* add: new executions:update permissions and apply it to PUT /api/v1/executions endpoint
* add: executions:update permissions check in UI
* fix: review feedback
* guard prediction API against webhook/schedule trigger flows and surface trigger-specific API snippets
* Enhance error message for webhook trigger configuration in executeAgentFlow function to include the configured HTTP method
* update: type field for some credentials where string type could expose secrets
* update: contribution docs with note on adding credential files
* update: add reveal for url type, permissions for get credential by id
* fix: review feedback
* fix: review feedback
* update: agentflow package with credentials ui changes
* fix: test coverage, add tests for changes in CreateCredentialDialog
* revert: changes to agentflows package
* feat(ambient-agents): Add webhook trigger UI on start node (#6068)
* feat(ambient-agents): Add webhook trigger UI on start node, handles in both canvas, agentflow is out of scope but shows temporary ui
* fix: resolve webhookURL copy button not appearing after first save
useParams() does not update when window.history.replaceState() is used
on first save (bypasses React Router). Fall back to Redux canvas.chatflow.id
so NodeInputHandler re-renders reactively when SET_CHATFLOW is dispatched.
* feat/365-366-Webhooks-Server-Route-And-Execution (#6164)
* feat(webhooks): add server route and validation for webhook trigger
- POST /api/v1/webhook/:id route (accepts all HTTP methods via router.all)
- Validates chatflow exists and is configured as webhookTrigger, returns 404 otherwise
- Wraps raw webhook payload as incomingInput.webhook for buildAgentflow
Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
* feat(agentflow): wire up webhook flow execution (FLOWISE-366)
- Resolve {{ $webhook.field }} template variables in agentflow nodes
- Add required body param validation in webhook service
- Whitelist /api/v1/webhook/ to bypass global auth middleware
- Set $input to JSON payload in custom function nodes for webhook flows
- Add $webhook. autocomplete suggestions in node editors
- Unit tests for body param validation and pre-mutation body pass-through
Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
* feat(webhooks): namespace webhook payload under $webhook.body.*
- Wrap webhook body as { webhook: { body } } in controller so $webhook.body.*,
$webhook.headers.*, and $webhook.query.* can coexist as distinct namespaces
- Update suggestion option IDs/labels in UI from $webhook.* to $webhook.body.*
- Restrict webhookTrigger start option to agentflowv2 client only
- Remove static webhookURL placeholder from NodeInputHandler (agentflow)
---------
Co-authored-by: Claude Sonnet 4.6 <[email protected]>
* feat/389-Webhooks-Headers-Query-params-Methods-validation (#6217)
* feat(ambient-agents): Add webhook trigger UI on start node, handles in both canvas, agentflow is out of scope but shows temporary ui
* fix: resolve webhookURL copy button not appearing after first save
useParams() does not update when window.history.replaceState() is used
on first save (bypasses React Router). Fall back to Redux canvas.chatflow.id
so NodeInputHandler re-renders reactively when SET_CHATFLOW is dispatched.
* feat(webhooks): add headers, query params & body validation to webhook trigger
- Add webhookTrigger input type to Start node with HTTP method, content
type, and expected headers/query/body param configuration
- New /api/v1/webhook/:id route with method, content-type, header, body,
and query param validation (400/405/415 on mismatch)
- Namespace webhook payload as $webhook.body.*, $webhook.headers.*,
$webhook.query.* in the flow runtime
- Resolve $webhook.* variables in downstream nodes via buildAgentflow.ts
- Auto-unwrap form-encoded `payload` JSON strings (e.g. GitHub webhooks)
so $webhook.body.* paths work regardless of content type
- Expose webhook variable suggestions in the node variable picker
- Show copyable webhook URL in the Start node canvas UI
* fixed a bug where downstream nodes cant reference values via node id, and a lowercase headers issue
* feat:533 webhook secrets (#6227)
* feat: add webhook secret & HMAC signature verification to webhook trigger
Adds server-side webhook secret management (generate/clear/verify) and a
UI control in the Start node for configuring the secret, signature header,
and signature type (HMAC-SHA256 or plain token). Raw request body is now
captured before JSON parsing so HMAC signatures can be verified against the
original bytes. Migrations added for all four supported databases.
* fix: accept string-coerced numbers and booleans in webhook body type validation
application/x-www-form-urlencoded payloads deliver all values as strings,
so the strict typeof check was incorrectly rejecting valid numeric ("42")
and boolean ("true"/"false") values. Updated the filter to coerce and
validate instead, with tests covering both JSON and form-encoded cases.
