6056646eea
[autofix.ci] apply automated fixes
2026-07-21 10:06:36 +00:00
e2d0528e29
Merge branch 'main' into gareth/esq1-170-rbac-for-agent
2026-07-21 03:02:56 -07:00
ac87341d69
Merge remote-tracking branch 'origin/main' into gareth/esq1-170-rbac-for-agent
...
# Conflicts:
# api/services/enterprise/rbac_service.py
2026-07-21 03:02:11 -07:00
af465fb527
fix(api): scope HITL snapshot message lookup to utilize db index ( #39351 )
2026-07-21 09:47:17 +00:00
62bbc0dbeb
feat(webapp-access): add WEBAPP_PUBLIC_ACCESS_ENABLED toggle ( #38567 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-21 08:46:28 +00:00
058fa95517
feat: expose enterprise_enabled and gate the community edition tip on it
...
The sandbox isolation caveat was suppressed by inspecting license.status,
which answers a different question: a lapsed enterprise licence would start
showing a community edition warning that still does not apply, because sandbox
isolation is a property of how the deployment was built, not of billing state.
ENTERPRISE_ENABLED already drives branding, webapp auth and the plugin manager
in get_system_features, but was never surfaced, leaving the frontend to infer
the edition from side effects. Expose it alongside rbac_enabled and read it
directly, which drops the license status set entirely.
2026-07-21 01:34:28 -07:00
75cb8ea408
refactor(api): reuse the roster service's agent resolution for RBAC checks
...
The app-scoped RBAC gate hand-rolled a query to turn an agent_id into the id
of the App backing it, duplicating AgentRosterService.runtime_backing_app_id.
Worse, it filtered on id and tenant only, so the auth check accepted archived
Agents and sources the runtime resolver rejects -- a weaker notion of a valid
Agent than the layer it guards.
Add peek_runtime_backing_app_id, a read-only counterpart to
get_agent_runtime_app_model that never materializes the hidden backing App,
and share the eligibility filter between the two so they cannot drift.
The tenant filter was also untested: deleting it left all 50 tests passing,
since the specs stubbed the db module wholesale. Assert the resolver is called
with the caller's tenant instead, and cover the precedence and read-only
guarantees against the service directly.
2026-07-21 01:34:16 -07:00
ed1289281d
fix(agent): include workflow runs in monitoring stats ( #39354 )
2026-07-21 08:33:23 +00:00
e37f32e4a0
test: add SQLite session fixture for providers ( #38982 )
2026-07-21 08:29:44 +00:00
150613cc05
test: use sqlite3 session in test_build_from_mapping ( #38769 )
2026-07-21 08:21:36 +00:00
a5194ff17b
test: move human input delivery coverage to unit tests ( #38926 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-21 08:18:32 +00:00
cdaf5d4562
test: use sqlite3 session in test_tool_file_manager ( #38771 )
2026-07-21 08:10:23 +00:00
145b0e622e
test: use sqlite3 session in test_workspace_account ( #38757 )
2026-07-21 08:07:57 +00:00
4bab62d458
test: use sqlite3 session in test_agent_app_parameters ( #38759 )
2026-07-21 07:59:00 +00:00
b99f8941bb
test: use sqlite3 session in test_database_retrieval ( #38743 )
2026-07-21 07:56:34 +00:00
32d2594877
test: move app import API coverage to unit tests ( #38920 )
2026-07-21 07:54:32 +00:00
7b188287da
test: use sqlite3 session in test_accounts ( #38752 )
2026-07-21 07:50:05 +00:00
f6db23444d
test: move API token service coverage to unit tests ( #38918 )
2026-07-21 07:48:10 +00:00
a5c989d82b
test: use sqlite3 session in test_conversation_service ( #38774 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-21 07:38:53 +00:00
2622b1ce0a
test: use sqlite3 session in test_based_generate_task_pipeline ( #38738 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-21 07:37:20 +00:00
1e672530c4
test: use sqlite3 session in test_built_in_retrieval ( #38735 )
2026-07-21 07:36:42 +00:00
852169d99c
test: use SQLite sessions in unit misc ( #39118 )
2026-07-21 07:27:13 +00:00
d7860571aa
test: use SQLite sessions in services workflow ( #39115 )
2026-07-21 07:24:52 +00:00
edbaaeae23
fix(api): resolve agent routes to their backing app for app-scoped RBAC
2026-07-21 00:22:24 -07:00
3683831738
test: use sqlite3 session in test_account_service ( #38751 )
2026-07-21 07:22:05 +00:00
f8754286ec
fix(watercrawl): handle non-json error responses ( #37514 )
2026-07-21 06:41:06 +00:00
aa718add24
fix(api): return 400 instead of 500 when 'file' is missing from trial-app audio-to-text ( #39305 )
...
