opensource/zpan
3
0
Fork 0
mirror of https://github.com/saltbo/zpan.git synced 2026-08-28 15:51:29 +08:00
Code Issues Packages Projects Releases Wiki Activity
1,241 Commits 16 Branches 43 Tags
b031739533c8fccb7c3f2b8ba879d0cc8594f99a
Commit Graph

1241 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
saltbo b031739533 build(deps): resolve security advisories 2026-08-03 00:41:07 -04:00
saltbo 9b95117595 feat(oauth): manage dynamic client registrations 2026-08-02 22:04:43 -04:00
Jasper Van 8513b18a8e feat(oauth): expose workspace authorization catalog (#551) 
* feat(oauth): expose workspace authorization catalog

* fix(oauth): verify catalog tokens against canonical audience

* fix(auth): normalize Workers preview requests

* Revert "fix(auth): normalize Workers preview requests"

This reverts commit 02009f098f.

* fix(oauth): refresh configured resource scopes
 2026-08-02 21:00:20 -04:00
saltbo 58b88b427b fix(oauth): accept multi-workspace consent 2026-08-02 17:19:26 -04:00
saltbo 461becc3d3 fix(oauth): synchronize Realmroot client scopes 2026-08-02 17:15:17 -04:00
saltbo b818facdab fix(x402): report missing receiver as unavailable 2026-08-02 16:22:43 -04:00
saltbo 24eb5a0e2f fix(deploy): configure production cloud service 2026-08-02 16:04:41 -04:00
saltbo fa158cb11e fix(oauth): log agent assertion verification failures 2026-08-02 15:43:01 -04:00
saltbo bc4a71f691 fix(api-keys): restore legacy Better Auth keys 2026-08-02 15:08:51 -04:00
Jasper Van 2657f82ef1 feat(auth): add contextual OAuth workspace grants (#550) 
* feat(auth): add contextual OAuth workspace grants

* fix(auth): register RFC 9396 detail types

* fix(openapi): restore delegated CLI auth profile

* fix(store): recover paid capacity fulfillment

* fix(auth): close OAuth contract gaps

* fix(store): resume verified x402 settlements

* chore(deps): update zpan cloud sdk to 2.5.2

* test(store): cover verified settlement recovery

* fix(auth): localize standard consent scopes

* fix(docker): include dependency patches before install

* fix(store): harden x402 purchase responses

* test(auth): cover OAuth authorization boundaries

* docs: add PR 550 verification screenshots

* chore: remove temporary verification screenshots

* docs(openapi): document exhausted capacity response
 2026-08-02 13:33:15 -04:00
Jasper Van 1caa4e580c refactor(oauth): replace agent access naming (#549) 2026-08-01 00:32:31 -04:00
Jasper Van d15ca86226 fix(store): recover interrupted capacity purchases (#548) 
* fix(store): recover interrupted capacity purchases

* test(store): cover inactive x402 receiver
 2026-07-31 16:25:05 -04:00
Jasper Van d0a8af8dd9 Merge pull request #547 from saltbo/fix/dpop-verification-challenge 
fix(auth): challenge invalid DPoP tokens
 2026-07-31 12:34:05 -04:00
saltbo bbb1a48073 fix(ci): serialize shared Cloud staging fixture 2026-07-31 12:14:17 -04:00
saltbo f200c3880c Merge remote-tracking branch 'origin/main' into fix/dpop-verification-challenge 2026-07-31 11:54:32 -04:00
Jasper Van 0033b6df4b Merge pull request #546 from saltbo/fix/quick-tunnel-command-error 
fix(ci): initialize cloud e2e command errors
 2026-07-31 11:54:20 -04:00
saltbo bde1bb4bc9 fix(auth): challenge invalid DPoP tokens 2026-07-31 11:34:20 -04:00
saltbo 21305cc660 fix(ci): isolate quick tunnel callback traffic 2026-07-31 11:27:19 -04:00
saltbo 4a9588e551 fix(ci): initialize cloud e2e command errors 2026-07-31 11:03:29 -04:00
Jasper Van 1f3e9b4bf5 Merge pull request #545 from saltbo/feat/x402-paid-agent-uploads 
feat(store): add agent x402 capacity purchases
 2026-07-31 10:53:45 -04:00
saltbo 920d5ee143 fix(ci): retry transient quick tunnel failures 2026-07-31 10:46:43 -04:00
saltbo bb25161011 fix(auth): backfill Better Auth account issuers 2026-07-31 10:16:58 -04:00
saltbo 711e69be4e fix(auth): use absolute callback URLs 2026-07-31 09:52:30 -04:00
saltbo 4027f0c7a6 fix(auth): trust official worker preview origins 2026-07-31 09:42:25 -04:00
saltbo 8402844b5e feat(store): add agent x402 capacity purchases 2026-07-31 09:27:24 -04:00
saltbo a968f85d7c fix(auth): persist delegated agent identity 2026-07-30 20:19:33 -04:00
saltbo e740529ced docs(openapi): describe storage selection override 2026-07-30 16:17:23 -04:00
saltbo af6e8d4c81 fix(auth): preserve OAuth continuation through sign-in 2026-07-30 15:06:47 -04:00
saltbo 954aae5f9e test(auth): set OAuth issuer in CF fixtures 2026-07-30 10:53:52 -04:00
saltbo d7ba55b9da feat(auth): support external agent resources 
Replace bundled agent profiles, API keys, plugin, and skill surfaces with dynamic OAuth client registration, delegated DPoP tokens, discoverable scopes, and Arazzo-backed direct upload workflows.