* fix: prevent mass-assignment of webhookSecret fields in chatflow create/update
Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
---------
Co-authored-by: Claude Opus 4.6 (1M context) <[email protected]>
* feat:367 | Webhooks - Human Input + Callback Support (#6263)
* Added HITL support for webhooks
* feat: add async callback URL to webhook trigger
Optional Callback URL / Secret on the Start node (or x-callback-url
header). Webhook now returns 202 immediately and POSTs SUCCESS,
STOPPED (HITL), or ERROR to the callback URL, signed with HMAC-SHA256
when a secret is set. Retries 3x with 0s/3s/6s backoff.
* used getErrorMessage for error messages
* feat: add object/array body param types and per-option show/hide on d… (#6273)
* feat: add webhook secret & HMAC signature verification to webhook trigger
Adds server-side webhook secret management (generate/clear/verify) and a
UI control in the Start node for configuring the secret, signature header,
and signature type (HMAC-SHA256 or plain token). Raw request body is now
captured before JSON parsing so HMAC signatures can be verified against the
original bytes. Migrations added for all four supported databases.
* fix: accept string-coerced numbers and booleans in webhook body type validation
application/x-www-form-urlencoded payloads deliver all values as strings,
so the strict typeof check was incorrectly rejecting valid numeric ("42")
and boolean ("true"/"false") values. Updated the filter to coerce and
validate instead, with tests covering both JSON and form-encoded cases.
* Added HITL support for webhooks
* feat: add async callback URL to webhook trigger
Optional Callback URL / Secret on the Start node (or x-callback-url
header). Webhook now returns 202 immediately and POSTs SUCCESS,
STOPPED (HITL), or ERROR to the callback URL, signed with HMAC-SHA256
when a secret is set. Retries 3x with 0s/3s/6s backoff.
* feat: add object/array body param types and per-option show/hide on dropdowns
- Add object, array[string/number/boolean/object] as webhook body param types, available when content type is application/json
- Extend options fields with show/hide conditions so individual dropdown choices can be hidden based on other param values
* fix: prevent SSRF in webhook callback URL
Remove the x-callback-url header override that allowed any external
caller to control where the server sends POST requests. Callback URL
now only comes from the Start node config (authenticated users).
Add checkDenyList validation to block callback URLs targeting private
networks, cloud metadata endpoints, and loopback addresses.
* fix: exclude HTTP method from webhook URL copy
Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
* feat: enhance webhook functionality in Start node
- Added new input options for webhook handling, including input modes (Custom Text, No Input, Full Webhook Payload) and response modes (Synchronous, Asynchronous, Streaming).
- Implemented request signature verification and callback URL handling for asynchronous responses.
- Updated validation logic for webhook requests, including content type and required headers.
- Enhanced tests to cover new webhook features and validation scenarios
* adds a generic SSE observer primitive and a webhook listener registry that lets the canvas watch incoming webhook executions live
* fix webhook tests by mocking webhook listener registry and updating expectations for chatId in createWebhook function
* fix: harden webhook trigger surface against SSRF, secret leakage, and listener data exposure
* fix: improve webhook listener reliability with initial heartbeat and logging
---------
Co-authored-by: Claude Sonnet 4.6 <[email protected]>
Co-authored-by: Henry <[email protected]>
* show scheduled flow status
* enhance ScheduleStatusBadge to display loading state and update tooltip text. Refactor schedule status retrieval in Agentflows to handle errors and improve state management.
* feat: implement scheduling functionality for AgentflowV2
- Added ScheduleQueue class for managing scheduled jobs using BullMQ.
- Introduced scheduleService for creating, updating, and disabling schedules.
- Integrated schedule validation and cron expression handling.
- Enhanced chatflow service to manage schedules for agentflows.
- Added UI components for time and day selection (TimePicker, WeekDaysPicker, MonthDaysPicker).
- Updated NodeInputHandler to support new input types for scheduling.
- Improved validation for schedule configurations in agentflows.
* feat: implement schedule management for agentflows
- Refactor ScheduleQueue to utilize executeScheduleJob for job execution.
- Add new endpoints for schedule status retrieval and enabling/disabling schedules in chatflows.
- Update chatflow service to handle schedule creation, updates, and deletions more effectively.
- Introduce DatePicker component for date input in UI.
- Enhance CanvasHeader to manage schedule state and toggle functionality.
