Keep original App/provider configuration and historical AppModelConfig rows while excluding model references that normal hosted credits access never permits. Opt-in saved_system_dependencies_v3 matches exact-name and empty-list access semantics, freezes explicit policy exclusions and rechecks all classified provider-selection digests against a fresh snapshot, including BYOK changes. Historical v1/v2 payloads, hashes, revisions and prepared/active state stay unchanged. No database schema, Stripe, grant, source identity, credential trust, Tokener routing or runtime access change. Dev-first consumer deployment only; new revision configuration and real original-provider migration E2E remain separate gates.
Reject a downloaded or cached Marketplace package whose decoded immutable UID differs from the application-admitted request before any tenant installation or cache invalidation. Keep signature, scope, Marketplace provenance and source-admission policy unchanged.
This closes a source-version identity gap found while preparing transparent legacy credits forwarding. It prevents validating one provider package and silently installing another; original provider/App identities remain authoritative.
Reviewed local candidate 0aa5d04e72a641d7e9cc8e08d3c31701fb23f816; identical tree a2420679f4. Independent Gateway and neighboring admission tests passed (89), Ruff/type checks passed. Dev first; promote into the existing migration PR after live regression.
Admit the independently verified README-only 1ded artifact using finite source contracts. Preserve historical 042/95f profiles, protocols, codecs, BYOK authority and reprepare guards. This removes a Dify Core admission blocker for transparent legacy SYSTEM forwarding without changing original provider or App configuration.
Reviewed content tree: 40855d6b51ed98f9f75040770987e07bfa03af48; local candidate dfd394097c41aee108973aa7fb786a18295fa691. Independent 2296 unit tests, Ruff check/format and production type checks passed. Dev-first publication; main PR promotion follows live regression.
Add closed V6/V7 source profiles and typed routing/inventory support so legacy SYSTEM-credit Apps can retain their original provider, model and parameter semantics when redirected to Tokener. Preserve old registry revisions, hashes and BYOK behavior. Consumer support only: no database-schema or business-data writes, no registry publication, default-plugin switch, migration enablement, funding or production operation. Verified 4005 related tests, 97 import contracts, Ruff and strict type checks. Original-provider user E2E remains a separate deployment gate.
zyssyz123
非法操作
Felix ShiandFelix Shi
yyhandClaude
WinorenandStream
leilei3167andStream
Tianyu Cai
FFXN
wangxiaolei
hjeesum
Vitalii Borovyk
MindOfqcandautofix-ci[bot]
梦想陆地的鱼