feat: add chat-header feature to sliding container

.github/workflows/cross-platform-test.yml

@@ -189,7 +189,7 @@ jobs:
           find ./base-dist -name "*.whl" -type f
           WHEEL_FILE=$(find ./base-dist -name "*.whl" -type f | head -1)
           if [ -n "$WHEEL_FILE" ]; then
-            uv pip install --python ./test-env/Scripts/python.exe "$WHEEL_FILE"
+            uv pip install --prerelease=allow --python ./test-env/Scripts/python.exe "$WHEEL_FILE"
           else
             echo "No wheel file found in ./base-dist/"
             exit 1
@@ -231,7 +231,7 @@ jobs:
           find ./base-dist -name "*.whl" -type f
           WHEEL_FILE=$(find ./base-dist -name "*.whl" -type f | head -1)
           if [ -n "$WHEEL_FILE" ]; then
-            uv pip install --python ./test-env/bin/python "$WHEEL_FILE"
+            uv pip install --prerelease=allow --python ./test-env/bin/python "$WHEEL_FILE"
           else
             echo "No wheel file found in ./base-dist/"
             exit 1
@@ -475,7 +475,7 @@ jobs:
           find ./base-dist -name "*.whl" -type f
           WHEEL_FILE=$(find ./base-dist -name "*.whl" -type f | head -1)
           if [ -n "$WHEEL_FILE" ]; then
-            uv pip install --python ./test-env/Scripts/python.exe "$WHEEL_FILE"
+            uv pip install --prerelease=allow --python ./test-env/Scripts/python.exe "$WHEEL_FILE"
           else
             echo "No wheel file found in ./base-dist/"
             exit 1
@@ -489,7 +489,7 @@ jobs:
           find ./main-dist -name "*.whl" -type f
           WHEEL_FILE=$(find ./main-dist -name "*.whl" -type f | head -1)
           if [ -n "$WHEEL_FILE" ]; then
-            uv pip install --python ./test-env/Scripts/python.exe "$WHEEL_FILE"
+            uv pip install --prerelease=allow --python ./test-env/Scripts/python.exe "$WHEEL_FILE"
           else
             echo "No wheel file found in ./main-dist/"
             exit 1
@@ -517,7 +517,7 @@ jobs:
           find ./base-dist -name "*.whl" -type f
           WHEEL_FILE=$(find ./base-dist -name "*.whl" -type f | head -1)
           if [ -n "$WHEEL_FILE" ]; then
-            uv pip install --python ./test-env/bin/python "$WHEEL_FILE"
+            uv pip install --prerelease=allow --python ./test-env/bin/python "$WHEEL_FILE"
           else
             echo "No wheel file found in ./base-dist/"
             exit 1

.github/workflows/nightly_build.yml

@@ -128,7 +128,6 @@ jobs:
 
           uv lock
           cd src/backend/base && uv lock && cd ../../..
-          cd src/lfx && uv lock && cd ../..
 
           git add pyproject.toml src/backend/base/pyproject.toml src/lfx/pyproject.toml uv.lock src/backend/base/uv.lock
           git commit -m "Update version and project name"

.github/workflows/release.yml

@@ -227,7 +227,8 @@ jobs:
       - name: Check if pre-release
         if: inputs.pre_release
         run: |
-          version=$(uv tree | grep 'langflow' | grep -v 'langflow-base' | awk '{print $2}' | sed 's/^v//')
+          version="${{ inputs.release_tag }}"
+          echo "$version"
           if [[ "${version}" =~ ^([0-9]+\.)?([0-9]+\.)?[0-9]+((a|b|rc|dev|post)([0-9]+))$ ]]; then
             echo "Pre-release version detected. Continuing with the release."
           else

.github/workflows/release_nightly.yml

@@ -163,7 +163,7 @@ jobs:
         run: |
           rm -rf src/backend/base/dist
           rm -rf dist
-          make build base=true args="--wheel"
+          make build base=true args="--no-sources --wheel"
 
