Daniel Salazar b3fda186e7 fix: let apps read opted-in teams, scope worker listing, fix revokeReadURL (#3933) ...

- GET /teams and /teams/:uid/members admit apps for teams whose owner opened
  the directory; apps get active members' usernames only
- events.workers.list() from an app returns only its own worker
- hide account-session-only SDK methods from the public types
- unpublish the updateProfile docs page (redirects to getProfile)
- revokeReadURL() works through a new /auth/revoke-own-access-token route

2026-09-23 12:06:56 -07:00

..

abuse

…

acl

Merge branch 'main' into juancastro/put-1806-invite-email-addresses-are-disclosed-to-apps-manage

2026-09-21 10:46:07 -04:00

appIcon

…

apps

fix: hardening (#3904)

2026-09-18 11:22:39 -07:00

auth

fix: let apps read opted-in teams, scope worker listing, fix revokeReadURL (#3933)

2026-09-23 12:06:56 -07:00

broadcast

fix: sharing, events and worker-credential authorization hardening (#3855)

2026-09-11 21:18:49 -07:00

cache

…

events

fix: let apps read opted-in teams, scope worker listing, fix revokeReadURL (#3933)

2026-09-23 12:06:56 -07:00

feedback

…

fs

fix(fs): keep a home directory on its account's username (#3920)

2026-09-21 23:29:09 -07:00

health

…

homepage

feat: render the teams UI for allowlisted users without the global switch

2026-09-15 14:48:11 -04:00

localworker

fix: sharing, events and worker-credential authorization hardening (#3855)

2026-09-11 21:18:49 -07:00

metering

fix: hardening (#3904)

2026-09-18 11:22:39 -07:00

notification

…

permission

fix: stop leaking an unawaited permission traversal on every check

2026-09-21 16:07:26 -04:00

profile

feat: opus 5.5 (#3930)

2026-09-22 12:31:44 -07:00

selfhosted

feat: user profiles in a system-owned store, public only for paid accounts (#3919)

2026-09-21 23:28:56 -07:00

share

fix: bump server timeouts for better error handling (#3929)

2026-09-22 10:13:46 -07:00

socket

Merge branch 'main' into juancastro/put-1806-invite-email-addresses-are-disclosed-to-apps-manage

2026-09-21 10:46:07 -04:00

subdomain

…

team

fix: let apps read opted-in teams, scope worker listing, fix revokeReadURL (#3933)

2026-09-23 12:06:56 -07:00

user

feat: tell every team member when something is shared with them

2026-09-09 10:22:56 -04:00

index.ts

feat: user profiles in a system-owned store, public only for paid accounts (#3919)

2026-09-21 23:28:56 -07:00

types.ts

fix: list a link share only while the owner's plan covers it (#3891)

2026-09-16 14:42:52 -07:00