737d290fdc
test(api): Simplify unit tests
...
Remove duplicated test cases.
2025-09-11 17:42:30 +08:00
81d9a9d00d
feat(api): limit conversation variable description length
...
Previously, conversation variable descriptions had no length limit, causing errors
when debugging chatflows. These descriptions are saved as draft variable descriptions
during debugging, which have a 256-character limit. Variables with descriptions
exceeding this limit could not be saved, resulting in 500 errors and "Internal
Server Error" messages during chatflow debugging.
This commit implements description length limits for conversation variables:
- New chatflows: Hard limit of 256 characters for descriptions. Longer
descriptions are rejected and prevent chatflow saving.
- Existing chatflows: If all conversation variable descriptions are under
256 characters, the same limit applies as new chatflows. Otherwise, no limit
is enforced to maintain backward compatibility.
2025-09-11 17:42:30 +08:00
874406d934
security(api): fix privilege escalation vulnerability in model config and chat message APIs ( #25518 )
...
The `ChatMessageApi` (`POST /console/api/apps/{app_id}/chat-messages`) and
`ModelConfigResource` (`POST /console/api/apps/{app_id}/model-config`)
endpoints do not properly validate user permissions, allowing users without `editor`
permission to access restricted functionality.
This PR addresses this issue by adding proper permission check.
2025-09-11 14:53:35 +08:00
70e4d6be34
Fix 500 in dataset page. ( #25474 )
2025-09-10 15:57:04 +08:00
cbc0e639e4
update sql in batch ( #24801 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
2025-09-10 13:00:17 +08:00
b51c724a94
refactor: Migrate part of the console basic API module to Flask-RESTX ( #24732 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
2025-09-10 12:15:47 +08:00
26a9abef64
test: imporve ( #25461 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-09-10 11:36:22 +08:00
fecdb9554d
fix: inner_api get_user_tenant ( #25462 )
2025-09-10 11:31:16 +08:00
45ef177809
Feature add test containers create segment to index task ( #25450 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-10 10:02:53 +08:00
6574e9f0b2
Fix: Add Password Validation to Account Creation ( #25382 )
2025-09-10 08:58:39 +08:00
cce13750ad
add rule for strenum ( #25445 )
2025-09-10 08:51:21 +08:00
08dd3f7b50
Fix basedpyright type errors ( #25435 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-10 01:54:26 +08:00
2ac7a9c8fc
Chore: thanks to bump-pydantic ( #25437 )
2025-09-09 20:07:17 +08:00
240b65b980
fix(mcp): properly handle arrays containing both numbers and strings ( #25430 )
...
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-09-09 20:06:35 +08:00
7443c5a6fc
refactor: update pyrightconfig to scan all API files ( #25429 )
2025-09-09 17:12:45 +08:00
a1cf48f84e
Add lib test ( #25410 )
2025-09-09 17:11:49 +08:00
38057b1b0e
add typing to all wraps ( #25405 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-09 16:48:33 +08:00
d2e50a508c
Fix:About the error problem of creating an empty knowledge base interface in service_api ( #25398 )
...
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-09 15:18:31 +08:00
4aba570fa8
Fix flask response: 200 -> {}, 200 ( #25404 )
2025-09-09 15:06:18 +08:00
e180c19cca
fix(mcp): current_user not being set in MCP requests ( #25393 )
2025-09-09 14:58:14 +08:00
64c9a2f678
Feat/credential policy ( #25151 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-08 23:45:05 -07:00
566e0fd3e5
fix(container-test): batch create segment position sort ( #25394 )
2025-09-09 13:47:29 +08:00
7dfb72e381
feat: add test containers based tests for clean notion document task ( #25385 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-09-09 11:02:19 +08:00
649242f82b
example of uuid ( #25380 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-09 10:45:08 +08:00
720ecea737
fix: tenant_id was not specific when retrieval end-user in plugin backwards invocation wraps ( #25377 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-09-09 09:49:35 +08:00
ec0800eb1a
refactor: update pyrightconfig.json to use ignore field for better type checking configuration ( #25373 )
2025-09-08 19:55:25 +08:00
ea61420441
Revert "feat: email register refactor" ( #25367 )
2025-09-08 19:20:09 +08:00
598ec07c91
feat: enable dsl export encrypt dataset id or not ( #25102 )
...
Signed-off-by: kenwoodjw <blackxin55+@gmail.com>
2025-09-08 18:03:24 +08:00
aff2482436
Feature add test containers batch create segment to index ( #25306 )
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-08 17:55:57 +08:00
860ee20c71
feat: email register refactor ( #25344 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-08 17:51:43 +08:00
74be2087b5
fix: ensure Performance Tracing button visible when no tracing provid… ( #25351 )
2025-09-08 16:38:09 +08:00
f891c67eca
feat: add MCP server headers support #22718 ( #24760 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: Novice <novice12185727@gmail.com>
2025-09-08 14:10:55 +08:00
5d0a50042f
feat: add test containers based tests for clean dataset task ( #25341 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-08 13:09:53 +08:00
4ee49f3550
chore: remove weird account login ( #22247 )
...
Co-authored-by: zhuqingchao <zhuqingchao@xiaomi.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-08 10:44:36 +08:00
f6059ef389
add more typing ( #24949 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-08 10:40:00 +08:00
ce2281d31b
Fix: Parameter Extractor Uses Correct Prompt for Prompt Mode in Chat Models ( #24636 )
...
Co-authored-by: -LAN- <laipz8200@outlook.com>
2025-09-08 10:29:12 +08:00
593f7989b8
fix: 'curr_message_tokens' where it is not associated with a value #25307 ( #25308 )
...
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-08 09:59:53 +08:00
16a3e21410
more assert ( #24996 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-08 09:59:43 +08:00
9b8a03b53b
[Chore/Refactor] Improve type annotations in models module ( #25281 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-08 09:42:27 +08:00
7e629fd783
fix: update iteration node to use correct variable segment types ( #25315 )
2025-09-07 21:31:41 +08:00
afa7228076
fix: a failed index to be marked as created ( #25290 )
...
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-06 22:53:26 +08:00
9964cc202d
Feature add test containers batch clean document ( #25287 )
...
Co-authored-by: crazywoola <100913391+crazywoola@users.noreply.github.com>
2025-09-06 16:18:26 +08:00
b05245eab0
fix: resolve typing errors in configs module ( #25268 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-06 16:08:14 +08:00
a78339a040
remove bare list, dict, Sequence, None, Any ( #25058 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: -LAN- <laipz8200@outlook.com>
2025-09-06 03:32:23 +08:00
2b0695bdde
add more dataclass ( #25039 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-09-06 03:20:13 +08:00
917d60a1cb
Feature add test containers add document to index ( #25251 )
2025-09-05 19:20:37 +08:00
edf4a1b652
feat: add reasoning format processing to LLMNode for <think> tag handling ( #23313 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-05 18:15:35 +08:00
cd95237ae4
fix: loop node doesn't exit when it react the condition #24717 ( #24844 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-05 14:38:52 +08:00
1ba69b8abf
fix: child chunk API 404 due to UUID type comparison ( #25234 )
...
Signed-off-by: kenwoodjw <blackxin55+@gmail.com>
2025-09-05 14:00:28 +08:00
e78f1cdc6a
refactor: improve plugin version validation to support full semantic versioning ( #25161 )
...
Signed-off-by: -LAN- <laipz8200@outlook.com>
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2025-09-05 12:39:48 +08:00
QuantumGhost