85ce6a5f95
feat: better image handling (auto resize & max size constraints) ( #26401 )
2026-05-10 01:48:19 -05:00
f220f02a2f
Source workspace path pattern ( #26632 )
2026-05-09 23:02:31 -04:00
67b9c9c027
Source HTTP API ID path patterns ( #26623 )
2026-05-09 22:58:47 -04:00
6e78f36a0f
Narrow HTTP API numeric query overrides ( #26618 )
2026-05-09 22:02:51 -04:00
16866e1180
Share HTTP API boolean query schema ( #26615 )
2026-05-09 21:41:15 -04:00
e30d8173c1
Fix OpenAPI workspace query drift ( #26609 )
2026-05-09 21:12:34 -04:00
43b51f09d0
fix(httpapi): align runtime query schemas with workspace routing params ( #26581 )
...
Co-authored-by: Developer <temp@example.com >
2026-05-09 16:50:30 -04:00
77da433e0a
fix(session): accept routing params in message list ( #26569 )
...
Co-authored-by: Developer <temp@example.com >
2026-05-09 16:02:35 -04:00
dcdbdb218f
Move schema utilities into core ( #26565 )
2026-05-09 19:51:09 +00:00
6fea0178eb
fix(server): defer validation error body change
2026-05-09 14:50:45 -04:00
ebe9dcf27e
fix(server): return validation error bodies
2026-05-09 14:39:25 -04:00
27fa297a42
fix(server): keep provider lists JSON-safe ( #26550 )
2026-05-09 13:40:46 -04:00
b24a4e897e
chore(server): clean up post-Hono-deletion scar tissue ( #26542 )
2026-05-09 12:30:18 -04:00
28b03595bf
research: delete Hono backend (do not merge) ( #25667 )
2026-05-09 13:10:42 +00:00
b2baddcd37
chore: generate
2026-05-09 04:31:07 +00:00
dbd48d423d
fix(server): match Hono wire format for authorize undefined and share errors ( #26474 )
2026-05-09 00:30:00 -04:00
a9ccb0804f
chore: generate
2026-05-09 04:22:25 +00:00
ebe6087e8f
fix(server): return structured validation errors ( #26457 )
2026-05-09 00:21:19 -04:00
8cbc43fbb0
fix(server): include auth challenge on typed 401 ( #26455 )
2026-05-09 00:15:20 -04:00
96bde05f6e
docs(server): explain why HTTP API PTY handler has no early-frame buffer ( #26464 )
2026-05-08 23:58:33 -04:00
3615d5aab1
fix(server): map Account failures to typed 500 instead of defect ( #26448 )
2026-05-08 23:44:28 -04:00
11d9e82eaf
chore: generate
2026-05-09 03:42:23 +00:00
eadda11ec9
refactor(server): use JSON response for OpenAPI doc route ( #26447 )
2026-05-08 23:41:20 -04:00
f73a56c223
fix(server): log instance disposal failures from HTTP API lifecycle ( #26446 )
2026-05-08 23:40:06 -04:00
4d585464f3
fix(server): include Origin in CORS preflight Vary header ( #26445 )
2026-05-08 23:17:47 -04:00
ffea6c7974
feat(server): add HTTP API response compression ( #26440 )
2026-05-08 23:06:00 -04:00
8e9550d90d
fix(server): emit fixed workspace fence headers ( #26443 )
2026-05-08 22:45:54 -04:00
2a487ea990
chore: generate
2026-05-09 02:21:54 +00:00
9c05d4e2fd
fix(server): serve HttpApi OpenAPI document ( #26438 )
2026-05-08 22:20:50 -04:00
3052a79b32
refactor(server): clarify HttpApi route auth layers ( #26372 )
2026-05-08 13:06:00 -04:00
13b3117ca9
fix(server): require auth for effect root routes ( #26361 )
...
Co-authored-by: Rajvardhan Patil <243567420+RajvardhanPatil07@users.noreply.github.com >
2026-05-08 16:39:11 +00:00
c818c9dcb6
feat(core): allow external workspace creation ( #26212 )
2026-05-08 11:09:12 -04:00
3c4b4d5faf
feat(core): copy file changes when warping ( #26190 )
2026-05-07 10:24:17 -04:00
2dffdfff4a
fix(server): apply cors before legacy auth ( #26092 )
2026-05-07 08:55:09 +10:00
8555de8189
Type session not-found errors ( #25818 )
2026-05-05 21:33:47 -04:00
e117397d0f
fix(server): restore web terminal CSP allowances ( #25937 )
2026-05-06 09:32:51 +10:00
12f3d1f505
fix(core): use current workspace with /new; fix warping into local project ( #25894 )
2026-05-05 16:39:37 -04:00
52bb088753
fix(server): allow all connect-src origins in CSP for embedded UI ( #25838 )
2026-05-05 17:06:30 +08:00
b8f8f5d3a8
fix(desktop): trust system certificates ( #25837 )
2026-05-05 18:47:38 +10:00
22a4a9df8b
feat(core): session warping ( #25768 )
2026-05-04 21:28:38 -04:00
d431a0e4b4
fix: ensure effect server middleware properly parses errors ( #25717 )
2026-05-04 18:29:00 -04:00
fb07c2070c
fix(server): provide fresh ConfigProvider per HttpApi listener ( #25726 )
2026-05-04 13:06:29 -04:00
1251a870cb
fix(opencode): strip transfer-encoding in UI proxy and allow public manifest assets ( #25698 )
...
Co-authored-by: Kit Langton <kit.langton@gmail.com >
2026-05-04 09:43:03 -04:00
7bc26dafae
feat(server): pty websocket auth tickets ( #25660 )
2026-05-03 22:56:14 -04:00
6312c55d55
fix(server): serve embedded UI from bunfs ( #25632 )
2026-05-03 19:44:23 +00:00
28112fbd12
chore: generate
2026-05-03 18:24:37 +00:00
387220f368
fix(server): support desktop PTY websockets with HttpApi ( #25598 )
2026-05-03 18:23:29 +00:00
8694c5b68f
fix(auth): respect server username in clients ( #25596 )
2026-05-03 19:28:31 +05:30
fb224d8974
chore: generate
2026-05-03 13:21:15 +00:00
101566131d
fix(httpapi): add basic auth challenge for browser login
...
Adds a WWW-Authenticate challenge for unauthorized experimental HttpApi UI fallback responses so browsers open the Basic Auth prompt when a server password is configured.
2026-05-03 13:20:05 +00:00
Aiden Cline