunlu Wen
373f33fd3b
fix: add missing metrics back and enhance typing (#40935)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-21 09:46:45 +00:00
Byron.wang
b38d907ede
refactor(api): finish account controller application boundary (#40440) 2026-08-21 08:46:06 +00:00
Byron.wang
a52adef203
refactor(api): extract change email state machine (#40439) 2026-08-21 08:13:23 +00:00
Byron.wang
3b05b5e553
refactor(api): move account lifecycle into application services (#40438) 2026-08-21 08:05:43 +00:00
Byron.wang
1d79b87307
refactor(api): move account access behind application services (#40437) 2026-08-21 05:56:30 +00:00
WH-2099
a5e284e6b1
fix(plugin): protect endpoint listings (#40897) 2026-08-21 02:17:58 +00:00
Pranav Agarwal
43e59d3bc5
fix(api): enforce edit and RBAC permissions on datasource credential …fix(api): enforce edit and RBAC permissions on datasource credential GET endpoint (#41040) (#41041) 2026-08-21 02:11:46 +00:00
WH-2099
edc805c453
fix(api): enforce app-scoped access on indirect resources (#40893) 2026-08-21 00:52:39 +00:00
wangxiaolei
785ca4b915
fix: when rbac enabled is true, not check_dataset_permission (#41022) 2026-08-20 14:45:40 +00:00
非法操作
1bb9183af9
refactor(api): replace legacy recommended app retrieval stack (#40395) 2026-08-20 13:13:43 +00:00
非法操作
de7e43a7ef
refactor(api): decouple recommended app runtime admission (#40257) 2026-08-20 13:13:43 +00:00
非法操作
b09691e5d2
refactor(api): isolate trial app usage writes (#40208) 2026-08-20 13:13:42 +00:00
GGbond
6f70ca8d26
refactor(api): decouple console tag management (#40843)
Co-authored-by: Byron Wang <byron@dify.ai>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-20 12:31:01 +00:00
Pranav Agarwal
43b6d8e32e
fix(api): enforce admin and RBAC permissions on tool OAuth custom client GET endpoint (#40944) (#40945) 2026-08-20 09:10:02 +00:00
FFXN
248df5dd25
fix(snippet): support snippet history version export (#41012)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-20 08:52:45 +00:00
非法操作
f97fc01c2f
refactor(api): extract recommended app query service (#40207) 2026-08-20 08:45:47 +00:00
林玮 (Jade Lin)
a6ace29e1a
fix(api): handle suspended email domains (#41004)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-20 08:04:05 +00:00
盐粒 Yanli
013b328555
fix(agent): complete ownership-aware deletion lifecycle (#40888)
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com>
2026-08-20 07:48:02 +00:00
chelsealong
d7b1531431
fix(snippets): implement delete for published snippet workflow versions (#41003)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-20 07:36:17 +00:00
CodingOnStar
e3b8e26192 merge: bring origin/main into feat/creator-profile-home
# Conflicts:
#	api/openapi/markdown/console-openapi.md
#	api/services/agent_config_service.py
#	api/tests/unit_tests/services/agent/test_skill_standardize_service.py
#	knip.config.ts
#	oxlint-suppressions.json
#	packages/contracts/generated/api/console/agent/zod.gen.ts
#	packages/contracts/generated/api/console/apps/zod.gen.ts
2026-08-20 15:18:59 +08:00
Byron.wang
b4e13ec83e
refactor(api): add account profile application service (#40436)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-20 05:03:08 +00:00
林玮 (Jade Lin)
602a646dbd
fix(api): enforce dataset document ownership (#40989) 2026-08-20 03:24:45 +00:00
zyssyz123
414f211cde
fix(auth): harden email code login verification (#40960) 2026-08-19 06:57:47 +00:00
Pranav Agarwal
f1b48a93a9
fix(api): enforce edit and RBAC permissions on model provider credential GET endpoints (#40899) (#40900) 2026-08-19 06:48:15 +00:00
盐粒 Yanli
8874f3c80b
refactor(agent): remove Agent Drive (#40887)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-19 06:34:36 +00:00
CodingOnStar
3713581520 Merge remote-tracking branch 'origin/main' into feat/creator-profile-home
# Conflicts:
#	.editorconfig
#	oxlint-suppressions.json
#	web/app/components/base/markdown-blocks/code-block.tsx
#	web/app/layout.tsx
2026-08-18 21:30:57 +08:00
Byron.wang
ba61ab4f9f
refactor(api): extract account activation application service (#40421)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-18 05:27:40 +00:00
Byron.wang
891627b210
refactor(api): decouple data source API key auth flow (#40452)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-18 04:30:17 +00:00
CodingOnStar
4d8bd40058 merge: bring origin/main into feat/creator-profile-home
Keep marketplace workspace-skill runtime tests and take main's
autocomplete popup anatomy plus input-group composition.
