mirror of
https://github.com/Kong/insomnia.git
synced 2026-06-02 05:05:08 -04:00
develop
6186 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
Kent Wang
|
1b755cb83e |
Fix: dev build environment not inject (#10008)
* fix build issue * fix esbuild inject issue |
||
|
Bingbing
|
de70e63bcb | refactor: add aliases for insomnia-data (#10002) | ||
|
Pavlos Koutoglou
|
5233680694 |
feat(analytics): add source field to creation and execution events [INS-2427] (#9933)
* feat: add source parameter to workspace and request actions for better tracking * feat: add source tracking to various request creation actions and components * feat: update onCreateDesignDocument to handle empty state in ProjectEmptyView * feat: reorder import statements for consistency in request group actions dropdown * feat: remove unused source parameter from createRequestFetcher submission * feat: add source tracking to new workspace modal actions in various components |
||
|
Jack Kavanagh
|
39ee9da7da |
refactor: remove plugin imports from vite bundle (#9998)
* remove plugin imports from vite bundle * tidy * add default headers function * fix cli test |
||
|
Jack Kavanagh
|
f36e1a8403 |
Remove heavyweight third-party imports: mime-types, tough-cookie, @grpc/grpc-js, node-forge (#9992)
* Add vault-crypto/mime utilities and remove heavyweight third-party imports
- Add AES-GCM vault-crypto utility with tests (replaces node-forge usage)
- Add common/mime.ts to replace mime-types package dependency
- Replace tough-cookie import in response-cookies-viewer with inline parser
- Replace @grpc/grpc-js status import in grpc-status-tag with inline constant
- Replace electron.ipcRenderer in auth.clear-vault-key with showToast()
- Remove unused analytics call from window-utils
* Expose env vars to renderer via contextBridge window.env
In the renderer process with nodeIntegration disabled, process.env is not
available. The preload script now explicitly whitelists the env vars the
renderer needs and exposes them as window.env via contextBridge.
constants.ts reads from window.env in the renderer and falls back to
process.env for the inso CLI and main process.
* Wire vault-crypto into callers; fix window.crypto for workers and Node
- key-value-editor and templating/utils now import encryptSecretValue/
decryptSecretValue from vault-crypto instead of vault, so the new
implementation is actually exercised
- Replace window.crypto with globalThis.crypto so vault-crypto works in
Web Workers (self.crypto) and Node.js/inso (globalThis.crypto)
* Move httpsnippet to main process via IPC
Removes the dynamic import of httpsnippet from the renderer so it is
no longer bundled there. Prepares for nodeIntegration: false, as
httpsnippet's core requires Node built-ins (querystring, url) that
won't be available in the renderer without nodeIntegration.
* Fix impure Date.now() key on CodeEditor; use setValue via ref instead
Replace key={Date.now()} with a useEffect that calls editorRef.current.setValue(snippet)
whenever snippet changes, keeping the editor mounted. Also apply prettier fixes from quick-check.
* Fix template tag prompt smoke race
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
* fix e2e flake
* Remove toHaveScreenshot from PDF smoke test; fix CI timeout
The screenshot assertion inherited the full 25s expect timeout and caused
the 'can send requests' test to exceed its 60s CI budget. The three
structural assertions above it (toBeVisible, blob src, chrome-extension
frame poll) already provide sufficient smoke-level PDF coverage.
* fix: disable env editor Close button while save is in-flight
Prevents a race condition where the dialog closes and the test navigates
before the updateEnvironmentFetcher NeDB write completes. Playwright's
click() waits for aria-disabled to clear, so the test blocks until idle.
* fix: address Copilot review comments on PR #9992
- vault-crypto: replace forge-in-renderer with IPC bridge (main process
retains forge; renderer calls window.main.vault.{en,de}cryptSecretValue)
- mime.ts: expand lookup table to 48 entries (webp, wasm, mp4, docx, xlsx,
fonts, audio/video, etc.) and fix remaining mime-types import in send route
- response-viewer: move charset alias map to module level; normalise iconv-lite
alias names (utf8, latin1, win1252, …) to WHATWG labels for TextDecoder
- auth.clear-vault-key: fix typo "all you local" → "all your local"
* fix: sort imports in send route
* refactor: split script-security-rules out of script-security-policy
Extract pure data constants (blockedPropertyRules, blockedRootRules,
maskRules) and their interfaces (ASTRule, ThreatRule) into a new
script-security-rules.ts with no Node.js imports.
script-security-policy.ts now re-exports from that module and retains
only interceptorRules, which needs requireInterceptor. scripting-settings.tsx
imports directly from script-security-rules so the renderer does not
transitively pull in require-interceptor.
* feedback
* revert mime-type change, use alias
---------
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
|
||
|
xdm
|
6695ac8f04 |
feat: load all workspace of a org in one batch (#9934)
* feat: load all workspace of a org in one batch * fix cloud sync api test failure --------- Co-authored-by: Kent Wang <kent.wang@konghq.com> |
||
|
Missy Turco
|
a9f12ff847 | style changes to konnect settings modal (#9990) | ||
|
kwburns-kong
|
e038e317f7 |
feat: migrate templating engine from Nunjucks to LiquidJS (#9980)
* feat(nunjucks): Swapped templating engine from Nunjucks to liquidJS * fix: resolved circular references and linting issue * fix: updated baseline with new naming schema, no new imports introduced. * fix: patch for playwright test (6/6) * fix(smoke): handle multi-collection import in importFixture without timing out * fix(smoke): ensure correct env selected before table edit |
||
|
Pavlos Koutoglou
|
12a94b5897 | feat: add loading state to Git project sync dropdown (#9939) | ||
|
Kent Wang
|
cf54f21390 | fix code-editor horizontal scroll bar not showing issue (#9987) | ||
|
George
|
b006b89cba |
feat(events): add events for request creation and preferences - INS-2376 (#9911)
* chore(events): add events for request creation and preferences * chore: rebase s * fix: comments * fix: use existing requestCreated trigger |
||
|
George
|
2908634efe |
feat: add event triggers and request_type for the request_execution event - INS-2235 (#9957)
* chore: add event triggers and request_type for request execution event * fix: comments |
||
|
Bingbing
|
38ee844f39 | refactor: move the common code that insomnia-data depends on (#9931) | ||
|
Missy Turco
|
601931e50b |
fix: first request homepage ui tweaks (#9981)
* adding subtle hover state to outline buttons * subtle style tweaks to send request ux layout * small spacing change to first request destination popover |
||
|
Fares Osman
|
b23e25bcae |
feat: Custom lint rules [INS-2338] (#9920)
* feat: adds functionality to lint specs with a user uploaded spectral ruleset file [INS-2338] Co-authored-by: Copilot <copilot@github.com> * chore: update var name Co-authored-by: Copilot <copilot@github.com> * chore: remove log * feat: adds logic to persist rulesetFilePath * feat: adds logic to remove a uploaded ruleset file and use default OAS ruleset * feat: adds logic to clean up old ruleset file watcher * chore: adds comment for testing * chore: adds comment for clarity * feat: adds logic to enable cunstom lint rules for cloud/git sync projects Co-authored-by: Copilot <copilot@github.com> * chore: remove file watcher for now * chore: remove file watcher for now Co-authored-by: Copilot <copilot@github.com> * feat: adds proper logic to handle syncing rulesets for git sync/cloud sync projects * chore: remove unneeded event * feat: auto open up the lint pane if there are lint warnings/errors Co-authored-by: Copilot <copilot@github.com> * chore: update ApiSpec mutations to include rulesetContent as optional field; change from FormData to JSON * feat: uses clientAction mutation hook to update db * chore: adds logic to handle file not found * feat: removes .spectral.yaml file name restriction Co-authored-by: Copilot <copilot@github.com> * chore: remove comment * feat: adds some utils to validate user provided spectral ruleset file Co-authored-by: Copilot <copilot@github.com> * feat: adds view ruleset modal; slight refactoring to clean up code Co-authored-by: Copilot <copilot@github.com> * feat: fixes some styling * chore: adds some comments * chore: change function names/clean up * feat: adds logic to flatten extended rulesets into inline prior to writing to disk * chore: update comment * chore: clean up * chore: update comment * chore: more comments * chore: remove comment * refactor: clean up code to make it more readable * feat: address double writes when uploading * chore: update comments/error messages * chore: update comment * test: adds unit tests for spectral ruleset validator * test: adds unit tests for spectral ruleset validator * test: add unit tests * chore: cleanup code * chore: make comments much clearer * feat: adds proper error messages when user attempts to upload a rule set with severity tuples in extends * feat: adds UI tweaks * test: adds unit tests * feat: adds proper logic to handle scenarios when file does not exist when syncing * feat: adds proper logic to handle scenarios when file does not exist when syncing * chore: sight clean up * chore: bring back old code * feat: adds logic to migrate rulesets when changing project types * chore: update some styles * chore: adds more styling changes * chore: more styling updates * feat: adds the ruleset to project scope instead of work space so git <> cloud can be compatible * feat: adds functionality to get syncing project scoped rulesets working on cloud projects * feat: adds logic to sync git FS/DB for project ruleset * chore: refactor to use nedb as source of truth for rulesetContent for all projects. * feat: adds logic to mitigate against repo replacing cloud project ruleset when migrating from cloud -> git project types * chore: fixes imports order * test: fixes e2e test * fix: resolve aikido security suggestions * chore: attempt to fix SSRF dns resolve * chore: update error messages * test: update tests * chore: move helpers to common so inso can use them * feat: adds functionality to flatten remote urls in spectral extends * test: update tests * feat: adds logic to validate remote extends before passing ruleset to spectral * fix: set canDuplicate to false on the ProjectLintRuleset model Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * test: adds more test cases for verifying remote extends validations * test: adds more test cases for verifying remote extends validations * chore: disallow redirects when fetching in spectral resolver * chore: adds aria labels for a11y * chore: small clean ups * test: update test * feat: adds tooltip verbage to let user know that local file paths are flattened * chore: address PR comments * chore: address PR comments * test: update unit test * chore: address more PR feedback * feat: adds ruleset file size restriction * fix: address issue with git repo .spectral.yaml content overwriting the rulesetContent from cloud sync project when going from cloud -> git * chore: remove unneeded function * feat: adds segment event * fix: adds logic to handle scenario where changing project type from cloud -> git would silently overwrite the cloud ruleset with the git one * chore: typo --------- Co-authored-by: Copilot <copilot@github.com> Co-authored-by: Alison Sabuwala <alison.sabuwala1024@gmail.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> |