       - name: Test Langflow Base CLI
         run: |

.secrets.baseline

@@ -881,6 +881,16 @@
         "is_secret": false
       }
     ],
+    "src/backend/base/langflow/inputs/input_mixin.py": [
+      {
+        "type": "Secret Keyword",
+        "filename": "src/backend/base/langflow/inputs/input_mixin.py",
+        "hashed_secret": "3442496b96dd01591a8cd44b1eec1368ab728aba",
+        "is_verified": false,
+        "line_number": 22,
+        "is_secret": false
+      }
+    ],
     "src/backend/base/langflow/schema/table.py": [
       {
         "type": "Secret Keyword",
@@ -1403,23 +1413,23 @@
         "filename": "src/frontend/src/constants/constants.ts",
         "hashed_secret": "19a2fbd0dd38b4097f419c962342ef5e109eab07",
         "is_verified": false,
-        "line_number": 737,
+        "line_number": 755,
         "is_secret": false
       },
       {
         "type": "Secret Keyword",
         "filename": "src/frontend/src/constants/constants.ts",
         "hashed_secret": "3806954324550e26ef5de85d007f1746825a073c",
         "is_verified": false,
-        "line_number": 738,
+        "line_number": 756,
         "is_secret": false
       },
       {
         "type": "Secret Keyword",
         "filename": "src/frontend/src/constants/constants.ts",
         "hashed_secret": "c04f8fbf55c9096907a982750b1c6b0e4c1dd658",
         "is_verified": false,
-        "line_number": 913,
+        "line_number": 931,
         "is_secret": false
       }
     ],
@@ -1429,7 +1439,7 @@
         "filename": "src/frontend/src/controllers/API/helpers/constants.ts",
         "hashed_secret": "665b1e3851eefefa3fb878654292f16597d25155",
         "is_verified": false,
-        "line_number": 5,
+        "line_number": 6,
         "is_secret": false
       }
     ],
@@ -1528,5 +1538,5 @@
       }
     ]
   },
-  "generated_at": "2025-12-02T04:40:43Z"
+  "generated_at": "2025-12-16T12:44:21Z"
 }

docs/docs/Agents/mcp-server.mdx

@@ -237,7 +237,7 @@ For more information, see your OAuth provider's documentation.
 | **Host** | OAuth server host | MCP Composer default. | `localhost` |
 | **Port** | OAuth server port | MCP Composer default. | `9000` |
 | **Server URL** | Full OAuth server URL | Combines the MCP Composer default OAuth host and port. | `http://localhost:9000` |
-| **Callback Path** | OAuth callback URL on your server | You define this address during OAuth app registration. | `http://localhost:9000/auth/idaas/callback` |
+| **Callback URL** | OAuth callback URL on your server | You define this full URL during OAuth app registration. This must match exactly what you register with your OAuth provider. | `http://localhost:9000/auth/idaas/callback` |
 | **Client ID** | Your OAuth client identifier | From your OAuth provider. | `Ov23li9vx2grVL61qjb` |
 | **Client Secret** | Your OAuth client secret | From your OAuth provider. | `1234567890abcdef1234567890abcdef12345678` |
 | **Authorization URL** | OAuth authorization endpoint | From your OAuth provider. | `https://github.com/login/oauth/authorize` |

docs/openapi/openapi.yaml

@@ -4302,6 +4302,13 @@ components:
           - type: string
           - type: 'null'
           title: Oauth Callback Path
+          deprecated: true
+          description: 'Deprecated: Use oauth_callback_url instead'
+        oauth_callback_url:
+          anyOf:
+          - type: string
+          - type: 'null'
+          title: Oauth Callback Url
         oauth_client_id:
           anyOf:
           - type: string

pyproject.toml

@@ -135,7 +135,7 @@ dependencies = [
     "fastparquet>=2024.11.0,<2025.0.0",
     "traceloop-sdk>=0.43.1,<1.0.0",
     "vlmrun[all]>=0.2.0",
-    "cuga~=0.1.11",
+    "cuga~=0.2.6",
     "agent-lifecycle-toolkit~=0.4.4",
     "astrapy>=2.1.0,<3.0.0",
     "aioboto3>=15.2.0,<16.0.0"

src/backend/base/langflow/__main__.py

@@ -159,7 +159,6 @@ def set_var_for_macos_issue() -> None:
         os.environ["OBJC_DISABLE_INITIALIZE_FORK_SAFETY"] = "YES"
         # https://stackoverflow.com/questions/75747888/uwsgi-segmentation-fault-with-flask-python-app-behind-nginx-after-running-for-2 # noqa: E501
         os.environ["no_proxy"] = "*"  # to avoid error with gunicorn
-        logger.debug("Set OBJC_DISABLE_INITIALIZE_FORK_SAFETY to YES to avoid error")
 
 
 def wait_for_server_ready(host, port, protocol) -> None:

src/backend/base/langflow/api/log_router.py

@@ -3,10 +3,12 @@
 from http import HTTPStatus
 from typing import Annotated, Any
 
-from fastapi import APIRouter, HTTPException, Query, Request
+from fastapi import APIRouter, Depends, HTTPException, Query, Request
 from fastapi.responses import JSONResponse, StreamingResponse
 from lfx.log.logger import log_buffer
 
+from langflow.services.auth.utils import get_current_active_user
+
 log_router = APIRouter(tags=["Log"])
 
 
@@ -50,12 +52,13 @@ async def event_generator(request: Request):
         await asyncio.sleep(1)
 
 
-@log_router.get("/logs-stream")
+@log_router.get("/logs-stream", dependencies=[Depends(get_current_active_user)])
 async def stream_logs(
     request: Request,
 ):
     """HTTP/2 Server-Sent-Event (SSE) endpoint for streaming logs.
 
