15 Commits

Include renames

Author	SHA1	Message	Date
Daniel Salazar	dd314da16d	feat: require app or api tokens for ai api usages (#3407)	2026-07-20 08:34:44 -07:00
Daniel Salazar	0a46096c41	fix: ai rate limits (#3371)	2026-07-09 16:35:03 -07:00
Neal Shah	24d700673c	Compaction support for OpenAI and Anthropic (#3279) ... * Alpha: compaction support for OpenAI and Anthropic * update lock * fix billing for anthropic compactions * Fix max_tokens bug in together provider * Fix responses compaction	2026-06-21 21:57:56 -04:00
Daniel Salazar	f6408db74e	fix: access tokens with full accesses allowed through with new middleware gate (#3234)	2026-06-08 18:47:07 -07:00
Daniel Salazar	b188942436	feat (PUT-1016 & PUT-1020) (#3164) ... * feat (PUT-1016 & PUT-1020) temp account preservation on forced relogin hosted asset cookies to v2 token too * fix: remove llm dashes and ugly comments * update agents	2026-05-26 23:35:16 -07:00
Daniel Salazar	0276420213	fix: treat access tokens as non-auth unless opted in (#3111) ... * fix: treat access tokens as non-auth unless opted in * fix: tests	2026-05-13 14:20:15 -07:00
Daniel Salazar	f80016e4e6	feat: rate limit all ai requests (#3081) ... * chore: cleanup types for metering * fix: error responses * wip: rate limit refactor * rate-limit for some drivers * fix: ai driver limits * tests: rate limiting	2026-05-11 16:18:21 -07:00
Daniel Salazar	f00445254d	oss: add more apps into oss (#3072)	2026-05-10 22:38:47 -07:00
Daniel SalazarandClaude Opus 4.7	ba03fd7965	tests: add unit tests for PuterAIController: [#2965] (#3031) ... * tests: add unit tests for PuterAIController: [#2965] Adds offline PuterAIController.test.ts with stubbed drivers covering: route registration (paths and per-route auth options), app-actor gating across all four chat-proxy routes, body validation (messages must be an array; openaiCompletions prompt must be a string; openaiResponses provider must be openai-responses), driver delegation and request shaping (model + messages + provider defaults), response shaping for OpenAI chat-completion / text-completion / Responses envelopes and Anthropic message envelope (text + tool_use blocks), SSE streaming with [DONE] terminator, model-listing endpoints with hidden-id filtering and 501 when list() is unavailable, and the HMAC-gated video proxy's input/expiry/secret guards. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * tests: PuterAIController uses setupTestServer + spy on aiChat.complete Drops the manual driver/controller stub apparatus (makeStubDriver, makeController, custom dep builders) in favour of the live wired controller from server.controllers.puterAi. Each test that needs a canned chat completion result spies on server.drivers.aiChat.complete, which keeps the unit-of-test focused on the controller (validation, response shape, SSE streaming) without dragging in chat-driver model resolution and credit checks. Aligns with AGENTS.md: "Prefer test server over mocking deps." The "500 when URL signature secret missing" assertion was dropped — the default config wires a secret, so the branch is unreachable in the live test server. Replaced with the equivalent 403-on-invalid- signature assertion which actually exercises the HMAC gate. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-08 19:15:23 -07:00
Daniel Salazar	9bcd77c85b	chore: add legacy codes back to all errors (#3022)	2026-05-08 13:51:55 -07:00
Nariman Jelveh	267f464232	Add AGPL license headers to source files (#2877)	2026-05-01 13:50:42 -07:00
Daniel Salazar	e8fbb88102	puter models list fix (#2869)	2026-05-01 01:41:56 -07:00
Daniel SalazarandCopilot	f6e1f90225	fix: dbConfigs and ai routes (#2868) ... * fix: db configs Co-authored-by: Copilot <copilot@github.com> * fix: ai routes Co-authored-by: Copilot <copilot@github.com> --------- Co-authored-by: Copilot <copilot@github.com>	2026-04-30 23:56:18 -07:00
Daniel Salazar	208abda841	fix: bad ai endpoint (#2856)	2026-04-30 12:38:39 -07:00
6 people	d4d78ac7db	rework: change backend and backend extensions to use simpler code structure and patterns (#2815) ... * fix: dynamodb health checks and client recreation (#2789) * wip: no nanoServices groundwork * feat: data clients in new shape * wip: auth and perms in new system * more wip * middlewaters mainly done * wip: fsv2 in new layout * old fs v2 migration * driver system * driver and old fs fixes * ai drivers wip * stream support * metering in ai chat driver * wip: new auth * rate limit and auth routes * captcha and anti csrf * fix: types * auth store * app logic * wip most other dricvers * fs * mostly kill all legacy stuff * fs finish * fix: redis usage * ai controller * driver cleanup * socket io in v2 * broadcast and crudq stuff * subdomains * notifcations and shares * fix bad syntaxes * auth wip Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * extensions * extension setup * more routes * sql migrations and default services * home router * tier 7 * everything else * everything else * remaining missing bits * server health * logs * cleanup * deps * cleanup 2 * more cleanup 2 * boot * fix launch * config fix * move file * fix: tsconfig things * fix: extension loading * launching * fix: drivers * fix: others * fix: icons * fix: file uploads * fs fixes * fix: fs api * fix: dev-center * config * add back telemetry * lint stuff * husky hooks * fix: fs oss * fix: config migration * config migration * migrate scripts + replicate * runner * fix: merge defafult config * fix: default region * fix: api domain * fix paths in readfile * fix fs entry default s3 * NS: Remove Referral && Entri Service * dep cleanups * fix: static assets * fix: kv and perms * fix: driver registrations * fix: home mapping * fix: rao * adding back 500 alarm * fix: build paths * fix: fs and kv shapes * fix: kv shape * more kv coercing and ai chat matching format as prior * fix: private app gates * private app caches * fix: whole bunch of legacy shape issues * update template jsonc * fix caching partial oidc and fs signed paths * more oidc fixes * fix: wip * fix: private apps * admin route fixes * fix: last few things hopefully * claude uploads * fix security for app only routes * fix kv system namespace * stuff * fix: app and kv and suggested apps * fix:open item * fix: FS operations * fix: default app icons * add back token-read and WSL support * metering fixes * fix: fsEntry * perm scanners and implicators * proper download endpoint * fix: download * fix anti csrft on v2 * fix file extensions, app icons * fold in v1 fixes from origin/main into v2 equivalents Re-applies the v1 fixes that landed on origin/main into their v2 counterparts since the v1 files were deleted on DS/wip during the v2 migration. v1 commits referenced below. - SQLBatcher: flush immediately when queue hits maxBatchSize instead of racing the timer (v1 12f48238). - RedisClient: drop maxRetriesPerRequest from 2 to 1 to shrink failure window (v1 b6776ab4). - ChatCompletionDriver: default minimumCredits to 1 when unset/zero so zero-cost precheck doesn't auto-pass (v1 36bd6073). - OpenAiImageProvider: add gpt-image-2 support — open-ended size rules, token-based cost estimator, arbitrary-size normalizer, isGpt prefix broadened to gpt-image- (v1 f14f1bf4). models.ts auto-merged via rename detection. - AppStore: bump row cache TTL from 5m to 24h (v1 6b3196ed). Not ported: v1 app-object Redis cache (bdfa12b5/b886dde3) — v2's #toClient recomputes filetype_associations/created_from_origin per read; adding a second cache layer is a larger change for a follow-up. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * remoe anti-csrf from auth routes that had not used them * more icon fixes * fix worker functionality * fix: app and subdomain es Co-authored-by: Copilot <copilot@github.com> * fix PUT-761 * fix: PUT-748 * fix: rename fsService * Add security back to WorkerDriver * Migrate worker from fsEntry to fs. Fix cache issue * remove ability to create symlinks * strict webdav acl * require auth for wisp * chore: service renames * Add metering back to puter peer api * fix: PUT-760 PUT-749 * fix: PUT-746 * fix: peer cost Co-authored-by: Copilot <copilot@github.com> * fix: 771 * change order of peer controller * fix: create appdata folder for app on get auth token * fix: align delete site and list sites * delete: putility * fix subdomains * Add support for tilde in subdomains, fix subdomain update * cleanup PeerController.ts and fix billing oversight (#2844) * fix: PUT-786 * fix: bugs * fix: issues with multiple subdomain queries, or permission checks * fix: harden response shapes to not contain uneeded fields * fix: move state to redis * fix: missing kv methods + better sec Co-authored-by: Copilot <copilot@github.com> * fix: subdomainStore limit * fix: missing path resolution Co-authored-by: Copilot <copilot@github.com> * fs fixes * fix: undef error * fix fs + cleanup * fix: npm audit fixes * heal path entries where missing Co-authored-by: Copilot <copilot@github.com> * fix: caching Co-authored-by: Copilot <copilot@github.com> * fix: cache inconsistencies Co-authored-by: Copilot <copilot@github.com> * fix: app driver metadata Co-authored-by: Copilot <copilot@github.com> * remove extraneous comma * fix: associated app icons * fix: bad tool call * Add validation to WorkerDriver#getFilePaths * misc fs and auth issues Co-authored-by: Copilot <copilot@github.com> * fix: oidc errors Co-authored-by: Copilot <copilot@github.com> * fix: PUT-797 * fix: legacy appdata_app Co-authored-by: Copilot <copilot@github.com> * fix: add alert logs Co-authored-by: Copilot <copilot@github.com> * fix: error handling * Disable sharecontroller * fix: remove private user identifier for ai * fix: private app fixes * Add backback signup_server * fix: completionId size Co-authored-by: Copilot <copilot@github.com> * fix: revalidate path for oidc * fix: revalidate path for oidc * fix: email validation Co-authored-by: Copilot <copilot@github.com> * fix: user create query * fix: middleware extensions Co-authored-by: Copilot <copilot@github.com> * use x-forwarded-for for req ip forwarded * fix: missing last_activity ts * feat: add cache broadcast to subdomains * fix: update config typing --------- Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Co-authored-by: ProgrammerIn-wonderland <3838shah@gmail.com> Co-authored-by: Copilot <copilot@github.com> Co-authored-by: Nariman Jelveh <nj@puter.com> Co-authored-by: velzie <velzie@velzie.rip>	2026-04-30 12:13:43 -07:00