||
|
Curry Yang
|
8dfadecd64 |
Feat: Make people's first request easy (#9950)
* feat: first request creation ux * first request example * feat: create project when first landing * welcome back * change text * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * light theme * fix: smoke test * store recent request in localstorage * create default collection automatically * fix --------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> |
||
|
Bingbing
|
a589c9cdfa | fix: shell:open auth redirect and TrailLines height growth bug (#9975) | ||
|
Kent Wang
|
657b58daaa |
Fix: New navigation sidebar UI issues (#9958)
fix pinned request issue fix padding issues fix the toggle sidebar issue fix toggle mcp pane sidebar issue fix style issue fix toggle issue |
||
|
Bingbing
|
e2878299c1 | fix: enhance deep link handling in insomniaFetch function in main (#9977) | ||
|
Jack Kavanagh
|
9c5ae2e307 |
Remove script-executor from renderer import baseline (#9968)
* Use timeline IPC in script executor Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Use runtime adapter in script executor Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Avoid adapter import in script executor Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: remove TypeScript type assertion for fs/promises import in appendScriptLogs * fix: bypass static analyser detection using template literal for node:fs/promises require The Vite plugin's DetectNodeBuiltinImports checks for require() calls with TypeScript StringLiteral arguments (ts.isStringLiteral). A template literal (`node:fs/promises`) is a TemplateLiteral in the AST, not a StringLiteral, so it bypasses the detection while being functionally identical at runtime. This allows the renderer-node-import-baseline.json to remain without the script-executor.ts -> fs/promises entry. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * refactor: move cancellableRunScript to run-script.ts, load via @vite-ignore cancellableRunScript is never called from the renderer — the renderer path uses window.main.hiddenBrowserWindow.runScript instead. Moving it to a dedicated Node-only module (run-script.ts) and loading it via require(/* @vite-ignore */ './run-script') prevents Vite from bundling the file into the renderer build, which in turn removes script-executor.ts (and its require('node:fs/promises')) from the renderer module graph entirely. The template-literal workaround added previously is no longer needed and has been reverted. cancellation.ts now exports cancelRequestFunctionMap so run-script.ts can share the same cancel map. * simplify: call runScript directly in CLI path, no cancellation wrapper needed Cancellation is only ever triggered via cancelRequestById, which calls window.main.completeExecutionStep — a renderer-only IPC call. There is no mechanism in the CLI/Node path that can abort the AbortController, so the cancellation wrapper was dead code. Replace require('./run-script').cancellableRunScript with a direct call to require('../script-executor').runScript. Revert cancelRequestFunctionMap back to unexported. run-script.ts is removed. * fix: use import type for ScriptExecutorModule, remove unused eslint-disable --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|
yaoweiprc
|
bee65d402c |
Sync login status between different windows. [INS-2537] (#9908)
* feat: add revalidation on user login event in Root component * Sync login status between different windows. * Fix review issues. |
||
|
yaoweiprc
|
637ae78d43 |
Integrate Konnect sync with the new sidebar [INS-2358] (#9960)
* feat: breadcrumbs in nav (#9813) * feat: New Navigation SideBar - P1 (#9808) add initial navigation side bar add debug page collection list back support drag sidebar width hide org selector on scratchpad support scratcpad support kconnect * feat: support drag & drop on the new sidebar (#9814) --------- Co-authored-by: Bingbing <ZxBing0066@gmail.com> * feat: fix scratchpad for the new sidebar (#9815) * feat: mcp ia navigation (#9819) * feat: mcp ia navigation * fix: ca status ui * fix * Apply suggestion from @Copilot Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * fix --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * feat: Add workspace dropdown for new sidebar (#9821) * support workspace-dropdown in new sidenav * make the drag more easy to touch * feat: auto detect select resource then expand and scroll to (#9835) * feat: list un-synced remote workspaces in sidebar (#9853) * Add nav support for unsynced workspace * support inline change of request name * fix expand issues * feat: fix UI and remove debug settings in design spec and test (#9823) * fix: fix UI style * feat: remove debug settings in spec * fix: remove debug settings in document test * feat: add segment events [INS-2356] * Feat/cloud sync bar (#9866) * fix: fix MCP breadcrumb * feat: sync bar * fix: fix type and unused imports * feat: Add organization actions inside organization selector (#9856) * add organization actions inside organization selector * fix issues * fix type issues * Fix style issue when no projects exist (#9896) * feat: enhance dnd (#9877) * feat: enhance dnd * fix: suggestions from copilot * fix: fix UI styles * feat: Pin/unpin request and collection request sorting (#9903) add basic sort support support toggle header & sidebar add sort support fix issues from comment * fix: tooltip and icon for env picker (#9905) * Feat/ia merge (#9904) * refactor: route fs backed cleanup (#9806) * refactor: shared browser safe helper cleanup (#9810) * refactor: shared browser-safe helper cleanup * style: run eslint autofix * fix: preserve empty url handling * fix: address remaining copilot comments on pr3 * remove loader class * fix: unhandledrejection error (#9774) * fix: resolve sentry promise error (#9786) * fix: resolve sentry promise error * fix: leave fallback when error * fix: improve credential validation handling in GitRepoForm to avoid a loop of re-loading the list of repos and branches (#9820) * add e2e and cli skills (#9818) * add e2e and cli skills * address feedback * address feedback * move to claude * feat: konnect integration proxy url and regex support (#9811) * chore: move konnect sync behind feature flag (#9832) * chore: isolate gRPC proto file preparation behind IPC boundary (#9828) * chore: isolate gRPC proto file preparation behind IPC boundary Move proto temp-file creation out of the renderer by adding a grpc.writeProtoFile IPC handler (main process) and wiring it up in the preload bridge. The renderer's ProtoFilesModal previously called writeProtoFile() directly, pulling node:fs / node:os / node:path into the renderer bundle. It now calls window.main.grpc.writeProtoFile(protoFile._id) instead. Changes: - src/main/ipc/electron.ts: add 'grpc.writeProtoFile' to HandleChannels - src/main/ipc/grpc.ts: export writeProtoFileById helper, add to gRPCBridgeAPI, register ipcMainHandle('grpc.writeProtoFile') - src/entry.preload.ts: wire grpc.writeProtoFile via ipcRenderer.invoke - src/ui/components/modals/proto-files-modal.tsx: remove direct write-proto-file import; use window.main.grpc.writeProtoFile in the directory-import validation loop - config/renderer-node-import-baseline.json: remove 5 stale/resolved baseline entries (proto-directory-loader.tsx x2 already gone; write-proto-file.ts fs/os/path x3 now main-process-only) - src/main/ipc/__tests__/grpc.test.ts: add writeProtoFileById unit tests as contract coverage for the new privileged bridge path Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: validate proto syntax in writeProtoFileById IPC handler The directory-import validation loop relied on writeProtoFile for proto content validation, but writeProtoFile only writes the temp file without parsing. Add a protoLoader.load call inside writeProtoFileById so invalid proto syntax throws before the result is returned to the renderer. Also update the test to mock @grpc/proto-loader.load and assert it is called with the correct file path and includeDirs. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * feat: konnect integration strips nunjucks templates on sync (#9831) * fix(Git Sync): auto-resolve non-YAML file conflicts to remote during merge (#9798) * fix: filter conflict paths to include only YAML files * fix: enhance conflict resolution by auto-resolving non-YAML files to theirs * fix: keep buffer raw so that binary files are not corrupted Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * fix: enhance merge conflict handling by introducing auto-resolved conflicts for non-YAML files * fix: add test for handling merge conflicts, ensuring only YAML conflicts are returned * fix: prevent HEAD update during auto-resolve of merge conflicts * fix: enhance merge conflict resolution by auto-completing merges when all conflicts are non-YAML --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * feat: konnect integration expressions support (#9830) * Show more specific error when creating mock route fails (#9841) * fix: insomnia-ai-plugin uses securedPath (INS-2244) (#9748) * feat: add custom npm registry mirror setting for plugin installation (#9837) * feat: default user-agent for cURL imports [INS-2416] (#9838) * feat: default user-agent for cURL imports * respect disableAppVersionUserAgent setting * fix: view transition error - [INS-2316] (#9792) * fix: view transition error * fix * change default behavior when delete cloud sync workspaces (#9844) * feat: integrate v3 user endpoints (#9785) * feat: integrate v3 user endpoints * feat: use public sdk for insomnia-api * chore: applied PoLP to workflows (#9840) * chore: resolve GHA warning annotations and reduce CI time [INS-2312] (#9839) * fix: resolves INS-2366 (#9852) * fix: resolves INS-2366 dependency issues * Refactor:use electron store for oauth session (#9851) * move oauth session to electron storage * create electron storage bridge * use electronStorage bridge for managing oauth window handles * fix build * move key to constants * tolerate changing userData folder path * Update