+    Requires authentication to prevent exposure of sensitive log data.
     It establishes a long-lived connection to the server and receives log messages in real-time.
     The client should use the header "Accept: text/event-stream".
     """
@@ -69,12 +72,16 @@ async def stream_logs(
     return StreamingResponse(event_generator(request), media_type="text/event-stream")
 
 
-@log_router.get("/logs")
+@log_router.get("/logs", dependencies=[Depends(get_current_active_user)])
 async def logs(
     lines_before: Annotated[int, Query(description="The number of logs before the timestamp or the last log")] = 0,
     lines_after: Annotated[int, Query(description="The number of logs after the timestamp")] = 0,
     timestamp: Annotated[int, Query(description="The timestamp to start getting logs from")] = 0,
 ):
+    """Retrieve application logs with authentication required.
+
+    SECURITY: Logs may contain sensitive information and require authentication.
+    """
     global log_buffer  # noqa: PLW0602
     if log_buffer.enabled() is False:
         raise HTTPException(

src/backend/base/langflow/api/router.py

@@ -12,6 +12,8 @@
     login_router,
     mcp_projects_router,
     mcp_router,
+    model_options_router,
+    models_router,
     monitor_router,
     openai_responses_router,
     projects_router,
@@ -53,6 +55,8 @@
 router_v1.include_router(voice_mode_router)
 router_v1.include_router(mcp_projects_router)
 router_v1.include_router(openai_responses_router)
+router_v1.include_router(models_router)
+router_v1.include_router(model_options_router)
 
 router_v2.include_router(files_router_v2)
 router_v2.include_router(mcp_router_v2)

src/backend/base/langflow/api/utils/__init__.py

@@ -33,6 +33,7 @@
     has_api_terms,
     parse_exception,
     parse_value,
+    raise_error_if_astra_cloud_env,
     remove_api_keys,
     validate_is_component,
     verify_public_flow_and_get_user,
@@ -70,6 +71,7 @@
     "has_api_terms",
     "parse_exception",
     "parse_value",
+    "raise_error_if_astra_cloud_env",
     "remove_api_keys",
     "validate_is_component",
     "verify_public_flow_and_get_user",

src/backend/base/langflow/api/utils/core.py

@@ -11,6 +11,7 @@
 from lfx.graph.graph.base import Graph
 from lfx.log.logger import logger
 from lfx.services.deps import injectable_session_scope, injectable_session_scope_readonly, session_scope
+from lfx.utils.validate_cloud import raise_error_if_astra_cloud_disable_component
 from sqlalchemy import delete
 from sqlmodel.ext.asyncio.session import AsyncSession
 
@@ -40,6 +41,9 @@
 # DbSessionReadOnly for read-only operations (no auto-commit, reduces lock contention)
 DbSessionReadOnly = Annotated[AsyncSession, Depends(injectable_session_scope_readonly)]
 
+# Message to raise if we're in an Astra cloud environment and a component or endpoint is not supported
+disable_endpoint_in_astra_cloud_msg = "This endpoint is not supported in Astra cloud environment."
+
 
 class EventDeliveryType(str, Enum):
     STREAMING = "streaming"
@@ -412,3 +416,11 @@ def extract_global_variables_from_headers(headers) -> dict[str, str]:
         logger.exception("Failed to extract global variables from headers: %s", exc)
 
     return variables
+
+
+def raise_error_if_astra_cloud_env():
+    """Raise an error if we're in an Astra cloud environment."""
+    try:
+        raise_error_if_astra_cloud_disable_component(disable_endpoint_in_astra_cloud_msg)
+    except Exception as e:
+        raise HTTPException(status_code=403, detail=str(e)) from e

src/backend/base/langflow/api/utils/mcp/__init__.py

@@ -1,9 +1,17 @@
 """MCP utilities for Langflow."""
 
-from langflow.api.utils.mcp.config_utils import auto_configure_starter_projects_mcp, get_project_sse_url, get_url_by_os
+from langflow.api.utils.mcp.config_utils import (
+    auto_configure_starter_projects_mcp,
+    get_composer_streamable_http_url,
+    get_project_sse_url,
+    get_project_streamable_http_url,
+    get_url_by_os,
+)
 
 __all__ = [
     "auto_configure_starter_projects_mcp",
+    "get_composer_streamable_http_url",
     "get_project_sse_url",
+    "get_project_streamable_http_url",
     "get_url_by_os",
 ]