fa361fd2bf
test(session): cover workspace-routed messages ( #26576 )
2026-05-09 16:19:06 -04:00
2b957df526
fix(session): accept routing params in message list ( #26569 )
...
Co-authored-by: Developer <temp@example.com >
2026-05-09 16:02:35 -04:00
caaf26e6f9
fix(provider): isolate plugin model mutations ( #26561 )
...
Co-authored-by: Developer <temp@example.com >
2026-05-09 15:47:07 -04:00
72524b30dc
fix(server): defer validation error body change
2026-05-09 14:50:45 -04:00
b49b2b5c78
fix(server): keep provider lists JSON-safe ( #26550 )
2026-05-09 13:40:46 -04:00
3c099c9e4b
chore: generate
2026-05-09 13:11:45 +00:00
c645e13e2a
research: delete Hono backend (do not merge) ( #25667 )
2026-05-09 13:10:42 +00:00
e645892c8c
test(server): expect null body from HTTP API authorize() with no redirect ( #26515 )
2026-05-09 08:50:00 -04:00
df8ab6a0c9
test(server): drop flaky account error-mapping test ( #26475 )
2026-05-09 00:29:31 -04:00
c8dc4a13f4
chore: generate
2026-05-09 04:22:25 +00:00
3afb6c20c9
fix(server): return structured validation errors ( #26457 )
2026-05-09 00:21:19 -04:00
5f12ad1828
fix(server): validate permission and question ids ( #26456 )
2026-05-09 00:20:28 -04:00
3570a7d5e4
fix(server): include auth challenge on typed 401 ( #26455 )
2026-05-09 00:15:20 -04:00
b3eb6b0f57
chore: generate
2026-05-09 04:06:08 +00:00
3f63a0b555
test(server): use Layer.mock for partial Account service stub ( #26472 )
2026-05-09 00:05:05 -04:00
1165f4554d
test(server): expand workspace routing fixed-id coverage ( #26458 )
2026-05-09 00:00:18 -04:00
7da74db497
test(server): cover workspace sync fence protocol ( #26441 )
2026-05-08 23:55:47 -04:00
5cba9e2283
chore: generate
2026-05-09 03:45:35 +00:00
7d1137103f
fix(server): map Account failures to typed 500 instead of defect ( #26448 )
2026-05-08 23:44:28 -04:00
ec13b262a2
fix(server): include Origin in CORS preflight Vary header ( #26445 )
2026-05-08 23:17:47 -04:00
e54d945dad
fix(test): set OPENCODE_EXPERIMENTAL_WORKSPACES in fence header test ( #26466 )
2026-05-08 23:12:08 -04:00
1ece4a26ea
feat(server): add HTTP API response compression ( #26440 )
2026-05-08 23:06:00 -04:00
a804dba7ec
fix(server): emit fixed workspace fence headers ( #26443 )
2026-05-08 22:45:54 -04:00
eff1d89932
test(server): lock fixed workspace routing context ( #26454 )
2026-05-08 22:35:32 -04:00
7810d11a6d
test(server): cover REST API project skills ( #26451 )
2026-05-09 02:23:21 +00:00
f2987270b1
fix(server): serve HttpApi OpenAPI document ( #26438 )
2026-05-08 22:20:50 -04:00
543e6b4bd7
test(server): harden HttpApi exercise coverage ( #26425 )
2026-05-08 20:50:01 -04:00
526cce42ad
test(server): add HttpApi auth exercise mode ( #26386 )
2026-05-08 14:05:46 -04:00
3311f76607
refactor(server): split HttpApi exercise harness ( #26385 )
2026-05-08 17:58:14 +00:00
c572e7fc12
refactor(server): clarify HttpApi route auth layers ( #26372 )
2026-05-08 13:06:00 -04:00
a17b1c0a1d
fix(server): require auth for effect root routes ( #26361 )
...
Co-authored-by: Rajvardhan Patil <243567420+RajvardhanPatil07@users.noreply.github.com >
2026-05-08 16:39:11 +00:00
04c1d3442d
feat(core): allow external workspace creation ( #26212 )
2026-05-08 11:09:12 -04:00
4d6c05923f
feat(core): copy file changes when warping ( #26190 )
2026-05-07 10:24:17 -04:00
7b899f2b2c
fix(server): apply cors before legacy auth ( #26092 )
2026-05-07 08:55:09 +10:00
d524b4f0f7
Type session not-found errors ( #25818 )
2026-05-05 21:33:47 -04:00
bcce79050c
fix(server): restore web terminal CSP allowances ( #25937 )
2026-05-06 09:32:51 +10:00
d3db41c27c
Improve v2 session message rendering ( #25634 )
2026-05-05 02:35:21 +00:00
78edbb9df5
feat(core): session warping ( #25768 )
2026-05-04 21:28:38 -04:00
9d84ce2a72
fix(server): provide fresh ConfigProvider per HttpApi listener ( #25726 )
2026-05-04 13:06:29 -04:00
7c18bdbc00
fix(worktree): fork workspace worktree boot ( #25723 )
2026-05-04 12:01:13 -04:00
48b6b01f06
chore: generate
2026-05-04 13:55:28 +00:00
73eb588fc4
test(server): regression reproducers for #25698 ( #25714 )
2026-05-04 09:54:19 -04:00
e6cba0230d
feat(server): pty websocket auth tickets ( #25660 )
2026-05-03 22:56:14 -04:00
4fc968043a
chore: generate
2026-05-03 19:45:26 +00:00
2b11253f0f
fix(server): serve embedded UI from bunfs ( #25632 )
2026-05-03 19:44:23 +00:00
f5299a9f71
fix(server): support desktop PTY websockets with HttpApi ( #25598 )
2026-05-03 18:23:29 +00:00
22d0563671
fix(auth): respect server username in clients ( #25596 )
2026-05-03 19:28:31 +05:30
eba41714e2
fix(httpapi): add basic auth challenge for browser login
...
Adds a WWW-Authenticate challenge for unauthorized experimental HttpApi UI fallback responses so browsers open the Basic Auth prompt when a server password is configured.
2026-05-03 13:20:05 +00:00
cc9a4dff3b
feat(server): native HttpApi listener with Bun.serve + WS upgrade ( #25547 )
2026-05-03 09:09:45 -04:00
89afa1d319
feat(server): Server.openapi() backed by HttpApi spec, parity-checked against Hono output ( #25545 )
2026-05-03 09:06:23 -04:00
Kit Langton