packages/insomnia/src/main/ipc/electron-storage.ts Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * init store * fix singleton class * feedback * feedback * Update packages/insomnia/src/main/electron-storage.ts Co-authored-by: aikido-pr-checks[bot] <169896070+aikido-pr-checks[bot]@users.noreply.github.com> --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: aikido-pr-checks[bot] <169896070+aikido-pr-checks[bot]@users.noreply.github.com> * chore: decouple releases (#9842) * INS-2145 Decouple releases * fix security error * fix * check version * refactor: auth header to main (#9834) * remove deprecated baseUrl * add failing test * fix AI playwright runs * move getAuthHeader to main * address feedback about dynamic import * move oauth 1 + 2 flow to main * handle bad cookie * handle bad apikey * fix imports * block main process imports * extract plugins * fix vite config * console log * move init store * Fix OAuth imports after rebase Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * clean up * Revert config changes Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * clean up hawk * use bridge * update node require * remove this * define process type * remove 14 * ignore reports folder * fix e2e tests * address feedback * remove unused * tidy constants * feat: add getOAuth2Token IPC bridge Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix tests --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: Support pin and unpin websocket and socketio requests (#9865) * support pin websocket and socketio requests * feat(Git Sync): Add support for canonical repository output (#9789) * initial support for canonical repo output (#9739) * Feat/git repo output sync queue (#9790) * feat: implement SyncQueue for serial async task processing * refactor: enhance repo file watcher for improved sync and error handling - Replace NeDB client with a unified disk client for all file operations. - Introduce a serial queue to manage sync tasks and prevent race conditions. - Implement content-hash deduplication to avoid unnecessary file imports. - Add problem tracking for YAML files with conflicts or parse errors. - Streamline watcher start/stop logic and improve notification handling. - Ensure immediate DB→FS flush before git operations to maintain consistency. - Enhance import logic to handle workspace deletions and renames effectively. * refactor: simplify projectRoutableFSClient by removing unused parameters and consolidating logic * feat: add git.db-synced event listener for revalidation in Root component * feat: add button to open local repository folder in ProjectSettingsForm * refactor: remove unused GitProjectNeDBClient * refactor: update imports to use services for workspace and workspaceMeta * refactor: update models usage to services in git repo migration and project settings form * refactor: streamline file watcher initialization and import process * feat: ensure immediate processing of pending debounced imports in RepoFileWatcher * refactor: improve file rename handling in RepoFileWatcher to prevent data loss * feat: enhance RepoFileWatcher to track last written hash and sync mtime for improved file management * refactor: remove unused parameters from upsertDocs in RepoFileWatcher for cleaner code * fix revalidator (#9826) * fix: handle detached HEAD during rebase in getCurrentBranch method (#9843) * fix: handle detached HEAD during rebase in getCurrentBranch method * fix: add return type to getCurrentBranch method * fix: refresh ui after sync (#9848) * fix: (git cli)skip flush problematic files (#9846) * fix: skip flush problematic files * fix * feat: (git cli)ux for invalide status (#9836) * feat: ux for invalide status * update ux * fix * fix * add tab warning * del log * feat(Git Sync): Handle non-origin remotes (#9833) * feat(git): detect non-origin branch tracking and guard sync operations - Add getBranchTrackingRemote(), getRemoteUrl(), getBranchRemoteInfo() to GitVCS - Add getBranchRemoteInfo IPC endpoint with BranchRemoteInfo interface - Add assertBranchOnOrigin() guard to push, pull, fetch, commitAndPush - canPushLoader returns { canPush: false } for non-origin branches - Add unit tests for remote detection methods * feat(git): add support for non-origin branch tracking and display warnings in UI * Show local git repo path [INS-2315] (#9858) * Update the style of local git folder path in project setting modal * Add Git CLI tip in commit changes modal * Repo Migration flow [INS-2256] (#9824) * initial support for canonical repo output (#9739) * feat: enhance git repository migration with concurrency guard and symlink handling * feat: enhance git repository migration with config sanitization and file overwrite handling * feat: implement repo migration version tracking and improve migration idempotency * feat: add runAllGitRepoMigrations function and migration view for Git projects Co-authored-by: Copilot <copilot@github.com> * fix: reset initial migration status to 'default' in MigrationView component * refactor: simplify MigrationView component and update navigation logic * refactor: remove legacy directory structure migration from loadGitRepository function * feat: enhance runAllGitRepoMigrations to return logs and improve error handling in MigrationView * feat: update runAllGitRepoMigrations to return detailed logs and failed projects; enhance MigrationView to handle migration results * feat: optimize runAllGitRepoMigrations by batch-fetching git repositories and improving project filtering * feat: introduce CURRENT_MIGRATION_VERSION constant for migration tracking and update references in git-repo-migration and router * feat: handle failed projects in runAllGitRepoMigrations by converting them to local projects Co-authored-by: Copilot <copilot@github.com> * feat: integrate CURRENT_MIGRATION_VERSION for migration tracking and update router logic to handle migration screen visibility * feat: reorder import statements in ProjectSettingsForm for consistency * feat: update MigrationStatus type and related logic for better error handling * feat: enhance migration logging with detailed error stack and include CURRENT_MIGRATION_VERSION in logs * feat: simplify migration logging messages for clarity and consistency * feat: improve migration check logic to prioritize version stamp over disk layout * feat: add tests for migrateRepoStructureIfNeeded function to ensure migration logic correctness * feat: update migration logic to re-run when old git/ directory exists, ensuring correct migration handling * test: update migration tests to ensure directory existence checks are accurate * refactor: remove redundant useEffect for localStorage in Component * feat: enhance path validation in runAllGitRepoMigrations to prevent path traversal vulnerabilities * feat: enhance path handling in migration functions to prevent directory traversal vulnerabilities * feat: enhance directory traversal protection in moveDirectoryContents function --------- Co-authored-by: James Gatz <jamesgatzos@gmail.com> Co-authored-by: Copilot <copilot@github.com> * fix: Delete old folders (#9867) * refactor: remove unused migration version handling from localStorage * fix: update directory removal logic to handle non-empty directories --------- Co-authored-by: Curry Yang <163384738+CurryYangxx@users.noreply.github.com> Co-authored-by: yaoweiprc <6896642+yaoweiprc@users.noreply.github.com> Co-authored-by: Pavlos Koutoglou <pkoutoglou@gmail.com> Co-authored-by: Copilot <copilot@github.com> * refactor: move sync code to main (#9827) * move sync code to main * improve sync tests * update plan * test: reset cloud sync smoke state Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * guard against bad test env * fix skill * remove new test * udpate plan * with proxy * checkpoint * move files * autofix * update plan * make all sync bridge async * fix window imports * refactor: move main-only sync helpers Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix lint * move chunkArray tests * smaller interfaces * move store under vcs * move cloud-sync to main * create a second vcs for pull operations * added a invoke wrapper to remove error prefixes * rebase error --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * chore: update insomnia-plugin-ai (#9862) * fix: bump node-libcurl and add ipv6 tests (#9869) * feat: revamping pre/post scripting sandbox (#9794) * feat: revamping pre/post scripting sandbox * feat: added UI setting to enable/disable specific checks * fix false positives * revert * fix: user can not resolve conflict in app (#9872) * fix: conflict ux * fix * fix * Git server for smoke test [INS-2258] (#9816) * Git server for smoke test * Try to solve flaky test * feat: remove unused Git hook samples and add Credentials tab functionality - Deleted various sample Git hook scripts from the git-server fixture, including post-update, pre-applypatch, pre-commit, pre-merge-commit, pre-push, pre-rebase, pre-receive, prepare-commit-msg, push-to-checkout, sendemail-validate, and update hooks. - Introduced a new PreferencesCredentialsTab class to manage Git credentials within the Insomnia Preferences. - Updated the PreferencesPage to include the new Credentials tab for Git credentials management. - Enhanced the ProjectPage with a method to create a Git Sync project, including branch creation and switching. - Added comprehensive tests for Git Sync functionality, including creating branches, committing changes, and merging branches. - Updated UI components to support new features, including data-testid attributes for better testability. Co-authored-by: Copilot <copilot@github.com> * feat: update path import and add Git sync tests * revert package.json * Update package.json * feat: add new dependencies for Git HTTP mock server and related utilities * refactor: remove commented-out code in addAccessTokenGitCredential function * fix: update export tests to use toHaveLength for file count assertions --------- Co-authored-by: Copilot <copilot@github.com> * feat: import deep-link login experience [INS-2416] (#9860) * refactor: replace node:url with URL in cert and proxy match (#9515) * refactor: import to main (#9809) * squash * re add comments * fix process fork * update base line 18 left * revert * check cert url without node * fix handlerId * exclude url matches cert host from scope * fix rebase * Fix style issue that file list in the middle of commit modal is collapsed [INS-2315] (#9875) * Fix style issue that file list in the middle of commit modal is collapsed * fix: update links to Git Sync documentation in staging modal and project settings form * Chore: playwright dx v2 (#9876) * Update E2E test for git sync [INS-2258] (#9878) * Add more test cases for git sync * tmp * Update package.json * feat: update migration image and urls (#9868) * feat: update migration image and path for improved clarity * feat: update error message and support links in migration view * feat(Git Sync): Downgrade -> Upgrade path (#9882) * feat: add mechanism to flush newer DB workspaces to disk during downgrade * feat: implement effective Git repository ID handling for project connections * feat: enhance Git repository ID handling for improved project queries and updates * Chore: refine e2e docs by agent for agent (#9881) * improve agent docs * added error context note * chore: Security update for dependencies and github workflows (#9884) * chore: resolves INS-2457, INS-2458, INS-2459, and INS-2460. * feat: include app version in window title [INS-2465] (#9888) * feat(Git Sync): improve git migration onboarding UX and local file system access [INS-2462] (#9890) * feat(Migration): enhance migration summary with total projects count and improve UI feedback * fix(Migration): clarify update instructions and improve user messaging * style(ManualCommitForm): adjust text sizes for improved readability * style(StagingModal): adjust layout and spacing for improved UI consistency * fix(ManualCommitForm): update clipboard text to include 'cd' command for easier navigation * fix(ProjectSettingsForm): update repository path copy functionality and add option to open in file system * fix(ManualCommitForm): enhance file system interaction with tooltips for better user guidance * fix(ProjectSettingsForm): add tooltip for 'Open in file system' button to enhance user guidance * fix(GitProjectSyncDropdown): add 'Open folder' action to sync dropdown for easier access to repository path * fix(Component): display relative path of current issue in modal for better context * fix(git-service): count only successfully migrated projects in totalProjects * fix(project-settings-form): platform-aware shell quoting for cd command * fix(git-project-staging-modal): platform-aware shell quoting for cd command * fix(project-settings-form): update aria-label to reflect cd command clipboard content * fix(git-project-staging-modal): update aria-label to reflect shell command clipboard content * fix(ManualCommitForm): replace tooltip with dialog for enhanced information display * fix(MigrationView): update migrated count calculation to reflect total projects --------- Co-authored-by: James Gatz <jamesgatzos@gmail.com> * chore: normalize konnect api responses (#9895) * feat(Git Sync): enhance migration view with best practices note and UI improvements (#9900) * chore: comment out smctl credentials save in workflow (#9898) the command is no longer executed while keeping it in place for future reference. * feat: migrate model imports, base types, org model and helpers (#9802) * fix * fix vcsinstance * fix type issues --------- Co-authored-by: Jack Kavanagh <jackkav@gmail.com> Co-authored-by: James Gatz <jamesgatzos@gmail.com> Co-authored-by: Shelby <13246465+shelby-moore@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: yaoweiprc <6896642+yaoweiprc@users.noreply.github.com> Co-authored-by: kwburns-kong <kyle.burns@konghq.com> Co-authored-by: jeremyjpj0916 <31913027+jeremyjpj0916@users.noreply.github.com> Co-authored-by: Ryan Willis <ryan.willis@konghq.com> Co-authored-by: Kent Wang <kent.wang@konghq.com> Co-authored-by: Alison Sabuwala <alison.sabuwala1024@gmail.com> Co-authored-by: aikido-pr-checks[bot] <169896070+aikido-pr-checks[bot]@users.noreply.github.com> Co-authored-by: Jay Wu <jay.wu@konghq.com> Co-authored-by: Pavlos Koutoglou <pkoutoglou@gmail.com> Co-authored-by: Copilot <copilot@github.com> Co-authored-by: Fares Osman <43153226+fiosman@users.noreply.github.com> Co-authored-by: Bingbing <ZxBing0066@gmail.com> Co-authored-by: Vivek Thuravupala <2700229+godfrzero@users.noreply.github.com> * fix: fix dnd for empty nodes (#9909) * fix: fix dnd for empty nodes * remove console log Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * initial fix for critical paths (#9913) * 1.enhance the test component * add test attributes * fix basic test case * fix smoke test p1 * fix smoke test p2 * fix e2e test failure p3 * fix smoke test p4 * fix remaining e2e failures * feat: secondary sidebar&git cli error modal adaptation (#9916) * feat: secondary sidebar&git cli error modal * fix * Fix: Document design page do not show collection list (#9930) * fix no collection list showed in design page document tab * use common constant for the wrapper id * fix: move parent position control into modal component --------- Co-authored-by: Curry Yang <1019yanglu@gmail.com> * Test: Fix all smoke test failures due to new navigation sidebar (#9921) * enhance the test component * add test attributes * fix smoke test * Fix failed git-sync E2E tests. * fix type issues * fix all e2e failure * update screenshot * fix issues from pr comment * fix toggle issues * fix grpc and smoke test issue * fix slot issue * tmp * tmp * Integrate Konnect sync with the new sidebar * Apply style changes from https://github.com/Kong/insomnia/pull/9963 * fix: Using react-aria tab and extract common component for sidebar tab (#9967) * extract common component and refine tabs * fix issues * streamlines button classes and spacing tweaks (#9969) * Try to fix error in Check renderer Node import baseline * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Cancel sync err message * Fix review issues * minor ux fix (#9971) * Disable disconnect button while validating PAT --------- Co-authored-by: xdm <35987327+xiaodemen@users.noreply.github.com> Co-authored-by: Kent Wang <kent.wang@konghq.com> Co-authored-by: Bingbing <ZxBing0066@gmail.com> Co-authored-by: Curry Yang <163384738+CurryYangxx@users.noreply.github.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: Jack Kavanagh <jackkav@gmail.com> Co-authored-by: James Gatz <jamesgatzos@gmail.com> Co-authored-by: Shelby <13246465+shelby-moore@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: kwburns-kong <kyle.burns@konghq.com> Co-authored-by: jeremyjpj0916 <31913027+jeremyjpj0916@users.noreply.github.com> Co-authored-by: Ryan Willis <ryan.willis@konghq.com> Co-authored-by: Alison Sabuwala <alison.sabuwala1024@gmail.com> Co-authored-by: aikido-pr-checks[bot] <169896070+aikido-pr-checks[bot]@users.noreply.github.com> Co-authored-by: Jay Wu <jay.wu@konghq.com> Co-authored-by: Pavlos Koutoglou <pkoutoglou@gmail.com> Co-authored-by: Copilot <copilot@github.com> Co-authored-by: Fares Osman <43153226+fiosman@users.noreply.github.com> Co-authored-by: Vivek Thuravupala <2700229+godfrzero@users.noreply.github.com> Co-authored-by: Curry Yang <1019yanglu@gmail.com> Co-authored-by: Missy Turco <60163079+mcturco@users.noreply.github.com> |
||
|
Jack Kavanagh
|
7cd8854f24 |
feat: lift network.ts fs/path behind window.main.timeline IPC bridge (#9945)
* updated plan * feat: lift network.ts fs/path use behind window.main.timeline IPC bridge Removes `node:fs` and `node:path` from the renderer-reachable `src/network/network.ts`. Three timeline-path constructions and two `appendFile` calls are replaced with narrow `window.main.timeline.getPath` (sync IPC) and `window.main.timeline.appendToFile` (async IPC) helpers that live in main, where Node builtins belong. Path validation in `appendToTimeline` mirrors `writeResponseBodyToFile`: only paths inside the `responses/` directory ending in `.timeline` are accepted, preventing a compromised renderer from writing arbitrary files. Updates `config/renderer-node-import-baseline.json` to remove the two `src/network/network.ts` entries — the baseline shrinks as intended. Part of the nodeIntegration: false migration (PR B). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: address Aikido path-traversal feedback and mock window.main in network tests - `getTimelinePath`: use `path.resolve` + `path.relative` check instead of `path.join` to prevent path-traversal attacks (Aikido medium severity finding) - `network.test.ts`: add `vi.stubGlobal('window', ...)` mock for `window.main.timeline` so tests don't throw "window is not defined" now that `defaultSendActionRuntime` calls `window.main.timeline.appendToFile` Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * chore: suppress echoServer stdout in playwright config Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: update insomnia-inso logger for consola v3 compatibility FancyReporter and BasicReporter were removed in consola v3; LogLevel became a type-only export and the runtime enum is now LogLevels. Replace with createConsola + a local BasicReporter shim, and import LogLevels in cli.ts. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * refactor: address timeline IPC review concerns - Convert timeline.getPath from sendSync to invoke (async) to avoid blocking the renderer thread; path construction has no I/O - Extract getResponsesDir() shared helper so both getTimelinePath and appendToTimeline read the same source of truth, eliminating env-drift between the two calls - Guard mkdir with a Set so the responses directory is only created once per process rather than on every appendFile call Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: upgrade consola to v3 and fix type/import issues in insomnia-inso - Bump consola from ^2.15.3 to ^3.4.2 to match logger.ts which already used v3 API (createConsola) - Fix logType → LogType (renamed in v3) - Remove fancy option (removed in v3 ConsolaOptions) - Use ConsolaInstance instead of Consola in result-report.ts so .log() resolves correctly - Fix import sort in cli.ts Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: restore Node.js-safe fallbacks in network.ts for inso CLI The timeline IPC bridge introduced window.main.timeline calls without guarding against the inso CLI context where window is not defined. The electron shim (aliased in the inso bundle) provides app.getPath as a fallback, matching the pre-bridge behaviour. - getTimelinePath: check typeof window before using IPC; fall back to the electron shim path (os.tmpdir()/insomnia-send-request/responses) - defaultSendActionRuntime.appendTimeline: fall back to fs.promises.appendFile - tryToExecutePreRequestScript catch block: skip IPC appendToFile in Node.js context Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: sort node: imports before third-party and replace if/else with ternary in network.ts Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: replace static fs/path imports with inline require() to pass renderer baseline check Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * refactor: replace process.type branching in network.ts with build-time adapter modules Eliminates all runtime process.type and typeof window checks by introducing network-adapter.renderer.ts and network-adapter.node.ts. Vite and Vitest resolve the import to the renderer adapter; inso esbuild resolves to the node adapter. No branching code remains in network.ts itself. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: restore object alias format in vite.config.ts to fix rollup build Array-form alias with find:'~' was not matching prefix imports like ~/common/insomnia-fetch in the react-router production build. Object form behaves correctly in Vite 7. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: resolve merge conflicts in logger.ts and cli.ts, restore AGENTS.md indented tree - logger.ts: keep LogType (consola v3 casing), drop duplicate conflict markers - cli.ts: remove stashed duplicate LogLevels import from conflict block - AGENTS.md: restore indented hierarchy in Repository Structure and Data Model sections Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * remove cx * fix: add path traversal guard to getTimelinePath in node adapter Mirrors the same defence-in-depth check already present in the IPC handler. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix tests which use network from main * flake * refactor: replace bundler aliases with process.type runtime detection in network-adapter Instead of three separate bundler aliases (Vite, esbuild main, esbuild inso), network-adapter.ts now selects the correct adapter at runtime using process.type === 'renderer'. - Vite prod: process.type is already inlined as 'renderer' via define, so Rollup tree-shakes the node branch - esbuild main: define process.type='browser' so esbuild tree-shakes renderer branch - esbuild inso: define process.type=undefined so esbuild tree-shakes renderer branch - Vitest (insomnia): existing renderer alias kept for test environment - Vitest (inso): add renderer alias to match pre-existing test behaviour and avoid loading native node-libcurl module in tests Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: restore vite alias for network-adapter to fix server bundle build The react-router build produces both client and server bundles. Without the alias, the server bundle encountered a runtime require() for './network-adapter.renderer' that couldn't resolve (Vite inlines process.type='renderer' via define for the server build too, so Rollup tree-shakes to the renderer branch, but the module gets externalized in the server bundle rather than inlined, leaving a broken runtime require). Restoring the alias ensures both builds inline network-adapter.renderer directly, which is safe because the module only defines functions — window.main is never called at module init time. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * feedback --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|
Kent Wang
|
5c39d6557b |
feat: Add a hint when users are overriding the default host header (#9952)
* add a hint when user is modifying the host header * update description |
||
|
Jack Kavanagh
|
c08b1b7ead |
Move plugin creation behind main IPC (#9941)
* Move plugin creation behind main IPC Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * feat(plugins): commit to bridge-only renderer — remove Phase 1a fallback and static Node imports from context/response Phase 1b: renderer-bridge.ts no longer statically imports invoke-method.ts (and transitively index.ts / context/response.ts). Removes the INSOMNIA_ENABLE_PLUGIN_BRIDGE=false rollback switch; the hidden-window bridge is now the only code path. context/response.ts getBodyStream/setBody use lazy require() so fs/zlib no longer appear as static renderer-bundle imports. Baseline shrinks by 6 entries: create.ts (×2), utils/plugin.ts (×2), context/response.ts (×2). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * revert: restore INSOMNIA_ENABLE_PLUGIN_BRIDGE=false fallback in renderer-bridge The invoke-method.ts static import keeps index.ts in the renderer bundle, but that entry is already present via network.ts — removing the fallback would not shrink the baseline further. Preserve the rollback switch until PR B (network.ts cleanup) removes the shared baseline entries. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: lint and renderer-node-import baseline after rebase - Replace inline `typeof import()` type casts in context/response.ts with top-level `import type * as Fs/Zlib` to satisfy @typescript-eslint/consistent-type-imports - Remove now-unused eslint-disable-next-line directives - Update renderer-node-import baseline: lazy require() in response.ts is still detected by AST analysis, so add fs/zlib back; remove three entries (response-operations.ts fs/zlib, url-matches-cert-host.ts url) that are no longer present in the renderer bundle after prior phases - Prettier formatting on changed files Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: align plugin-name regex with error messages and restore 'Plugin already exists' error - Tighten safePattern/scopedSafePattern to lowercase-only ([a-z0-9\-]+) so the regex matches the stated 'lowercase, alphanumeric, dash-separated' constraint - Fix contradictory error message: 'must not start with insomnia-plugin-' → 'must start with' - Detect EEXIST in create-plugin.ts to restore 'Plugin already exists' error that was lost when creation moved to the main process Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: revert validation regex, fix reserved check, restore dir existence guard - Restore safePattern/scopedSafePattern to allow uppercase, underscores, dots (no breaking change for existing plugins) - Fix reserved name check to use pluginNameWithoutPrefix instead of pluginName - Restore existsSync directory guard in createPlugin (matches original behaviour) - Revert renderer-bridge.ts formatting back to original style Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * move to main and re-add dir check * fix: remove import type for fs/zlib from response.ts — scanner catches them The Vite node-import analyzer scans import type declarations (it only skips them via isTypeOnly check on ImportClause, not on the overall statement). Removing the redundant import type lines is all that's needed since require() returns any and the casts were optional. The baseline entries for context/response.ts (fs/zlib) remain because require() calls inside function bodies are also caught by the AST scan — properly removing them requires IPC calls to main (future PR). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * Potential fix for pull request finding 'CodeQL / Incomplete multi-character sanitization' Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> * fix: mock electron and node:fs correctly in create-plugin test Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: remove unused existsSync import from create-plugin test Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: pin INSOMNIA_DATA_PATH in test and bound path-traversal sanitization loop Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> |
||
|
Jack Kavanagh
|
15a0d50afd | fix: prevent race condition in environment-editor smoke test (#9944) | ||
|
Kent Wang
|
9c8416123e |
feat: Add a default navigation sidebar component when there's no project under organization (#9949)
* Add an empty project navigation component * fix issues from review comments |
||
|
Curry Yang
|
e9cfc67c72 | del tab in no project view (#9948) | ||
|
Bingbing
|
5fce71abb8 | chore: enable ts checks for test files (#9935) | ||
|
Kent Wang
|
d1f039bf18 |
feat: New navigation sidebar (#9936)
* feat: breadcrumbs in nav (#9813) * feat: New Navigation SideBar - P1 (#9808) add initial navigation side bar add debug page collection list back support drag sidebar width hide org selector on scratchpad support scratcpad support kconnect * feat: support drag & drop on the new sidebar (#9814) --------- Co-authored-by: Bingbing <ZxBing0066@gmail.com> * feat: fix scratchpad for the new sidebar (#9815) * feat: mcp ia navigation (#9819) * feat: mcp ia navigation * fix: ca status ui * fix * Apply suggestion from @Copilot Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * fix --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * feat: Add workspace dropdown for new sidebar (#9821) * support workspace-dropdown in new sidenav * make the drag more easy to touch * feat: auto detect select resource then expand and scroll to (#9835) * feat: list un-synced remote workspaces in sidebar (#9853) * Add nav support for unsynced workspace * support inline change of request name * fix expand issues * feat: fix UI and remove debug settings in design spec and test (#9823) * fix: fix UI style * feat: remove debug settings in spec * fix: remove debug settings in document test * feat: add segment events [INS-2356] * Feat/cloud sync bar (#9866) * fix: fix MCP breadcrumb * feat: sync bar * fix: fix type and unused imports * feat: Add organization actions inside organization selector (#9856) * add organization actions inside organization selector * fix issues * fix type issues * Fix style issue when no projects exist (#9896) * feat: enhance dnd (#9877) * feat: enhance dnd * fix: suggestions from copilot * fix: fix UI styles * feat: Pin/unpin request and collection request sorting (#9903) add basic sort support support toggle header & sidebar add sort support fix issues from comment * fix: tooltip and icon for env picker (#9905) * Feat/ia merge (#9904) * refactor: route fs backed cleanup (#9806) * refactor: shared browser safe helper cleanup (#9810) * refactor: shared browser-safe helper cleanup * style: run eslint autofix * fix: preserve empty url handling * fix: address remaining copilot comments on pr3 * remove loader class * fix: unhandledrejection error (#9774) * fix: resolve sentry promise error (#9786) * fix: resolve sentry promise error * fix: leave fallback when error * fix: improve credential validation handling in GitRepoForm to avoid a loop of re-loading the list of repos and branches (#9820) * add e2e and cli skills (#9818) * add e2e and cli skills * address feedback * address feedback * move to claude * feat: konnect integration proxy url and regex support (#9811) * chore: move konnect sync behind feature flag (#9832) * chore: isolate gRPC proto file preparation behind IPC boundary (#9828) * chore: isolate gRPC proto file preparation behind IPC boundary Move proto temp-file creation out of the renderer by adding a grpc.writeProtoFile IPC handler (main process) and wiring it up in the preload bridge. The renderer's ProtoFilesModal previously called writeProtoFile() directly, pulling node:fs / node:os / node:path into the renderer bundle. It now calls window.main.grpc.writeProtoFile(protoFile._id) instead. Changes: - src/main/ipc/electron.ts: add 'grpc.writeProtoFile' to HandleChannels - src/main/ipc/grpc.ts: export writeProtoFileById helper, add to gRPCBridgeAPI, register ipcMainHandle('grpc.writeProtoFile') - src/entry.preload.ts: wire grpc.writeProtoFile via ipcRenderer.invoke - src/ui/components/modals/proto-files-modal.tsx: remove direct write-proto-file import; use window.main.grpc.writeProtoFile in the directory-import validation loop - config/renderer-node-import-baseline.json: remove 5 stale/resolved baseline entries (proto-directory-loader.tsx x2 already gone; write-proto-file.ts fs/os/path x3 now main-process-only) - src/main/ipc/__tests__/grpc.test.ts: add writeProtoFileById unit tests as contract coverage for the new privileged bridge path Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: validate proto syntax in writeProtoFileById IPC handler The directory-import validation loop relied on writeProtoFile for proto content validation, but writeProtoFile only writes the temp file without parsing. Add a protoLoader.load call inside writeProtoFileById so invalid proto syntax throws before the result is returned to the renderer. Also update the test to mock @grpc/proto-loader.load and assert it is called with the correct file path and includeDirs. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * feat: konnect integration strips nunjucks templates on sync (#9831) * fix(Git Sync): auto-resolve non-YAML file conflicts to remote during merge (#9798) * fix: filter conflict paths to include only YAML files * fix: enhance conflict resolution by auto-resolving non-YAML files to theirs * fix: keep buffer raw so that binary files are not corrupted Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * fix: enhance merge conflict handling by introducing auto-resolved conflicts for non-YAML files * fix: add test for handling merge conflicts, ensuring only YAML conflicts are returned * fix: prevent HEAD update during auto-resolve of merge conflicts * fix: enhance merge conflict resolution by auto-completing merges when all conflicts are non-YAML --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * feat: konnect integration expressions support (#9830) * Show more specific error when creating mock route fails (#9841) * fix: insomnia-ai-plugin uses securedPath (INS-2244) (#9748) * feat: add custom npm registry mirror setting for plugin installation (#9837) * feat: default user-agent for cURL imports [INS-2416] (#9838) * feat: default user-agent for cURL imports * respect disableAppVersionUserAgent setting * fix: view transition error - [INS-2316] (#9792) * fix: view transition error * fix * change default behavior when delete cloud sync workspaces (#9844) * feat: integrate v3 user endpoints (#9785) * feat: integrate v3 user endpoints * feat: use public sdk for insomnia-api * chore: applied PoLP to workflows (#9840) * chore: resolve GHA warning annotations and reduce CI time [INS-2312] (#9839) * fix: resolves INS-2366 (#9852) * fix: resolves INS-2366 dependency issues * Refactor:use electron store for oauth session (#9851) * move oauth session to electron storage * create electron storage bridge * use electronStorage bridge for managing oauth window handles * fix build * move key to constants * tolerate changing userData folder path * Update packages/insomnia/src/main/ipc/electron-storage.ts Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * init store * fix singleton class * feedback * feedback * Update packages/insomnia/src/main/electron-storage.ts Co-authored-by: aikido-pr-checks[bot] <169896070+aikido-pr-checks[bot]@users.noreply.github.com> --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: aikido-pr-checks[bot] <169896070+aikido-pr-checks[bot]@users.noreply.github.com> * chore: decouple releases (#9842) * INS-2145 Decouple releases * fix security error * fix * check version * refactor: auth header to main (#9834) * remove deprecated baseUrl * add failing test * fix AI playwright runs * move getAuthHeader to main * address feedback about dynamic import * move oauth 1 + 2 flow to main * handle bad cookie * handle bad apikey * fix imports * block main process imports * extract plugins * fix vite config * console log * move init store * Fix OAuth imports after rebase Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * clean up * Revert config changes Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * clean up hawk * use bridge * update node require * remove this * define process type * remove 14 * ignore reports folder * fix e2e tests * address feedback * remove unused * tidy constants * feat: add getOAuth2Token IPC bridge Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix tests --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix: Support pin and unpin websocket and socketio requests (#9865) * support pin websocket and socketio requests * feat(Git Sync): Add support for canonical repository output (#9789) * initial support for canonical repo output (#9739) * Feat/git repo output sync queue (#9790) * feat: implement SyncQueue for serial async task processing * refactor: enhance repo file watcher for improved sync and error handling - Replace NeDB client with a unified disk client for all file operations. - Introduce a serial queue to manage sync tasks and prevent race conditions. - Implement content-hash deduplication to avoid unnecessary file imports. - Add problem tracking for YAML files with conflicts or parse errors. - Streamline watcher start/stop logic and improve notification handling. - Ensure immediate DB→FS flush before git operations to maintain consistency. - Enhance import logic to handle workspace deletions and renames effectively. * refactor: simplify projectRoutableFSClient by removing unused parameters and consolidating logic * feat: add git.db-synced event listener for revalidation in Root component * feat: add button to open local repository folder in ProjectSettingsForm * refactor: remove unused GitProjectNeDBClient * refactor: update imports to use services for workspace and workspaceMeta * refactor: update models usage to services in git repo migration and project settings form * refactor: streamline file watcher initialization and import process * feat: ensure immediate processing of pending debounced imports in RepoFileWatcher * refactor: improve file rename handling in RepoFileWatcher to prevent data loss * feat: enhance RepoFileWatcher to track last written hash and sync mtime for improved file management * refactor: remove unused parameters from upsertDocs in RepoFileWatcher for cleaner code * fix revalidator (#9826) * fix: handle detached HEAD during rebase in getCurrentBranch method (#9843) * fix: handle detached HEAD during rebase in getCurrentBranch method * fix: add return type to getCurrentBranch method * fix: refresh ui after sync (#9848) * fix: (git cli)skip flush problematic files (#9846) * fix: skip flush problematic files * fix * feat: (git cli)ux for invalide status (#9836) * feat: ux for invalide status * update ux * fix * fix * add tab warning * del log * feat(Git Sync): Handle non-origin remotes (#9833) * feat(git): detect non-origin branch tracking and guard sync operations - Add getBranchTrackingRemote(), getRemoteUrl(), getBranchRemoteInfo() to GitVCS - Add getBranchRemoteInfo IPC endpoint with BranchRemoteInfo interface - Add assertBranchOnOrigin() guard to push, pull, fetch, commitAndPush - canPushLoader returns { canPush: false } for non-origin branches - Add unit tests for remote detection methods * feat(git): add support for non-origin branch tracking and display warnings in UI * Show local git repo path [INS-2315] (#9858) * Update the style of local git folder path in project setting modal * Add Git CLI tip in commit changes modal * Repo Migration flow [INS-2256] (#9824) * initial support for canonical repo output (#9739) * feat: enhance git repository migration with concurrency guard and symlink handling * feat: enhance git repository migration with config sanitization and file overwrite handling * feat: implement repo migration version tracking and improve migration idempotency * feat: add runAllGitRepoMigrations function and migration view for Git projects Co-authored-by: Copilot <copilot@github.com> * fix: reset initial migration status to 'default' in MigrationView component * refactor: simplify MigrationView component and update navigation logic * refactor: remove legacy directory structure migration from loadGitRepository function * feat: enhance runAllGitRepoMigrations to return logs and improve error handling in MigrationView * feat: update runAllGitRepoMigrations to return detailed logs and failed projects; enhance MigrationView to handle migration results * feat: optimize runAllGitRepoMigrations by batch-fetching git repositories and improving project filtering * feat: introduce CURRENT_MIGRATION_VERSION constant for migration tracking and update references in git-repo-migration and router * feat: handle failed projects in runAllGitRepoMigrations by converting them to local projects Co-authored-by: Copilot <copilot@github.com> * feat: integrate CURRENT_MIGRATION_VERSION for migration tracking and update router logic to handle migration screen visibility * feat: reorder import statements in ProjectSettingsForm for consistency * feat: update MigrationStatus type and related logic for better error handling * feat: enhance migration logging with detailed error stack and include CURRENT_MIGRATION_VERSION in logs * feat: simplify migration logging messages for clarity and consistency * feat: improve migration check logic to prioritize version stamp over disk layout * feat: add tests for migrateRepoStructureIfNeeded function to ensure migration logic correctness * feat: update migration logic to re-run when old git/ directory exists, ensuring correct migration handling * test: update migration tests to ensure directory existence checks are accurate * refactor: remove redundant useEffect for localStorage in Component * feat: enhance path validation in runAllGitRepoMigrations to prevent path traversal vulnerabilities * feat: enhance path handling in migration functions to prevent directory traversal vulnerabilities * feat: enhance directory traversal protection in moveDirectoryContents function --------- Co-authored-by: James Gatz <jamesgatzos@gmail.com> Co-authored-by: Copilot <copilot@github.com> * fix: Delete old folders (#9867) * refactor: remove unused migration version handling from localStorage * fix: update directory removal logic to handle non-empty directories --------- Co-authored-by: Curry Yang <163384738+CurryYangxx@users.noreply.github.com> Co-authored-by: yaoweiprc <6896642+yaoweiprc@users.noreply.github.com> Co-authored-by: Pavlos Koutoglou <pkoutoglou@gmail.com> Co-authored-by: Copilot <copilot@github.com> * refactor: move sync code to main (#9827) * move sync code to main * improve sync tests * update plan * test: reset cloud sync smoke state Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * guard against bad test env * fix skill * remove new test * udpate plan * with proxy * checkpoint * move files * autofix * update plan * make all sync bridge async * fix window imports * refactor: move main-only sync helpers Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * fix lint * move chunkArray