* fix: prevent clone/export crash for missing ToolJet DB tables
* chore: add backward compatibility comment for stale TJDB reference suppression
* fix: use options::text LIKE to catch nested join table references in delete guard
---------
Co-authored-by: Pratush <pratush@Pratushs-MBP.lan>
* fix: allow pro plan workspace admins to preview apps
Pro plan has multiEnvironment=false. validateVersionEnvironment blocked any
request with environment_name set — including 'development' — causing a 403
that the frontend mapped to the restricted-preview error page.
Backend: allow 'development' env through even when multi-env is disabled;
only block staging/production to prevent URL manipulation.
Frontend: use featureAccess.multiEnvironment flag in isBasicPlan check
instead of hardcoded plan === 'starter', so pro plan also skips env in the
redirect URL.
* fix: align useAppPreviewLink isBasicPlan check with multiEnvironment flag
Same pattern as AppsRoute — was checking plan === 'starter', missing pro
and basic plans. Now uses !featureAccess.multiEnvironment consistently.
* fix: preserve original URL on app-scoped logout redirect
The app-scoped branch in redirectToLoginPage hardcoded
/applications/:slug/login with no redirectTo, dropping the env/version
preview params. After re-login, AppLoginPage fell back to
/applications/:slug (released-app viewer URL), which 501s for unreleased
apps and shows "App URL Unavailable".
Mirror the workspace branch's behavior: honor avoidRedirection and
preserve the original URL as redirectTo when false. Update logoutAction
to pass false so the runtime Logout event returns the user to the same
preview view after sign-in.
Regression introduced in #15716.
* chore: update package-lock files after lts-3.16 merge
* revert: remove frontend isBasicPlan changes, backend fix is sufficient
Stripping env from the URL on the frontend is the wrong approach — for
multi-env plans, an explicit env param (e.g. staging) must be preserved.
The backend fix (allowing development env through when multi-env is
disabled) is the correct and sufficient fix.
* fix: use multiEnvironment flag to gate env param in preview URLs
Plans without multi-env access (basic, pro, starter) should not include
?env= in preview URLs — it is meaningless for them and was causing the
backend to reject the request.
Plans with multi-env (team, enterprise) preserve the env param so
per-env per-version preview links continue to work correctly.
* fix: use strict equality for multiEnvironment check to preserve env when featureAccess is not yet loaded
---------
Co-authored-by: Akshay Sasidharan <akshaysasidharan93@gmail.com>
* feat(external-api): return per-workspace inviteUrl in POST /ext/users response
* test(external-api): expand POST /ext/users coverage — roles, multi-group, and failure conditions
Adds 8 new e2e tests covering role assignment, per-workspace role variance,
multiple custom groups, and all key failure paths (duplicate email, missing
workspace, default group in groups field, nonexistent group, end-user/builder
group conflict). Also seeds the builder default group in maybeCreateDefaultGroupPermissions
to unblock role-assignment tests against test orgs.
* test(external-api): clarify conflicting-permissions error shape in users spec
* feat(external-api): update default status to INVITED in user-related DTOs and add defaultOrganizationId field
* feat(external-api): enhance invited user session guard and expand user creation tests for archived status
* feat(external-api): add tests for org-invite URL behavior based on user and workspace status
* feat(external-api): update user status handling and invite URL logic in tests
* feat(external-api): update invite URL logic and OrganizationUser status handling for active users
* fix: preserve original URL on app-scoped logout redirect
The app-scoped branch in redirectToLoginPage hardcoded
/applications/:slug/login with no redirectTo, dropping the env/version
preview params. After re-login, AppLoginPage fell back to
/applications/:slug (released-app viewer URL), which 501s for unreleased
apps and shows "App URL Unavailable".
Mirror the workspace branch's behavior: honor avoidRedirection and
preserve the original URL as redirectTo when false. Update logoutAction
to pass false so the runtime Logout event returns the user to the same
preview view after sign-in.
Regression introduced in #15716.
* chore: update package-lock files after lts-3.16 merge
* fix: enhance file duplication check in FilePicker by introducing isSameFile utility function
* fix: update FilePicker to use internalId for file management and improve error handling
* refactor: move clearErrorStates function to improve code organization in useFilePicker
* fix: gate JS library loading on license fetch to fix public/released apps
JS libraries were silently skipped on public and released apps because
featureAccess?.appJsLibraries was still undefined when isComponentLayoutReady
fired. Introduces isLicenseFetched flag and handles fetch errors so the
gate is never blocked indefinitely for unauthenticated users.
* feat: remove license check for JS libraries loading in frontend and backend
* feat: QueryManager - add fx and custom message for query confirmation
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* Minor fix
* Design update
* Yes button same size as cancel button
---------
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* improve openai anthropic gemini
* moved to dynamic form v2
* fix: Not able to add V2 plugins
* fix the overflowing of test connection error
---------
Co-authored-by: Siddharthpl <siddharthpundir73@gmail.com>
Co-authored-by: Rudhra Deep Biswas <rudra21ultra@gmail.com>
Co-authored-by: Ganesh Kumar <ganesh8056234@gmail.com>
* feat: AppCanvas - hidden widget collapses to 0px per Figma update
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* fix: AppCanvas - stack overlapping hidden widgets in drop order
* Fallback for collapseOnhide components with top alignment
---------
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
