Commit Graph
3476 Commits
Author SHA1 Message Date
yau-wd c4e689b97a Feature/Add Audit and Deletion (#5994)
* feat(audit): add emitEvent and file-based audit logging

* fix(sanitize.util.ts): correct IPv6 sanitization for audit log IP masking

* feat(account): add account deletion

* fix(sanitize.util.ts): add recursive sanitization for nested metadata

* fix(MainLayout/Header/Workspace): refresh workspace list when clicking dropdown

* feat(views/account): require typed confirmation for account deletion
2026-04-02 22:15:05 +08:00
Ilango 1707688e62 fix: streaming response due to high number of redis pub/sub channels, better handling of connection issues (#6114)
* fix: unsubscribe redis pubsub when connection closes during prediction or after successful response

* update: add heartbeat to keep connection alive and start/stop heartbeat on server start/stop

* refactor: redis pub/sub methods, add unsubscribe, await subscribe

* fix: redundant unsubscribe

* fix: use map to store clients list

* fix: update how thinking event is handled in redis pub/sub and sse

* fix: review feedback
2026-04-02 13:14:40 +05:30
jslim-23andjoonlim 14b6e4159e fix(components): reuse extracted response content for ConditionAgent JSON parsing (#6072)
* fix: normalize conditionagent response content before parsing

* fix(components): reuse normalized response content in ConditionAgent

---------

Co-authored-by: joonlim <[email protected]>
2026-04-02 06:46:28 +08:00
Henry Heng d16c97eb23 Fix: restore token-by-token streaming for chains using createTextOnlyOutputParser (#6086)
fix: restore token-by-token streaming for chains using createTextOnlyOutputParser
2026-04-02 06:45:53 +08:00
Henry Heng 45e3ad6824 feat(ChatOllama): add 'think' input option for reasoning support (#6116) 2026-04-02 06:45:42 +08:00
Ilango 76c4fc9723 fix: lint issues (#6115) 2026-04-02 05:45:22 +08:00
lifandHenry Heng 0527333be0 fix: preserve sourceDocuments and metadata in ExecuteFlow node (#5972)
* fix: preserve sourceDocuments and metadata in ExecuteFlow node

The Execute Flow node in AgentFlow V2 was only extracting the text
content from chatflow responses, discarding sourceDocuments, usedTools,
artifacts, and fileAnnotations metadata. This fix preserves all metadata
fields in the return output and streams them via SSE when the node is
the last in the flow.

Fixes #5949

Signed-off-by: majiayu000 <[email protected]>

* fix: address review feedback on PR #5972

- Use object destructuring for response.data metadata extraction
- Extend SSE streaming test to cover artifacts and fileAnnotations

Signed-off-by: majiayu000 <[email protected]>

* Delete packages/components/nodes/agentflow/ExecuteFlow/ExecuteFlow.test.ts

* Update ExecuteFlow.ts

* Update ExecuteFlow.ts

---------

Signed-off-by: majiayu000 <[email protected]>
Co-authored-by: Henry Heng <[email protected]>
2026-04-02 01:10:15 +08:00
b93ccf3109 Add Permission Checks to Vector Store API's (#6045)
* Add Permission Checks to Vector Store API's

* Update packages/server/src/routes/openai-assistants-vector-store/index.ts

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

---------

Co-authored-by: christopherholland-workday <[email protected]>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: yau-wd <[email protected]>
2026-04-01 09:51:56 -07:00
lifandHenry Heng 9f96992d7e fix: skip empty metadata filter in RetrieverTool to prevent vector store error (#5976)
* fix: skip empty metadata filter in RetrieverTool to prevent vector store error

When a user adds an "Additional Metadata Filter" then removes it, the
empty filter object {} was still passed to the vector store, causing
Pinecone (and potentially others) to reject it with "You must enter a
filter object with at least one key-value pair." Now checks that the
resolved filter has at least one key before assigning it.

