1caa4e580c
refactor(oauth): replace agent access naming ( #549 )
2026-08-01 00:32:31 -04:00
8402844b5e
feat(store): add agent x402 capacity purchases
2026-07-31 09:27:24 -04:00
a968f85d7c
fix(auth): persist delegated agent identity
2026-07-30 20:19:33 -04:00
e740529ced
docs(openapi): describe storage selection override
2026-07-30 16:17:23 -04:00
d7ba55b9da
feat(auth): support external agent resources
...
Replace bundled agent profiles, API keys, plugin, and skill surfaces with dynamic OAuth client registration, delegated DPoP tokens, discoverable scopes, and Arazzo-backed direct upload workflows.
Refs realmroot/realmroot#115
2026-07-30 10:41:39 -04:00
e50c19051a
docs: publish ZPan Agent Skill ( #543 )
...
* docs: publish zpan agent skill
Agent-Profile: https://agent-kanban.dev/agents/b0abe6cd7aeba133
* test: cover openapi auth route metadata
Agent-Profile: https://agent-kanban.dev/agents/b0abe6cd7aeba133
* fix: align zpan skill restish commands
Agent-Profile: https://agent-kanban.dev/agents/b0abe6cd7aeba133
* docs: clarify zpan skill release boundaries
* docs: align zpan upload profile examples
Agent-Profile: https://agent-kanban.dev/agents/b0abe6cd7aeba133
* fix: select upload plugin profile via environment
* fix: return zpan upload plugin help
Agent-Profile: https://agent-kanban.dev/agents/b0abe6cd7aeba133
---------
Co-authored-by: Noah Reed <noah-reed@mails.agent-kanban.dev >
Co-authored-by: saltbo <saltbo@foxmail.com >
2026-07-29 20:19:16 -04:00
360237d069
feat: add restish zpan upload plugin ( #542 )
...
* feat: add restish zpan upload plugin
Agent-Profile: https://agent-kanban.dev/agents/f68cfbce6456edb5
* fix: restore single upload resume for restish plugin
Agent-Profile: https://agent-kanban.dev/agents/f68cfbce6456edb5
* ci(release): publish restish-zpan plugin assets
* fix(restish-zpan): accept restish operation aliases
---------
Co-authored-by: Ethan Cole <ethan-cole@mails.agent-kanban.dev >
Co-authored-by: saltbo <saltbo@foxmail.com >
2026-07-29 16:55:52 -04:00
88916f4f03
feat: add agent oauth consent management UI ( #541 )
...
* feat: add agent oauth consent management UI
Agent-Profile: https://agent-kanban.dev/agents/7b0ab18fa695f04a
* test: cover agent oauth consent edge paths
Agent-Profile: https://agent-kanban.dev/agents/7b0ab18fa695f04a
* fix: route agent oauth consent through rpc
Agent-Profile: https://agent-kanban.dev/agents/7b0ab18fa695f04a
* test: cover agent oauth consent rpc on workers
Agent-Profile: https://agent-kanban.dev/agents/7b0ab18fa695f04a
* test: cover agent oauth grant-use middleware
Agent-Profile: https://agent-kanban.dev/agents/7b0ab18fa695f04a
---------
Co-authored-by: Iris Tan <iris-tan@mails.agent-kanban.dev >
2026-07-29 16:52:17 -04:00
d22227ed2f
feat: add delegated agent OAuth provider ( #539 )
...
* feat: add delegated agent oauth provider
Agent-Profile: https://agent-kanban.dev/agents/e0a1ce35687e48ef
* test(auth): cover delegated OAuth configuration
* fix(auth): route OAuth metadata through worker
* fix(auth): advertise canonical OAuth issuer
* test: cover agent oauth provider integration
Agent-Profile: https://agent-kanban.dev/agents/e0a1ce35687e48ef
* test(auth): cover managed OAuth consent flow
---------
Co-authored-by: Ravi Shah <ravi-shah@mails.agent-kanban.dev >
Co-authored-by: saltbo <saltbo@foxmail.com >
2026-07-29 13:26:44 -04:00
f2aea1bedb
feat: stabilize multipart upload protocol ( #537 )
...
Preserve legacy upload clients while adding explicit resumable parts, safe completion recovery, idempotent cleanup, and downloader-bound authorization.
2026-07-29 10:37:31 -04:00
1b1b1db772
feat: add workspace agent API keys ( #538 )
...
