Iuliia Ivashko d4269a1cc8 fix: harden terminal auth, skill file access, and sensitive request logging (#575) ...

* fix: enforce terminal websocket authentication on upgrade

* fix: block path traversal in skill supporting file APIs

* fix: redact voice token request logs

* fix: block skill file path traversal

2026-03-02 18:25:55 +02:00

..

agents.js

feat(settings): group agents and skills sidebar by subfolder (#464)

2026-02-23 12:28:24 +02:00

auth.js

refactor(server): split opencode config/auth/ui-auth into domain modules (#454)

2026-02-20 15:57:44 +02:00

commands.js

refactor(server): split opencode config/auth/ui-auth into domain modules (#454)

2026-02-20 15:57:44 +02:00

DOCUMENTATION.md

refactor(server): split opencode config/auth/ui-auth into domain modules (#454)

2026-02-20 15:57:44 +02:00

index.js

feat(mcp): add MCP Config Manager UI (#473)

2026-02-22 23:22:33 +02:00

mcp.js

feat(mcp): add MCP Config Manager UI (#473)

2026-02-22 23:22:33 +02:00

providers.js

refactor(server): split opencode config/auth/ui-auth into domain modules (#454)

2026-02-20 15:57:44 +02:00

shared.js

fix: harden terminal auth, skill file access, and sensitive request logging (#575)

2026-03-02 18:25:55 +02:00

skills.js

refactor(server): split opencode config/auth/ui-auth into domain modules (#454)

2026-02-20 15:57:44 +02:00

tunnel-auth.js

fix: prevent tunnel lock for non-tunnel web sessions

2026-02-28 04:48:35 +02:00

ui-auth.js

refactor(auth): migrate session storage to JWT with persistent secret (#508)

2026-02-25 19:40:28 +02:00