Skip to content

v0.5.8

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Oct 23:54
v0.5.8
b5d26a2

中文发版说明

v0.5.8 重点完善外部认证、账号安全管理与 AI Gateway 稳定性，并为 Agent Flow 增加安全的后台日志清理。以下变更以 v0.5.7…v0.5.8 为范围，发布提交为 b5d26a2。

新功能

  • 外部认证与 GitHub 一键登录：认证中心支持受管外部认证提供方、加密凭据配置和声明式一键入口；配合官方 GitHub 认证插件，可配置首次注册开关与账号最低注册年限。外部身份按不可变 ID 识别，已有账号通过显式绑定关联，不按邮箱或用户名自动合并。参见 #2550、#2551 与 GitHub 登录教程。
  • 个人账号安全管理：按认证方式查看绑定信息，支持绑定、解绑与恢复；防止移除最后一种可用登录方式。仅通过外部认证注册的用户，可在重新验证身份后首次设置密码；已有密码的用户继续使用独立的密码修改入口。
  • Agent Flow 后台日志批量删除：单应用支持日期筛选、数量预览、分批处理、进度查看与停止；关闭弹窗后任务继续。仅删除已结束任务及其完整执行成员，保留活跃任务、历史会话种子，以及费用、积分、用量流水和原始执行 UUID。总日志页不提供跨应用删除。见 59af1b3。

修复与改进

  • AI Gateway 大正文支持：移除各协议入口与共享通信中的固定业务正文容量门槛，完善 HTTP、Multipart、WebSocket、插件 stdio 以及大事件、回调和终态的完整交付；保留真实协议错误、背压、取消与资源回收机制。相关供应商插件需同步升级。参见 #2503。
  • Codex 分支会话修复：修复侧栏分支在工具结果后被误认作父会话回调续传、返回 409 native_tool_output_history_mismatch 的问题；原会话回调和显式响应游标继续按原规则校验。参见 #2557。
  • 事件可靠性与资源释放：实时事件与持久可靠交付分离；完善消费者租约、共享预算、背压、确认与暂停恢复，增加事件接纳进度和积压时长观测，清理闲置缓冲与已完成通知正文。参见 #2498、#2502。
  • 部署修复：修复控制台 API 的 WebSocket Upgrade 转发；支持持久化 Nginx 自定义配置并刷新镜像默认值；修复非 HTTPS 环境中的插件模块校验。
  • 界面与可访问性：修复 MCP 目录图标与重复描述项标识、组织树和可编辑行标识、设置拓扑同步及前台折叠状态；完善树操作、并行节点操作与面板调整的键盘支持，并按 UI 管理策略控制设计入口。
  • 质量治理：按职责拆分前后端与工具热点，恢复当前架构的契约和门禁覆盖，修复异步测试完成时机与诊断证据归属。参见 #2558。

升级注意事项

  • 不再支持三类 0.5 前格式：MCP bundle v1、SQL 节点 config.sql、旧客户端 trajectory event/section。升级前备份数据库并核对存量数据；MCP 使用当前 v2 manifest 与 execution_target，SQL 使用 bindings.sql。旧轨迹原始行保留，但不再通过旧语义读取；本版本不提供这些旧格式的自动兼容回退。参见 #2548。
  • GitHub 登录依赖单独安装、配置并启用官方认证插件及 OAuth 应用；升级主程序不会自动完成这些配置。
  • 下方安装脚本默认使用 latest。固定部署本版本时，请将 FLOWBASE_WEB_VERSION 与 FLOWBASE_API_SERVER_VERSION 都设为 v0.5.8。

验证记录

发布提交的 latest CI 通过；后续同一提交的 nightly 完整检查 因 repo-frontend-react-doctor 缺少门禁产物报告失败，跟踪于 #2597。该 nightly 列出的其余检查通过；此处不将发布检查通过表述为全部完整门禁通过。

English Release Notes

v0.5.8 expands external authentication and account security, improves AI Gateway reliability, and adds safe background log deletion for Agent Flow. These notes cover v0.5.7…v0.5.8, ending at b5d26a2.