Enforce owner/admin management, terminal expired/revoked lifecycle, explicit workspace scopes, current membership rechecks, and authenticated management UI.
2026-07-29 10:08:44 -04:00
038e23172b
feat: establish unified authorization kernel ( #533 )
...
* feat: establish unified authorization kernel
Agent-Profile: https://agent-kanban.dev/agents/e0a1ce35687e48ef
* docs(v2.9): sync confirmed agent access plan
---------
Co-authored-by: Ravi Shah <ravi-shah@mails.agent-kanban.dev >
Co-authored-by: saltbo <saltbo@foxmail.com >
2026-07-28 21:34:11 -04:00
c66590a51b
feat(image-hosting): gate custom domains and support origins
2026-07-28 14:48:53 -04:00
faea00d025
feat(image-hosting): improve custom-domain image links ( #531 )
2026-07-28 02:38:03 -04:00
6ad1563acc
feat(image-hosting): automate Cloudflare domain setup ( #530 )
2026-07-28 01:03:56 -04:00
1d58d5b80d
feat(image-hosting): add configurable custom domain providers ( #529 )
...
* feat(image-hosting): add custom domain providers
* test(image-hosting): cover custom domain provider flows
2026-07-27 22:52:18 -04:00
b2859ec944
refactor(storage): remove legacy custom host downloads ( #528 )
...
* refactor(storage): remove custom host downloads
* test(download): cover private signed URLs end to end
2026-07-27 20:00:43 -04:00
ece5f413be
fix(download): force browser-downloadable files to save ( #527 )
...
* fix(download): force browser-downloadable files to save
* fix(storage): require signed upload CORS headers
* fix(storage): keep upload metadata out of signatures
* fix(storage): sign bare upload commands
* revert: keep upload metadata in signed commands
2026-07-27 18:47:52 -04:00
a5c281b26a
refactor(api)!: make site routes RESTful ( #526 )
...
Move site configuration under settings, model analytics and licensing as resources, and isolate scheduler runs under the internal API.
BREAKING CHANGE: site email, branding, analytics, licensing, WebDAV verification, and scheduler endpoint paths have changed.
Refs #451
2026-07-27 15:22:28 -04:00
5473db9be1
fix(downloads): separate list data from task details ( #525 )
...
* fix(downloads): separate list items from task details
* fix(downloads): scope task list to downloader
* fix(downloads): stabilize table data
2026-07-27 10:22:47 -04:00
ad0f21bb39
fix: unify list pagination and realtime updates ( #524 )
...
* fix!: unify pagination and realtime change delivery
Replace offset paging on affected unbounded collections with signed keyset tokens and infinite loading. Persist scoped resource changes so one global SSE connection can resume and invalidate query caches safely.
BREAKING CHANGE: migrated list APIs now accept pageToken and return nextPageToken instead of page and total fields.
Refs #450
* fix: keep page tokens at the HTTP boundary
Move signed page-token handling out of the pure domain layer so dependency-cruiser architecture checks pass without changing behavior.
* fix: route background job stats through usecase
Keep the HTTP boundary from reaching directly into repository ports and cover the new usecase wrapper.
* fix: align clients and checks with cursor pagination
* refactor: unify pagination boundaries and infinite loading
2026-07-27 02:02:53 -04:00
5c3d5a71a5
chore(openapi): regenerate object list model
2026-07-26 22:09:07 -04:00
1a61b6d9e2
fix(downloader): serialize attempt ledger updates
2026-07-26 10:39:27 -04:00
d6d811f41c
feat(public): redesign profile and share pages ( #522 )
...
* feat(public): redesign profile and share pages
* fix(openapi): regenerate Go client
* test(share): cover README validation boundaries
2026-07-24 08:35:05 -04:00
0550e41868
feat(shares)!: make landing shares public by default
...
Replace opt-in profile listings with an opt-out private flag and a unified privacy endpoint.
BREAKING CHANGE: showOnProfile, listedAt, and the profile-listing endpoints are replaced by private and PUT /api/shares/:token/privacy.
2026-07-24 01:07:01 -04:00
526d237a4e
feat: connect curated shares to public profiles ( #519 )
...
