Repository navigation
feat(demo): flowgram agent - #1043
louisyoungx wants to merge 71 commits into
Conversation
…endency injection
…to WorkflowAgentUtils
…n with raw import
…gle-purpose tools
…-layout for new nodes/edges
…M node modification support
ec409ff to
3f9d72e
Compare
- Introduce Loop, Break, and Continue nodes with full CRUD tooling - Allow Code, Condition, HTTP, and LLM nodes to be created inside Loop containers via parentNodeID - Enforce same-container edge creation and validate node connectivity rules - Replace legacy tool-call placeholders with <system_note> tags and update system prompt - Remove completed-count from todo render to reduce noise
…rvices directory & refactor DI architecture
… workflow analysis
…actor tool execution logic
…essageHistory model
…ed UIMessagePart system
|
为什么这个pull还没有合入主分支
|
这个提交改动比较大，demo 也会变重，需要从主 demo 里独立出来不过暂时还没有时间去跟进，如果你们有兴趣也可以直接参考该分支
|
|
你们自家的semi design不是有ai组件了吗，咋还引入了antd
|
louisyoungx
left a comment
There was a problem hiding this comment.
[P1] Remove the hardcoded provider API key from the browser demo
The new createAgentPlugin configuration in apps/demo-free-layout/src/hooks/use-editor-props.tsx embeds a non-placeholder API key alongside the provider baseURL. This configuration is shipped in the browser bundle, so anyone loading the demo can extract the credential and make requests billed to that account. Please remove the credential, revoke/rotate it if it is real, and require users to supply their own key or route authenticated requests through a server. I have intentionally not reproduced the key in this review. This PR is also still a draft and conflicts with main.
| config: { | ||
| // Default config - users should update via UI settings | ||
| // 默认配置 - 用户应通过 UI 设置更新 | ||
| apiKey: 'e96f48f1-daf9-447e-8258-5003bfbffd0f', |
There was a problem hiding this comment.
[P1] This default configuration embeds a provider API key in a publicly served browser bundle. Remove the credential and use user-supplied configuration or a server-side authenticated proxy; rotate/revoke the key if it is real. The key is deliberately omitted from this comment.
Uh oh!
There was an error while loading. Please reload this page.