New features

  • External authentication and GitHub sign-in: managed providers, encrypted credentials, and declarative one-click entries. With the official GitHub authentication plugin, administrators can control first-time registration and minimum GitHub account age. Immutable provider IDs identify accounts; linking is explicit, with no automatic merging by email or username. See #2550 and #2551.
  • Account security settings: inspect authentication methods and their linked profiles, link/unlink/restore methods, and protect the last usable sign-in method. Users registered through an external provider can set their first password after verifying their identity again; existing passwords have a separate change-password flow.
  • Background Agent Flow log deletion: per-application date filters, count previews, batches, progress, and stop controls. Jobs continue after the dialog closes. Only completed runs and their complete execution groups are removed; active runs, historical session seeds, financial/credit/usage records, and original execution UUIDs are retained. Cross-application deletion is unavailable in the combined logs view. See 59af1b3.

Fixes and improvements

  • Large Gateway payloads: remove fixed business-payload limits across protocol ingress and shared transport; preserve complete HTTP, multipart, WebSocket, plugin stdio, event, callback, and terminal delivery. Protocol errors, backpressure, cancellation, and cleanup remain in effect. Update the corresponding provider plugins as well. See #2503.
  • Codex forked conversations: prevent sidebar forks after tool results from being mistaken for parent callback continuations and rejected with 409 native_tool_output_history_mismatch. Existing same-session callback and explicit response-cursor validation remains in place. See #2557.
  • Event reliability: separate transient events from durable delivery; improve consumer leases, shared budgets, backpressure, acknowledgements, pause/resume, admission/backlog observability, and cleanup of idle buffers and completed notification bodies. See #2498 and #2502.
  • Deployment: fix console API WebSocket Upgrade forwarding, persist custom Nginx configuration while refreshing image defaults, and repair plugin-module verification on insecure HTTP origins.
  • UI and accessibility: fix MCP directory icons and duplicate descriptor identities, organization trees, editable row identities, topology updates, and frontstage collapse state. Improve keyboard tree/node/panel operations and enforce UI management policy for design controls.
  • Quality maintenance: split responsibility hotspots, restore current architecture contracts and gate coverage, and repair asynchronous fixture completion and diagnostic evidence ownership. See #2558.

Upgrade notes

  • Three pre-0.5 formats are no longer supported: MCP bundle v1, SQL node config.sql, and legacy client trajectory event/section formats. Back up your database and review existing data before upgrading. Use the current v2 MCP manifest with execution_target, and bindings.sql for SQL nodes. Legacy trajectory rows retain their raw content but are no longer readable through the retired semantics; no automatic compatibility fallback is provided. See #2548.
  • GitHub sign-in requires a separately installed, configured, and enabled official authentication plugin and OAuth application; upgrading the host does not configure these automatically.
  • The installation scripts below default to latest. To pin this release, set both FLOWBASE_WEB_VERSION and FLOWBASE_API_SERVER_VERSION to v0.5.8.

Verification record

The release commit passed latest CI. A later full nightly run on the same commit reported a missing repo-frontend-react-doctor gate artifact; see #2597. The other listed nightly checks passed. Passing release checks does not imply that every full gate passed.

Installation or Upgrade

Linux/macOS:

curl -fsSL https://raw.githubusercontent.com/taichuy/1flowbase/main/scripts/shell/docker-deploy.sh | sh

Windows PowerShell:

irm https://raw.githubusercontent.com/taichuy/1flowbase/main/scripts/powershell/docker-deploy.ps1 | iex

Windows CMD:

powershell -NoProfile -ExecutionPolicy Bypass -Command "irm https://raw.githubusercontent.com/taichuy/1flowbase/main/scripts/powershell/docker-deploy.ps1 | iex"

Docker Images

  • ghcr.io/taichuy/1flowbase-web:v0.5.8
  • ghcr.io/taichuy/1flowbase-api-server:v0.5.8
  • ghcr.io/taichuy/1flowbase-*:latest

Traceability

Full Changelog: v0.5.7...v0.5.8

Assets 2
Loading