2026-08-18 10:39:42 +08:00
林玮 (Jade Lin)
5ef8becd25
feat: create accounts with client IP (#40875) 2026-08-17 09:29:57 +00:00
CodingOnStar
24b977da27 Merge branch 'feat/marketplace-homepage-redesign' into feat/creator-profile-home 2026-08-17 13:01:32 +08:00
YungLe
219596c4df
feat(plugin-auth): visibility picker for OAuth credentials (#39840)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Wu Tianwei <30284043+WTW0313@users.noreply.github.com>
Co-authored-by: twwu <twwu@dify.ai>
2026-08-17 02:41:26 +00:00
WH-2099
fc7b51634d
fix(api): protect agent sandbox reads (#40794) 2026-08-14 13:51:41 +00:00
WH-2099
96bfcf20cd
fix(api): protect workspace credential mutations (#40790) 2026-08-14 12:03:54 +00:00
酒诗
b6319c819c
chore: dep inject for model in dataset document actions (#40787)
Co-authored-by: geneachina <geneachina@gmail.com>
2026-08-14 11:08:21 +00:00
WH-2099
b6694d462f
fix(api): protect custom OAuth client deletion (#40786) 2026-08-14 10:59:49 +00:00
L1nSn0w
ea6770c7a1
feat(oauth): drive silent authorization from oauth_provider_apps.auto_authorize (#40783)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-14 10:29:39 +00:00
WH-2099
62a544a146
fix(api): enforce RAG draft variable access boundaries (#40745) 2026-08-14 10:07:22 +00:00
非法操作
e0fd3b264a
refactor(api): reuse app definition queries for app parameters (#40465) 2026-08-14 09:38:34 +00:00
非法操作
c425e4cdd5
refactor(api): extract installed app definition queries (#40462) 2026-08-14 09:38:32 +00:00
zyssyz123
09f20b7a14
fix(agent): return conflict for duplicate creation (#40771)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-14 08:57:13 +00:00
Joel
35132d6892
chore: reopen the education application flow (#40760)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-14 07:16:21 +00:00
Pranav Agarwal
e2852524be
fix(api): enforce edit and RBAC permissions on dataset API key GET endpoint (#40740) (#40743) 2026-08-14 04:27:37 +00:00
CodingOnStar
889bd18da4 Merge branch 'feat/marketplace-homepage-redesign' into feat/creator-profile-home 2026-08-14 10:34:47 +08:00
WH-2099
c1bde25bcc
fix(api): remove unsafe Bedrock test endpoint (#40742) 2026-08-13 19:47:13 +00:00
Harsh Kashyap
8238684334
fix(api): chain original exception in 13 except blocks per PEP 3134 (#40738)
Co-authored-by: Harsh Kashyap <Harsh23Kashyap@users.noreply.github.com>
2026-08-13 17:50:05 +00:00
WH-2099
489772908b
fix: enforce API key list permissions (#40516) 2026-08-12 11:44:27 +00:00
Benjamin
6a37e1538a
fix(rbac): grant member policies when a dataset is opened to the work… (#39735)
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-12 09:02:03 +00:00
wangxiaolei
eeaaf11a51
fix: fix create dataset with document miss rbac operation (#40599)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-12 08:57:43 +00:00
Byron.wang
51a007e84e
refactor(api): extract init validation into layered application service (#40046) 2026-08-12 08:42:09 +00:00
yyh
01460f681e
fix(web): render workspace plan badge during SSR (#40581)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-12 07:45:39 +00:00
WH-2099
af382be837
fix(api): bind remaining RAG resources to owners (#40503) 2026-08-12 06:05:16 +00:00
CodingOnStar
8102836ca8 Merge branch 'feat/creator-profile-home' into deploy/dev
