CodingOnStar
34d831e830
Merge remote-tracking branch 'origin/main' into song/snp-682-ip-allowlist
...
# Conflicts:
# api/.importlinter
2026-09-29 16:55:56 +08:00
CodingOnStar
954ba55eb3
Merge remote-tracking branch 'origin/main' into song/snp-682-ip-allowlist
...
# Conflicts:
# api/controllers/mcp/mcp.py
# api/controllers/openapi/__init__.py
# api/controllers/web/login.py
# api/controllers/web/wraps.py
# api/extensions/ext_application_services.py
# api/openapi/markdown/console-openapi.md
# api/services/webapp_access_query_service.py
# api/tests/unit_tests/controllers/web/test_web_login.py
# api/tests/unit_tests/controllers/web/test_wraps.py
# api/tests/unit_tests/extensions/test_ext_application_services.py
# packages/contracts/generated/api/console/apps/orpc.gen.ts
# packages/contracts/generated/api/console/apps/types.gen.ts
# web/app/(commonLayout)/app/(appDetailLayout)/[appId]/layout-main.tsx
# web/app/components/app/access-point/index.tsx
# web/app/components/base/chat/chat/hooks.ts
# web/app/components/base/file-uploader/hooks.ts
# web/app/components/base/image-uploader/__tests__/hooks.spec.ts
# web/app/components/base/image-uploader/hooks.ts
# web/app/components/explore/try-app/index.tsx
# web/features/agent-v2/agent-detail/__tests__/layout.spec.tsx
# web/i18n/ar-TN/common.json
# web/i18n/de-DE/common.json
# web/i18n/en-US/common.json
# web/i18n/es-ES/common.json
# web/i18n/fa-IR/common.json
# web/i18n/fr-FR/common.json
# web/i18n/hi-IN/common.json
# web/i18n/id-ID/common.json
# web/i18n/it-IT/common.json
# web/i18n/ja-JP/common.json
# web/i18n/ko-KR/common.json
# web/i18n/lo-LA/common.json
# web/i18n/nl-NL/common.json
# web/i18n/pl-PL/common.json
# web/i18n/pt-BR/common.json
# web/i18n/ro-RO/common.json
# web/i18n/ru-RU/common.json
# web/i18n/sl-SI/common.json
# web/i18n/th-TH/common.json
# web/i18n/tr-TR/common.json
# web/i18n/uk-UA/common.json
# web/i18n/vi-VN/common.json
# web/i18n/zh-Hans/common.json
# web/i18n/zh-Hant/common.json
# web/service/console/query-policies.ts
2026-09-29 16:53:53 +08:00
Byron.wang and Jyong
a67cd87eb0
refactor(api): establish dataset application boundaries ( #41729 )
...
Co-authored-by: Jyong <jyong@dify.ai >
2026-09-29 08:42:31 +00:00
Byron.wang and autofix-ci[bot]
635143cb88
refactor(api): thin console app controllers and separate application boundaries ( #42671 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-09-24 06:17:38 +00:00
Yansong Zhang
d07e2d23b5
refactor(api): type network access control plane boundaries
2026-09-23 10:58:03 +08:00
yyh
4192299ad4
refactor(plugins): migrate agent strategy queries to generated contracts ( #42696 )
2026-09-22 05:54:59 +00:00
yyh
6d358eb680
refactor(plugins): migrate endpoint queries to generated contracts ( #42685 )
2026-09-22 05:54:58 +00:00
林玮 (Jade Lin) and Joel
8e5b097011
fix(api): remove omitted tenant default models ( #42572 )
...
Co-authored-by: Joel <iamjoel007@gmail.com >
2026-09-20 09:19:51 +00:00
Yansong Zhang
f01cdb35cd
fix(api): expose trusted current IP before policy creation
...
Refs SNP-835. Support the first Policy without relaxing trusted-proxy or persisted workspace-role checks.
2026-09-20 15:52:36 +08:00
Asuka Minato
3a9636faad
test: migrate console snippets sessions and ORM models to SQLite ( #40565 )
2026-09-19 09:26:43 +00:00
dbeebfc15d
refactor: reduce ambiguity in mcp queries ( #42395 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com >
2026-09-18 09:17:36 +00:00
wangxiaolei and autofix-ci[bot]
bfd7ac015f
feat: skill support duplicate and export use the latest draft ( #42424 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-09-17 09:52:25 +00:00
Yansong Zhang
9e985c2112
fix: complete network access control backend contracts
2026-09-11 17:01:55 +08:00
Sourav Rajvi and autofix-ci[bot]
aa6dceeece
fix(web): send model delete params as query string on DELETE ( #42162 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-09-11 08:09:48 +00:00
hjlarry
e8b965a3c3
refactor: migrate network access group APIs
2026-09-10 14:25:38 +08:00
Yansong Zhang
77525902ba
Merge remote-tracking branch 'origin/main' into song/snp-682-ip-allowlist
...
