Daniel Salazar 11114c80d6 fix(auth): fail closed on otp-login token reuse check (#4421) ...

/login/otp and /login/recovery-code marked the otp-login token used
through a rate-limit check that admits on a store error, so while the
store was unavailable a captured token could complete another sign-in.
The check now fails closed.

Also drops the check-translations scripts and the AGENTS.md step that
runs them; the script they call was removed in #2873.

2026-10-31 00:26:56 -07:00

..

clients

feat(notifications): remove a notification from the dashboard history (#4412)

2026-10-30 22:52:27 -07:00

controllers

fix(auth): fail closed on otp-login token reuse check (#4421)

2026-10-31 00:26:56 -07:00

core

fix(ai): bound large AI request bodies per user and to chat (#4420)

2026-10-30 21:16:53 -07:00

data

feat(push): notifications:push app permission

2026-10-24 16:03:05 -04:00

drivers

fix(ai): accept 128 MiB Anthropic message requests (#4408)

2026-10-30 20:52:00 -07:00

services

fix(socket): bound acks a receipt ask leaves on sockets that never answer (#4422)

2026-10-31 00:26:44 -07:00

smtp

…

stores

fix: custom domains (#4419)

2026-10-30 20:39:11 -07:00

testFixtures

refactor: make teams an optional feature (#4248)

2026-10-22 15:32:39 -04:00

util

fix(socket): bound acks a receipt ask leaves on sockets that never answer (#4422)

2026-10-31 00:26:44 -07:00

.gitignore

…

config.ts

…

exports.ts

…

extensions.test.ts

feat: let a subdomain claim keep the main pipeline (#4268)

2026-10-20 00:43:54 -07:00

extensions.ts

feat: let a subdomain claim keep the main pipeline (#4268)

2026-10-20 00:43:54 -07:00

index.ts

fix: alert errors from timeouts (#4066)

2026-10-04 02:44:40 -07:00

package.json

chore(deps): bump nodemailer from 9.1.1 to 10.1.4 (#4386)

2026-10-30 19:39:17 -07:00

server.test.ts

fix(ai): bound large AI request bodies per user and to chat (#4420)

2026-10-30 21:16:53 -07:00

server.ts

fix(ai): bound large AI request bodies per user and to chat (#4420)

2026-10-30 21:16:53 -07:00

TeamsOptional.test.ts

fix(teams): refuse to boot when teams_enabled has nothing registering Teams (#4300)

2026-10-22 15:11:36 -07:00

telemetry.test.ts

…

telemetry.ts

…

testSharedWorkerSetup.ts

feat: let extensions claim a subdomain (PUT-2100) (#4155)

2026-10-09 18:14:04 -07:00

testUtil.test.ts

…

testUtil.ts

Delete worker sessions when workers are deleted, don't treat sessions from deleted workers as still valid. (#4163)

2026-10-13 12:43:45 -04:00

types.ts

feat(ai): realtime reconnect notice, context restore and retry hardening (#4415)

2026-10-30 18:06:54 -07:00

vitest.bench.config.js

…

vitest.bench.config.ts

…

vitest.config.ts

fix: backend test flakes and a socket shutdown hang (#4170)

2026-10-10 19:34:32 -04:00