Fixes #4900

Signed-off-by: majiayu000 <[email protected]>

* fix: rename metadatafilter to metadataFilter for camelCase consistency

Signed-off-by: majiayu000 <[email protected]>

* Delete packages/components/nodes/tools/RetrieverTool/RetrieverTool.test.ts

---------

Signed-off-by: majiayu000 <[email protected]>
Co-authored-by: Henry Heng <[email protected]>
2026-04-02 00:46:01 +08:00
Frank cc2a87eb9e fix(gmail): include draft id in update_draft tool schema (#5925)
* fix(gmail): require draft id in update_draft schema

* fix(gmail): validate update_draft id format
2026-04-01 22:48:45 +08:00
Ilangoandyau-wd 6d668fbba1 feat: email change confirmation flow (#5992)
* fix: update stripe email when changing email in account settings

* fix: review feedback

* fix: circular dependency, destroy all sessions on email change

* add: email change confirmation flow + smtp available check + enable email flows for oss and enterprise

* add: confirm email change page. update: change email behavior in account settings

---------

Co-authored-by: yau-wd <[email protected]>
2026-04-01 20:16:13 +05:30
dc07f4062b Fix IDOR in Evaluators and Evaluations Endpoints (#6050)
* Fix IDOR in Evaluators and Evaluations Endpoints

* chore(services/evaluations & EvaluatorDTO): replace explicit field assignment with stripProtectedFields

---------

Co-authored-by: christopherholland-workday <[email protected]>
Co-authored-by: yau-wd <[email protected]>
2026-04-01 22:32:43 +08:00
Abdul Samad Siddiqui 4fc67b153a fix(models): correct multiple model label typos (Groq, Mistral, Bedrock) (#6104)
* fix(models): correct multiple model label typos in dropdown menus

* review resolved
2026-04-01 18:40:16 +08:00
0d29e4d0df Fix Mass Assignment in Chatflow Endpoints (#5953)
* Fix Mass Assignment in Chatflow Endpoints

* Fix Mass Assignment in Tools Endpoint

* Revert "Fix Mass Assignment in Tools Endpoint"

This reverts commit ed42f048eb.

* Fix Mass Assignment in Chatflow Endpoints

* chore(controllers/chatflows): replace explicit field assignment with stripProtectedFields

---------

Co-authored-by: christopherholland-workday <[email protected]>
Co-authored-by: yau-wd <[email protected]>
2026-04-01 18:26:36 +08:00
github-actions[bot]andgithub-actions[bot] 6565c9090e chore: bump @flowiseai/agentflow to 0.0.0-dev.9 (#6106)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-03-31 14:36:20 -07:00
j-sanaa e2351c5821 Feat/agentflow add support for Variable System & Syntax Support (#6067)
* Initial flow

* Add tiptap - mention dependency similar to v2

* Add functionalities similiar to V2

* update to tiptap to 3.20.4

* Fix lint error

* Added missiing test cases for new files

* Styling changes

* InputMessage should be visible on initial load

* Fix gemini comment

* Remove outdated SelectVariable

* Add icon support similar to v2

* Fix gemini comments

* Remove input folder and utils folder under atoms

* Fix test error

* Fix initlalDefualts not being set

* Fix after merge with main

* Fixes for review comments

* Fix review comments

* New test cases added for fixes

* Remove additional space
2026-03-31 14:15:52 -07:00
christopherholland-workdayandchristopherholland-workday faa571c961 Mass Assignment in Assistant Update Endpoint (#5945)
* Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource Reassignment

* Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource Reassignment

* Mass Assignment in Assistant Update Endpoint Allows Cross-Workspace Resource Reassignment

* Mass Assignment in Assistant Update Endpoint

---------

Co-authored-by: christopherholland-workday <[email protected]>
2026-03-31 23:02:05 +08:00
Mewyii 24e713b99e mini-feat: Store page sizes of views in local storage (#5830)
* page sizes for agent execution view, agentflow view, chatflow view and docstore view are now stored in local storage.

