ff10e47d67
Show fullscreen overlay when signup is blocked ( #2947 )
2026-05-07 11:37:23 -07:00
6c19dfbafd
fix: linux build ( #2946 )
2026-05-07 11:23:10 -07:00
360cbf48af
feat: support code in puter.signup.validate error responses ( #2945 )
...
Maintain Release Merge PR / update-release-pr (push) Has been cancelled
Notify HeyPuter / notify (push) Has been cancelled
release-please / release-please (push) Has been cancelled
Extensions listening on the `puter.signup.validate` event can now set a
`code` field (in addition to `message`) when blocking signups. The code
is forwarded through HttpError and appears in the JSON error response,
giving clients a stable, machine-readable signal to act on.
Covers both the AuthController (password signup) and OIDCService paths.
Adds tests for the new field.
2026-05-07 10:11:08 -07:00
bbe93defe9
tests: add some more driver tests ( #2944 )
2026-05-07 10:04:39 -07:00
5e01c13b31
Fix duplicate textract result ( #2943 )
2026-05-07 09:15:28 -07:00
4b37f35803
test: tests for fs endpoints ( #2942 )
Maintain Release Merge PR / update-release-pr (push) Has been cancelled
Notify HeyPuter / notify (push) Has been cancelled
release-please / release-please (push) Has been cancelled
2026-05-06 22:55:53 -07:00
775c9c49e2
test: add harness and some examples ( #2941 )
...
* test: add harness and some examples
* feat: tests ran on pr
2026-05-06 22:43:22 -07:00
e35260924e
Scope .myapps-search to input and tweak UI styles
Maintain Release Merge PR / update-release-pr (push) Has been cancelled
Notify HeyPuter / notify (push) Has been cancelled
release-please / release-please (push) Has been cancelled
2026-05-06 17:59:54 -07:00
90aad8918c
Support light/dark sidebar logo
2026-05-06 17:54:37 -07:00
46974beba1
Replace gradients with flat colors in system buttons
2026-05-06 17:47:45 -07:00
5e9dc33be1
expose costs in ai chat response ( #2921 )
...
* expose costs
* microcents
2026-05-06 15:59:16 -07:00
1e271f188e
fix: bring back old app names functionality and fix build ( #2937 )
2026-05-06 15:48:25 -07:00
f333597754
Update IPC.js
2026-05-06 15:40:38 -07:00
3b33d16356
Merge branch 'main' of https://github.com/HeyPuter/puter
2026-05-06 15:33:21 -07:00
2289d61d3c
Update UIPrompt.js
2026-05-06 15:33:13 -07:00
8e02f38bad
fix: templates ( #2936 )
2026-05-06 15:31:41 -07:00
5b65a6bc78
Update UIPrompt.js ( #2930 )
...
In the app environment, the prompt input was initialized using `options.value`, so `defaultValue` was not reflected.
This change ensures that `defaultValue` is used when provided, while keeping backward compatibility with `options.value`.
2026-05-06 15:27:28 -07:00
872d2c01d4
Add support for log in with Apple ( #2935 )
...
* Add experimental login with Apple support
* Fix revalidate URL
* Fix OIDC provider revalidate in whoami as well
2026-05-06 16:47:24 -04:00
b7f199ddbc
Normalize string options to object
2026-05-06 11:59:28 -07:00
906c00af97
Support options.defaultColor in color picker
2026-05-06 11:48:47 -07:00
f00d52f879
per model allowed params on replicate image, normalize ratio ( #2898 )
...
* replicate allowed params, normalize ratio
* update docs
2026-05-06 14:16:30 -04:00
7a1a885e89
fix: inline http(s) image URLs for Moonshot vision models ( #2929 ) ( #2931 )
...
Co-authored-by: devareddy05 <pdevendrareddy@guidewire.com >
2026-05-06 13:53:52 -04:00
ff8c275317
chore: package-lock.json ( #2934 )
2026-05-06 10:52:22 -07:00
b3bf979cac
fix: support defaultValue in showColorPicker app env ( #2895 ) ( #2932 )
...
