opensource/dify
2
0
Fork 0
mirror of https://github.com/langgenius/dify.git synced 2026-06-23 04:11:09 +08:00
Code Issues Packages Projects Releases Wiki Activity
11,227 Commits 583 Branches 172 Tags 782 MiB
00995545e7
Commit Graph

1264 Commits

Author SHA1 Message Date
yunlu.wen
00995545e7 fix import 2026-06-22 11:28:58 +08:00
yunlu.wen
475dafb8b7 fix missing decorator 2026-06-22 11:19:20 +08:00
yunlu.wen
a0bdb16cb9 Merge branch 'feat/openapi-rbac' into deploy/enterprise 2026-06-22 11:01:12 +08:00
GareArc
4111751bdf
refactor(openapi/cli): split app usage-face from studio-app build-face 
Squash of PR #37641 (worktree-fix+app-abstraction-noun).

Introduces two app nouns:
- app: usage face (run/get/describe/resume), dual-subject account + external-SSO
- studio-app: build face (export/import), account-only

Backend: split read routes by subject with token-type-restricted guards;
shared public projection builder (build_app_describe_response); drop
author/tags from describe to prevent cross-tenant identity leak.
CLI: selectAppReader subject dispatch (account vs permitted-external),
AppReader strategy, studio-app export/import, refreshed help/guides.
 2026-06-21 19:48:22 -07:00
GareArc
c62276d7de
Merge remote-tracking branch 'origin/main' into deploy/enterprise 2026-06-21 19:47:32 -07:00
yunlu.wen
8cc6b16661 Merge remote-tracking branch 'upstream/main' into feat/openapi-rbac 2026-06-22 10:25:29 +08:00
Rohit Gahlawat
9b4dd9d4e8
refactor: accept db.session explicitly in APIBasedExtensionService (#37693) 2026-06-21 00:53:36 +00:00
Rohit Gahlawat
75d50455d6
refactor: accept db.session explicitly in FeedbackService (#37694) 2026-06-21 00:52:36 +00:00
Rohit Gahlawat
dcff1870d5
refactor: accept db.session explicitly in SavedMessageService (#37682) 2026-06-20 12:35:06 +00:00
Asuka Minato
a7b53b33ee
chore: move one db.session (#37656) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-19 19:52:59 +00:00
-LAN-
8052c93133
refactor(api): type end user records with enum (#36945) 
Co-authored-by: WH-2099 <wh2099@pm.me>
 2026-06-19 01:02:01 +00:00
Wu Tianwei
33edf97f81
feat: RBAC (#37107) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: fatelei <fatelei@gmail.com>
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: 盐粒 Yanli <yanli@dify.ai>
Co-authored-by: Charles Yao <chongbinyao33@gmail.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
Co-authored-by: yunlu.wen <yunlu.wen@dify.ai>
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com>
Co-authored-by: Jingyi <jingyi.qi@dify.ai>
Co-authored-by: yyh <yuanyouhuilyz@gmail.com>
Co-authored-by: Joel <iamjoel007@gmail.com>
Co-authored-by: hjlarry <hjlarry@163.com>
Co-authored-by: Asuka Minato <i@asukaminato.eu.org>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xiyuan Chen <52963600+GareArc@users.noreply.github.com>
Co-authored-by: gigglewang <gigglewang@dify.ai>
Co-authored-by: chariri <w@chariri.moe>
Co-authored-by: Evan <2869018789@qq.com>
Co-authored-by: zyssyz123 <916125788@qq.com>
 2026-06-18 16:35:29 +00:00
zyssyz123
0df30dd269
fix(agent): resolve roster file downloads versions and log filters (#37626) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-18 12:06:27 +00:00
zyssyz123
933df2f490
fix(agent): decouple roster from app quota (#37625) 2026-06-18 08:48:18 +00:00
Stephen Zhou
c52eafe2ca
docs: enrich generated service API descriptions (#37615) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-18 08:43:39 +00:00
非法操作
26b0137c83
chore: improve invite member flow (#37479) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Jingyi <jingyi.qi@dify.ai>
 2026-06-18 06:30:01 +00:00
盐粒 Yanli
3f2d22ec0f
feat(agent-v2): sync nightly updates to main (#37599) 
Co-authored-by: Jingyi-Dify <jingyi.qi@dify.ai>
Co-authored-by: yyh <yuanyouhuilyz@gmail.com>
Co-authored-by: Joel <iamjoel007@gmail.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: hjlarry <hjlarry@163.com>
Co-authored-by: Bond Zhu <783504079@qq.com>
Co-authored-by: Yansong Zhang <916125788@qq.com>
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com>
 2026-06-18 05:03:34 +00:00
Asuka Minato
4304044905
chore: example of make db.session pass from parameter. (#37561) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-18 02:16:09 +00:00
zyssyz123
43192036fa
fix: require Agent App role (#37601) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-18 01:23:45 +00:00
Asuka Minato
af99414fc1
chore: port isinstance to match case (#37271) 
Co-authored-by: WH-2099 <wh2099@pm.me>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
 2026-06-18 00:18:03 +00:00
Stephen Zhou
19838972dc
fix: add service api openapi descriptions (#37595) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-17 16:02:43 +00:00
zyssyz123
59f8f2e7b3
fix(agent): align roster observability logs contract (#37578) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-17 14:34:14 +00:00
Stephen Zhou
baf775134e
fix: improve Service API OpenAPI contracts (#37592) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-17 14:25:30 +00:00
yunlu.wen
c7ceaa5fe2 fix typecheck 2026-06-17 18:42:24 +08:00
Stephen Zhou
48452aefbc
feat: app deploy (#35670) 
Co-authored-by: zhangx1n <zhangxin@dify.ai>
Co-authored-by: yyh <yuanyouhuilyz@gmail.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-17 09:28:43 +00:00
盐粒 Yanli
0ea0647dd0
feat(agent): wire knowledge base retrieval into runtime (#37577) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-17 09:27:38 +00:00
zyssyz123
912c0fa8d1
fix(agent): add agent app duplicate endpoint (#37571) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-17 08:09:47 +00:00
zyssyz123
758bea1a91
fix(api): hide agent apps from installed apps (#37570) 2026-06-17 06:47:39 +00:00
yyh
f203ab7f1d
fix(agent-v2): include workflow references in agent list (#37567) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-17 05:56:53 +00:00
zyssyz123
e970cbde0f
feat: add agent roster observability APIs (#37566) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-17 05:22:52 +00:00
yunlu.wen
547340ecca allow enduser access for app list/desc 2026-06-17 11:23:10 +08:00
autofix-ci[bot]
0ca14cd8ad
[autofix.ci] apply automated fixes 2026-06-17 03:18:50 +00:00
yunlu.wen
3c8d03d24f handle enduser in decorator 2026-06-17 11:15:34 +08:00
autofix-ci[bot]
39bf04e7fe
[autofix.ci] apply automated fixes 2026-06-17 02:30:55 +00:00
yunlu.wen
c38cba1f8c reorder decorators 2026-06-17 10:27:32 +08:00
yunlu.wen
a811522d5f Merge remote-tracking branch 'upstream/main' into feat/openapi-rbac 2026-06-17 09:53:32 +08:00
zyssyz123
bacc48d16e
fix(agent): align config detail and output contracts (#37535) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-17 01:17:20 +00:00
GareArc
f533e992d4
fix(hitl): scope OpenAPI/Service-API resume to author-configured webapp forms 
Pause-time token emission now draws only from the recipient set each API
surface is allowed to act on (emit ⊆ validate), so the CLI/OpenAPI caller is
never handed a token the resume endpoint would reject as 404 (WTA-867).