# Conflicts:
#	oxlint-suppressions.json
#	packages/contracts/marketplace.ts
#	web/app/(commonLayout)/marketplace/page.tsx
#	web/app/components/main-nav/routes.ts
#	web/app/components/plugins/marketplace/detail-dialog/__tests__/index.spec.tsx
#	web/app/components/plugins/marketplace/detail-dialog/index.tsx
#	web/app/components/plugins/marketplace/home/__tests__/home-catalog-navigation.spec.tsx
#	web/app/components/plugins/marketplace/home/__tests__/home-header.spec.tsx
#	web/app/components/plugins/marketplace/home/__tests__/home-trending.spec.tsx
#	web/app/components/plugins/marketplace/home/home-catalog-tabs.tsx
#	web/app/components/plugins/marketplace/home/home-header.tsx
#	web/app/components/plugins/marketplace/home/home-search.tsx
#	web/app/components/plugins/marketplace/home/home-trending.tsx
#	web/app/components/plugins/marketplace/home/index.tsx
#	web/app/components/plugins/marketplace/index.tsx
#	web/app/components/plugins/marketplace/list/__tests__/card-wrapper.spec.tsx
#	web/app/components/plugins/marketplace/list/list-wrapper.tsx
#	web/app/components/plugins/marketplace/view.tsx
2026-08-12 12:53:47 +08:00
zyssyz123
059c9ce0b6
feat: add trunstile (#40494)
Co-authored-by: Joel <iamjoel007@gmail.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-12 03:08:19 +00:00
Wu Tianwei
7aba539e82
feat: app deployment v2 (#39829)
Co-authored-by: zhangx1n <zhangxin@dify.ai>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-12 01:55:36 +00:00
WH-2099
ef8544b173
fix(api): bind dataset operations to owners (#40149) 2026-08-11 16:37:14 +00:00
Byron.wang
c1e94f8ee7
refactor(api): consolidate deployment edition handling (#40142)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-11 07:39:01 +00:00
Tushar Motwani
aa5e8a5eff
chore: suppress pyrefly necessary conversions (#40444) 2026-08-10 16:41:34 +00:00
Byron.wang
976d061f9b
refactor(api): merge ping and version endpoints into system (#40058)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-10 08:50:40 +00:00
非法操作
648806bc9c
refactor(api): extract explore banner query service (#40053) 2026-08-10 08:07:54 +00:00
Joel
5967bd8e08
chore: tighten education verification and pause discount access (#40402)
Co-authored-by: Yansong Zhang <916125788@qq.com>
2026-08-10 06:33:03 +00:00
Likalikali
e09eee8fd1
refactor: replace manual model_validate with @model_validate in datasets controllers (#40236)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-09 08:25:27 +00:00
Likalikali
b692ddd80c
refactor: replace manual model_validate with @model_validate in workspace remaining controllers (#40239)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-09 08:23:51 +00:00
Likalikali
5ebb389d26
refactor: replace manual model_validate with @model_validate in rag_pipeline controllers (#40237) 2026-08-09 08:22:50 +00:00
Likalikali
fff6f7cf2f
refactor: replace manual model_validate with @model_validate in app workflow controllers (#40235) 2026-08-09 08:20:10 +00:00
Likalikali
516fd12b8d
refactor: replace manual model_validate with @model_validate in app core controllers (#40234)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-09 08:18:02 +00:00
Likalikali
925ca49f21
refactor: replace manual model_validate with @model_validate in explore/snippets controllers (#40241) 2026-08-09 07:07:08 +00:00
Likalikali
a1577fc48c
refactor: replace manual model_validate with @model_validate in auth/billing/tag controllers (#40240) 2026-08-09 06:14:07 +00:00
