mirror of
https://github.com/langgenius/dify.git
synced 2026-06-18 07:41:09 +08:00
f533e992d4
Pause-time token emission now draws only from the recipient set each API surface is allowed to act on (emit ⊆ validate), so the CLI/OpenAPI caller is never handed a token the resume endpoint would reject as 404 (WTA-867). A form's recipients are partitioned once, per surface, into a single FormDisposition: the surface-actionable recipient yields `form_token`, while the rest are reported as `approval_channels` (e.g. ["email", "console"]) so the caller is told where approval actually happens. Token and channels are two projections of one decision (disposition_for_surface) loaded by one recipient query (load_form_dispositions_by_form_id); the live pause path and the reconnect snapshot path consume the same FormDisposition so they cannot drift. RecipientType carries its user-facing approval-channel label as an enum tuple value, set in __new__, so a new recipient type cannot be declared without one. Tests: consolidate recipient/disposition/enrich tests into parametrized matrices, add CONSOLE-surface and empty-token coverage, extract a shared fake session for the pause-event tests. |
||
|---|---|---|
| .. | ||
| utils | ||
| __init__.py | ||
| _workflow_exc.py | ||
| account.py | ||
| agent_config_entities.py | ||
| agent.py | ||
| api_based_extension.py | ||
| base.py | ||
| comment.py | ||
| credential_permission.py | ||
| dataset.py | ||
| engine.py | ||
| enums.py | ||
| execution_extra_content.py | ||
| human_input.py | ||
| model.py | ||
| oauth.py | ||
| provider_ids.py | ||
| provider.py | ||
| snippet.py | ||
| source.py | ||
| task.py | ||
| tools.py | ||
| trigger.py | ||
| types.py | ||
| web.py | ||
| workflow.py | ||