- Integrate schedule validation logic to ensure proper configuration before enabling schedules.
- Update dependencies to include node-cron for improved scheduling capabilities.
* feat(schedule): refactor schedule services and tests for schedule job
- Seperate the utils function from schedule service.
- Created comprehensive unit tests for all utility functions in `utils.test.ts`, covering various scenarios for cron expression validation, visual picker validation, and schedule resolution.
- Ensured proper handling of edge cases and error messages for invalid inputs.
* feat(schedule): remove timestamp in schedule tabes to support sqlite
- Change the way to update the existing schedule to avoid typescript issue when building.
- Add merge function in mockRepo in schedule service test.
* fix(schedule): add nullable to optional entity columns and entity interfaces
- Add nullable: true to lastRunAt, nextRunAt, endDate on ScheduleRecord
entity to match migration DDL and prevent runtime errors
- Add IScheduleRecord and IScheduleTriggerLog interfaces to Interface.ts
- Have entities implement their respective interfaces per codebase convention
* fixed tests and hide schedule input from package/agentflow
* feat: integrate IdentityManager into worker and queue management
- Remove supporting cron express with 6 fields (second)
- Calculate the prediction usage in cron job
* feat: add support for MIN_SCHEDULE_INTERVAL_SECONDS in cron job configuration and validation
* fixed broken tests
* UI UX fixes for scheduler in dark mode
* fix(schedule): remove unnecessary UUID generation in createOrUpdateSchedule
* adds required scheduleInputMode column with text/form/none variants, ChatType.SCHEDULED, trigger-logs endpoint + drawer UI, IANA timezone dropdown, and dark-mode UX polish.
* add deleteScheduleTriggerLogs endpoint and UI integration for log deletion
* feat: enhance cron job handling for last day of month (L) in ScheduleBeat and related utilities
Co-authored-by: Copilot <[email protected]>
* - fix(start-node): persist declared defaults of newly-visible fields so saves don't drop required values
- update ui for last day to include hints and next run datetime
---------
Co-authored-by: Jackie Chui <[email protected]>
Co-authored-by: Henry <[email protected]>
Co-authored-by: Copilot <[email protected]>
* feat: implement the custom MCP Server in tool
- Implemented MCPServersTable for displaying MCP server data with status badges and tools count.
- Created CustomMcpServerDialog for adding and editing custom MCP servers with validation and authorization features.
- Integrated MCP server management into the Tools view with tabbed navigation for Custom Tools and Custom MCP Servers.
- Added pagination and loading states for MCP servers.
* tfix nodes.test.ts ESM load crash
* feat(custom-mcp): harden security, scalability, and UI polish
* enhance custom mcp server creation flow and UI updates
* feat(mcp): add MCP server handshake timeout, enhance UI UX for editing custom mcp server
---------
Co-authored-by: Henry <[email protected]>
* - pass langchain message instance as a whole to avoid missing reasoning item
- add `normalizeMessagesForStorage` function to convert LangChain message instances into plain JSON objects, improving database storage efficiency and UI readability
* - Fix ChatflowConfigurationDialog for inconsistent behaviour
- Added a button in NodeExecutionDetails to toggle visibility of all available tools, improving user experience.
* display input data for tool node in execution
* enhance ChatflowConfigurationDialog with new configuration sections and improved UI
* fix: remove background color override for MuiSvgIcon in dark mode
* feat: turn chatflow into MCP server
- Added '@modelcontextprotocol/sdk' version 1.12.0
- Added 'zod' version 3.25.32
- Added migrations for MCP server config
- Added MCP endpoints (Streamable HTTP and SSE)
- Added MCP server configuration tab
- Added unit tests for MCP endpoints and services
* feat: Implement MCP endpoint service with SSE support
- Added a new MCP endpoint service to handle requests for chatflows, including support for SSE (Server-Sent Events) and stateless transport.
- Introduced functions for handling MCP requests, SSE connections, and message routing.
- Implemented error handling for service errors and session management for SSE.
- Created unit tests for the MCP server service, covering configuration CRUD operations and token management.
- Updated the MCP server configuration logic to ensure proper validation and error handling.
- Refactored the UI component to utilize a new API hook for fetching MCP server configuration.
* chore: handle error when get mcp server config
* - Introduced a new chat type 'MCP' in the ChatType enum, including UI filters and backend processing.
- Updated the zod dependency version specification to support both ^3.25.76 and ^4.