Likalikali
acda0341ed
refactor: replace manual model_validate with @model_validate in workspace plugin/tool controllers (#40238) 2026-08-09 06:13:24 +00:00
Likalikali
98378cfe03
refactor: replace manual model_validate with @model_validate in agent controllers (#40233) 2026-08-09 06:11:33 +00:00
Byron.wang
4e18ab0ad4
refactor(api): decouple setup and spec endpoints (#40104) 2026-08-08 11:52:15 +00:00
Likalikali
d362bdbb4e
refactor: replace manual model_validate with @model_validate decorator in app controllers (#40170) 2026-08-08 05:47:11 +00:00
fatelei
5e0d54d4ce
fix: fix test issue 2026-08-08 11:08:50 +08:00
Likalikali
60d6be5b13
chore: dep inject for model in explore workflow run (#40158) 2026-08-08 02:50:27 +00:00
Likalikali
cc1b55aaf7
chore: dep inject for model in explore apis (#40160)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-08 02:23:17 +00:00
fatelei
9d1a3c5a00
Merge remote-tracking branch 'upstream/main' into skill 2026-08-08 09:06:56 +08:00
fatelei
ebe0a269ea
fix: fix backend test 2026-08-08 09:06:36 +08:00
盐粒 Yanli
916d7e1c96
refactor(dify-agent): download Binding files through Agent Stub (#40143)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-07 14:56:52 +00:00
fatelei
edff7a4471
Merge remote-tracking branch 'upstream/main' into skill 2026-08-07 22:21:52 +08:00
Likalikali
c094117ca2
chore: dep inject for model in agent app sandbox upload (#40153) 2026-08-07 13:28:31 +00:00
Likalikali
c6b1311aa3
chore: dep inject for model in workspace snippets, load balancing, and endpoint (#40161) 2026-08-07 13:22:02 +00:00
fatelei
9969c9f845
fix: fix conflict 2026-08-07 20:53:07 +08:00
Likalikali
515c3d0c62
chore: dep inject for model in onboarding step by step tour (#40155) 2026-08-07 12:41:22 +00:00
Likalikali
fe94ddaaeb
chore: dep inject for model in workflow run archive download (#40157) 2026-08-07 12:40:44 +00:00
Likalikali
3e8c0fdcef
chore: dep inject for model in website crawl api (#40156) 2026-08-07 12:40:12 +00:00
Likalikali
055462fe6e
chore: dep inject for model in tags, mcp server, and data source auth (#40159) 2026-08-07 12:38:29 +00:00
Likalikali
06e229e8b2
chore: dep inject for model in api based extension (#40154) 2026-08-07 12:37:50 +00:00
fatelei
19a8683bca
fix: fix skill name is untitled-skill and optimize ai logic 2026-08-07 19:35:44 +08:00
Likalikali
fa498ad7a2
chore: dep inject for model in oauth server (#40147) 2026-08-07 11:16:11 +00:00
Likalikali
a279be91a8
chore: dep inject for model in datasets document and web human input … (#40151) 2026-08-07 11:15:43 +00:00
WH-2099
c9e6db5ef2
fix(api): scope temporary capabilities to owners (#39863) 2026-08-07 09:21:13 +00:00
Likalikali
b31e66107c
chore: dep inject for model in notification dismiss (#40146) 2026-08-07 09:02:49 +00:00
fatelei
89219c479c
fix: fix version restore 2026-08-07 15:54:24 +08:00
fatelei
f8ca584a81
fix: fix some ui issue 2026-08-07 15:24:15 +08:00
fatelei
793300066b
feat: add image upload limit 2026-08-07 12:53:19 +08:00
非法操作
baba36d47d
chore: improve current workspace summary (#40121)
Co-authored-by: Jingyi-Dify <jingyi.qi@dify.ai>
2026-08-07 03:08:55 +00:00
Jingyi
5dfd83e9ab
feat: optimize integrations initial loading (#40118)
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-07 02:06:25 +00:00