Code

History

Commits on mcp-passthrough to apps/cloud/src/auth35+
  1. fix(cloud): require CSRF state in the WorkOS login callback (#1886)ra-co88 committed 2 months ago5ecb881
  2. Restrict workspace writes to admins (#1919)Rhys Sullivan committed 2 months agocaa0391
  3. Revert "Cache api key validations per isolate (#1864)" (#1870)Rhys Sullivan committed 2 months agob81476d
  4. Cache api key validations per isolate (#1864)Rhys Sullivan committed 2 months agofad3650
  5. Move Team to per-member pricing with unlimited executions (#1806)Rhys Sullivan committed 2 months ago93817ed
  6. MCP session cold init resilience (#1787)Rhys Sullivan committed 2 months ago27b044d
  7. Provision Autumn customers for orgs and self-heal customer_not_found (#1780)Rhys Sullivan committed 2 months ago61b3d9a
  8. Serve the cloud console as an SPA with a prerendered shell (#1748)Rhys Sullivan committed 2 months agoeb34d04
  9. Revert the outbound MCP SDK v2 migration (#1697)Rhys Sullivan committed 2 months agoa5800a1
  10. Restore "Serve MCP spec 2026-07-28 and consolidate onto SDK v2" (#1611) (#1691)Rhys Sullivan committed 2 months ago98a34e3
  11. Revert "Serve MCP spec 2026-07-28 and consolidate onto SDK v2" (#1611) (#1690)Rhys Sullivan committed 2 months agob6e8c68
  12. Split the jwt_verify cost into store read vs key import (#1668)Rhys Sullivan committed 2 months agoc0d25e4
  13. Attribute local_verify latency to a phase (#1667)Rhys Sullivan committed 2 months agoe27931f
  14. Cache JWKS across isolates and serve stale keys on refresh failure (#1665)Rhys Sullivan committed 2 months ago81d4cf9
  15. Make latency regressions attributable: version stamps, deploy markers, JWKS and dispatch spans (#1664)Rhys Sullivan committed 2 months ago06786d0
  16. Sign out browsers whose session has already ended (#1624)Rhys Sullivan committed 2 months agoa8d3d3c
  17. Improve trace quality: redact headers, fix DO span parenting, cut noise (#1623)Rhys Sullivan committed 2 months ago19a1d21
  18. Serve MCP spec 2026-07-28 and consolidate onto SDK v2Rhys Sullivan committed 2 months ago0b1739b
  19. Use indexed WorkOS lookup for admin user emails (#1578)Max Schwenk committed 3 months agoa9365c1
  20. Serve tenant-level product reads to organization API keys (#1544)Rhys Sullivan committed 3 months ago1f4741a
  21. Add admin Users console page (#1469)Rhys Sullivan committed 3 months ago4a582ad
  22. Fail closed on the org selector for org-scoped reads (#1488)Rhys Sullivan committed 3 months ago5fa1463
  23. Remember the last-visited org for bare URL entries (#1481)Rhys Sullivan committed 3 months agofd7f779
  24. Revert "Back the JWKS cache with the Workers edge cache (#1479)" (#1480)Rhys Sullivan committed 3 months agoddbbe86
  25. Back the JWKS cache with the Workers edge cache (#1479)Rhys Sullivan committed 3 months ago75f16ed
  26. cloud: end the WorkOS session on sign out (#1446)Rhys Sullivan committed 3 months agoc53e6f8
  27. Validate WorkOS sessions locally with a cached JWKS (#1376)Rhys Sullivan committed 4 months ago63e19e7
  28. Delete organization from settings (#1340)Rhys Sullivan committed 4 months ago857f45d
  29. Classify transient WorkOS failures as retryable during MCP auth (#1352)Rhys Sullivan committed 4 months ago8bdf315
  30. Fix browser elicitation resume page session lookup (#1317)Rhys Sullivan committed 4 months ago8e49072
  31. Preserve URL org scope in cloud auth flows (#1143)Rhys Sullivan committed 4 months ago4e74118
  32. Fix OAuth callback org scope (#1134)Rhys Sullivan committed 4 months ago78aa871
  33. fix: include org slug in connection handoff URLs (#1085)Rhys Sullivan committed 4 months agoae3a162
  34. Fix: accept WorkOS device-login tokens on the /api plane (wrong JWKS) (#1079)Rhys Sullivan committed 4 months ago5f08d68
  35. CLI device-flow login for hosted accounts (`executor login`) (#1026)Rhys Sullivan committed 4 months ago7c873ec