* Code improvements.
2026-03-31 21:33:34 +08:00
Abdul Samad Siddiqui 6412c204c8 fix(models): correct o4-mini pricing under chatOpenAI (#6079)
fix(models): correct o4-mini pricing to fix 86% underbilling bug
2026-03-31 20:58:32 +08:00
Abdul Samad Siddiqui 47511669ed fix(models): correct sonar-deep-research model name in Perplexity config (#6069)
The sonar-deep-research entry under chatPerplexity had its name field incorrectly set to 'sonar' instead of 'sonar-deep-research'. This caused two issues:

1. Users selecting sonar-deep-research in the UI would hit the regular sonar API endpoint instead of the deep research endpoint

2. A duplicate name collision with the existing sonar entry, causing incorrect cost lookups
2026-03-31 20:57:10 +08:00
Rohan Patil d8b7fefe36 feat: add Pipedream MCP support (#5858)
* feat: add Pipedream MCP support

* fix: applied reviewer suggestions

* chore: unwanted console log cleanup
2026-03-31 20:50:04 +08:00
github-actions[bot]andgithub-actions[bot] 1b4b9facfb chore: bump @flowiseai/agentflow to 0.0.0-dev.8 (#6096)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-03-30 18:15:42 -07:00
j-sanaa c6062d7fed Fix/agentflow fix field name mismatch between SDK internal representation and server expectation (#6092)
* Intial changes

* Test changes

* Fix gemini suggestion

* revert changes to RichTextEditor

* Changes to create a common base class for NodeData and NodeDataBase

* Fix TS error

* Revert all changes to RichTextEditor

* Fixed comments in nodeFactory.ts

* Remove migration code

* Removed unwanted change in behaviour

* Remove all changes to RichTextEditor and test

* Rename NodeDataBase to NodeDataSchema
2026-03-30 17:57:59 -07:00
Jocelyn Lin b44031e2a2 Update README.md for @flowiseai/agentflow (#6088) 2026-03-30 11:33:18 -07:00
github-actions[bot]andgithub-actions[bot] 3491e2bfe1 chore: bump @flowiseai/agentflow to 0.0.0-dev.7 (#6087)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-03-30 11:16:55 -07:00
yau-wd 3ecb97865a Revert "fix: redis pub/sub and streaming response issue" (#6084)
Revert "fix: redis pub/sub and streaming response issue (#6008)"

This reverts commit 34aa82e3a0.
2026-03-30 21:00:47 +08:00
Ilango 34aa82e3a0 fix: redis pub/sub and streaming response issue (#6008)
* fix: unsubscribe redis pubsub when connection closes during prediction or after successful response

* update: add heartbeat to keep connection alive and start/stop heartbeat on server start/stop

* refactor: redis pub/sub methods, add unsubscribe, await subscribe

* fix: redundant unsubscribe

* fix: use map to store clients list

---------
2026-03-30 20:18:23 +08:00
06dc0e1e96 Fix IDOR Takeover in PUT /api/v1/user (#5986)
Co-authored-by: christopherholland-workday <[email protected]>
Co-authored-by: yau-wd <[email protected]>
2026-03-27 16:55:33 +08:00
7dc48adbf0 Fix Mass Assignment in Variables Endpoints (#5955)
* Fix Mass Assignment in Variables Endpoints

* Update packages/server/src/services/variables/index.ts

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

* Fix Mass Assignment in Variables Endpoints

---------

Co-authored-by: christopherholland-workday <[email protected]>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: yau-wd <[email protected]>
2026-03-27 15:50:00 +08:00
Jocelyn Lin 106f2113a6 fix(ui): limit Markdown rendering on RichInput (#6061)
- Added a new `useMarkdown` prop to RichInput for toggling between Markdown and HTML content.
- Updated the `extensions` function to conditionally configure link support based on the `useMarkdown` prop.
- Modified the content update logic to handle Markdown conversion when `useMarkdown` is enabled.
- Adjusted initial content loading to respect the `useMarkdown` setting for proper content type detection.
2026-03-26 12:18:17 -07:00
j-sanaa 02813aa703 Feat/agentflow Add support for create credential (#6048)
* Initial flow

* Fix styling to look the same as v2

* Add new atoms - SwitxhInput, Dropdown and ToolTipWithParser similar to v2

* Add test cases for all changes

* Refactor input default value handling and consolidate utility functions

* Allow imports from utils for atoms

* Fix gemini comments

* Fixed buold issues

* FIx styling and create credentiall behavior

* Add support for edit credentials

* Fix bug to display tool and vector embeddign parameters

* Add CredentialTypeSelector for HTTP node

* Fix to add falback icon in case of error

* Move inputDefaults under core/primitives

* Added fix to check if all mandatory fields have value before submittign a credential