Refs realmroot/realmroot#115
 2026-07-30 10:41:39 -04:00
saltbo 09fc8de901 refactor(auth): model workspace binding explicitly 2026-07-30 00:07:15 -04:00
Jasper Van a890e7bba2 refactor(auth): unify route authorization around scopes (#544) 2026-07-29 23:26:07 -04:00
agent-kanban[bot] e50c19051a docs: publish ZPan Agent Skill (#543) 
* docs: publish zpan agent skill

Agent-Profile: https://agent-kanban.dev/agents/b0abe6cd7aeba133

* test: cover openapi auth route metadata

Agent-Profile: https://agent-kanban.dev/agents/b0abe6cd7aeba133

* fix: align zpan skill restish commands

Agent-Profile: https://agent-kanban.dev/agents/b0abe6cd7aeba133

* docs: clarify zpan skill release boundaries

* docs: align zpan upload profile examples

Agent-Profile: https://agent-kanban.dev/agents/b0abe6cd7aeba133

* fix: select upload plugin profile via environment

* fix: return zpan upload plugin help

Agent-Profile: https://agent-kanban.dev/agents/b0abe6cd7aeba133

---------

Co-authored-by: Noah Reed <noah-reed@mails.agent-kanban.dev>
Co-authored-by: saltbo <saltbo@foxmail.com>
 2026-07-29 20:19:16 -04:00
agent-kanban[bot] 360237d069 feat: add restish zpan upload plugin (#542) 
* feat: add restish zpan upload plugin

Agent-Profile: https://agent-kanban.dev/agents/f68cfbce6456edb5

* fix: restore single upload resume for restish plugin

Agent-Profile: https://agent-kanban.dev/agents/f68cfbce6456edb5

* ci(release): publish restish-zpan plugin assets

* fix(restish-zpan): accept restish operation aliases

---------

Co-authored-by: Ethan Cole <ethan-cole@mails.agent-kanban.dev>
Co-authored-by: saltbo <saltbo@foxmail.com>
 2026-07-29 16:55:52 -04:00
agent-kanban[bot] 88916f4f03 feat: add agent oauth consent management UI (#541) 
* feat: add agent oauth consent management UI

Agent-Profile: https://agent-kanban.dev/agents/7b0ab18fa695f04a

* test: cover agent oauth consent edge paths

Agent-Profile: https://agent-kanban.dev/agents/7b0ab18fa695f04a

* fix: route agent oauth consent through rpc

Agent-Profile: https://agent-kanban.dev/agents/7b0ab18fa695f04a

* test: cover agent oauth consent rpc on workers

Agent-Profile: https://agent-kanban.dev/agents/7b0ab18fa695f04a

* test: cover agent oauth grant-use middleware

Agent-Profile: https://agent-kanban.dev/agents/7b0ab18fa695f04a

---------

Co-authored-by: Iris Tan <iris-tan@mails.agent-kanban.dev>
 2026-07-29 16:52:17 -04:00
agent-kanban[bot] 00d298627c feat: publish Restish OpenAPI security bindings (#540) 
Agent-Profile: https://agent-kanban.dev/agents/1dc839c09b5ee5e5

