feat(dify-cli): session level tool white list

api/controllers/cli_api/wraps.py

@@ -5,7 +5,7 @@ from collections.abc import Callable
 from functools import wraps
 from typing import ParamSpec, TypeVar
 
-from flask import abort, request
+from flask import abort, g, request
 
 from core.session.cli_api import CliApiSessionManager
 
@@ -49,6 +49,8 @@ def cli_api_only(view: Callable[P, R]):
         if not _verify_signature(session.secret, timestamp, body, signature):
             abort(401)
 
+        g.cli_api_session = session
+
         return view(*args, **kwargs)
 
     return decorated