# Conflicts:
# api/controllers/console/wraps.py
# api/tests/unit_tests/controllers/console/test_wraps.py
# packages/contracts/generated/api/console/apps/orpc.gen.ts
# packages/contracts/generated/api/console/workspaces/orpc.gen.ts
2026-09-09 18:22:47 +08:00
Yansong Zhang
49b8284345
fix: normalize app access points by mode
2026-09-09 16:34:35 +08:00
Yansong Zhang
c0bd864139
fix: harden network access policy compatibility
2026-09-09 16:31:13 +08:00
Yansong Zhang
7e3ceaba82
feat: align network access BFF with app policies
2026-09-09 15:44:23 +08:00
Wu Tianwei and autofix-ci[bot]
f89c3e6ec7
feat: add agent resource permissions ( #41940 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-09-09 07:30:39 +00:00
L1nSn0w
8a69aa2884
fix(console): stop advertising the education plan outside Dify Cloud ( #41898 )
2026-09-09 04:38:50 +00:00
yyh
8acdb1538b
refactor(api): trim workspace features response contract ( #41948 )
2026-09-08 05:42:22 +00:00
Pranav Agarwal and yunlu.wen
a67f62e9aa
fix(api): enforce RBAC permission on MCP tool provider GET endpoint ( #41547 ) ( #41548 )
...
Co-authored-by: yunlu.wen <yunlu.wen@dify.ai >
2026-09-08 04:43:24 +00:00
Charles
2df92204e9
refactor(models): pass session into CustomizedSnippet accessors ( #40379 )
2026-09-07 05:37:43 +00:00
Xiyuan Chen and autofix-ci[bot]
86134ea99e
feat(rbac): agent RBAC/ACL scenes and resource-locator check bundles ( #41768 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-09-07 04:39:43 +00:00
Pranav Agarwal and Yunlu Wen
067a60e0ac
fix(api): enforce admin and RBAC permissions on model provider model credential GET endpoint ( #41599 ) ( #41600 )
...
Co-authored-by: Yunlu Wen <yunlu.wen@dify.ai >
2026-09-04 09:17:41 +00:00
Byron.wang
b015aa416f
refactor(api): extract account login service and consolidate adapters ( #41184 )
2026-09-03 06:20:21 +00:00
非法操作
59ee8878f9
refactor(api): require active workspace in request context ( #41280 )
2026-09-02 06:54:47 +00:00
Byron.wang and autofix-ci[bot]
c4ea406586
refactor(api): decouple system features and web adapters ( #40772 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-09-01 11:50:52 +00:00
Eddy ZHANG
1977355dd1
refactor(console): dep-inject model provider payloads with @model_validate ( #41539 )
2026-09-01 04:24:45 +00:00
Eddy ZHANG
6130f081e0
refactor(console): dep-inject account payloads with @model_validate ( #41500 )
2026-08-31 00:52:10 +00:00
lin
1264d29a4f
chore: remove unnecessary type conversions ( #41454 )
2026-08-29 07:04:18 +00:00
wangxiaolei
05b00574aa
chore: add permission check back ( #41369 )
2026-08-27 07:45:50 +00:00
wangxiaolei
6a1b23935f
chore: remove permission check ( #41349 )
2026-08-27 05:29:38 +00:00
73dd8739ef
feat: optimize resource access config logic ( #41164 )
...
Co-authored-by: fatelei <fatelei@gmail.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-26 07:18:57 +00:00
非法操作 and autofix-ci[bot]
f360a7bf94
fix: allow OAuth trigger builder verification without credentials ( #39199 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-25 05:32:27 +00:00
非法操作 and autofix-ci[bot]
ef92cb7c65
refactor(api): complete account education boundary ( #41153 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-25 01:48:12 +00:00
+21
0024a845f7
feat: support agent skill ( #39675 )
...