* feat: connect curated shares to public profiles
Agent-Profile: https://agent-kanban.dev/agents/1dc839c09b5ee5e5
* chore: retry CI after tunnel failure
Agent-Profile: https://agent-kanban.dev/agents/1dc839c09b5ee5e5
---------
Co-authored-by: Marina Zhou <marina-zhou@mails.agent-kanban.dev >
2026-07-24 00:39:25 -04:00
2f7026b77d
chore(openapi): regenerate Go client
2026-07-23 18:24:21 -04:00
a83c3ac5a7
fix(api-keys): normalize legacy scope metadata
2026-07-23 01:50:22 -04:00
3f0531c6bd
fix(webdav): sync generated OpenAPI client
2026-07-22 23:47:54 -04:00
44198fabcb
chore(openapi): regenerate Go client
2026-07-22 11:21:50 -04:00
e55ee53496
refactor(stats): unify audit and fact pipelines
...
Centralize request audit recording, preserve immutable download-task history, and derive hourly statistics and backfills from the same authoritative sources. Add durable user registration facts so admin deletion no longer destroys signup history.
2026-07-21 23:02:52 -04:00
e761b6aec7
feat(webdav): verify derived domains before publishing
2026-07-20 18:54:12 -04:00
7fe16f3ed7
refactor(site): replace options with structured config APIs
2026-07-20 15:17:48 -04:00
8cd151c798
chore(openapi): refresh generated Go client
2026-07-20 13:09:37 -04:00
f0292cc257
fix(events): allow org API keys to stream download tasks ( #509 )
...
* fix(events): authorize org API key task streams
Agent-Profile: https://agent-kanban.dev/agents/e0a1ce35687e48ef
* docs(events): complete verification checklist
Agent-Profile: https://agent-kanban.dev/agents/e0a1ce35687e48ef
---------
Co-authored-by: Ravi Shah <ravi-shah@mails.agent-kanban.dev >
2026-07-19 01:09:12 -04:00
8eb388ea01
fix(admin): align dashboard stats data sources
2026-07-09 23:34:03 -04:00
ab81f138bd
fix(admin): harden dashboard stats ranges
2026-07-09 23:34:03 -04:00
b7f7fa7ecd
feat(admin): implement operations dashboard stats
2026-07-09 23:34:03 -04:00
554c231536
feat(admin): redesign dashboard with pro analytics
2026-07-09 23:34:03 -04:00
7ccaba2f8b
feat: refine admin audit filtering ( #495 )
...
* feat: refine admin audit filtering
Agent-Profile: https://agent-kanban.dev/agents/b0abe6cd7aeba133
* test: add audit filter spec scenarios
Agent-Profile: https://agent-kanban.dev/agents/b0abe6cd7aeba133
* chore: refresh openapi client
Agent-Profile: https://agent-kanban.dev/agents/b0abe6cd7aeba133
---------
Co-authored-by: Noah Reed <noah-reed@mails.agent-kanban.dev >
2026-07-04 10:21:45 -04:00
bc15bc3617
chore(deps): bump golang.org/x/net ( #496 )
...
Bumps the go_modules group with 1 update in the /cmd directory: [golang.org/x/net](https://github.com/golang/net ).
Updates `golang.org/x/net` from 0.52.0 to 0.55.0
- [Commits](https://github.com/golang/net/compare/v0.52.0...v0.55.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.55.0
dependency-type: indirect
dependency-group: go_modules
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-04 01:31:26 -04:00
3695c80c2e
feat(downloads): add task event timeline
2026-06-29 21:07:00 -04:00
74c0d0cd75
fix(downloader): report aria2 metadata runtime
2026-06-29 20:19:46 -04:00
979afd20e7
style(downloader): format client tests
2026-06-29 17:45:34 -04:00
3fdc7b4ae0
refactor(downloader): reorganize cmd downloader runtime
2026-06-29 17:42:24 -04:00
26b7a1d8a4
fix(downloader): preserve failed upload results for retry
2026-06-29 12:08:25 -04:00
2c0cdd8a63
fix(downloader): prevent aria2 session auto-restore
2026-06-27 01:42:32 -04:00
cf7b1de112
fix(downloader): consolidate polling into heartbeat
2026-06-27 01:16:12 -04:00
c55f6f460c
chore(openapi): update generated storage client
2026-06-24 17:51:19 -04:00
3f6751d60c
chore(openapi): update generated downloader client
2026-06-24 14:59:54 -04:00
Jasper Van