Code

History

Commits on workspace-admin-writes to apps/cloud/src/auth35+
  1. Restrict workspace writes to adminsRhys Sullivan committed 2 months ago1a0e196
  2. Revert "Cache api key validations per isolate (#1864)" (#1870)Rhys Sullivan committed 2 months agob81476d
  3. Cache api key validations per isolate (#1864)Rhys Sullivan committed 2 months agofad3650
  4. Move Team to per-member pricing with unlimited executions (#1806)Rhys Sullivan committed 2 months ago93817ed
  5. MCP session cold init resilience (#1787)Rhys Sullivan committed 2 months ago27b044d
  6. Provision Autumn customers for orgs and self-heal customer_not_found (#1780)Rhys Sullivan committed 2 months ago61b3d9a
  7. Serve the cloud console as an SPA with a prerendered shell (#1748)Rhys Sullivan committed 2 months agoeb34d04
  8. Revert the outbound MCP SDK v2 migration (#1697)Rhys Sullivan committed 2 months agoa5800a1
  9. Restore "Serve MCP spec 2026-07-28 and consolidate onto SDK v2" (#1611) (#1691)Rhys Sullivan committed 2 months ago98a34e3
  10. Revert "Serve MCP spec 2026-07-28 and consolidate onto SDK v2" (#1611) (#1690)Rhys Sullivan committed 2 months agob6e8c68
  11. Split the jwt_verify cost into store read vs key import (#1668)Rhys Sullivan committed 2 months agoc0d25e4
  12. Attribute local_verify latency to a phase (#1667)Rhys Sullivan committed 2 months agoe27931f
  13. Cache JWKS across isolates and serve stale keys on refresh failure (#1665)Rhys Sullivan committed 2 months ago81d4cf9
  14. Make latency regressions attributable: version stamps, deploy markers, JWKS and dispatch spans (#1664)Rhys Sullivan committed 2 months ago06786d0
  15. Sign out browsers whose session has already ended (#1624)Rhys Sullivan committed 2 months agoa8d3d3c
  16. Improve trace quality: redact headers, fix DO span parenting, cut noise (#1623)Rhys Sullivan committed 2 months ago19a1d21
  17. Serve MCP spec 2026-07-28 and consolidate onto SDK v2Rhys Sullivan committed 2 months ago0b1739b
  18. Use indexed WorkOS lookup for admin user emails (#1578)Max Schwenk committed 2 months agoa9365c1
  19. Serve tenant-level product reads to organization API keys (#1544)Rhys Sullivan committed 3 months ago1f4741a
  20. Add admin Users console page (#1469)Rhys Sullivan committed 3 months ago4a582ad
  21. Fail closed on the org selector for org-scoped reads (#1488)Rhys Sullivan committed 3 months ago5fa1463
  22. Remember the last-visited org for bare URL entries (#1481)Rhys Sullivan committed 3 months agofd7f779
  23. Revert "Back the JWKS cache with the Workers edge cache (#1479)" (#1480)Rhys Sullivan committed 3 months agoddbbe86
  24. Back the JWKS cache with the Workers edge cache (#1479)Rhys Sullivan committed 3 months ago75f16ed
  25. cloud: end the WorkOS session on sign out (#1446)Rhys Sullivan committed 3 months agoc53e6f8
  26. Validate WorkOS sessions locally with a cached JWKS (#1376)Rhys Sullivan committed 4 months ago63e19e7
  27. Delete organization from settings (#1340)Rhys Sullivan committed 4 months ago857f45d
  28. Classify transient WorkOS failures as retryable during MCP auth (#1352)Rhys Sullivan committed 4 months ago8bdf315
  29. Fix browser elicitation resume page session lookup (#1317)Rhys Sullivan committed 4 months ago8e49072
  30. Preserve URL org scope in cloud auth flows (#1143)Rhys Sullivan committed 4 months ago4e74118
  31. Fix OAuth callback org scope (#1134)Rhys Sullivan committed 4 months ago78aa871
  32. fix: include org slug in connection handoff URLs (#1085)Rhys Sullivan committed 4 months agoae3a162
  33. Fix: accept WorkOS device-login tokens on the /api plane (wrong JWKS) (#1079)Rhys Sullivan committed 4 months ago5f08d68
  34. CLI device-flow login for hosted accounts (`executor login`) (#1026)Rhys Sullivan committed 4 months ago7c873ec
  35. [codex] Fix signed-out OAuth callback recovery (#1061)Rhys Sullivan committed 4 months ago65dd600