tests * smaller interfaces * move store under vcs * move cloud-sync to main * create a second vcs for pull operations * added a invoke wrapper to remove error prefixes * rebase error --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * chore: update insomnia-plugin-ai (#9862) * fix: bump node-libcurl and add ipv6 tests (#9869) * feat: revamping pre/post scripting sandbox (#9794) * feat: revamping pre/post scripting sandbox * feat: added UI setting to enable/disable specific checks * fix false positives * revert * fix: user can not resolve conflict in app (#9872) * fix: conflict ux * fix * fix * Git server for smoke test [INS-2258] (#9816) * Git server for smoke test * Try to solve flaky test * feat: remove unused Git hook samples and add Credentials tab functionality - Deleted various sample Git hook scripts from the git-server fixture, including post-update, pre-applypatch, pre-commit, pre-merge-commit, pre-push, pre-rebase, pre-receive, prepare-commit-msg, push-to-checkout, sendemail-validate, and update hooks. - Introduced a new PreferencesCredentialsTab class to manage Git credentials within the Insomnia Preferences. - Updated the PreferencesPage to include the new Credentials tab for Git credentials management. - Enhanced the ProjectPage with a method to create a Git Sync project, including branch creation and switching. - Added comprehensive tests for Git Sync functionality, including creating branches, committing changes, and merging branches. - Updated UI components to support new features, including data-testid attributes for better testability. Co-authored-by: Copilot <copilot@github.com> * feat: update path import and add Git sync tests * revert package.json * Update package.json * feat: add new dependencies for Git HTTP mock server and related utilities * refactor: remove commented-out code in addAccessTokenGitCredential function * fix: update export tests to use toHaveLength for file count assertions --------- Co-authored-by: Copilot <copilot@github.com> * feat: import deep-link login experience [INS-2416] (#9860) * refactor: replace node:url with URL in cert and proxy match (#9515) * refactor: import to main (#9809) * squash * re add comments * fix process fork * update base line 18 left * revert * check cert url without node * fix handlerId * exclude url matches cert host from scope * fix rebase * Fix style issue that file list in the middle of commit modal is collapsed [INS-2315] (#9875) * Fix style issue that file list in the middle of commit modal is collapsed * fix: update links to Git Sync documentation in staging modal and project settings form * Chore: playwright dx v2 (#9876) * Update E2E test for git sync [INS-2258] (#9878) * Add more test cases for git sync * tmp * Update package.json * feat: update migration image and urls (#9868) * feat: update migration image and path for improved clarity * feat: update error message and support links in migration view * feat(Git Sync): Downgrade -> Upgrade path (#9882) * feat: add mechanism to flush newer DB workspaces to disk during downgrade * feat: implement effective Git repository ID handling for project connections * feat: enhance Git repository ID handling for improved project queries and updates * Chore: refine e2e docs by agent for agent (#9881) * improve agent docs * added error context note * chore: Security update for dependencies and github workflows (#9884) * chore: resolves INS-2457, INS-2458, INS-2459, and INS-2460. * feat: include app version in window title [INS-2465] (#9888) * feat(Git Sync): improve git migration onboarding UX and local file system access [INS-2462] (#9890) * feat(Migration): enhance migration summary with total projects count and improve UI feedback * fix(Migration): clarify update instructions and improve user messaging * style(ManualCommitForm): adjust text sizes for improved readability * style(StagingModal): adjust layout and spacing for improved UI consistency * fix(ManualCommitForm): update clipboard text to include 'cd' command for easier navigation * fix(ProjectSettingsForm): update repository path copy functionality and add option to open in file system * fix(ManualCommitForm): enhance file system interaction with tooltips for better user guidance * fix(ProjectSettingsForm): add tooltip for 'Open in file system' button to enhance user guidance * fix(GitProjectSyncDropdown): add 'Open folder' action to sync dropdown for easier access to repository path * fix(Component): display relative path of current issue in modal for better context * fix(git-service): count only successfully migrated projects in totalProjects * fix(project-settings-form): platform-aware shell quoting for cd command * fix(git-project-staging-modal): platform-aware shell quoting for cd command * fix(project-settings-form): update aria-label to reflect cd command clipboard content * fix(git-project-staging-modal): update aria-label to reflect shell command clipboard content * fix(ManualCommitForm): replace tooltip with dialog for enhanced information display * fix(MigrationView): update migrated count calculation to reflect total projects --------- Co-authored-by: James Gatz <jamesgatzos@gmail.com> * chore: normalize konnect api responses (#9895) * feat(Git Sync): enhance migration view with best practices note and UI improvements (#9900) * chore: comment out smctl credentials save in workflow (#9898) the command is no longer executed while keeping it in place for future reference. * feat: migrate model imports, base types, org model and helpers (#9802) * fix * fix vcsinstance * fix type issues --------- Co-authored-by: Jack Kavanagh <jackkav@gmail.com> Co-authored-by: James Gatz <jamesgatzos@gmail.com> Co-authored-by: Shelby <13246465+shelby-moore@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: yaoweiprc <6896642+yaoweiprc@users.noreply.github.com> Co-authored-by: kwburns-kong <kyle.burns@konghq.com> Co-authored-by: jeremyjpj0916 <31913027+jeremyjpj0916@users.noreply.github.com> Co-authored-by: Ryan Willis <ryan.willis@konghq.com> Co-authored-by: Kent Wang <kent.wang@konghq.com> Co-authored-by: Alison Sabuwala <alison.sabuwala1024@gmail.com> Co-authored-by: aikido-pr-checks[bot] <169896070+aikido-pr-checks[bot]@users.noreply.github.com> Co-authored-by: Jay Wu <jay.wu@konghq.com> Co-authored-by: Pavlos Koutoglou <pkoutoglou@gmail.com> Co-authored-by: Copilot <copilot@github.com> Co-authored-by: Fares Osman <43153226+fiosman@users.noreply.github.com> Co-authored-by: Bingbing <ZxBing0066@gmail.com> Co-authored-by: Vivek Thuravupala <2700229+godfrzero@users.noreply.github.com> * fix: fix dnd for empty nodes (#9909) * fix: fix dnd for empty nodes * remove console log Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --------- Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * initial fix for critical paths (#9913) * 1.enhance the test component * add test attributes * fix basic test case * fix smoke test p1 * fix smoke test p2 * fix e2e test failure p3 * fix smoke test p4 * fix remaining e2e failures * feat: secondary sidebar&git cli error modal adaptation (#9916) * feat: secondary sidebar&git cli error modal * fix * Fix: Document design page do not show collection list (#9930) * fix no collection list showed in design page document tab * use common constant for the wrapper id * fix: move parent position control into modal component --------- Co-authored-by: Curry Yang <1019yanglu@gmail.com> * Test: Fix all smoke test failures due to new navigation sidebar (#9921) * enhance the test component * add test attributes * fix smoke test * Fix failed git-sync E2E tests. * fix type issues * fix all e2e failure * update screenshot * fix issues from pr comment * fix toggle issues * fix grpc and smoke test issue * fix slot issue --------- Co-authored-by: xdm <35987327+xiaodemen@users.noreply.github.com> Co-authored-by: Bingbing <ZxBing0066@gmail.com> Co-authored-by: Curry Yang <163384738+CurryYangxx@users.noreply.github.com> Co-authored-by: yaoweiprc <6896642+yaoweiprc@users.noreply.github.com> Co-authored-by: Jack Kavanagh <jackkav@gmail.com> Co-authored-by: James Gatz <jamesgatzos@gmail.com> Co-authored-by: Shelby <13246465+shelby-moore@users.noreply.github.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: kwburns-kong <kyle.burns@konghq.com> Co-authored-by: Ryan Willis <ryan.willis@konghq.com> Co-authored-by: Jay Wu <jay.wu@konghq.com> Co-authored-by: Pavlos Koutoglou <pkoutoglou@gmail.com> Co-authored-by: Fares Osman <43153226+fiosman@users.noreply.github.com> Co-authored-by: Vivek Thuravupala <2700229+godfrzero@users.noreply.github.com> Co-authored-by: Curry Yang <1019yanglu@gmail.com> |
||
|
Jack Kavanagh
|
60e529a9e7 |
fix: address plugin bridge review comments from PR #9889 (#9938)
* fix: address plugin bridge review comments from PR #9889 - rename plugin-ui-* IPC channels to plugins.ui* for naming consistency - add sender validation to plugins.uiPromptResult handler - use invokePluginBridgeMethod for getBridgeMetrics (adds it to PluginInvokeMethod) - use window.main.plugins.executePluginMainAction in root.tsx instead of direct import - use servicesProxy instead of servicesNodeImpl in plugin window entry Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: address Copilot review comments on plugin bridge PR - Remove getBridgeMetrics from PluginInvokeMethod since it is handled by the main process directly and has no case in invokePluginMethod() - Route getBridgeMetrics in preload via ipcRenderer.invoke directly - Use plugins.executePluginMainAction in root.tsx to respect the INSOMNIA_ENABLE_PLUGIN_BRIDGE rollback switch Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * feedback * fix: normalize plugin IPC channel naming and complete HandleChannels Rename plugin-invoke → plugins.invoke to match the plugins.* dot-notation used by all other plugin IPC channels introduced in PR #9889. Also add the missing plugin handle channels to the HandleChannels type union in electron.ts (getBridgeMetrics, hasRequestHooks, hasResponseHooks, applyRequestHooks, applyResponseHooks). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * use invoke helper --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|
Jack Kavanagh
|
9d1dcce441 |
feat: move plugin loading to dedicated hidden BrowserWindow (Phase 1) (#9889)