A form's recipients are partitioned once, per surface, into a single
FormDisposition: the surface-actionable recipient yields `form_token`, while
the rest are reported as `approval_channels` (e.g. ["email", "console"]) so the
caller is told where approval actually happens. Token and channels are two
projections of one decision (disposition_for_surface) loaded by one recipient
query (load_form_dispositions_by_form_id); the live pause path and the
reconnect snapshot path consume the same FormDisposition so they cannot drift.

RecipientType carries its user-facing approval-channel label as an enum tuple
value, set in __new__, so a new recipient type cannot be declared without one.

Tests: consolidate recipient/disposition/enrich tests into parametrized
matrices, add CONSOLE-surface and empty-token coverage, extract a shared fake
session for the pause-event tests.
 2026-06-16 16:11:29 -07:00
zyssyz123
dcc0b95e11
fix: issue (#37508) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-16 08:53:53 +00:00
zyssyz123
b6b9165d2b
fix(agent): include app display fields in published references (#37485) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-16 07:00:37 +00:00
zyssyz123
b4e3a9095b
fix(agent): support agent-id chat and inline draft bindings (#37483) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-16 06:04:30 +00:00
Asuka Minato
1b2d397fc9
test: example of make db.session pass from parameter. #37403 (#37471) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-16 04:07:01 +00:00
zyssyz123
2b7f5ab982
fix: project agent node outputs into draft graph (#37467) 2026-06-15 13:27:57 +00:00
zyssyz123
1e8329f02c
feat: Unify Agent v2 console routes (#37465) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-15 11:09:15 +00:00
Jingyi
9b74df21d0
feat(web): refine onboarding UI (#37433) 
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: yyh <yuanyouhuilyz@gmail.com>
Co-authored-by: Joel <iamjoel007@gmail.com>
Co-authored-by: hjlarry <hjlarry@163.com>
Co-authored-by: fatelei <fatelei@gmail.com>
Co-authored-by: Asuka Minato <i@asukaminato.eu.org>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xiyuan Chen <52963600+GareArc@users.noreply.github.com>
Co-authored-by: gigglewang <gigglewang@dify.ai>
Co-authored-by: Yunlu Wen <yunlu.wen@dify.ai>
Co-authored-by: chariri <w@chariri.moe>
Co-authored-by: Evan <2869018789@qq.com>
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com>
 2026-06-15 08:47:15 +00:00
yunlu.wen
d82b6fe48e guard openapi with rbac decorator 2026-06-15 13:51:30 +08:00
zyssyz123
d21bf291bb
fix: align agent app backing roster API (#37442) 
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
 2026-06-15 05:21:38 +00:00
Yunlu Wen
12159d6313
feat: rbac scaffold (#37443) 2026-06-15 05:16:41 +00:00
cn7shi
e0773c4d8f
refactor: TagService to accept db.session explicitly (#37416) 2026-06-15 02:04:28 +00:00
Shahil kadia
c6b3e525d1
refactor: accept db.session explicitly in RecommendedAppService (#37417) 
Co-authored-by: Shahil Kadia <shahil@users.noreply.github.com>
 2026-06-15 01:19:16 +00:00