Co-authored-by: Marina Zhou <marina-zhou@mails.agent-kanban.dev>
 2026-07-29 14:26:37 -04:00
agent-kanban[bot] d22227ed2f feat: add delegated agent OAuth provider (#539) 
* feat: add delegated agent oauth provider

Agent-Profile: https://agent-kanban.dev/agents/e0a1ce35687e48ef

* test(auth): cover delegated OAuth configuration

* fix(auth): route OAuth metadata through worker

* fix(auth): advertise canonical OAuth issuer

* test: cover agent oauth provider integration

Agent-Profile: https://agent-kanban.dev/agents/e0a1ce35687e48ef

* test(auth): cover managed OAuth consent flow

---------

Co-authored-by: Ravi Shah <ravi-shah@mails.agent-kanban.dev>
Co-authored-by: saltbo <saltbo@foxmail.com>
 2026-07-29 13:26:44 -04:00
agent-kanban[bot] f2aea1bedb feat: stabilize multipart upload protocol (#537) 
Preserve legacy upload clients while adding explicit resumable parts, safe completion recovery, idempotent cleanup, and downloader-bound authorization.
 2026-07-29 10:37:31 -04:00
agent-kanban[bot] 1b1b1db772 feat: add workspace agent API keys (#538) 
Enforce owner/admin management, terminal expired/revoked lifecycle, explicit workspace scopes, current membership rechecks, and authenticated management UI.
 2026-07-29 10:08:44 -04:00
agent-kanban[bot] 4817afecdb feat: migrate content APIs to unified authorization (#534) 
Agent-Profile: https://agent-kanban.dev/agents/b0abe6cd7aeba133

Co-authored-by: Noah Reed <noah-reed@mails.agent-kanban.dev>
 2026-07-29 02:11:08 -04:00
agent-kanban[bot] bba443817a fix: harden legacy downloader bootstrap (#536) 
* fix: harden legacy downloader bootstrap

Agent-Profile: https://agent-kanban.dev/agents/f68cfbce6456edb5

* fix: cover downloader bootstrap hardening

Agent-Profile: https://agent-kanban.dev/agents/f68cfbce6456edb5

* fix: document downloader bootstrap auth policy

Agent-Profile: https://agent-kanban.dev/agents/f68cfbce6456edb5

---------

Co-authored-by: Ethan Cole <ethan-cole@mails.agent-kanban.dev>
 2026-07-29 01:42:47 -04:00
agent-kanban[bot] da286e9db3 feat: declare explicit route authorization policies (#535) 
Agent-Profile: https://agent-kanban.dev/agents/1dc839c09b5ee5e5

Co-authored-by: Marina Zhou <marina-zhou@mails.agent-kanban.dev>
 2026-07-29 00:30:22 -04:00
agent-kanban[bot] 038e23172b feat: establish unified authorization kernel (#533) 
* feat: establish unified authorization kernel

Agent-Profile: https://agent-kanban.dev/agents/e0a1ce35687e48ef

* docs(v2.9): sync confirmed agent access plan

---------

Co-authored-by: Ravi Shah <ravi-shah@mails.agent-kanban.dev>
Co-authored-by: saltbo <saltbo@foxmail.com>
 2026-07-28 21:34:11 -04:00
saltbo ddb87f4901 docs(v2.9): define agent access architecture 2026-07-28 20:08:03 -04:00
saltbo c66590a51b feat(image-hosting): gate custom domains and support origins 2026-07-28 14:48:53 -04:00
saltbo 808f8611e4 fix(events): rotate long-lived SSE connections 2026-07-28 10:53:21 -04:00
Jasper Van 20feaa6c91 fix(image-hosting): bypass auth on custom domains (#532) 
* fix(image-hosting): bypass auth on custom domains

* test(image-hosting): cover traffic compensation
 2026-07-28 10:03:47 -04:00
Jasper Van faea00d025 feat(image-hosting): improve custom-domain image links (#531) 2026-07-28 02:38:03 -04:00
Jasper Van 6ad1563acc feat(image-hosting): automate Cloudflare domain setup (#530) 2026-07-28 01:03:56 -04:00
Jasper Van 1d58d5b80d feat(image-hosting): add configurable custom domain providers (#529) 
* feat(image-hosting): add custom domain providers

* test(image-hosting): cover custom domain provider flows
 2026-07-27 22:52:18 -04:00