* Fix new credential not being selected on creating

* Fixes made to address comments

* Gemini comment fix

* Fix test error by adding theme

* Refactor getDefaultValueForType to remove null/undefined handling

* Fixed getDefaultValueForType to be generic

* Fixed getDefaultValueForType to take single destructured object parameter
2026-03-25 15:00:22 -07:00
Jocelyn Lin 5cfda919a8 feat(agentflow): Node Info Icon on Toolbar Action (FLOWISE-375) (#6053)
- Reintroduced NodeInfoDialog component with improved structure and functionality.
- Added new properties (badge, tags, documentation) to NodeData interface for better metadata handling.
- Updated flowExport and nodeFactory utilities to preserve new metadata during data processing.
- Implemented tests for NodeInfoDialog to ensure proper rendering and functionality.
- Adjusted Jest configuration to include coverage for the new NodeInfoDialog component.
2026-03-24 17:06:26 -07:00
Justin Head 6f325b0c0f Support CORS credentials (cookies) via env var (#6029) 2026-03-24 16:48:53 -07:00
michaell-workday c93d6c0617 Add dynamic headers option to MCP core for tool call-time (#6044)
* add dynamic headers option to MCP core
2026-03-24 11:01:41 -07:00
christopherholland-workdayandchristopherholland-workday f7d86912fa Fix Chatflow Query to Protect Against Cross-Workspace Chatflow Disclosure (#6043)
Co-authored-by: christopherholland-workday <[email protected]>
2026-03-24 08:59:23 -07:00
97b96f60d3 Fix Credential Data Leak (#6042)
Co-authored-by: christopherholland-workday <[email protected]>
Co-authored-by: yau-wd <[email protected]>
2026-03-24 23:00:19 +08:00
f8defac0d6 Fix Mass Assignment in Tools Endpoint (#5954)
Co-authored-by: christopherholland-workday <[email protected]>
Co-authored-by: yau-wd <[email protected]>
2026-03-24 22:53:21 +08:00
Ilango 27dc52f5e0 fix: session cleanup when using mysql for storing sessions (#5984) 2026-03-24 13:57:49 +05:30
christopherholland-workday 7176dcb409 Additional Improvements to MCP Server Config security (#5943) 2026-03-23 10:36:42 -07:00
d2acf4ced8 Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage (#5901)
* Stop text-to-speach endpoint from accepting arbitrary creds

* Stop text-to-speach endpoint from accepting arbitrary creds

* Hardcoded CORS wildcard on TTS endpoint enables cross-origin credential abuse from any webpage

* add: allow tts in domain validation

---------

Co-authored-by: christopherholland-workday <[email protected]>
Co-authored-by: yau-wd <[email protected]>
Co-authored-by: Ilango Rajagopal <[email protected]>
2026-03-23 21:25:18 +05:30
Henry Heng 34cf28546b release/3.1.1 (#6037)
[email protected]
[email protected] [email protected] [email protected]
2026-03-23 18:38:19 +08:00
MykhailoandHenry 3ffa96457f fix: disable Generate button when required fields are not filled (#5927)
* fix: disable Generate button when required fields are not filled

* add onBlur handler to Input component and simplify data handling in DocStoreInputHandler

---------

Co-authored-by: Henry <[email protected]>
2026-03-23 01:20:25 +08:00
Asharib Ali d923337301 chore: add OpenAI gpt-5.4-mini and gpt-5.4-nano models (#6028)
chore: add OpenAI gpt-5.4-mini and gpt-5.4-nano models to ChatOpenAI model list

