e4a660e0bd
fix(httpapi): align runtime query schemas with workspace routing params ( #26581 )
...
Co-authored-by: Developer <temp@example.com >
2026-05-09 16:50:30 -04:00
2b957df526
fix(session): accept routing params in message list ( #26569 )
...
Co-authored-by: Developer <temp@example.com >
2026-05-09 16:02:35 -04:00
4ae8dd80c3
Move schema utilities into core ( #26565 )
2026-05-09 19:51:09 +00:00
72524b30dc
fix(server): defer validation error body change
2026-05-09 14:50:45 -04:00
a81484238e
fix(server): return validation error bodies
2026-05-09 14:39:25 -04:00
b49b2b5c78
fix(server): keep provider lists JSON-safe ( #26550 )
2026-05-09 13:40:46 -04:00
6561e24e32
chore(server): clean up post-Hono-deletion scar tissue ( #26542 )
2026-05-09 12:30:18 -04:00
c645e13e2a
research: delete Hono backend (do not merge) ( #25667 )
2026-05-09 13:10:42 +00:00
7c8945c9a7
chore: generate
2026-05-09 04:31:07 +00:00
4fd79c44ad
fix(server): match Hono wire format for authorize undefined and share errors ( #26474 )
2026-05-09 00:30:00 -04:00
c8dc4a13f4
chore: generate
2026-05-09 04:22:25 +00:00
3afb6c20c9
fix(server): return structured validation errors ( #26457 )
2026-05-09 00:21:19 -04:00
3570a7d5e4
fix(server): include auth challenge on typed 401 ( #26455 )
2026-05-09 00:15:20 -04:00
ed127f8a6d
docs(server): explain why HTTP API PTY handler has no early-frame buffer ( #26464 )
2026-05-08 23:58:33 -04:00
7d1137103f
fix(server): map Account failures to typed 500 instead of defect ( #26448 )
2026-05-08 23:44:28 -04:00
9a9cdbf7d0
chore: generate
2026-05-09 03:42:23 +00:00
c3a3df1639
refactor(server): use JSON response for OpenAPI doc route ( #26447 )
2026-05-08 23:41:20 -04:00
1f45e8d2e3
fix(server): log instance disposal failures from HTTP API lifecycle ( #26446 )
2026-05-08 23:40:06 -04:00
ec13b262a2
fix(server): include Origin in CORS preflight Vary header ( #26445 )
2026-05-08 23:17:47 -04:00
1ece4a26ea
feat(server): add HTTP API response compression ( #26440 )
2026-05-08 23:06:00 -04:00
a804dba7ec
fix(server): emit fixed workspace fence headers ( #26443 )
2026-05-08 22:45:54 -04:00
4dc88e1b4d
chore: generate
2026-05-09 02:21:54 +00:00
f2987270b1
fix(server): serve HttpApi OpenAPI document ( #26438 )
2026-05-08 22:20:50 -04:00
c572e7fc12
refactor(server): clarify HttpApi route auth layers ( #26372 )
2026-05-08 13:06:00 -04:00
a17b1c0a1d
fix(server): require auth for effect root routes ( #26361 )
...
Co-authored-by: Rajvardhan Patil <243567420+RajvardhanPatil07@users.noreply.github.com >
2026-05-08 16:39:11 +00:00
04c1d3442d
feat(core): allow external workspace creation ( #26212 )
2026-05-08 11:09:12 -04:00
4d6c05923f
feat(core): copy file changes when warping ( #26190 )
2026-05-07 10:24:17 -04:00
7b899f2b2c
fix(server): apply cors before legacy auth ( #26092 )
2026-05-07 08:55:09 +10:00
d524b4f0f7
Type session not-found errors ( #25818 )
2026-05-05 21:33:47 -04:00
bcce79050c
fix(server): restore web terminal CSP allowances ( #25937 )
2026-05-06 09:32:51 +10:00
b4ee950c0a
fix(core): use current workspace with /new; fix warping into local project ( #25894 )
2026-05-05 16:39:37 -04:00
f84a5ba167
fix(server): allow all connect-src origins in CSP for embedded UI ( #25838 )
2026-05-05 17:06:30 +08:00
48eb24b20c
fix(desktop): trust system certificates ( #25837 )
2026-05-05 18:47:38 +10:00
78edbb9df5
feat(core): session warping ( #25768 )
2026-05-04 21:28:38 -04:00
640d0c8c2a
fix: ensure effect server middleware properly parses errors ( #25717 )
2026-05-04 18:29:00 -04:00
9d84ce2a72
fix(server): provide fresh ConfigProvider per HttpApi listener ( #25726 )
2026-05-04 13:06:29 -04:00
5d9ae2111d
fix(opencode): strip transfer-encoding in UI proxy and allow public manifest assets ( #25698 )
...
Co-authored-by: Kit Langton <kit.langton@gmail.com >
2026-05-04 09:43:03 -04:00
e6cba0230d
feat(server): pty websocket auth tickets ( #25660 )
2026-05-03 22:56:14 -04:00
2b11253f0f
fix(server): serve embedded UI from bunfs ( #25632 )
2026-05-03 19:44:23 +00:00
d20a342377
chore: generate
2026-05-03 18:24:37 +00:00
f5299a9f71
fix(server): support desktop PTY websockets with HttpApi ( #25598 )
2026-05-03 18:23:29 +00:00
22d0563671
fix(auth): respect server username in clients ( #25596 )
2026-05-03 19:28:31 +05:30
7cd770ff58
chore: generate
2026-05-03 13:21:15 +00:00
eba41714e2
fix(httpapi): add basic auth challenge for browser login
...
Adds a WWW-Authenticate challenge for unauthorized experimental HttpApi UI fallback responses so browsers open the Basic Auth prompt when a server password is configured.
2026-05-03 13:20:05 +00:00
cc9a4dff3b
feat(server): native HttpApi listener with Bun.serve + WS upgrade ( #25547 )
2026-05-03 09:09:45 -04:00
89afa1d319
feat(server): Server.openapi() backed by HttpApi spec, parity-checked against Hono output ( #25545 )
2026-05-03 09:06:23 -04:00
f93bb37477
chore: generate
2026-05-03 12:59:40 +00:00
4614da8e41
refactor(server): extract Hono-coupled utilities to backend-neutral modules ( #25542 )
2026-05-03 12:58:34 +00:00
330651f77b
fix(httpapi): pagination Link header echoes request host ( #25527 )
2026-05-02 23:19:33 -04:00
2d44193933
chore: generate
2026-05-03 02:10:52 +00:00
Kit Langton