Diego Rodrigues de Sa e Souza ff392e694c fix(api): LAN/Tailscale dashboard — host-aware CSP + GET-exempt version route + combo field errors (#5083) (#5177) ...

Integrated into release/v3.8.39. Host-aware CSP (ReDoS/injection-safe host validation) + GET-exempt /api/system/version (POST/spawn stays LOCAL_ONLY, exact-match safe-methods-only) + COMBO_002 firstField. 44/44 tests + route-guard membership gate green. CHANGELOG synced to keep all 4 v3.8.39 fixes.

2026-06-27 13:08:08 -03:00

..

.well-known/agent.json

fix(dashboard): use lightweight ping endpoint for MaintenanceBanner (fixes #3040) (#3043)

2026-06-01 14:30:17 -03:00

(dashboard)

fix(dashboard): use amber for home update-step warning icon (#5176)

2026-06-27 13:05:43 -03:00

400

feat(ui): full provider-UI gap fixes

2026-03-09 15:12:51 -03:00

401

feat(ui): full provider-UI gap fixes

2026-03-09 15:12:51 -03:00

403

feat(ui): full provider-UI gap fixes

2026-03-09 15:12:51 -03:00

408

feat(ui): full provider-UI gap fixes

2026-03-09 15:12:51 -03:00

429

feat(ui): full provider-UI gap fixes

2026-03-09 15:12:51 -03:00

500

feat(ui): full provider-UI gap fixes

2026-03-09 15:12:51 -03:00

502

feat(ui): full provider-UI gap fixes

2026-03-09 15:12:51 -03:00

503

feat(ui): full provider-UI gap fixes

2026-03-09 15:12:51 -03:00

a2a

chore(test): sync open-mode runners and assertions

2026-05-02 01:48:58 -03:00

api

fix(api): LAN/Tailscale dashboard — host-aware CSP + GET-exempt version route + combo field errors (#5083) (#5177)

2026-06-27 13:08:08 -03:00

auth/callback

feat(oauth): complete Windsurf / Devin CLI OAuth + API-token flows (#2168)

2026-05-11 21:49:32 -03:00

authorize

Merge pull request #2964 from S0yora/feat/trae-solo-provider

2026-05-31 18:06:17 -03:00

callback

Release v3.8.31 (#4377)

2026-06-20 14:55:24 -03:00

connect/codex/[token]

Feat/codex device flow (#3195)

2026-06-05 12:06:35 -03:00

docs

Release v3.8.35 (#4743)

2026-06-23 17:06:18 -03:00

forbidden

feat(i18n): replace hardcoded strings with translation keys in HomePageClient

2026-02-26 03:05:30 -03:00

forgot-password

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

landing

Release v3.8.0 (#2073)

2026-05-10 00:55:06 -03:00

login

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

maintenance

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

offline

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

privacy

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

status

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

terms

Release v3.8.29 (#4126)

2026-06-19 06:49:01 -03:00

error.tsx

refactor: harden open-sse services, eliminate any casts, add dashboard pages

2026-03-04 19:38:34 -03:00

global-error.tsx

fix(i18n): Turkish locale-aware search and sorting (#3115)

2026-06-03 18:58:01 -03:00

globals.css

Release v3.8.37 (#5053)

2026-06-26 02:51:06 -03:00

layout.tsx

Release v3.8.30 (#4267)

2026-06-20 07:09:43 -03:00

loading.tsx

refactor: harden open-sse services, eliminate any casts, add dashboard pages

2026-03-04 19:38:34 -03:00

manifest.ts

Release v3.8.3 (#2617)

2026-05-24 18:05:58 -03:00

not-found.tsx

refactor: harden open-sse services, eliminate any casts, add dashboard pages

2026-03-04 19:38:34 -03:00

page.tsx

feat(auth): enforce dashboard sessions for management routes

2026-04-17 16:45:27 -03:00