Guilhem LemouelandClaude Opus 5.5 d363da770d fix: check the move's token against the target by re-authenticating it ...

The transfer endpoint looked the caller's token up in the `token` table, so
an external-JWT login, which has no row there, could never move a session.
It now resolves the same token against the target workspace, which refuses a
token bound to the source whatever its kind, and still refuses job tokens.

Also stop calling the move target a fork in the model note, the menu item,
the editor placeholders and the moving notices: it can be the root or a
sibling.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-29 02:36:14 -07:00

..

lib

fix: check the move's token against the target by re-authenticating it

2026-10-29 02:36:14 -07:00

routes

feat: agent to flow, tabbed agent page, one webhook panel with an AI prompt (#11903)

2026-10-28 21:32:20 +01:00

.d.ts

…

.gitkeep

…

app.d.ts

…

app.html

feat: make the frontend installable as a progressive web app (#11805)

2026-10-16 09:26:09 +02:00

global.d.ts

…

hooks.ts

…

types.d.ts

…