Co-authored-by: Harsh Kashyap <Harsh23Kashyap@users.noreply.github.com >
2026-07-21 05:59:48 +00:00
fcc1d39f5e
fix(web): restore billing access boundary ( #39343 )
2026-07-21 05:35:36 +00:00
861831f176
fix(api): keep workflow log archives owner-admin only ( #39338 )
2026-07-21 04:31:14 +00:00
d333aa31ea
test: use SQLite sessions in services workflow ( #39116 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-21 03:40:02 +00:00
97e6a14c13
test: use SQLite sessions in unit misc ( #39119 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-21 03:20:59 +00:00
6a338654fb
fix: return 400 instead of 500 when file field is missing in audio-to-text endpoints ( #39303 ) ( #39322 )
2026-07-21 02:19:24 +00:00
8f075c82bc
fix(configs): reject host:port-shaped PLUGIN_REMOTE_INSTALL_PORT with actionable hint ( #39329 )
...
Signed-off-by: sergioperezcheco <checo520@outlook.com >
2026-07-21 02:18:29 +00:00
28d17da3b1
fix(api): use resource tenant for draft variable files ( #39307 )
2026-07-21 02:07:47 +00:00
891b2dc537
test: use SQLite sessions in unit misc ( #39120 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-21 01:51:24 +00:00
75f7069541
ci: simplify test workflow execution ( #39318 )
2026-07-21 00:18:59 +00:00
ef0115d340
chore: when dataset permission is not all team, update rbac config to… ( #39227 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-20 12:59:29 +00:00
e606156580
Merge branch 'main' into gareth/esq1-170-rbac-for-agent
2026-07-20 03:47:12 -07:00
cbd7872520
test: use SQLite sessions in unit misc ( #39121 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-20 10:38:52 +00:00
23882a704e
test: use SQLite sessions in unit misc ( #39122 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-20 10:38:49 +00:00
1bd5254ea7
test: use SQLite sessions in unit misc ( #39123 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-20 10:38:46 +00:00
181f58ed9c
Merge branch 'main' into gareth/esq1-170-rbac-for-agent
2026-07-20 02:31:18 -07:00
cb64446fa3
feat(web): add step-by-step tour shell ( #38785 )
...
Co-authored-by: hjlarry <hjlarry@163.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com >
2026-07-20 09:23:25 +00:00
f947cbfffb
test: cover the agents access guard and unbreak the roster layout suite
...
AgentsAccessGuard calls useRouter, which threw "invariant expected app
router to be mounted" in the existing roster layout suite. Mock the guard
there so that suite stays scoped to the feature flag, and give the guard
its own spec covering loading, redirect and pass-through.
Also assert the disabled edit-in-console control through its accessible
role, and move the legacy-key test into a class like its neighbours.
2026-07-20 02:09:31 -07:00
43d725a1ce
feat(dataset): proxy KnowledgeFS Console requests ( #39158 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-20 08:10:06 +00:00
11016563b1
fix(agent): preserve complete model usage pricing ( #39201 )
2026-07-20 08:03:13 +00:00
b7edc5ef0c
refactor: use catalog for workflow archive maintenance ( #39001 )
2026-07-20 07:59:29 +00:00
f93a5b95c6
fix(api, web): scope trial app file uploads to the app tenant ( #39149 )
...
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
2026-07-20 07:00:45 +00:00
6022939bf0
fix: prevent hidden-tab collaboration leader from saving stale drafts ( #38997 )
...
Co-authored-by: hjlarry <hjlarry@163.com >
Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>
Co-authored-by: yyh <yuanyouhuilyz@gmail.com >
Co-authored-by: yyh <92089059+lyzno1@users.noreply.github.com >
2026-07-20 06:58:01 +00:00
30df1433cc
fix: can't create chat app when get tenant default model schema error ( #39266 )
2026-07-20 06:47:16 +00:00
autofix-ci[bot]