Co-authored-by: devareddy05 <pdevendrareddy@guidewire.com >
2026-05-06 10:46:32 -07:00
eb9e316ed5
Update Z.AI vision model id to z-ai/z-ai for consistency ( #2928 )
Maintain Release Merge PR / update-release-pr (push) Has been cancelled
Notify HeyPuter / notify (push) Has been cancelled
release-please / release-please (push) Has been cancelled
2026-05-06 02:41:04 -04:00
224ea5f7f8
fix: extensions ( #2926 )
2026-05-05 20:55:53 -07:00
c1dacab4c2
extension events after boot fixes ( #2925 )
Maintain Release Merge PR / update-release-pr (push) Has been cancelled
Notify HeyPuter / notify (push) Has been cancelled
release-please / release-please (push) Has been cancelled
2026-05-05 17:42:55 -07:00
8d0b8d4905
fix: app errors ( #2924 )
2026-05-05 17:20:31 -07:00
e7190f442e
Update README.md
2026-05-05 16:49:01 -07:00
95e1b7d171
New README.md ( #2915 )
...
Docker Image CI / build-and-push-image (push) Has been cancelled
* Update README branding, screenshot, and links
* Update README: rephrase intro and add goals
* Update README.md
* Update README.md
* Rename self-hosting docs and add Windows installer
* Update self-hosting headings and README link
* Update README.md
* Update README.md
* Update README.md
2026-05-05 16:35:07 -07:00
f9ac017faf
fix: fsEntry and tscofnig ( #2923 )
2026-05-05 16:18:09 -07:00
4252b7f76f
fix: email ( #2922 )
2026-05-05 15:21:15 -07:00
58a7459e45
fix: broken apps in self hosted ( #2920 )
2026-05-05 12:45:17 -07:00
5dd601a90b
add back web input into OCR ( #2919 )
2026-05-05 14:44:54 -04:00
50fe867e0d
fix: fs issues [PUT-846] ( #2918 )
...
* fix: fs issues
* windows install script
2026-05-05 10:49:04 -07:00
98bdaf0c42
add email into metering alert ( #2917 )
2026-05-05 10:18:45 -07:00
1f1149e32e
Block unconfirmed users from API endpoints server-side ( #2916 )
...
Maintain Release Merge PR / update-release-pr (push) Has been cancelled
Notify HeyPuter / notify (push) Has been cancelled
release-please / release-please (push) Has been cancelled
Add a default-on email confirmation gate that rejects users with
`requires_email_confirmation && !email_confirmed` on all authenticated
routes, returning 403 with `email_confirmation_required`.
Previously this was only enforced client-side via a GUI modal, meaning
direct API calls could bypass the check entirely.
Essential routes are exempted via `allowUnconfirmed: true`:
`/whoami`, `/logout`, `/send-confirm-email`, `/confirm-email`,
`/save_account`, `/get-anticsrf-token`, `/get-gui-token`,
`/session/sync-cookie`, `/auth/revoke-session`,
`/user-protected/delete-own-user`
No impact on temp users (`requires_email_confirmation` is false),
self-hosted deployments without email (flag is never set), or
unauthenticated routes (login, signup, password recovery, OIDC).
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com >
2026-05-05 10:08:50 -07:00
51b81c82bf
Update keyboard.js
2026-05-05 06:24:49 -07:00
15201b7a3c
fix: nginx missing in self host script ( #2911 )
Maintain Release Merge PR / update-release-pr (push) Has been cancelled
Notify HeyPuter / notify (push) Has been cancelled
release-please / release-please (push) Has been cancelled
2026-05-05 00:42:54 -07:00
ad3f0f6c2e
fix: handle fs duplicates on write ( #2910 )
2026-05-05 00:33:55 -07:00
838d6a7178
docker-compose from index ( #2909 )
2026-05-05 00:22:25 -07:00
a5cb484e52
cleanup config ( #2908 )
2026-05-04 23:12:34 -07:00
3a252fb948
Rename moonshot provider key to moonshotai
2026-05-04 21:43:31 -07:00
69365cbae4
Standardize Moonshot provider ID to moonshotai
2026-05-04 21:40:38 -07:00
2f1b9aad06
Update UIDesktop.js
2026-05-04 21:09:48 -07:00
9e8371bde6
Update UIDesktop.js
2026-05-04 21:03:53 -07:00
704fcecbdf
fix: selfhosted thumbnails extensions ( #2905 )
2026-05-04 19:56:10 -07:00
785d8b0cc5
Remove recovery warning block from 2FA setup
2026-05-04 19:45:52 -07:00
eaa68c243a
Remove fullscreen button and handlers
2026-05-04 18:56:51 -07:00
a24246bfbc
selfhosting: p3 cleanup docs + small fixes again ( #2904 )
...
* fix: Perms and configs
* rm broken editor for now
* selfhosting cleanup
2026-05-04 18:47:37 -07:00
Nariman Jelveh