- Fix setHasExistingConfig
* fix: update chatflowCallback to enable chatflow building with active state for MCP
* refactor: remove deprecated SSE transport endpoints and related logic
- Removed handleGet and handleSseMessage methods from MCP endpoint controller.
- Updated MCP endpoint routes to eliminate SSE-related routes.
- Refactored service layer to remove SSE session management and related methods.
- Updated tests to remove references to deprecated SSE functionality.
- Adjusted UI component to remove SSE endpoint URL handling.
* chore: update MCP endpoint routes and references to align with new API structure
* chore: remove abortChatMessage when mcp request closed
* optimize mcpserver dialog for dark mode
* feat: implement form input schema generation for agentflow chatflows
---------
Co-authored-by: Henry <[email protected]>
* feat: add client-scoped filtering to node input params
Adds a `client` field to `INodeParams` and `INodeOptionsValue` so node
authors can restrict params or dropdown options to specific clients
(agentflowv2 canvas or agentflowsdk). The server filters params before
responding based on a `?client=` query param passed by each client.
- Add `ClientType = 'agentflowv2' | 'agentflowsdk'` to Interface.ts
- Add `client?: Array<ClientType>` to INodeParams and INodeOptionsValue
- Server nodes service: add filterNodeByClient() applied to all node fetch paths
- Server nodes controller: read and forward ?client= query param
- packages/agentflow API: pass ?client=agentflowsdk on all node fetches
- packages/ui API: pass ?client=agentflowv2 on all node fetches
- Add tests for filterNodeByClient and update agentflow node API tests
Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
Made-with: Cursor
* refactor: move filterNodeByClient to bottom of nodes service
Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
* fix: address PR review comments on client-scoped node filtering
- Validate ?client= query param against allowlist before casting to ClientType
- Extract VALID_CLIENT_TYPES const to flowise-components Interface.ts as single source of truth
- Make filterNodeByClient pure by returning a new object instead of mutating node.inputs
- Add immutability test to nodes.test.ts
Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
---------
Co-authored-by: Claude Sonnet 4.6 <[email protected]>
* feat(ui): add document store rename/delete actions for cards and table
* refactor(docstore): simplify local rename state update
* refactor(docstore): use DeleteDocStoreDialog in list delete flow and keep safe error fallback
* fix(ui): allow XML tag for rich input
- Introduced utilities for escaping and unescaping non-standard XML/HTML tags to preserve them during markdown processing.
- Updated RichInput and ExpandRichInputDialog components to utilize the new XML tag utilities for handling custom tags.
- Added Jest configuration for the UI package and created tests for the XML tag utilities to ensure functionality.
- Updated package.json to include Jest as a dependency and added a test script.
* address code review comments from Gemini
* allow html tag in markdown editor
* add test case for markdown format
* update dependency in ui
- Added a new `useMarkdown` prop to RichInput for toggling between Markdown and HTML content.
- Updated the `extensions` function to conditionally configure link support based on the `useMarkdown` prop.
- Modified the content update logic to handle Markdown conversion when `useMarkdown` is enabled.
- Adjusted initial content loading to respect the `useMarkdown` setting for proper content type detection.
* fix: disable Generate button when required fields are not filled
* add onBlur handler to Input component and simplify data handling in DocStoreInputHandler
---------
Co-authored-by: Henry <[email protected]>
* update @tiptap dependencies and enhance RichTextEditor functionality
* feat(customMention): add Markdown support for custom mentions
- Implemented a custom tokenizer for recognizing {{...}} syntax in Markdown.
- Added parsing and rendering functions to handle mentions in Markdown format.
- Enhanced the CustomMention component to support Markdown serialization and deserialization.
* update tiptap to latest 3.20.4
* update langchain and all related scoped packages to v1, deprecate agents and llms, rename and upgrade chat models
* add reasoning capability to Agent and LLM
* add token cost to usageMetadata
* update azure and chat openai
* restore executable permission for husky pre-commit hook
* refactor(agentflow): implement extractResponseContent utility for consistent response handling
- Introduced extractResponseContent function to streamline response content extraction across various components.
- Updated multiple files to utilize the new utility, enhancing code readability and maintainability.
- Adjusted model configurations and added new parameters for Gemini models to improve functionality.
* added a mock implementation for the logger in the URL security utilities test file to isolate tests and improve reliability.
* chore: update package.json and pnpm-lock.yaml to add uuid dependency and mock multer-azure-blob-storage in Jest config
- Added uuid dependency with version 10.0.0 and request>uuid with version 3.4.0 in package.json.