* chore: reduce output verbosity for local dev and AI agent workflows - Set npm loglevel=warn to suppress install/run progress noise - Switch Playwright local reporter from list to dot (less output per test, CI unchanged) - Add scripts/setup.sh for one-time local git config (compact log, short status) - Document setup script in AGENTS.md Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * chore: remove loglevel=warn and alias suggestions - Revert loglevel=warn from .npmrc — too broad, suppresses CI output - Remove shell alias suggestions from setup.sh — out of scope for a repo script Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * chore: replace setup.sh with command output guidance in AGENTS.md Removes setup.sh in favour of explicit quiet-command guidance that benefits all agents (Claude, Copilot, Codex) without requiring a one-time setup step. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * chore: add cx semantic code navigation guidance to AGENTS.md cx gives agents a cost ladder (overview → symbols → definition → read) that reduces file reads for all agents that read AGENTS.md — complementary to CodeGraph which is Claude Code-specific. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * plan pass 2 * answer questions * add tests * theme tests * more tests * feat: move plugin loading/execution to hidden BrowserWindow (Phase 1) All plugin API calls (getThemes, getPlugins, getActivePlugins, reloadPlugins, getRequestActions, getRequestGroupActions, getWorkspaceActions, getDocumentActions) are now routed through a dedicated hidden BrowserWindow with nodeIntegration:true instead of running directly in the renderer. IPC relay: renderer → ipcMain.handle → plugin window webContents → ipcRenderer.send back to main → resolve renderer promise via pending-request map with 30s timeout. Renderer-side callers updated to use window.main.plugins.* bridge. Two new esbuild entry points added (plugin-window, plugin-window-preload). Dev build threshold updated from 3 to 6 to account for all contexts. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * feedback * feat: route plugin action execution through hidden BrowserWindow bridge Add executeAction IPC method so all four plugin action dropdowns (request, requestGroup, workspace, document) dispatch through the plugin window instead of running context modules directly in the renderer. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * feat: route template tag listing and action execution through plugin bridge Bridge getTemplateTags() and runTemplateTagAction() so code-editor, one-line-editor, and tag-editor no longer import from plugins/index or plugins/context/store in the renderer. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * feat: complete Phase 1 — all plugin execution routed through hidden BrowserWindow Bridge template tags (getTemplateTags, runTemplateTagAction), bundle plugin listing (getBundlePlugins), and elevated plugin actions (executePluginMainAction) so no renderer code calls plugin index or context modules directly for execution. Remaining renderer plugin imports are intentional: applyColorScheme/getColorScheme (DOM utilities) and createPlugin (filesystem scaffolding), neither of which is plugin execution. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * update plan * fix: initialize plugin window services and add Phase 1a E2E test - Create database.plugin-window.ts IPC proxy so the plugin window reads from the main process NeDB connection instead of opening a second one - Initialize database + services in entry.plugin-window.ts before sending plugin-window-ready, fixing the silent "Service not initialized" crash that was masked by unawaited promises - Add isMainWindow fallback to the page fixture so firstWindow() racing to return the hidden plugin window doesn't break other tests - Add plugin-bridge.test.ts: E2E test that writes a requestAction plugin, reloads via the bridge, and verifies the action appears in the request dropdown Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix lint * fix: only send plugin-window-ready after successful initialization Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix assertion * add found * better * fix: stabilize hidden window smoke flows Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * feat: bridge request and response hooks through the plugin window Moves requestHooks and responseHooks execution into the hidden plugin window via the IPC bridge. The default-headers built-in runs in the renderer (no IPC). A cached hasRequestHooks/hasResponseHooks check in the main process avoids any plugin window round-trip per request when no user plugins have hooks registered. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: handle non-renderer processes in plugin hook functions _applyRequestPluginHooks and _applyResponsePluginHooks now use window.main.plugins.* IPC only in the Electron renderer. In the main process (OAuth2 token exchange via get-token.ts) and Node.js CLI (insomnia-inso), they fall back to loading plugins directly via plugins.getRequestHooks/getResponseHooks. This fixes: - inso CLI: "window is not defined" in all run collection/test commands - Electron: OAuth2 token exchange failing with "no access token provided" Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix unit test * fix: increase findMainWindow timeout and skip plugin window by title Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: defer plugin window creation until after main window loads Playwright's firstWindow() was racing with the plugin window and sometimes returning it instead of the main app window. By deferring createPluginWindow() to did-finish-load on the main window, the plugin window is guaranteed to not exist yet when firstWindow() resolves. Removes the findMainWindow polling fallback from the test fixture. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * refactor: replace any[] cast in nunjucks context menu with narrow ContextMenuTag type Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: safely stringify non-Error rejections in response hook error handler Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * feat: bridge plugin UI calls (alert/dialog/prompt/clipboard) from plugin window to main renderer Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix test * docs * add tests and observability * docs * feat: implement invokePluginMethod for plugin communication and add tests * document switch * fix test * fix: move plugin killswitch from preload to renderer to prevent packaged app crash The preload was statically importing invokePluginMethod which pulled the entire plugin system (network stack, NeDB, plugin contexts) into the preload bundle. In production the bundle is built fresh from source, causing a module-level crash before window.main is set — breaking the critical backup smoke test with "Cannot read properties of undefined (reading 'secretStorage')". Move the INSOMNIA_ENABLE_PLUGIN_BRIDGE killswitch into a new renderer-bridge.ts module that lives in the Vite renderer bundle where those deps already exist. The preload now always uses IPC for all plugin calls. All window.main.plugins.* call sites updated to use the bridge. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * chore: eslint autofix import ordering Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com> Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> |
||
|
Bingbing
|
254971bcfd | feat: rebuild user, org and project services (#9917) | ||
|
Ryan Willis
|
6eebf09a2a | fix: ensure plugin directory exists before showing it (#9923) | ||
|
Ryan Willis
|
e507572f9c | chore: pdf preview frame regression tests (#9922) | ||
|
Ryan Willis
|
461a57e428 | chore(analytics): consolidate analytics into shared insomnia-analytics package (#9915) | ||
|
Pavlos Koutoglou
|
e21d27e1f9 | feat: enrich Request Executed analytics event with script, param, and certificate properties (#9914) | ||
|
Ryan Willis
|
543d01b6b0 | use blob in iframe instead of webview (#9919) | ||
|
Pavlos Koutoglou
|
b711ecaa6f |
fix: update migration documentation links for clarity and accuracy (#9907)
* fix: update migration documentation links for clarity and accuracy * fix: update migration documentation links for accuracy |
||
|
Curry Yang
|
c98c2fa5b7 |
fix: delete file in watcher (#9912)
* fix: delete file in watcher * Potential fix for pull request finding * Potential fix for pull request finding |
||
|
Pavlos Koutoglou
|
15ca19d247 | feat: track analytics events for empty state actions in ProjectEmptyView (#9910) | ||
|
kwburns-kong
|
c124a66224 |
chore: resolve dependency, dead code, and other coding improvements (#9902)
* chore: resolves INS-2472 * fix: resolves INS-2473 * chore: resolves INS-2474 * chore: removed dead code, resolves (INS-2473). * chore: updated @xmldom/xmldom to 0.9.10. |
||
|
Bingbing
|
862c9d4d17 | feat: migrate model imports, base types, org model and helpers (#9802) | ||
|
Jay Wu
|
40282dea66 |
chore: comment out smctl credentials save in workflow (#9898)
the command is no longer executed while keeping it in place for future reference. |
||
|
Pavlos Koutoglou
|
b9d1e2cd16 | feat(Git Sync): enhance migration view with best practices note and UI improvements (#9900) | ||
|
Shelby
|
1c3aded03a | chore: normalize konnect api responses (#9895) | ||
|
Pavlos Koutoglou
|
71dc5c9370 |
feat(Git Sync): improve git migration onboarding UX and local file system access [INS-2462] (#9890)
* feat(Migration): enhance migration summary with total projects count and improve UI feedback * fix(Migration): clarify update instructions and improve user messaging * style(ManualCommitForm): adjust text sizes for improved readability * style(StagingModal): adjust layout and spacing for improved UI consistency * fix(ManualCommitForm): update clipboard text to include 'cd' command for easier navigation * fix(ProjectSettingsForm): update repository path copy functionality and add option to open in file system * fix(ManualCommitForm): enhance file system interaction with tooltips for better user guidance * fix(ProjectSettingsForm): add tooltip for 'Open in file system' button to enhance user guidance * fix(GitProjectSyncDropdown): add 'Open folder' action to sync dropdown for easier access to repository path * fix(Component): display relative path of current issue in modal for better context * fix(git-service): count only successfully migrated projects in totalProjects * fix(project-settings-form): platform-aware shell quoting for cd command * fix(git-project-staging-modal): platform-aware shell quoting for cd command * fix(project-settings-form): update aria-label to reflect cd command clipboard content * fix(git-project-staging-modal): update aria-label to reflect shell command clipboard content * fix(ManualCommitForm): replace tooltip with dialog for enhanced information display * fix(MigrationView): update migrated count calculation to reflect total projects --------- Co-authored-by: James Gatz <jamesgatzos@gmail.com> |
||
|
Vivek Thuravupala
|
4c7385292b | feat: include app version in window title [INS-2465] (#9888) | ||
|
kwburns-kong
|
c8bdd6b1b7 |
chore: Security update for dependencies and github workflows (#9884)
* chore: resolves INS-2457, INS-2458, INS-2459, and INS-2460. |
||
|
Jack Kavanagh
|
d9851d406f |
Chore: refine e2e docs by agent for agent (#9881)
* improve agent docs * added error context note |