29 Commits

Author SHA1 Message Date
dukedotdev 3da35a8692 [studio] avatar authoring, managed prefab builds (#140) 2026-10-23 15:25:31 -04:00
Devin Zuczek 7abef376b6 [storage] upload hardening 2026-10-21 22:50:07 -04:00
dukedotdev a3291bc9ce [studio] Complete editor uploads and queued cloud builds (#135)
* [studio] Complete editor uploads and queued cloud builds

* [studio] Protect unpublished source and remove unused notification RPC
2026-10-19 11:04:58 -04:00
Devin Zuczek ef65b505cc [studio] prefix assets 2026-10-09 01:37:28 -04:00
Crasho 26270e9c25 [studio] beta studio (#114)
* rrs stuff

* studio service yay

* rrs whitelist

* moree studiooooooo fellowwww

* rec room studio room loading yay

* fixes yay

* fix 2 because idk  yayuh

* Update cdn.app.ts

* ccontent length fix?

* Preserve content-length and upgrade metadata

Return a real zero-filled byte array for CDN HEAD responses so the runtime preserves Content-Length while still sending no payload. In notify, re-create the Request with its original headers, set OWNER_HEADER from the validated token, and forward that Request to hub.fetch to avoid losing WebSocket upgrade metadata (which could trigger 500s in Durable Objects). These changes ensure the editor's size checks and WebSocket upgrades remain reliable.

* fix x524234

* shirt thing?

* [auth] remove grant table as we already have audit_log for now

* rename table to generic device_grant

* cleanup/lint

---------

Co-authored-by: Devin Zuczek <devin.zuczek@gmail.com>
2026-10-05 14:39:22 -04:00
Devin Zuczek 4e070a59bd [all] turn off worker logs for $ 2026-09-22 09:41:20 -04:00
Devin Zuczek 8d638072b4 [cdn] allow 2025 store assets 2026-09-15 22:24:44 -04:00
Nexi 222547ee13 [api] audit fixes: account tests, dependencies and security hardening (#54)
* test(accounts): cover three username changes

* chore(deps): update vulnerable runtime dependencies

* fix(security): bound uploads and validate token subjects strictly

---------

Co-authored-by: Nexi (CWN) <communityshieldofficial@gmail.com>
2026-09-08 23:47:58 -04:00
Devin Zuczek c13f62bb91 [store] wip 2026-08-28 01:56:14 -04:00
devin 178d3b5b0e support for 202507 endpoints (#37)
* [auth][api] accept the 20250424.01 client

* [2025] unstable

* 20250718.0

* correct one this time

* stubs

* more stubs

* more stubs

* [lists] add worker

* [ai] route stubs

* [api] player photo setting

* [econ] add roomEconConfig route

* [infra] update worker generators

* [worker] add cards/moderation/platformnotification workers

* [lists] updates to some endpoints

* [clubs] stub out announcement endpoint, for now

* [econ] stub out season endpoints for now

* [chat] apps/chat stub out party endpoint not sure the shape yet

* [api] stub out statsig and lockeditems

* [doc] new services

* [lists] stub the bulk endpoint

* [datacollection] add placeholder service until we can kill it

* [api] set gifting to lvl5

* update lock

* [cdn] enable cache

* [match] matchmake v2

* [lists] stub some lists

* [ai] stubs

* [rooms] new subroom save endpoint

* [econ] add bulk purchase endpoint

* [discovery] update featured creator to 1 for fun

* [api] add photo settings flag

* [chat] fixup chat permissions (sorta)

* [auth] restrictions endpoint

* [rooms] contributed endpoint

* [api] fix outfit endpoint

* [discovery] attempt to fix store

* [chat] privacy endpoints

* [api] cheered images

* [rooms] add xp endpoint (disbaled)

* [rooms] add xp endpoint (disabled)

* update images-db for cheers

* [rooms] add autocomplete endpoint

* [cdn/img] increase cache ttl for statics

* [api] bulk route for images

* [accounts] add banner image

* [api] add misc missing endpoints

* [discovery] remove AI tab

* [platformnotifications] stub some endpoints

* [lists] add some more lists

* [rooms] additional endpoints

* [chat] stub a few privacy endpoints

* [econ] stub some endpoints

* misc db fixes

* [api] tweak shape for images v6

* [rooms] dont show trending RROs
2026-08-21 15:15:55 -04:00
Devin Zuczek 793b2ad37a [cdn] fix some range issues where delivered images might be corrupt 2026-08-10 13:56:32 -04:00
Devin Zuczek 8b804eaa33 add CDN /data/ endpoint 2026-08-05 17:54:07 -04:00
Devin Zuczek a5136d2bfa cdn openapi 2026-07-24 21:48:10 -04:00
devin c33919bc67 Currency, storefronts, purchasing (#12)
And a few other minor things, but primarily, the balance table exists and also consumable/inventory table.
2026-07-15 14:10:49 -04:00
Devin Zuczek c9996229db update wrangler/workers version 2026-07-13 18:24:00 -04:00
Devin Zuczek ae85bedea1 inventions...almost working 2026-07-12 19:55:51 -04:00
Devin Zuczek a404541f2c add tip 2026-07-11 13:44:04 -04:00
Devin Zuczek 1f70adbd67 updates to uuids to be consistent 2026-07-10 00:10:03 -04:00
Devin Zuczek 43c3bd93be clean up auth, some storage improvements 2026-07-09 23:28:04 -04:00
Devin Zuczek bdebc50075 move JWT validation to package 2026-07-09 20:15:10 -04:00
Devin Zuczek a029d0ed67 remove old routes, enable cache for cdn 2026-07-07 17:05:22 -04:00
Devin Zuczek baf43bfe31 authentication improvements 2026-07-06 21:08:24 -04:00
Devin Zuczek f48d78bd5f true matchmaking 2026-07-01 15:16:46 -04:00
Devin Zuczek ba33003343 updating types 2026-06-30 23:57:29 -04:00
Devin Zuczek 8b42c23764 update some naming conventions 2026-06-30 13:03:46 -04:00
Devin Zuczek c9ec13fc6c update deps 2026-06-29 23:44:57 -04:00
Devin Zuczek 81815ef06c remove hard coded routes 2026-06-29 23:16:42 -04:00
Devin Zuczek 69b89e2dc4 testing generic deploy 2026-06-29 23:16:42 -04:00
Devin Zuczek 768ca2a0a3 add rooms 2026-06-14 18:59:35 -04:00