- Updated pnpm-lock.yaml to reflect the new uuid dependency and its deprecation notice.
- Modified Jest configuration to mock multer-azure-blob-storage to avoid module resolution issues with uuid/v4.
* gpt 5.4 models
* - Changed the stream conversion method in convertTextToSpeechStream to utilize Readable.fromWeb, enhancing compatibility with web streams.
- Added '/api/v1/chatmessage/abort' to the WHITELIST_URLS array to allow for aborting chat messages in the API.
* - Refactors how agentflow nodes (Agent, ConditionAgent, LLM) handle images in chat messages so that base64 is only used during model invocation
- Storage and chat history keep file references only
- Added comprehensive test cases to ensure correct handling of base64 image data and file references
* fix unit test
* implement filename sanitization to prevent path traversal vulnerabilities
* fix(validator): normalize backslashes in file names for cross-platform compatibility
* updated utils to process messages with images, converting stored-file references to base64 for model invocation, and implement interfaces
* add sanitization to unwanted keys when processing images
* add uuid to components package.json
* move allow image uploads params on chat models
* add encodingformat to openai embeddings
* Refactor output parsing for reasoning models
* Update ConditionAgent to version 2.0, refactor system prompt handling, and enhance message preparation logic
* add claude settings local json to gitignore
* remove claude settings local json
---------
Co-authored-by: yau-wd <[email protected]>
* Add Input Validation to Password Reset
Previously, the new password used in password resets was not being validated to meet strength requirements. This change:
1. Adds validation to the new password
2. Small refactor to reduce code duplication related to the error message displayed when the new password has insufficient strength
* Update packages/server/src/enterprise/utils/validation.util.ts
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* fix: password validation
* fix(account.service.ts): update response status and improve error handling for password reset
---------
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: yau-wd <[email protected]>
* feat(database.util.ts): add function to check if column exists in table
* feat(migrations): add permission column to apikey table
* chore(services/apikey): remove auto-create default API key
* chore: remove auto-create default API key
* fix(migrations): rename permission to permissions in apikey table
* feat(services/apikey): add permissions to create and update
* feat(views/apikey): add permissions to create and update
* feat(api): use API key permissions instead of role permissions
* feat(permissions): filter by user.permissions except for ROLE type
* feat(services/apikey): filter keys by user permissions in getAllApiKeys
* feat(services/apikey): limit API key permissions to user permissions during creation/update
* fix(database.util.ts): replace non-null assertion with explicit error handling
* feat(services/apikey): log errors for malformed API key permissions
* refactor(services/apikey): extract permission validation
* feat(permission): enhance permission filtering based on user features and platform type
* chore(migrations): lower API key permission value
* Update packages/ui/src/views/apikey/APIKeyDialog.jsx
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* Update packages/ui/src/views/apikey/APIKeyDialog.jsx
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
* refactor: remove deprecated APIKEY_PATH and APIKEY migration
* refactor(apikey): remove functionality related to import apikey
* feat(permission): filter out workspace and admin categories for non-ROLE
* feat(services/apikey): validate API key permissions during create and update
* chore(migrations): clean up role permissions values
* fix(migrations): handle corrupted permissions gracefully
* fix(server/src/index.ts): add error handling for API key permissions parsing
* fix(APIKeyDialog.jsx): handle corrupted permissions when editing API key
* fix(views/apikey/index.jsx): handle corrupted permissions in API key list
* fix(services/apikey): validate permissions JSON in API key operations
* Potential fix for code scanning alert no. 83: Clear-text logging of sensitive information
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
* feat(migrations): change ApiKey.permissions column from TEXT to JSON
* Update packages/server/src/services/apikey/index.ts
Co-authored-by: Jocelyn Lin <[email protected]>
* feat(PricingDialog.jsx): handle downgrade with excessive apikey permissions
* feat(controllers\apikey): enforce permissions validation
* chore(services/apikey): remove redundant null checks
* fix(services/dataset): throw error when dataset not found before fetching rows
---------
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Jocelyn Lin <[email protected]>
Remove postgres vector store data when deletion
- Introduced a new `doc_id` column in MySQL, Postgres, and SQLite record managers to support document identification.
- Updated the `update` method to handle both string and object formats for keys, allowing for better flexibility in document updates.
- Enhanced `listKeys` method to filter by `doc_id` when provided in options.
- Updated vector store integrations to utilize the new `doc_id` filtering capability
Henry Heng