Code

History

Commits on main to apps/cloud/src/auth35+
  1. Authorize from the mirror unconditionally; alert on a stale reconciler (#2031)Rhys Sullivan committed 1 month agoa72e51d
  2. Authorize org membership from the local mirror (#2026)Rhys Sullivan committed 1 month agoa6cdcf1
  3. Read members from the directory and add email search (#2025)Rhys Sullivan committed 1 month agobe77521
  4. Reconcile the membership mirror from WorkOS events (#2024)Rhys Sullivan committed 1 month agoa97a20c
  5. Feed the cloud membership mirror from login and member writes (#2004)Rhys Sullivan committed 1 month agoddfe3f5
  6. Add MemberDirectory seam and cloud membership mirror tables (#2003)Rhys Sullivan committed 1 month ago89f4246
  7. Restart hosted invitation logins with fresh state (#2023)Rhys Sullivan committed 1 month ago9c42444
  8. Stop capping WorkOS access token age at 24 hours (#2009)Rhys Sullivan committed 1 month ago6bbb2bb
  9. Normalize login return destinations (#2002)Rhys Sullivan committed 1 month ago73a62dd
  10. Keep seat reconciliation alive after the response (#2001)Rhys Sullivan committed 1 month agoc9cc5e7
  11. Harden OAuth sessions and patch vulnerable dependencies (#2000)Rhys Sullivan committed 1 month ago3fd28a5
  12. Carry an approval's persistence choice through elicitation (#1976)Dara Adedeji committed 1 month ago40b2f2e
  13. fix(cloud): require CSRF state in the WorkOS login callback (#1886)ra-co88 committed 1 month ago5ecb881
  14. Restrict workspace writes to admins (#1919)Rhys Sullivan committed 2 months agocaa0391
  15. Revert "Cache api key validations per isolate (#1864)" (#1870)Rhys Sullivan committed 2 months agob81476d
  16. Cache api key validations per isolate (#1864)Rhys Sullivan committed 2 months agofad3650
  17. Move Team to per-member pricing with unlimited executions (#1806)Rhys Sullivan committed 2 months ago93817ed
  18. MCP session cold init resilience (#1787)Rhys Sullivan committed 2 months ago27b044d
  19. Provision Autumn customers for orgs and self-heal customer_not_found (#1780)Rhys Sullivan committed 2 months ago61b3d9a
  20. Serve the cloud console as an SPA with a prerendered shell (#1748)Rhys Sullivan committed 2 months agoeb34d04
  21. Revert the outbound MCP SDK v2 migration (#1697)Rhys Sullivan committed 2 months agoa5800a1
  22. Restore "Serve MCP spec 2026-07-28 and consolidate onto SDK v2" (#1611) (#1691)Rhys Sullivan committed 2 months ago98a34e3
  23. Revert "Serve MCP spec 2026-07-28 and consolidate onto SDK v2" (#1611) (#1690)Rhys Sullivan committed 2 months agob6e8c68
  24. Split the jwt_verify cost into store read vs key import (#1668)Rhys Sullivan committed 2 months agoc0d25e4
  25. Attribute local_verify latency to a phase (#1667)Rhys Sullivan committed 2 months agoe27931f
  26. Cache JWKS across isolates and serve stale keys on refresh failure (#1665)Rhys Sullivan committed 2 months ago81d4cf9
  27. Make latency regressions attributable: version stamps, deploy markers, JWKS and dispatch spans (#1664)Rhys Sullivan committed 2 months ago06786d0
  28. Sign out browsers whose session has already ended (#1624)Rhys Sullivan committed 2 months agoa8d3d3c
  29. Improve trace quality: redact headers, fix DO span parenting, cut noise (#1623)Rhys Sullivan committed 2 months ago19a1d21
  30. Serve MCP spec 2026-07-28 and consolidate onto SDK v2Rhys Sullivan committed 2 months ago0b1739b
  31. Use indexed WorkOS lookup for admin user emails (#1578)Max Schwenk committed 2 months agoa9365c1
  32. Serve tenant-level product reads to organization API keys (#1544)Rhys Sullivan committed 3 months ago1f4741a
  33. Add admin Users console page (#1469)Rhys Sullivan committed 3 months ago4a582ad
  34. Fail closed on the org selector for org-scoped reads (#1488)Rhys Sullivan committed 3 months ago5fa1463
  35. Remember the last-visited org for bare URL entries (#1481)Rhys Sullivan committed 3 months agofd7f779