Add gpt-5.4-mini and gpt-5.4-nano to the OpenAI models registry with
their correct pricing:
- gpt-5.4-mini: $0.75/MTok input, $4.50/MTok output
- gpt-5.4-nano: $0.20/MTok input, $1.25/MTok output
2026-03-21 22:22:49 +08:00
Jocelyn LinandClaude Sonnet 4.6 1473702b9d feat(agentflow): update behaviour for Start node, Http Node, and validation fixes (FLOWISE-265, FLOWISE-264) (#6027)
* feat(agentflow): update behaviour for Start node, Http Node, and validation fixes (FLOWISE-265, FLOWISE-264)

- Updated behaviors for Start and HTTP nodes
- Fix computeArrayItemParameters crash when non-array field changes
- Fix validateNode to use availableNodes schema when node.data.inputs is missing
- Fix validateNode to respect param.default for required field checks
- Add option.description rendering in dropdown to match legacy UI

Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

* fix dropdown display to match agentflow v2

* add missing credential field on start node

* remove HttpBodyInput component and associated tests (not referenced)

---------

Co-authored-by: Claude Sonnet 4.6 <[email protected]>
2026-03-20 15:33:42 -07:00
Henry Heng 5daf8a3e44 Feat/Add Markdown support to RichInput with Edit/Source toggle (#6021)
* update @tiptap dependencies and enhance RichTextEditor functionality

* feat(customMention): add Markdown support for custom mentions

- Implemented a custom tokenizer for recognizing {{...}} syntax in Markdown.
- Added parsing and rendering functions to handle mentions in Markdown format.
- Enhanced the CustomMention component to support Markdown serialization and deserialization.

* update tiptap to latest 3.20.4
2026-03-20 18:51:41 +08:00
j-sanaa 03a0cf6b3f Feat/agentflow Add JSON, code, and SelectVariable input types to NodeInputHandler (#6016)
* Initial flow

* enhance JSON input handling with dialog support and improve variable selection UI

* Fix syntax highlighting bug

* Added test cases

* Fix gemini comments

* lock file fix

* Build error

* Test fix

* Remove 'inputs' folder under atoms and move all components directly under atoms/
2026-03-19 14:23:12 -07:00
jchui-wd fff4b80c43 chore: update contributing.md with additional test options (#6023)
update contributing.md with additional test command options
2026-03-19 11:23:59 -07:00
github-actions[bot]andgithub-actions[bot] 0ceac0f987 chore: bump @flowiseai/agentflow to 0.0.0-dev.6 (#6022)
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-03-19 11:10:18 -07:00
Jocelyn LinandClaude Opus 4.6 21e6106abb FLOWISE-262 Add ConditionAgent ScenariosInput with dynamic output ports (#6018)
* feat(agentflow): add ConditionAgent ScenariosInput with dynamic output ports

Implement FLOWISE-262: port ConditionAgent scenarios editing from agentflow
v2 to the SDK package.

- Add ScenariosInput atom for editing scenario strings with add/delete
- Integrate into EditNodeDialog with dynamic output anchor generation
- Wire up edge label computation for conditionAgentAgentflow in useFlowHandlers
- Fix cleanupOrphanedEdges to always filter by anchor count (no stale prevCount)
- Make updateNodeData accept optional edges for atomic node+edge updates
- Add coverage threshold for ScenariosInput.tsx in jest.config.js

Co-Authored-By: Claude Opus 4.6 <[email protected]>

* fix(agentflow): address PR review comment and fix CI build error

Clarify ScenariosInput docstring to note Else is a visual indicator, not
a dynamic output anchor. Fix nodeFactory test outputs to use `type`
instead of non-existent `description` property on NodeOutput.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

* feat(agentflow): enhance ExpandTextDialog to handle value updates correctly

- Added tests to ensure the dialog displays the current value when opened after changes while closed.
- Implemented logic to reset the dialog's value to the original when reopened after cancellation.
- Updated state management in ExpandTextDialog to synchronize local value immediately upon opening.

Co-Authored-By: Claude Opus 4.6 <[email protected]>

---------

Co-authored-by: Claude Opus 4.6 <[email protected]>
2026-03-19 09:59:23 -07:00
jchui-wd 172523f25c chore: Co-locate server / components unit tests and update Contributing.MD for testing (#6017)
co-located all the unit tests in components and server, removed the test folders. Updated the contributing.md with testing conventions
2026-03-19 09:38:37 -07:00