Signed-off-by: kenwoodjw <blackxin55+@gmail.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: zxhlyh <jasonapring2015@outlook.com >
Co-authored-by: 起岚 <155608604+xiaoyaoqilan@users.noreply.github.com >
Co-authored-by: Parman Mohammadalizadeh <prmma23@gmail.com >
Co-authored-by: Escape0707 <tothesong@gmail.com >
Co-authored-by: Xin Zhang <zhangxin@dify.ai >
Co-authored-by: iridescentWen <66297467+iridescentWen@users.noreply.github.com >
Co-authored-by: Bond Zhu <37842169+MRZHUH@users.noreply.github.com >
Co-authored-by: KVOJJJin <jzongcode@gmail.com >
Co-authored-by: Joel <iamjoel007@gmail.com >
Co-authored-by: 非法操作 <hjlarry@163.com >
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com >
Co-authored-by: Asuka Minato <i@asukaminato.eu.org >
Co-authored-by: Chester <superdiao6@gmail.com >
Co-authored-by: WH-2099 <wh2099@pm.me >
Co-authored-by: Jony <619963502@qq.com >
Co-authored-by: Jony <13896935+zyz619963502zyz@users.noreply.github.com >
Co-authored-by: Harsh Kashyap <harsh.kashyap2001@gmail.com >
Co-authored-by: Harsh Kashyap <Harsh23Kashyap@users.noreply.github.com >
Co-authored-by: kenwoodjw <blackxin55+@gmail.com >
Co-authored-by: csurong <csurong1@gmail.com >
Co-authored-by: caosurong <surong.cao@thinkingdata.cn >
Co-authored-by: Taranum Wasu <81034301+Taranum01@users.noreply.github.com >
Co-authored-by: Taranum01 <50813317+Taranum01@users.noreply.github.com >
Co-authored-by: Pranav Agarwal <agarwalpranav0711@gmail.com >
Co-authored-by: Stephen Zhou <hi@hyoban.cc >
Co-authored-by: zl86790 <marshal_li_b@163.com >
Co-authored-by: QuantumGhost <obelisk.reg+git@gmail.com >
Co-authored-by: yunlu.wen <yunlu.wen@dify.ai >
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
2026-08-24 05:29:14 +00:00
Yansong Zhang
e35de2d3aa
fix: align network access authorization with main
2026-08-24 13:18:36 +08:00
Yansong Zhang
25e9f8c9bd
Merge remote-tracking branch 'origin/main' into song/snp-682-ip-allowlist
2026-08-24 13:15:51 +08:00
非法操作 and autofix-ci[bot]
ed45016475
refactor(api): standardize console billing portal errors ( #41055 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-08-24 01:55:48 +00:00
Pranav Agarwal
24f5e2ac69
fix(api): enforce admin and RBAC permissions on default model and provider models GET endpoints ( #41099 ) ( #41100 )
2026-08-23 07:33:57 +00:00
Byron.wang
b38d907ede
refactor(api): finish account controller application boundary ( #40440 )
2026-08-21 08:46:06 +00:00
Byron.wang
a52adef203
refactor(api): extract change email state machine ( #40439 )
2026-08-21 08:13:23 +00:00
Byron.wang
3b05b5e553
refactor(api): move account lifecycle into application services ( #40438 )
2026-08-21 08:05:43 +00:00
Byron.wang
1d79b87307
refactor(api): move account access behind application services ( #40437 )
2026-08-21 05:56:30 +00:00
Yansong Zhang
2c254a4a70
feat: manage reusable network access groups
2026-08-21 11:29:28 +08:00
WH-2099
a5e284e6b1
fix(plugin): protect endpoint listings ( #40897 )
2026-08-21 02:17:58 +00:00
Yansong Zhang
0f5d9ebd72
feat: add network access policy console API
2026-08-20 18:14:33 +08:00
Pranav Agarwal
43b6d8e32e
fix(api): enforce admin and RBAC permissions on tool OAuth custom client GET endpoint ( #40944 ) ( #40945 )
2026-08-20 09:10:02 +00:00
CodingOnStar
Byron.wangandJyong
Yansong Zhang
yyh
林玮 (Jade Lin)andJoel
Asuka Minato
wangxiaoleiandautofix-ci[bot]
Sourav Rajviandautofix-ci[bot]
hjlarry
Wu Tianweiandautofix-ci[bot]
L1nSn0w
Pranav Agarwalandyunlu.wen
Charles
Xiyuan Chenandautofix-ci[bot]
Eddy ZHANG
lin
WH-2099
